last executing test programs: 1m24.738793874s ago: executing program 4 (id=65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300), 0x0}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}]}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="137463b3d48bee", @ANYBLOB="f4d20afc85557ea626e41f6299fc6cf30e1c0c784d299f7c2f68f02fd7584ad792554e89eae0ddadefb34ca82cf77f181f5d8990e855518ba7affd9e891c7383ab608fc70d925407b218ec8714a7e65bb33269aeec3ad87567500b1deb0a5f8f79f4bc406d53e152ddf02514a2884dcb6a46b59507c148f194ab32089106c218af2c05459a4138fc1fc796ef3c9fa40a9c7ab3aec522ea88392ca61dd3a44bc8e5dc7739ec47630337f2b4d81bda6a0111adfa86e3e1ad593cd13ee0ca177eab991dc3f3"], 0x210}}], 0x2, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x45, 0x0) 1m11.941147994s ago: executing program 4 (id=65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300), 0x0}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}]}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="137463b3d48bee", @ANYBLOB="f4d20afc85557ea626e41f6299fc6cf30e1c0c784d299f7c2f68f02fd7584ad792554e89eae0ddadefb34ca82cf77f181f5d8990e855518ba7affd9e891c7383ab608fc70d925407b218ec8714a7e65bb33269aeec3ad87567500b1deb0a5f8f79f4bc406d53e152ddf02514a2884dcb6a46b59507c148f194ab32089106c218af2c05459a4138fc1fc796ef3c9fa40a9c7ab3aec522ea88392ca61dd3a44bc8e5dc7739ec47630337f2b4d81bda6a0111adfa86e3e1ad593cd13ee0ca177eab991dc3f3"], 0x210}}], 0x2, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x45, 0x0) 59.600579811s ago: executing program 4 (id=65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300), 0x0}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}]}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="137463b3d48bee", @ANYBLOB="f4d20afc85557ea626e41f6299fc6cf30e1c0c784d299f7c2f68f02fd7584ad792554e89eae0ddadefb34ca82cf77f181f5d8990e855518ba7affd9e891c7383ab608fc70d925407b218ec8714a7e65bb33269aeec3ad87567500b1deb0a5f8f79f4bc406d53e152ddf02514a2884dcb6a46b59507c148f194ab32089106c218af2c05459a4138fc1fc796ef3c9fa40a9c7ab3aec522ea88392ca61dd3a44bc8e5dc7739ec47630337f2b4d81bda6a0111adfa86e3e1ad593cd13ee0ca177eab991dc3f3"], 0x210}}], 0x2, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x45, 0x0) 40.535025741s ago: executing program 4 (id=65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300), 0x0}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}]}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="137463b3d48bee", @ANYBLOB="f4d20afc85557ea626e41f6299fc6cf30e1c0c784d299f7c2f68f02fd7584ad792554e89eae0ddadefb34ca82cf77f181f5d8990e855518ba7affd9e891c7383ab608fc70d925407b218ec8714a7e65bb33269aeec3ad87567500b1deb0a5f8f79f4bc406d53e152ddf02514a2884dcb6a46b59507c148f194ab32089106c218af2c05459a4138fc1fc796ef3c9fa40a9c7ab3aec522ea88392ca61dd3a44bc8e5dc7739ec47630337f2b4d81bda6a0111adfa86e3e1ad593cd13ee0ca177eab991dc3f3"], 0x210}}], 0x2, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x45, 0x0) 25.171863215s ago: executing program 4 (id=65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300), 0x0}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}]}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="137463b3d48bee", @ANYBLOB="f4d20afc85557ea626e41f6299fc6cf30e1c0c784d299f7c2f68f02fd7584ad792554e89eae0ddadefb34ca82cf77f181f5d8990e855518ba7affd9e891c7383ab608fc70d925407b218ec8714a7e65bb33269aeec3ad87567500b1deb0a5f8f79f4bc406d53e152ddf02514a2884dcb6a46b59507c148f194ab32089106c218af2c05459a4138fc1fc796ef3c9fa40a9c7ab3aec522ea88392ca61dd3a44bc8e5dc7739ec47630337f2b4d81bda6a0111adfa86e3e1ad593cd13ee0ca177eab991dc3f3"], 0x210}}], 0x2, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x45, 0x0) 12.169973483s ago: executing program 1 (id=2169): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000100001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44010) 12.045054639s ago: executing program 1 (id=2173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0xfe