last executing test programs: 1m12.15867491s ago: executing program 0 (id=2063): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x200000000000000, {0x2, 0xff, 0x3}, 0xfe}, 0x18) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 1m11.563785659s ago: executing program 0 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB='\b\x00;'], 0x2c}}, 0x20004810) 58.232922542s ago: executing program 2 (id=2208): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 58.038762188s ago: executing program 2 (id=2212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}]}]}]}, 0x34}}, 0x4040000) 57.607941131s ago: executing program 2 (id=2218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb4474a89680111f85ed2840246d5406c9080b47183aedde8de943673c66a0c", 0x3b}], 0x1}}], 0x1, 0x4054) 56.525708916s ago: executing program 0 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB='\b\x00;'], 0x2c}}, 0x20004810) 44.023648575s ago: executing program 2 (id=2218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb4474a89680111f85ed2840246d5406c9080b47183aedde8de943673c66a0c", 0x3b}], 0x1}}], 0x1, 0x4054) 43.103649456s ago: executing program 0 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB='\b\x00;'], 0x2c}}, 0x20004810) 28.35303186s ago: executing program 2 (id=2218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb4474a89680111f85ed2840246d5406c9080b47183aedde8de943673c66a0c", 0x3b}], 0x1}}], 0x1, 0x4054) 27.596393811s ago: executing program 0 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB='\b\x00;'], 0x2c}}, 0x20004810) 21.261994843s ago: executing program 1 (id=2532): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)) 21.064810838s ago: executing program 1 (id=2534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 20.604380759s ago: executing program 1 (id=2538): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac141400000000000000000003"], 0x50}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.382018136s ago: executing program 1 (id=2541): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 20.236821862s ago: executing program 1 (id=2544): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x8, 0x1, 0x1) 19.787822794s ago: executing program 1 (id=2548): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000070000001400080000000000000000000000000000000000050013"], 0x30}}, 0x0) 14.074769085s ago: executing program 2 (id=2218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001400)="9ab5108bcaa247044550fa5114fa67188d4769300eb25a72cfcdefefb4474a89680111f85ed2840246d5406c9080b47183aedde8de943673c66a0c", 0x3b}], 0x1}}], 0x1, 0x4054) 9.940691141s ago: executing program 0 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000001000000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB='\b\x00;'], 0x2c}}, 0x20004810) 1.842507425s ago: executing program 4 (id=2635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da", 0x29}], 0x2}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1}, 0x10001) 1.274726127s ago: executing program 3 (id=2637): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 1.125858089s ago: executing program 3 (id=2638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x0) 928.154575ms ago: executing program 3 (id=2639): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 883.298339ms ago: executing program 4 (id=2640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x12}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 723.591223ms ago: executing program 4 (id=2641): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x2, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x67, 0x5, 0x1, 0x62, 0x3, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe000031f, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 647.886542ms ago: executing program 3 (id=2642): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xf11, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 569.316779ms ago: executing program 3 (id=2643): sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100340012800b0001006272696467650000240002800800050001000000060027"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 469.286271ms ago: executing program 4 (id=2644): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000003500)=ANY=[], 0x40b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) recvmmsg$unix(r1, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f00000002c0)=""/181, 0xb5}], 0x2}}], 0x1, 0x2060, 0x0) 239.714577ms ago: executing program 4 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=@newlink={0x64, 0x10, 0x439, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2242}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x7f}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'veth0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 193.053739ms ago: executing program 3 (id=2646): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) 0s ago: executing program 4 (id=2647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r1}, 0x20) recvfrom$inet(r1, &(0x7f00000001c0)=""/134, 0x86, 0x0, 0x0, 0xfdf9) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000340)}, 0x20) shutdown(r1, 0x0) kernel console output (not intermixed with test programs): mended to keep mac addresses unique to avoid problems! [ 93.606890][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.627400][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.651920][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.662614][ T5940] netlink: 'syz.3.8': attribute type 32 has an invalid length. [ 93.684866][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 93.691794][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.714991][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.726623][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.741453][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.763205][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.773606][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.792042][ T5940] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 93.868654][ T5842] Bluetooth: hci0: command tx timeout [ 93.874235][ T5858] Bluetooth: hci1: command tx timeout [ 93.878433][ T5844] Bluetooth: hci3: command tx timeout [ 93.879715][ T55] Bluetooth: hci2: command tx timeout [ 93.885008][ T5846] Bluetooth: hci4: command tx timeout [ 94.059184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.067074][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.295783][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.326287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.487364][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.535126][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.596853][ T5964] netlink: 'syz.3.15': attribute type 23 has an invalid length. [ 95.497532][ T5990] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.737979][ T5999] openvswitch: netlink: Key type 30 is not supported [ 96.786937][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 97.014385][ T6047] raw_sendmsg: syz.2.49 forgot to set AF_INET. Fix it! [ 97.198272][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.528281][ T6065] Bluetooth: MGMT ver 1.23 [ 97.751421][ T6075] netlink: 72 bytes leftover after parsing attributes in process `syz.2.65'. [ 98.035600][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 98.259530][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 98.386038][ T6094] xt_CT: No such helper "pptp" [ 98.602279][ T6107] Zero length message leads to an empty skb [ 98.628304][ T6114] Bluetooth: MGMT ver 1.23 [ 99.543685][ T6147] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 99.631982][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.638136][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.754853][ T6152] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 99.775304][ T6154] tipc: Enabling of bearer rejected, failed to enable media [ 99.911261][ T6162] tipc: Enabling of bearer rejected, media not registered [ 100.507932][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 100.776172][ T6197] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 100.802396][ T6197] netlink: 208 bytes leftover after parsing attributes in process `syz.1.121'. [ 100.835151][ T6197] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 100.887799][ T6197] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 100.983179][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 101.121516][ T6209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 101.148103][ T6209] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 102.788538][ T6282] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 103.034881][ T6287] netlink: 52 bytes leftover after parsing attributes in process `syz.1.165'. [ 104.372669][ T6343] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 104.429717][ T6346] lo speed is unknown, defaulting to 1000 [ 104.435807][ T6346] lo speed is unknown, defaulting to 1000 [ 104.481569][ T6346] lo speed is unknown, defaulting to 1000 [ 104.516183][ T6346] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.594556][ T6346] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.650923][ T6346] lo speed is unknown, defaulting to 1000 [ 104.666998][ T6346] lo speed is unknown, defaulting to 1000 [ 104.677384][ T6346] lo speed is unknown, defaulting to 1000 [ 104.688671][ T6346] lo speed is unknown, defaulting to 1000 [ 104.697345][ T6346] lo speed is unknown, defaulting to 1000 [ 105.282328][ T6380] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 106.167817][ T6415] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 106.175626][ T6415] netlink: 220 bytes leftover after parsing attributes in process `syz.3.224'. [ 106.247825][ T6415] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 106.311250][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 107.584108][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.251'. [ 107.690878][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'. [ 107.930600][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 108.167968][ T6502] syz_tun: entered allmulticast mode [ 108.185716][ T6502] syz_tun: left allmulticast mode [ 109.758910][ T30] audit: type=1107 audit(1744311604.044:2): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 110.814655][ T6608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.122621][ T6620] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 111.323785][ T47] IPVS: starting estimator thread 0... [ 111.438197][ T6625] IPVS: using max 25 ests per chain, 60000 per kthread [ 111.526077][ T6631] netem: incorrect gi model size [ 111.550064][ T6631] netem: change failed [ 111.938568][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 112.154866][ T6653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 112.766174][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 112.787865][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 114.603024][ T6753] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.039760][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.048551][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.319117][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 115.543988][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 115.625576][ T6792] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 115.642575][ T6792] netlink: 'syz.4.395': attribute type 2 has an invalid length. [ 116.059075][ T6816] netlink: 72 bytes leftover after parsing attributes in process `syz.0.404'. [ 117.177190][ T6861] netlink: 64 bytes leftover after parsing attributes in process `syz.4.425'. [ 117.414477][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 117.415652][ T6870] smc: net device bond0 applied user defined pnetid SYZ2 [ 117.477067][ T6870] smc: net device bond0 erased user defined pnetid SYZ2 [ 117.495970][ T6871] gretap0: entered promiscuous mode [ 117.521168][ T6871] macvtap1: entered promiscuous mode [ 117.536846][ T6871] macvtap1: entered allmulticast mode [ 117.552835][ T6871] gretap0: entered allmulticast mode [ 118.704304][ T6915] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 118.770403][ T6915] macsec1: entered allmulticast mode [ 118.775765][ T6915] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 118.883775][ T6915] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 118.917155][ T6915] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 119.027441][ T6928] tipc: Started in network mode [ 119.054302][ T6928] tipc: Node identity ac14140f, cluster identity 4711 [ 119.071139][ T6928] tipc: New replicast peer: 255.255.255.255 [ 119.090260][ T6928] tipc: Enabled bearer , priority 10 [ 119.735431][ T6946] syz.3.467 (6946) used greatest stack depth: 18656 bytes left [ 119.771385][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.471'. [ 119.966919][ T6960] tipc: Enabled bearer , priority 10 [ 120.108112][ T2155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.288653][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.338048][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.407867][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.447932][ T2155] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.518248][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.618068][ T5911] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.697862][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.767978][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.848027][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.029188][ T5894] tipc: Node number set to 2886997007 [ 121.182421][ T7006] tap0: tun_chr_ioctl cmd 2148553947 [ 121.460187][ T7020] netlink: 104 bytes leftover after parsing attributes in process `syz.4.502'. [ 121.705841][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 121.714961][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 122.886557][ T7078] netlink: 1344 bytes leftover after parsing attributes in process `syz.4.527'. [ 123.110720][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.538678][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 125.024240][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.569'. [ 125.051621][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'. [ 125.104617][ T7169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.277290][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.574'. [ 126.198207][ T7207] tap0: tun_chr_ioctl cmd 1074025676 [ 126.218702][ T7207] tap0: owner set to 0 [ 126.328468][ T7218] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 126.711903][ T7231] netlink: 'syz.0.602': attribute type 19 has an invalid length. [ 126.909257][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 127.025403][ T7241] xfrm1: entered promiscuous mode [ 127.068928][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 127.087088][ T7241] xfrm1: entered allmulticast mode [ 127.475852][ T7265] netlink: 108 bytes leftover after parsing attributes in process `syz.4.618'. [ 127.513635][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 127.708956][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 127.753925][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 128.223969][ T7296] __nla_validate_parse: 1 callbacks suppressed [ 128.223993][ T7296] netlink: 56 bytes leftover after parsing attributes in process `syz.3.631'. [ 129.996121][ T7375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.036024][ T7375] batadv_slave_1: entered promiscuous mode [ 130.059021][ T7375] batadv_slave_1: entered allmulticast mode [ 130.101056][ T7380] netlink: 340 bytes leftover after parsing attributes in process `syz.2.666'. [ 131.013016][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 131.601425][ T7440] netlink: 'syz.2.694': attribute type 2 has an invalid length. [ 131.968705][ T7456] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 132.823503][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.833202][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.967059][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 133.021700][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'. [ 133.043184][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'. [ 133.152798][ T7505] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.723'. [ 133.193232][ T7505] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.275992][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 134.055162][ T7540] netlink: 104 bytes leftover after parsing attributes in process `syz.0.740'. [ 134.799469][ T7569] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.754'. [ 134.867559][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 135.788243][ T7615] netlink: 248 bytes leftover after parsing attributes in process `syz.4.776'. [ 136.040987][ T7622] netlink: 284 bytes leftover after parsing attributes in process `syz.4.781'. [ 136.746455][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 137.833323][ T7700] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 137.894117][ T7700] netlink: 'syz.1.817': attribute type 4 has an invalid length. [ 137.907962][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 137.968721][ T7700] netlink: 188 bytes leftover after parsing attributes in process `syz.1.817'. [ 137.991167][ T7700] NCSI netlink: No device for ifindex 458760 [ 138.114141][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 138.164311][ T7712] sctp: [Deprecated]: syz.1.822 (pid 7712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.164311][ T7712] Use struct sctp_sack_info instead [ 138.633602][ T7732] __nla_validate_parse: 1 callbacks suppressed [ 138.633625][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 138.712208][ T7737] netlink: 40 bytes leftover after parsing attributes in process `syz.0.835'. [ 139.205839][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 139.334587][ T7773] tipc: Started in network mode [ 139.350065][ T7773] tipc: Node identity ac14140f, cluster identity 4711 [ 139.370464][ T7773] tipc: New replicast peer: 255.255.255.255 [ 139.381388][ T7773] tipc: Enabled bearer , priority 10 [ 139.454065][ T7779] veth0_to_hsr: invalid flags given to default FDB implementation [ 139.515951][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'. [ 139.599580][ T7786] netlink: 'syz.2.858': attribute type 28 has an invalid length. [ 139.614342][ T7786] netlink: 'syz.2.858': attribute type 3 has an invalid length. [ 139.658272][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.858'. [ 139.720649][ T7791] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.770030][ T2155] lo speed is unknown, defaulting to 1000 [ 140.448179][ T7832] netlink: 68 bytes leftover after parsing attributes in process `syz.3.879'. [ 140.501238][ T2155] tipc: Node number set to 2886997007 [ 140.641810][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 140.667664][ T5844] Bluetooth: hci4: link tx timeout [ 140.673058][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.687915][ T5846] Bluetooth: hci4: link tx timeout [ 140.692214][ T7837] netlink: 21 bytes leftover after parsing attributes in process `syz.4.883'. [ 140.693103][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.709922][ T5846] Bluetooth: hci4: link tx timeout [ 140.715083][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.722838][ T5846] Bluetooth: hci4: link tx timeout [ 140.728165][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.070495][ T7854] wireguard: wg1: Could not create IPv4 socket [ 141.374522][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'. [ 141.663377][ T7881] netlink: 188 bytes leftover after parsing attributes in process `syz.3.905'. [ 142.738332][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 142.872587][ T7950] veth0: entered promiscuous mode [ 142.908473][ T7948] veth0: left promiscuous mode [ 143.276784][ T7970] ipvlan2: entered allmulticast mode [ 143.289715][ T7970] veth0_vlan: entered allmulticast mode [ 143.486283][ T7986] netlink: 'syz.4.955': attribute type 5 has an invalid length. [ 145.020769][ T8072] __nla_validate_parse: 3 callbacks suppressed [ 145.020791][ T8072] netlink: 232 bytes leftover after parsing attributes in process `syz.1.998'. [ 145.877168][ T8114] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1018'. [ 146.340728][ T8142] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1032'. [ 146.473145][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 146.564735][ T8153] vxcan1: tx address claim with different name [ 146.893011][ T8169] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 147.578400][ T8208] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 147.825080][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 148.233443][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1078'. [ 148.298752][ T8242] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1077'. [ 148.890097][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'. [ 148.907678][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 149.160671][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1093'. [ 150.450256][ T8343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.880132][ T8366] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 151.175237][ T8381] __nla_validate_parse: 2 callbacks suppressed [ 151.175263][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'. [ 151.355959][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 153.561704][ T5911] hid-generic 0005:0B57:0005.0001: item fetching failed at offset 0/1 [ 153.607971][ T5911] hid-generic 0005:0B57:0005.0001: probe with driver hid-generic failed with error -22 [ 153.796843][ T8513] netlink: 'syz.4.1204': attribute type 25 has an invalid length. [ 153.813188][ T8513] netlink: 'syz.4.1204': attribute type 7 has an invalid length. [ 153.936139][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1207'. [ 154.098247][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 154.251778][ T8535] syz_tun: entered allmulticast mode [ 154.415008][ T8545] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1221'. [ 154.792876][ T8560] gtp0: entered promiscuous mode [ 154.825825][ T8560] gtp0: entered allmulticast mode [ 155.029010][ T8571] xt_hashlimit: size too large, truncated to 1048576 [ 155.858878][ C0] Illegal XDP return value 16128 on prog (id 72) dev veth0_to_bond, expect packet loss! [ 155.875805][ T8608] batman_adv: batadv0: Adding interface: gretap1 [ 155.890229][ T8608] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 156.300819][ T8628] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 156.538341][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1267'. [ 156.602772][ T8644] tipc: Started in network mode [ 156.615355][ T8644] tipc: Node identity ac14140f, cluster identity 4711 [ 156.634656][ T8644] tipc: New replicast peer: 255.255.255.255 [ 156.642950][ T8644] tipc: Enabled bearer , priority 10 [ 156.699032][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 156.856738][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'. [ 156.937553][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 156.947039][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 157.341621][ T8681] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 157.521197][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1291'. [ 157.553907][ T8692] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1291'. [ 157.578775][ T8695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1291'. [ 157.637747][ T5897] tipc: Node number set to 2886997007 [ 158.456834][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 158.810607][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 159.296258][ T8770] sctp: [Deprecated]: syz.0.1328 (pid 8770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.296258][ T8770] Use struct sctp_sack_info instead [ 161.937003][ T8907] __nla_validate_parse: 5 callbacks suppressed [ 161.937025][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 162.009928][ T8910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1394'. [ 162.775373][ T8921] infiniband syz!: set active [ 162.780596][ T8921] infiniband syz!: added team_slave_0 [ 162.839108][ T8921] RDS/IB: syz!: added [ 162.844205][ T8921] smc: adding ib device syz! with port count 1 [ 162.851378][ T8921] smc: ib device syz! port 1 has pnetid [ 163.039340][ T8946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1411'. [ 163.688805][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 163.734689][ T8980] macsec0: entered promiscuous mode [ 164.488919][ T9010] sctp: [Deprecated]: syz.0.1443 (pid 9010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.488919][ T9010] Use struct sctp_sack_info instead [ 164.650711][ T9012] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1444'. [ 164.864673][ T9020] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1448'. [ 165.132469][ T9031] syz.1.1453 uses obsolete (PF_INET,SOCK_PACKET) [ 165.753328][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 165.886266][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 165.956503][ T9074] netlink: 'syz.3.1473': attribute type 11 has an invalid length. [ 166.269737][ T9088] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 166.305555][ T9092] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1482'. [ 167.147336][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 167.357947][ T9147] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.364822][ T9147] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.990841][ T9179] tap0: tun_chr_ioctl cmd 1074025678 [ 168.001528][ T9179] tap0: group set to 0 [ 168.136246][ T9186] netlink: 'syz.0.1529': attribute type 2 has an invalid length. [ 168.908082][ T9227] vlan3: entered allmulticast mode [ 168.914146][ T9227] batadv0: entered allmulticast mode [ 169.156256][ T9238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.183945][ T9238] batadv_slave_1: entered promiscuous mode [ 169.215196][ T9244] syz.2.1555: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 169.246470][ T9244] CPU: 0 UID: 0 PID: 9244 Comm: syz.2.1555 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 169.246509][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.246527][ T9244] Call Trace: [ 169.246537][ T9244] [ 169.246548][ T9244] dump_stack_lvl+0x241/0x360 [ 169.246608][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.246640][ T9244] ? __pfx__printk+0x10/0x10 [ 169.246669][ T9244] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 169.246705][ T9244] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 169.246735][ T9244] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 169.246770][ T9244] warn_alloc+0x27c/0x410 [ 169.246795][ T9244] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 169.246817][ T9244] ? __pfx_warn_alloc+0x10/0x10 [ 169.246840][ T9244] ? kasan_save_track+0x3f/0x80 [ 169.246863][ T9244] ? __kasan_kmalloc+0x9d/0xb0 [ 169.246890][ T9244] ? xsk_setsockopt+0x449/0x840 [ 169.246909][ T9244] ? do_sock_setsockopt+0x3b1/0x710 [ 169.246929][ T9244] ? __x64_sys_setsockopt+0x1ee/0x280 [ 169.246949][ T9244] ? do_syscall_64+0xf3/0x230 [ 169.246973][ T9244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.247006][ T9244] __vmalloc_node_range_noprof+0x128/0x1390 [ 169.247061][ T9244] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 169.247088][ T9244] ? __kasan_kmalloc+0x9d/0xb0 [ 169.247120][ T9244] vmalloc_user_noprof+0x74/0x80 [ 169.247141][ T9244] ? xskq_create+0xb6/0x170 [ 169.247162][ T9244] xskq_create+0xb6/0x170 [ 169.247188][ T9244] xsk_init_queue+0xa1/0x100 [ 169.247214][ T9244] xsk_setsockopt+0x449/0x840 [ 169.247239][ T9244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.247257][ T9244] ? __lock_acquire+0xad5/0xd80 [ 169.247281][ T9244] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.247314][ T9244] ? aa_sock_opt_perm+0x79/0x120 [ 169.247349][ T9244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.247370][ T9244] do_sock_setsockopt+0x3b1/0x710 [ 169.247399][ T9244] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 169.247418][ T9244] ? __fget_files+0x2a/0x420 [ 169.247442][ T9244] ? __fget_files+0x39d/0x420 [ 169.247460][ T9244] ? __fget_files+0x2a/0x420 [ 169.247489][ T9244] __x64_sys_setsockopt+0x1ee/0x280 [ 169.247519][ T9244] do_syscall_64+0xf3/0x230 [ 169.247546][ T9244] ? clear_bhb_loop+0x45/0xa0 [ 169.247575][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.247595][ T9244] RIP: 0033:0x7f97f298d169 [ 169.247623][ T9244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.247641][ T9244] RSP: 002b:00007f97f3773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.247666][ T9244] RAX: ffffffffffffffda RBX: 00007f97f2ba5fa0 RCX: 00007f97f298d169 [ 169.247682][ T9244] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 169.247695][ T9244] RBP: 00007f97f2a0e990 R08: 0000000000000004 R09: 0000000000000000 [ 169.247709][ T9244] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.247722][ T9244] R13: 0000000000000000 R14: 00007f97f2ba5fa0 R15: 00007ffdbd9d10d8 [ 169.247757][ T9244] [ 169.385356][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 169.407398][ T9244] Mem-Info: [ 169.574660][ T9244] active_anon:3873 inactive_anon:0 isolated_anon:0 [ 169.574660][ T9244] active_file:1141 inactive_file:38331 isolated_file:0 [ 169.574660][ T9244] unevictable:768 dirty:116 writeback:25 [ 169.574660][ T9244] slab_reclaimable:10189 slab_unreclaimable:100950 [ 169.574660][ T9244] mapped:28289 shmem:1429 pagetables:859 [ 169.574660][ T9244] sec_pagetables:0 bounce:0 [ 169.574660][ T9244] kernel_misc_reclaimable:0 [ 169.574660][ T9244] free:1343957 free_pcp:419 free_cma:0 [ 169.672025][ T9244] Node 0 active_anon:15692kB inactive_anon:0kB active_file:4564kB inactive_file:153252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113156kB dirty:464kB writeback:100kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10796kB pagetables:3236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.783625][ T9244] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.878295][ T9244] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.995705][ T9244] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 170.015576][ T9244] Node 0 DMA32 free:1456368kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:15836kB inactive_anon:0kB active_file:4632kB inactive_file:153160kB unevictable:1536kB writepending:636kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:1640kB local_pcp:856kB free_cma:0kB [ 170.070873][ T9244] lowmem_reserve[]: 0 0 0 0 0 [ 170.075810][ T9244] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 170.169437][ T9244] lowmem_reserve[]: 0 0 0 0 0 [ 170.183912][ T9244] Node 1 Normal free:3905144kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.225232][ T9244] lowmem_reserve[]: 0 0 0 0 0 [ 170.236460][ T9244] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 170.256870][ T9244] Node 0 DMA32: 3*4kB (ME) 174*8kB (UME) 131*16kB (UME) 100*32kB (UME) 231*64kB (UME) 101*128kB (UME) 23*256kB (UM) 18*512kB (UM) 15*1024kB (UME) 13*2048kB (UME) 333*4096kB (UM) = 1455468kB [ 170.331487][ T9244] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 170.345306][ T9244] Node 1 Normal: 222*4kB (UME) 54*8kB (UME) 41*16kB (UME) 190*32kB (UME) 92*64kB (UME) 32*128kB (UME) 14*256kB (UME) 13*512kB (UME) 2*1024kB (ME) 4*2048kB (UE) 944*4096kB (M) = 3905144kB [ 170.365071][ T9244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.375835][ T9244] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.385680][ T9244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.413052][ T9244] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.432537][ T9244] 40918 total pagecache pages [ 170.437457][ T9244] 0 pages in swap cache [ 170.445864][ T9244] Free swap = 124996kB [ 170.448527][ T9285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1570'. [ 170.454369][ T9244] Total swap = 124996kB [ 170.463538][ T9244] 2097051 pages RAM [ 170.470226][ T9244] 0 pages HighMem/MovableOnly [ 170.474952][ T9244] 428581 pages reserved [ 170.487245][ T9244] 0 pages cma reserved [ 171.006369][ T9316] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1586'. [ 171.852175][ T9368] sctp: [Deprecated]: syz.0.1612 (pid 9368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.852175][ T9368] Use struct sctp_sack_info instead [ 172.024672][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'. [ 172.652314][ T9413] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.661152][ T9413] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.088496][ T9433] vxcan1: tx address claim with dlc 0 [ 173.191800][ T9438] netlink: 'syz.1.1645': attribute type 8 has an invalid length. [ 173.222445][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 173.784740][ T9473] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1662'. [ 174.004656][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 174.533727][ T9505] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1677'. [ 174.736830][ T9520] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1684'. [ 175.233151][ T9536] veth0_to_hsr: entered promiscuous mode [ 175.239700][ T9535] veth0_to_hsr: left promiscuous mode [ 175.867279][ T9561] netlink: 'syz.4.1704': attribute type 11 has an invalid length. [ 176.359439][ T9589] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 176.903563][ T9619] netlink: 'syz.0.1732': attribute type 4 has an invalid length. [ 179.246297][ T9727] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 179.262944][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 179.586632][ T9744] xt_bpf: check failed: parse error [ 179.668178][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1793'. [ 179.689278][ T9748] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.698514][ T9748] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.707412][ T9748] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.716213][ T9748] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.731680][ T9748] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.740734][ T9748] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.750327][ T9748] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.759811][ T9748] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.954558][ T9757] lo speed is unknown, defaulting to 1000 [ 180.625488][ T9779] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.901112][ T9787] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 180.934413][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 180.950632][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1813'. [ 180.999476][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 181.025955][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1813'. [ 181.565963][ T5911] IPVS: starting estimator thread 0... [ 181.679432][ T9824] IPVS: using max 24 ests per chain, 57600 per kthread [ 181.752690][ T9822] tipc: Started in network mode [ 181.763747][ T9822] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.786671][ T9822] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.821225][ T9822] tipc: Enabled bearer , priority 10 [ 181.879644][ T9826] macvlan4: entered promiscuous mode [ 181.907885][ T9826] bridge0: entered promiscuous mode [ 181.917822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.936263][ T9829] macvlan5: entered promiscuous mode [ 182.057712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.197678][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.337728][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.477747][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.617731][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.757660][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.849854][ T9878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 182.868461][ T9878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1849'. [ 182.877524][ T9880] netlink: 'syz.3.1852': attribute type 29 has an invalid length. [ 182.888164][ T9880] netlink: 'syz.3.1852': attribute type 29 has an invalid length. [ 182.898006][ T2155] tipc: Node number set to 2886997162 [ 182.899465][ T1082] wlan0: Trigger new scan to find an IBSS to join [ 182.914688][ T9880] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1852'. [ 183.037654][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.177184][ T9888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1856'. [ 183.244888][ T9891] syzkaller1: entered promiscuous mode [ 183.261535][ T9891] syzkaller1: entered allmulticast mode [ 183.307779][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.843828][ T9916] netlink: 'syz.2.1870': attribute type 4 has an invalid length. [ 184.174276][ T9926] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 184.205635][ T9926] netlink: 'syz.4.1874': attribute type 10 has an invalid length. [ 184.234120][ T9926] netlink: 'syz.4.1874': attribute type 4 has an invalid length. [ 184.794637][ T9942] syzkaller1: entered promiscuous mode [ 184.820951][ T9942] syzkaller1: entered allmulticast mode [ 185.439110][ T9977] vlan2: entered allmulticast mode [ 185.447223][ T9977] ip6gretap0: entered allmulticast mode [ 185.973654][T10003] __nla_validate_parse: 1 callbacks suppressed [ 185.973675][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1911'. [ 186.977659][ C0] net_ratelimit: 3 callbacks suppressed [ 186.977683][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.013447][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 187.027884][T10071] netlink: 'syz.1.1940': attribute type 7 has an invalid length. [ 187.066863][T10071] netlink: 'syz.1.1940': attribute type 8 has an invalid length. [ 187.089632][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 187.157331][T10077] syzkaller1: entered promiscuous mode [ 187.201671][T10077] syzkaller1: entered allmulticast mode [ 187.856616][T10110] netlink: 'syz.1.1958': attribute type 4 has an invalid length. [ 187.868327][ T1105] wlan0: Trigger new scan to find an IBSS to join [ 188.017766][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 188.029132][T10120] team0: entered promiscuous mode [ 188.034231][T10120] team_slave_0: entered promiscuous mode [ 188.053909][T10120] team_slave_1: entered promiscuous mode [ 188.810389][ T1105] wlan0: Creating new IBSS network, BSSID 4e:41:d9:d0:60:0c [ 188.964384][T10160] syzkaller1: entered promiscuous mode [ 188.986024][T10160] syzkaller1: entered allmulticast mode [ 189.057809][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.081123][T10167] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 189.089364][T10167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1982'. [ 189.123648][T10167] geneve0: entered promiscuous mode [ 189.144072][T10167] team0: Port device geneve0 added [ 190.015003][T10198] xt_CT: No such helper "pptp" [ 190.097752][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.246437][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 190.297239][T10214] sctp: [Deprecated]: syz.2.2003 (pid 10214) Use of int in max_burst socket option. [ 190.297239][T10214] Use struct sctp_assoc_value instead [ 190.301645][T10216] netlink: 'syz.4.2004': attribute type 11 has an invalid length. [ 190.553412][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.573164][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.697636][T10237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2012'. [ 191.137649][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.113117][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2040'. [ 192.177665][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.341997][T10297] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 192.430184][T10304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2046'. [ 192.690922][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.700327][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.709466][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.718588][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.727709][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.736796][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.745968][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.755111][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 192.764246][T10318] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 193.296460][T10329] syzkaller1: entered promiscuous mode [ 193.337688][T10329] syzkaller1: entered allmulticast mode [ 193.701097][T10344] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2064'. [ 193.729186][T10344] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2064'. [ 193.762899][T10344] netlink: 'syz.1.2064': attribute type 6 has an invalid length. [ 193.790262][T10344] netlink: 'syz.1.2064': attribute type 5 has an invalid length. [ 193.814738][T10344] netlink: 'syz.1.2064': attribute type 4 has an invalid length. [ 193.832312][T10344] netlink: 'syz.1.2064': attribute type 6 has an invalid length. [ 193.844411][T10349] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2067'. [ 193.853806][T10344] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2064'. [ 194.218247][T10360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 194.283962][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473190][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.650079][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.825176][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.930778][T10369] vlan4: entered allmulticast mode [ 194.957343][T10369] bond0: entered allmulticast mode [ 194.976314][T10369] bond_slave_0: entered allmulticast mode [ 195.000004][T10369] bond_slave_1: entered allmulticast mode [ 195.183267][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.424141][T10388] sctp: [Deprecated]: syz.3.2084 (pid 10388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.424141][T10388] Use struct sctp_sack_info instead [ 195.517764][T10389] sctp: [Deprecated]: syz.3.2084 (pid 10389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.517764][T10389] Use struct sctp_sack_info instead [ 195.561409][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.574131][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.586943][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.609412][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.617229][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.806718][ T1105] bridge_slave_1: left allmulticast mode [ 195.827727][ T1105] bridge_slave_1: left promiscuous mode [ 195.835173][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.899495][ T1105] bridge_slave_0: left allmulticast mode [ 195.907684][ T1105] bridge_slave_0: left promiscuous mode [ 195.920768][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.377650][ C0] net_ratelimit: 3324 callbacks suppressed [ 197.377675][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.536254][ T1105] bridge0 (unregistering): left promiscuous mode [ 197.698978][ T5844] Bluetooth: hci3: command tx timeout [ 197.711483][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.724364][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.736264][ T1105] bond0 (unregistering): Released all slaves [ 197.755023][T10392] lo speed is unknown, defaulting to 1000 [ 197.766857][T10412] netlink: 'syz.4.2094': attribute type 29 has an invalid length. [ 197.943922][ T1105] tipc: Disabling bearer [ 197.963172][ T1105] tipc: Left network mode [ 198.417648][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.772648][T10448] syzkaller1: entered promiscuous mode [ 198.805908][T10445] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.818137][T10448] syzkaller1: entered allmulticast mode [ 199.338518][ T1105] hsr_slave_0: left promiscuous mode [ 199.375656][ T1105] hsr_slave_1: left promiscuous mode [ 199.418742][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.456969][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.457792][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.476583][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 199.504217][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.582539][ T1105] veth1_macvtap: left promiscuous mode [ 199.592861][ T1105] veth0_macvtap: left promiscuous mode [ 199.599456][ T1105] veth1_vlan: left promiscuous mode [ 199.605527][ T1105] veth0_vlan: left promiscuous mode [ 199.779089][ T5844] Bluetooth: hci3: command tx timeout [ 200.497649][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 200.522154][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 200.574348][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 201.422325][T10392] chnl_net:caif_netlink_parms(): no params data found [ 201.537658][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.648727][T10500] ip_vti0: Master is either lo or non-ether device [ 201.852481][T10392] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.868116][ T55] Bluetooth: hci3: command tx timeout [ 201.877834][T10392] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.905764][T10392] bridge_slave_0: entered allmulticast mode [ 201.929718][T10392] bridge_slave_0: entered promiscuous mode [ 202.003334][T10392] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.010667][T10392] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.046760][T10392] bridge_slave_1: entered allmulticast mode [ 202.066943][T10392] bridge_slave_1: entered promiscuous mode [ 202.270348][T10392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.313524][T10392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.555560][T10392] team0: Port device team_slave_0 added [ 202.577768][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.634637][T10392] team0: Port device team_slave_1 added [ 202.868797][T10392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.875804][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.986869][T10392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.043586][T10392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.067633][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.140754][T10392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.367068][T10392] hsr_slave_0: entered promiscuous mode [ 203.388629][T10392] hsr_slave_1: entered promiscuous mode [ 203.555441][T10570] veth0: entered promiscuous mode [ 203.617705][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 203.621406][T10569] veth0: left promiscuous mode [ 203.939097][ T55] Bluetooth: hci3: command tx timeout [ 204.539478][T10392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.567131][T10392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.600795][T10392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.642753][T10392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.657686][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.973519][T10392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.092720][T10392] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.133894][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.141161][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.214761][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.222556][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.488426][T10392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.697790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.144831][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.421915][T10392] veth0_vlan: entered promiscuous mode [ 206.510792][T10392] veth1_vlan: entered promiscuous mode [ 206.737671][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.785891][T10392] veth0_macvtap: entered promiscuous mode [ 206.830035][T10392] veth1_macvtap: entered promiscuous mode [ 206.901248][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.954707][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.983278][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.018433][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.051868][T10669] netlink: 'syz.1.2202': attribute type 4 has an invalid length. [ 207.067646][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.087618][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.118408][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.146538][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.171984][T10392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.241430][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.270212][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.296558][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.315527][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.344381][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.372684][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.390686][T10392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.442982][T10392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.456473][T10392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.496153][T10392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.507307][T10392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.672709][T10686] syzkaller1: entered promiscuous mode [ 207.688821][T10686] syzkaller1: entered allmulticast mode [ 207.777689][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.050618][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.067830][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.232609][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.258670][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.913211][T10712] netlink: 'syz.1.2223': attribute type 4 has an invalid length. [ 209.320943][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.331578][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.340523][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.361416][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.374790][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.502745][T10724] lo speed is unknown, defaulting to 1000 [ 210.648315][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.663909][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.673308][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.692127][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.711500][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.973492][T10751] lo speed is unknown, defaulting to 1000 [ 211.090651][T10724] chnl_net:caif_netlink_parms(): no params data found [ 211.458441][ T5844] Bluetooth: hci2: command tx timeout [ 211.576643][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.594593][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.614891][T10724] bridge_slave_0: entered allmulticast mode [ 211.637441][T10724] bridge_slave_0: entered promiscuous mode [ 211.646826][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.661953][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.672359][T10724] bridge_slave_1: entered allmulticast mode [ 211.683637][T10724] bridge_slave_1: entered promiscuous mode [ 211.698322][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 211.877760][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2249'. [ 211.902763][T10790] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2250'. [ 211.910693][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.933083][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2249'. [ 211.961818][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 212.024503][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.227183][T10724] team0: Port device team_slave_0 added [ 212.252014][T10724] team0: Port device team_slave_1 added [ 212.459463][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.466454][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.595947][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.692643][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.705574][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.747784][ T55] Bluetooth: hci3: command tx timeout [ 212.756251][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.310241][T10724] hsr_slave_0: entered promiscuous mode [ 213.317000][T10724] hsr_slave_1: entered promiscuous mode [ 213.365129][T10724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.388643][T10724] Cannot create hsr debugfs directory [ 213.481324][T10751] chnl_net:caif_netlink_parms(): no params data found [ 213.538484][ T55] Bluetooth: hci2: command tx timeout [ 214.111941][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.129697][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.144872][T10751] bridge_slave_0: entered allmulticast mode [ 214.164601][T10751] bridge_slave_0: entered promiscuous mode [ 214.237117][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.258525][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.272783][T10751] bridge_slave_1: entered allmulticast mode [ 214.289428][T10751] bridge_slave_1: entered promiscuous mode [ 214.365973][T10724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.542047][T10724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.650222][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.699954][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'. [ 214.716236][T10724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.756311][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.818071][ T55] Bluetooth: hci3: command tx timeout [ 214.920103][T10724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.955609][T10751] team0: Port device team_slave_0 added [ 214.972335][T10751] team0: Port device team_slave_1 added [ 215.092120][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.101791][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.207615][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.269424][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.296738][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.388383][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.619112][ T55] Bluetooth: hci2: command tx timeout [ 215.769267][T10751] hsr_slave_0: entered promiscuous mode [ 215.808188][T10751] hsr_slave_1: entered promiscuous mode [ 215.814615][T10751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.835194][T10751] Cannot create hsr debugfs directory [ 216.107434][T10724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.217659][T10724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.275507][T10724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.329384][T10724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.818149][T10751] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.898250][ T55] Bluetooth: hci3: command tx timeout [ 217.063182][T10751] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.202702][T10751] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.264732][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.366391][T10751] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.441131][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.486720][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.493997][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.541411][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.548731][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.700510][ T55] Bluetooth: hci2: command tx timeout [ 217.821087][T10751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.842134][T10751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.881338][T10751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.921699][T10751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.314283][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.421937][T10751] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.479364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.486639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.567316][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.574556][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.620659][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.879458][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.913686][T10724] veth0_vlan: entered promiscuous mode [ 218.978786][ T55] Bluetooth: hci3: command tx timeout [ 219.001711][T10751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.034132][T10724] veth1_vlan: entered promiscuous mode [ 219.247364][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'. [ 219.274769][T10724] veth0_macvtap: entered promiscuous mode [ 219.311320][T10724] veth1_macvtap: entered promiscuous mode [ 219.407944][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.439324][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.461601][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.472950][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.483975][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.501790][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.514750][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.576249][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.597272][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.614943][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.630612][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.671051][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 219.672858][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.702611][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.719029][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.737620][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.753786][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.766112][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.777240][T10724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.788933][T10724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.809849][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.891055][T10724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.905856][T10724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.922172][T10724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.940024][T10724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.985676][T10751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.404803][T10751] veth0_vlan: entered promiscuous mode [ 220.420864][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.428975][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.541234][T10751] veth1_vlan: entered promiscuous mode [ 220.566294][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.602772][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.682527][T10751] veth0_macvtap: entered promiscuous mode [ 220.716359][T10751] veth1_macvtap: entered promiscuous mode [ 220.821620][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.864127][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.906307][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.929850][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.946277][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.959851][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.976509][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.997825][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.044878][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.061167][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.095360][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.117594][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.160147][T10751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.212067][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.239792][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.254438][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.284726][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.326192][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.341565][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.353423][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.364803][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.375099][T10751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.404961][T10751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.441472][T10751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.550431][T10751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.571190][T10751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.589364][T10751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.608763][T10751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.817532][T11042] syz_tun: entered promiscuous mode [ 221.837421][T11042] syz_tun: left promiscuous mode [ 222.003498][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.053426][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.126157][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.140885][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.418861][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 222.814144][T11054] lo speed is unknown, defaulting to 1000 [ 223.197620][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.206626][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.215779][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.224665][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.232962][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.353703][T11059] lo speed is unknown, defaulting to 1000 [ 223.891642][T11081] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2358'. [ 223.934813][ T975] hid-multitouch 0005:0457:0009.0002: unknown main item tag 0x0 [ 223.987331][ T975] hid-multitouch 0005:0457:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 224.058782][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.068584][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.076876][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.085323][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.094074][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.282399][T11085] lo speed is unknown, defaulting to 1000 [ 224.625357][T11098] netlink: 'syz.3.2364': attribute type 10 has an invalid length. [ 224.772344][T11098] syz_tun: entered promiscuous mode [ 224.788407][T11098] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 225.116046][T11059] chnl_net:caif_netlink_parms(): no params data found [ 225.299807][ T5844] Bluetooth: hci2: command tx timeout [ 225.626014][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2371'. [ 225.649788][T11059] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.657157][T11059] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.675014][T11059] bridge_slave_0: entered allmulticast mode [ 225.690844][T11059] bridge_slave_0: entered promiscuous mode [ 225.721968][T11059] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.736745][T11059] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.749593][T11059] bridge_slave_1: entered allmulticast mode [ 225.764273][T11059] bridge_slave_1: entered promiscuous mode [ 225.787984][T11127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2371'. [ 225.817368][T11127] nbd: device at index 64 is going down [ 225.910743][T11059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.960124][T11059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.178766][ T5844] Bluetooth: hci3: command tx timeout [ 226.193816][T11059] team0: Port device team_slave_0 added [ 226.241861][T11059] team0: Port device team_slave_1 added [ 226.525290][T11153] netlink: 'syz.1.2383': attribute type 4 has an invalid length. [ 226.572954][T11059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.597837][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.655193][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2382'. [ 226.705070][T11059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.761509][T11085] chnl_net:caif_netlink_parms(): no params data found [ 226.874849][T11059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.894774][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.946486][T11167] trusted_key: syz.4.2386 sent an empty control message without MSG_MORE. [ 226.956075][T11059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.265957][T11059] hsr_slave_0: entered promiscuous mode [ 227.283113][T11059] hsr_slave_1: entered promiscuous mode [ 227.293422][T11059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.302478][T11059] Cannot create hsr debugfs directory [ 227.378091][ T5844] Bluetooth: hci2: command tx timeout [ 227.449552][T11085] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.490083][T11085] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.497415][T11085] bridge_slave_0: entered allmulticast mode [ 227.520988][T11085] bridge_slave_0: entered promiscuous mode [ 227.563413][T11085] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.585294][T11085] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.600849][T11085] bridge_slave_1: entered allmulticast mode [ 227.617307][T11085] bridge_slave_1: entered promiscuous mode [ 227.824088][T11085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.863357][T11085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.267782][ T5844] Bluetooth: hci3: command tx timeout [ 228.311589][T11085] team0: Port device team_slave_0 added [ 228.474240][T11085] team0: Port device team_slave_1 added [ 228.639703][T11085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.646797][T11085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.695020][T11085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.771695][T11059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.826755][T11085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.859338][T11085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.908320][T11216] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 228.920766][T11085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.930043][T11216] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 228.955174][T11216] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2405'. [ 228.981278][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2404'. [ 229.097869][T11059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.311624][T11059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.458541][ T5844] Bluetooth: hci2: command tx timeout [ 229.464005][T11228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.471676][T11228] bridge0: port 3(bond2) entered blocking state [ 229.478710][T11228] bridge0: port 3(bond2) entered disabled state [ 229.485343][T11228] bond2: entered allmulticast mode [ 229.494070][T11228] bond2: entered promiscuous mode [ 229.500056][T11228] bridge0: port 3(bond2) entered blocking state [ 229.506490][T11228] bridge0: port 3(bond2) entered forwarding state [ 229.524686][ T1150] bridge0: port 3(bond2) entered disabled state [ 229.677498][T11059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.769647][T11085] hsr_slave_0: entered promiscuous mode [ 229.776460][T11085] hsr_slave_1: entered promiscuous mode [ 229.819049][T11085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.826666][T11085] Cannot create hsr debugfs directory [ 230.337863][ T5844] Bluetooth: hci3: command tx timeout [ 230.480737][T11253] netlink: 'syz.1.2419': attribute type 11 has an invalid length. [ 230.535019][T11059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.635253][T11059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.692005][T11059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.789088][T11059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.920402][T11085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.096656][T11085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.248575][T11085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.438557][T11085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.539150][ T5844] Bluetooth: hci2: command tx timeout [ 231.631565][T11059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.800115][T11059] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.870296][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.877516][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.943438][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.950746][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.991894][T11085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.029072][T11085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.065672][T11085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.103615][T11085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.419784][ T5844] Bluetooth: hci3: command tx timeout [ 232.494008][T11085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.532001][T11085] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.570236][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.577396][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.630148][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.637373][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.987764][T11059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.185998][T11059] veth0_vlan: entered promiscuous mode [ 233.230147][T11059] veth1_vlan: entered promiscuous mode [ 233.385991][T11085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.431618][T11059] veth0_macvtap: entered promiscuous mode [ 233.478883][T11059] veth1_macvtap: entered promiscuous mode [ 233.544118][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.607698][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.637833][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.657721][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.677746][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.697955][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.727272][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.759242][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.770855][T11330] netlink: 'syz.3.2449': attribute type 15 has an invalid length. [ 233.788730][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.829221][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.867830][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.895242][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.909189][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.926116][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.946201][T11059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.057443][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.076845][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.087521][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.124460][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.155807][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.174863][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.194504][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.209434][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.224096][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.246561][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.266250][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.287002][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.330625][T11059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.460507][T11059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.490519][T11059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.514375][T11059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.532746][T11059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.589170][T11343] bond0: (slave syz_tun): Releasing backup interface [ 234.629788][T11343] bridge_slave_0: left allmulticast mode [ 234.635492][T11343] bridge_slave_0: left promiscuous mode [ 234.658906][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.691240][T11343] bridge_slave_1: left allmulticast mode [ 234.696912][T11343] bridge_slave_1: left promiscuous mode [ 234.746036][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.789968][T11343] bond0: (slave bond_slave_0): Releasing backup interface [ 234.855361][T11343] bond0: (slave bond_slave_1): Releasing backup interface [ 234.899953][T11343] team0: Port device team_slave_0 removed [ 234.922672][T11343] team0: Port device team_slave_1 removed [ 234.944832][T11343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.959492][T11343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.991110][T11343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.999113][T11343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.177046][ T5850] syz!: Port: 1 Link DOWN [ 235.192233][T11085] veth0_vlan: entered promiscuous mode [ 235.315554][T11085] veth1_vlan: entered promiscuous mode [ 235.427950][T11356] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 235.651270][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.697080][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.819234][T11085] veth0_macvtap: entered promiscuous mode [ 235.833185][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.841409][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.883819][T11085] veth1_macvtap: entered promiscuous mode [ 235.966822][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.003272][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 236.021356][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.053296][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.083026][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.106421][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.125667][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.137139][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.156517][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.348860][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.367804][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.397696][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.417760][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.438283][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.457669][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.491336][T11085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.580645][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.607695][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.657604][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.697258][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.724442][T11384] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 236.730013][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.765048][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.767297][T11384] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2469'. [ 236.803675][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.821896][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.841073][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.856777][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.872382][T11085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.888030][T11085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.916437][T11085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.979433][T11085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.030104][T11085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.058370][T11085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.067138][T11085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.145603][T11389] vlan3: entered promiscuous mode [ 237.152261][T11389] vlan3: entered allmulticast mode [ 237.157426][T11389] hsr_slave_1: entered allmulticast mode [ 237.484998][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.507628][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.607689][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.615569][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.698833][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.707749][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.715929][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.725383][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.738481][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.829464][T11420] lo speed is unknown, defaulting to 1000 [ 239.800267][T11420] chnl_net:caif_netlink_parms(): no params data found [ 239.892959][T11440] "syz.4.2489" (11440) uses obsolete ecb(arc4) skcipher [ 240.070553][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'. [ 240.083125][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.095387][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.105656][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.114194][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.124956][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.223553][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.262215][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.287314][T11420] bridge_slave_0: entered allmulticast mode [ 240.318071][T11420] bridge_slave_0: entered promiscuous mode [ 240.385165][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.427760][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.457835][T11420] bridge_slave_1: entered allmulticast mode [ 240.476081][T11420] bridge_slave_1: entered promiscuous mode [ 240.646048][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 240.674092][T11420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.706083][T11420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.725774][T11453] lo speed is unknown, defaulting to 1000 [ 240.830206][ T55] Bluetooth: hci2: command tx timeout [ 240.892366][T11420] team0: Port device team_slave_0 added [ 240.975202][T11420] team0: Port device team_slave_1 added [ 241.209239][T11420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.216246][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.337833][T11420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.373670][T11420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.390426][T11494] sock: sock_set_timeout: `syz.4.2507' (pid 11494) tries to set negative timeout [ 241.417854][T11420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.501203][T11420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.731793][T11420] hsr_slave_0: entered promiscuous mode [ 241.748743][T11420] hsr_slave_1: entered promiscuous mode [ 241.755368][T11420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.777636][T11420] Cannot create hsr debugfs directory [ 242.177706][ T55] Bluetooth: hci3: command tx timeout [ 242.641419][T11520] tls_set_device_offload: netdev not found [ 242.898038][ T55] Bluetooth: hci2: command tx timeout [ 242.956183][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 243.033031][T11420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.204163][T11420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.256233][T11453] chnl_net:caif_netlink_parms(): no params data found [ 243.356634][T11539] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2524'. [ 243.384688][T11420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.492747][T11420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.715525][T11453] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.755176][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.785972][T11453] bridge_slave_0: entered allmulticast mode [ 243.809792][T11453] bridge_slave_0: entered promiscuous mode [ 243.877215][T11453] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.888922][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.898168][T11453] bridge_slave_1: entered allmulticast mode [ 243.906426][T11453] bridge_slave_1: entered promiscuous mode [ 244.013188][T11453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.056399][T11453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.151565][T11551] netlink: 'syz.1.2528': attribute type 4 has an invalid length. [ 244.258371][ T55] Bluetooth: hci3: command tx timeout [ 244.270393][T11453] team0: Port device team_slave_0 added [ 244.308895][T11420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.351909][ T5850] lo speed is unknown, defaulting to 1000 [ 244.365621][T11453] team0: Port device team_slave_1 added [ 244.378229][ T5850] syz2: Port: 1 Link DOWN [ 244.440755][T11420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.553493][T11453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.569872][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.678355][T11453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.711595][T11420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.758806][T11420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.808934][T11453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.815943][T11453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.877710][T11453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.977789][ T55] Bluetooth: hci2: command tx timeout [ 245.152170][T11453] hsr_slave_0: entered promiscuous mode [ 245.175149][T11453] hsr_slave_1: entered promiscuous mode [ 245.218746][T11453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.226364][T11453] Cannot create hsr debugfs directory [ 245.833591][T11595] tipc: Started in network mode [ 245.845671][T11595] tipc: Node identity 6, cluster identity 4711 [ 245.871731][T11595] tipc: Node number set to 6 [ 246.092635][T11453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.181292][T11420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.260314][T11453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.292215][T11420] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.337746][ T55] Bluetooth: hci3: command tx timeout [ 246.390419][T11453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.491192][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.498421][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.528661][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.535854][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.582628][T11453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.899898][T11610] netlink: 'syz.3.2551': attribute type 4 has an invalid length. [ 247.059094][ T55] Bluetooth: hci2: command tx timeout [ 247.071722][T11453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.149230][T11453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.207381][T11453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.290074][T11453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.530643][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.639437][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.649107][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.664190][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.682939][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.691152][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.726551][T11453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.813337][T11453] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.841977][T11626] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2555'. [ 247.873273][T11420] veth0_vlan: entered promiscuous mode [ 247.900091][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.907344][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.928689][T11618] lo speed is unknown, defaulting to 1000 [ 247.950974][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.958195][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.018906][T11420] veth1_vlan: entered promiscuous mode [ 248.226753][T11420] veth0_macvtap: entered promiscuous mode [ 248.289509][T11420] veth1_macvtap: entered promiscuous mode [ 248.418706][ T55] Bluetooth: hci3: command tx timeout [ 248.421692][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.479797][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.537607][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.566778][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.597734][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.637870][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.660950][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.692736][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.717478][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.741150][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2558'. [ 248.757597][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.767466][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.789553][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.801073][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.812129][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.824237][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.835126][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.849468][T11420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.017233][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.049047][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.082268][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.127802][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.153746][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.168551][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.187004][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.210608][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.231730][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.257580][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.272212][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.312654][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.333020][T11420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.378680][T11420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.393986][T11420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.471602][T11420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.511403][T11420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.530228][T11420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.539962][T11420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.672666][T11453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.778352][ T55] Bluetooth: hci1: command tx timeout [ 249.907460][ T1166] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.325399][T11453] veth0_vlan: entered promiscuous mode [ 250.358337][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.366209][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.552913][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.573798][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.589048][T11453] veth1_vlan: entered promiscuous mode [ 250.606973][T11618] chnl_net:caif_netlink_parms(): no params data found [ 250.811289][T11689] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 250.824523][T11689] netlink: 'syz.4.2574': attribute type 4 has an invalid length. [ 250.862368][T11689] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2574'. [ 251.066520][T11453] veth0_macvtap: entered promiscuous mode [ 251.318801][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.326021][T11618] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.349110][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2576'. [ 251.369573][T11618] bridge_slave_0: entered allmulticast mode [ 251.387835][T11618] bridge_slave_0: entered promiscuous mode [ 251.459448][T11453] veth1_macvtap: entered promiscuous mode [ 251.549628][T11618] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.573735][T11618] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.588282][T11618] bridge_slave_1: entered allmulticast mode [ 251.599678][T11618] bridge_slave_1: entered promiscuous mode [ 251.814457][T11618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.859029][T11618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.865914][ T55] Bluetooth: hci1: command tx timeout [ 252.102958][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.117609][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.128063][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.159072][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.177663][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.197923][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.217646][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.241763][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.253453][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.268759][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.278816][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.289752][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.299709][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.310307][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.320558][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.331181][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.341427][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.353601][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.385307][T11453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.425325][T11618] team0: Port device team_slave_0 added [ 252.452466][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.470043][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.483261][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.493759][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.506687][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.517464][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.527491][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.538641][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.548566][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.570082][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.581593][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.592609][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.602870][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.613487][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.623399][T11453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.634276][T11453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.679797][T11453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.705526][T11618] team0: Port device team_slave_1 added [ 252.889933][T11453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.907705][T11453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.916463][T11453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.980491][T11453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.191937][T11618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.230704][T11618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.297010][T11618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.333484][T11618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.346293][T11618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.394803][T11618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.646428][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.660116][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.674992][T11618] hsr_slave_0: entered promiscuous mode [ 253.685082][T11618] hsr_slave_1: entered promiscuous mode [ 253.691489][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.703398][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.718363][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.736150][T11618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.750780][T11618] Cannot create hsr debugfs directory [ 253.938475][ T55] Bluetooth: hci1: command tx timeout [ 254.022671][T11728] lo speed is unknown, defaulting to 1000 [ 254.439233][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.447083][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.582609][T11618] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.756842][T11618] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.863808][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.879003][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.942914][T11618] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.380376][T11618] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.709313][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.778607][ T55] Bluetooth: hci2: command tx timeout [ 255.842512][ T975] hid (null): unknown global tag 0xe [ 256.027653][ T55] Bluetooth: hci1: command tx timeout [ 256.074361][T11728] chnl_net:caif_netlink_parms(): no params data found [ 256.169540][T11618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.259933][T11618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.279073][T11618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.361873][T11618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.698829][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.705993][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.738135][T11728] bridge_slave_0: entered allmulticast mode [ 256.745803][T11728] bridge_slave_0: entered promiscuous mode [ 256.799290][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.806566][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.828050][T11728] bridge_slave_1: entered allmulticast mode [ 256.835641][T11728] bridge_slave_1: entered promiscuous mode [ 257.043168][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.081820][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.423346][T11728] team0: Port device team_slave_0 added [ 257.542481][T11728] team0: Port device team_slave_1 added [ 257.668974][T11784] xt_hashlimit: size too large, truncated to 1048576 [ 257.721303][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.761814][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.799733][ T975] hid-generic 0005:046D:0A0F.0003: unknown global tag 0xe [ 257.807047][ T975] hid-generic 0005:046D:0A0F.0003: item 0 2 1 14 parsing failed [ 257.838256][ T975] hid-generic 0005:046D:0A0F.0003: probe with driver hid-generic failed with error -22 [ 257.858916][ T55] Bluetooth: hci2: command tx timeout [ 257.878863][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.941402][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.000182][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.093913][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.149253][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.158591][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.170192][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.189778][T11618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.191345][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.217891][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.484856][T11618] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.586287][T11794] lo speed is unknown, defaulting to 1000 [ 258.595370][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.602600][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.653797][T11728] hsr_slave_0: entered promiscuous mode [ 258.664787][T11728] hsr_slave_1: entered promiscuous mode [ 258.695743][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.723977][T11728] Cannot create hsr debugfs directory [ 258.832821][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.840055][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.792631][T11728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.938258][ T5844] Bluetooth: hci2: command tx timeout [ 260.021857][T11728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.258179][ T5844] Bluetooth: hci3: command tx timeout [ 260.407244][T11728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.532618][T11835] netlink: 'syz.3.2616': attribute type 1 has an invalid length. [ 260.625571][T11835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.674874][T11728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.779046][T11837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.798355][T11837] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 260.859094][T11837] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 260.933822][T11618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.956120][T11794] chnl_net:caif_netlink_parms(): no params data found [ 261.369747][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.391525][T11794] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.411550][T11794] bridge_slave_0: entered allmulticast mode [ 261.427073][T11794] bridge_slave_0: entered promiscuous mode [ 261.510363][T11849] syzkaller0: entered promiscuous mode [ 261.516275][T11849] syzkaller0: entered allmulticast mode [ 261.532832][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.540997][T11794] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.558254][T11794] bridge_slave_1: entered allmulticast mode [ 261.566280][T11794] bridge_slave_1: entered promiscuous mode [ 261.779969][T11854] : entered promiscuous mode [ 261.842680][T11728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.876244][T11794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.907281][T11794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.926797][T11728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.018035][ T5844] Bluetooth: hci2: command tx timeout [ 262.065665][T11728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.132275][T11728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.175662][T11794] team0: Port device team_slave_0 added [ 262.198936][T11860] netlink: 'syz.4.2624': attribute type 1 has an invalid length. [ 262.215986][T11794] team0: Port device team_slave_1 added [ 262.229604][T11618] veth0_vlan: entered promiscuous mode [ 262.292840][T11860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.338647][ T5844] Bluetooth: hci3: command tx timeout [ 262.493998][T11864] bond1: (slave gretap1): making interface the new active one [ 262.510277][T11864] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 262.545091][T11794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.554579][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.591463][T11794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.638915][T11794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.666217][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.693238][T11794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.820573][T11618] veth1_vlan: entered promiscuous mode [ 262.903967][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 262.929358][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 262.994256][T11794] hsr_slave_0: entered promiscuous mode [ 263.021549][T11794] hsr_slave_1: entered promiscuous mode [ 263.031156][T11794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.039442][T11794] Cannot create hsr debugfs directory [ 263.282397][T11618] veth0_macvtap: entered promiscuous mode [ 263.565096][T11618] veth1_macvtap: entered promiscuous mode [ 263.902037][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.925648][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.943443][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.954386][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.964883][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.977693][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.999516][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.010529][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.022292][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.032933][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.045752][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.056818][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.067050][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.079474][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.091323][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.116159][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.130863][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.146324][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.156619][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.167445][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.180847][T11618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.246435][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.275952][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.291349][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.305891][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.316818][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.337166][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.365198][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.381581][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.403476][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.416233][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.418421][ T5844] Bluetooth: hci3: command tx timeout [ 264.428361][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.468323][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.482270][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.503269][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.550976][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.578423][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.606473][T11618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.637707][T11618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.666033][T11618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.728818][T11794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.806577][T11618] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.845852][T11618] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.878595][T11618] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.887357][T11618] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.065282][T11794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.245298][T11794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.335560][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.342609][T11909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2643'. [ 265.482854][T11794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.500820][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'. [ 265.597444][T11914] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 265.656987][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.705960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.744653][T11916] [ 265.747147][T11916] ====================================================== [ 265.754178][T11916] WARNING: possible circular locking dependency detected [ 265.761192][T11916] 6.14.0-syzkaller-13348-geaa517b77e63 #0 Not tainted [ 265.767943][T11916] ------------------------------------------------------ [ 265.774948][T11916] syz.3.2646/11916 is trying to acquire lock: [ 265.781007][T11916] ffff888030b926f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_notifier+0xcf/0x230 [ 265.789465][T11916] [ 265.789465][T11916] but task is already holding lock: [ 265.796820][T11916] ffff88807be59c58 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_notifier+0x8b/0x230 [ 265.805609][T11916] [ 265.805609][T11916] which lock already depends on the new lock. [ 265.805609][T11916] [ 265.816008][T11916] [ 265.816008][T11916] the existing dependency chain (in reverse order) is: [ 265.825015][T11916] [ 265.825015][T11916] -> #3 (&net->xdp.lock){+.+.}-{4:4}: [ 265.832579][T11916] lock_acquire+0x116/0x2f0 [ 265.837612][T11916] __mutex_lock+0x1a5/0x10c0 [ 265.842738][T11916] xsk_notifier+0x8b/0x230 [ 265.847679][T11916] notifier_call_chain+0x1a5/0x3f0 [ 265.853311][T11916] unregister_netdevice_many_notify+0x1572/0x2510 [ 265.860257][T11916] unregister_netdevice_queue+0x383/0x400 [ 265.866504][T11916] _cfg80211_unregister_wdev+0x163/0x590 [ 265.872657][T11916] ieee80211_remove_interfaces+0x4f1/0x700 [ 265.878996][T11916] ieee80211_unregister_hw+0x5d/0x2c0 [ 265.884922][T11916] mac80211_hwsim_del_radio+0x2c6/0x4c0 [ 265.890990][T11916] hwsim_exit_net+0x5c3/0x670 [ 265.896185][T11916] cleanup_net+0x814/0xd60 [ 265.901125][T11916] process_scheduled_works+0xac3/0x18e0 [ 265.907193][T11916] worker_thread+0x870/0xd50 [ 265.912309][T11916] kthread+0x7b7/0x940 [ 265.916905][T11916] ret_from_fork+0x4b/0x80 [ 265.921837][T11916] ret_from_fork_asm+0x1a/0x30 [ 265.927113][T11916] [ 265.927113][T11916] -> #2 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 265.934849][T11916] lock_acquire+0x116/0x2f0 [ 265.939894][T11916] __mutex_lock+0x1a5/0x10c0 [ 265.945012][T11916] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 265.951607][T11916] notifier_call_chain+0x1a5/0x3f0 [ 265.957240][T11916] __dev_close_many+0x15d/0x760 [ 265.962615][T11916] dev_close_many+0x250/0x4c0 [ 265.967820][T11916] unregister_netdevice_many_notify+0x628/0x2510 [ 265.974668][T11916] default_device_exit_batch+0x7ff/0x880 [ 265.980841][T11916] cleanup_net+0x8af/0xd60 [ 265.985789][T11916] process_scheduled_works+0xac3/0x18e0 [ 265.991865][T11916] worker_thread+0x870/0xd50 [ 265.996989][T11916] kthread+0x7b7/0x940 [ 266.001589][T11916] ret_from_fork+0x4b/0x80 [ 266.006528][T11916] ret_from_fork_asm+0x1a/0x30 [ 266.011814][T11916] [ 266.011814][T11916] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 266.020258][T11916] lock_acquire+0x116/0x2f0 [ 266.025285][T11916] __mutex_lock+0x1a5/0x10c0 [ 266.030403][T11916] xsk_bind+0x2fd/0xfb0 [ 266.035078][T11916] __sys_bind+0x1de/0x290 [ 266.039936][T11916] __x64_sys_bind+0x7a/0x90 [ 266.044970][T11916] do_syscall_64+0xf3/0x230 [ 266.050016][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.056425][T11916] [ 266.056425][T11916] -> #0 (&xs->mutex){+.+.}-{4:4}: [ 266.063642][T11916] validate_chain+0xa69/0x24e0 [ 266.068932][T11916] __lock_acquire+0xad5/0xd80 [ 266.074127][T11916] lock_acquire+0x116/0x2f0 [ 266.079147][T11916] __mutex_lock+0x1a5/0x10c0 [ 266.084259][T11916] xsk_notifier+0xcf/0x230 [ 266.089196][T11916] notifier_call_chain+0x1a5/0x3f0 [ 266.094831][T11916] unregister_netdevice_many_notify+0x1572/0x2510 [ 266.101770][T11916] unregister_netdevice_queue+0x383/0x400 [ 266.108011][T11916] ip_tunnel_ctl+0x1f6/0xc40 [ 266.113131][T11916] vti_tunnel_ctl+0x423/0x530 [ 266.118334][T11916] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 266.124404][T11916] dev_ifsioc+0xc04/0x1010 [ 266.129342][T11916] dev_ioctl+0x8c3/0x1380 [ 266.134192][T11916] sock_ioctl+0x819/0x900 [ 266.139064][T11916] __se_sys_ioctl+0xf1/0x160 [ 266.144176][T11916] do_syscall_64+0xf3/0x230 [ 266.149200][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.155607][T11916] [ 266.155607][T11916] other info that might help us debug this: [ 266.155607][T11916] [ 266.165830][T11916] Chain exists of: [ 266.165830][T11916] &xs->mutex --> &rdev->wiphy.mtx --> &net->xdp.lock [ 266.165830][T11916] [ 266.178437][T11916] Possible unsafe locking scenario: [ 266.178437][T11916] [ 266.185899][T11916] CPU0 CPU1 [ 266.191269][T11916] ---- ---- [ 266.196657][T11916] lock(&net->xdp.lock); [ 266.201014][T11916] lock(&rdev->wiphy.mtx); [ 266.208050][T11916] lock(&net->xdp.lock); [ 266.214909][T11916] lock(&xs->mutex); [ 266.218903][T11916] [ 266.218903][T11916] *** DEADLOCK *** [ 266.218903][T11916] [ 266.227048][T11916] 2 locks held by syz.3.2646/11916: [ 266.232242][T11916] #0: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x8b0/0x1380 [ 266.241063][T11916] #1: ffff88807be59c58 (&net->xdp.lock){+.+.}-{4:4}, at: xsk_notifier+0x8b/0x230 [ 266.250305][T11916] [ 266.250305][T11916] stack backtrace: [ 266.256220][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.3.2646 Not tainted 6.14.0-syzkaller-13348-geaa517b77e63 #0 PREEMPT(full) [ 266.256242][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.256253][T11916] Call Trace: [ 266.256261][T11916] [ 266.256270][T11916] dump_stack_lvl+0x241/0x360 [ 266.256297][T11916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.256319][T11916] ? __pfx__printk+0x10/0x10 [ 266.256341][T11916] ? print_lock+0x171/0x1a0 [ 266.256362][T11916] print_circular_bug+0x2e1/0x300 [ 266.256389][T11916] check_noncircular+0x142/0x160 [ 266.256413][T11916] validate_chain+0xa69/0x24e0 [ 266.256438][T11916] ? look_up_lock_class+0x7b/0x170 [ 266.256457][T11916] ? register_lock_class+0x54/0x330 [ 266.256475][T11916] __lock_acquire+0xad5/0xd80 [ 266.256494][T11916] lock_acquire+0x116/0x2f0 [ 266.256509][T11916] ? xsk_notifier+0xcf/0x230 [ 266.256529][T11916] __mutex_lock+0x1a5/0x10c0 [ 266.256548][T11916] ? xsk_notifier+0xcf/0x230 [ 266.256563][T11916] ? __local_bh_enable_ip+0x168/0x200 [ 266.256578][T11916] ? lockdep_hardirqs_on+0x9d/0x150 [ 266.256596][T11916] ? __local_bh_enable_ip+0x168/0x200 [ 266.256613][T11916] ? xsk_notifier+0xcf/0x230 [ 266.256626][T11916] ? do_raw_spin_unlock+0x13c/0x8b0 [ 266.256648][T11916] ? __pfx___mutex_lock+0x10/0x10 [ 266.256669][T11916] ? rt_flush_dev+0x480/0x4b0 [ 266.256688][T11916] xsk_notifier+0xcf/0x230 [ 266.256705][T11916] notifier_call_chain+0x1a5/0x3f0 [ 266.256727][T11916] unregister_netdevice_many_notify+0x1572/0x2510 [ 266.256757][T11916] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 266.256778][T11916] ? finish_task_switch+0x1e5/0x870 [ 266.256792][T11916] ? lockdep_hardirqs_on+0x9d/0x150 [ 266.256811][T11916] ? aa_get_newest_label+0x101/0x6f0 [ 266.256836][T11916] ? __pfx_aa_get_newest_label+0x10/0x10 [ 266.256860][T11916] unregister_netdevice_queue+0x383/0x400 [ 266.256879][T11916] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 266.256898][T11916] ? bpf_lsm_capable+0x9/0x10 [ 266.256921][T11916] ip_tunnel_ctl+0x1f6/0xc40 [ 266.256937][T11916] ? ip_tunnel_parm_from_user+0x313/0x4e0 [ 266.256956][T11916] vti_tunnel_ctl+0x423/0x530 [ 266.256974][T11916] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 266.256989][T11916] ? lockdep_hardirqs_on+0x9d/0x150 [ 266.257010][T11916] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 266.257029][T11916] ? rcu_is_watching+0x15/0xb0 [ 266.257051][T11916] ip_tunnel_siocdevprivate+0x107/0x1a0 [ 266.257070][T11916] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 266.257090][T11916] ? full_name_hash+0x93/0xe0 [ 266.257108][T11916] dev_ifsioc+0xc04/0x1010 [ 266.257131][T11916] ? dev_load+0x21/0x1f0 [ 266.257151][T11916] dev_ioctl+0x8c3/0x1380 [ 266.257173][T11916] sock_ioctl+0x819/0x900 [ 266.257193][T11916] ? __pfx_sock_ioctl+0x10/0x10 [ 266.257209][T11916] ? __fget_files+0x2a/0x420 [ 266.257229][T11916] ? __pfx_sock_ioctl+0x10/0x10 [ 266.257247][T11916] __se_sys_ioctl+0xf1/0x160 [ 266.257266][T11916] do_syscall_64+0xf3/0x230 [ 266.257285][T11916] ? clear_bhb_loop+0x45/0xa0 [ 266.257303][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.257319][T11916] RIP: 0033:0x7f499558d169 [ 266.257334][T11916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.257348][T11916] RSP: 002b:00007f49963e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.257364][T11916] RAX: ffffffffffffffda RBX: 00007f49957a5fa0 RCX: 00007f499558d169 [ 266.257376][T11916] RDX: 0000200000000780 RSI: 00000000000089f2 RDI: 0000000000000005 [ 266.257392][T11916] RBP: 00007f499560e990 R08: 0000000000000000 R09: 0000000000000000 [ 266.257402][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.257412][T11916] R13: 0000000000000000 R14: 00007f49957a5fa0 R15: 00007fff4eadeb48 [ 266.257430][T11916] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 266.673552][ T5844] Bluetooth: hci3: command tx timeout [ 267.519314][ T5839] syz_tun (unregistering): left allmulticast mode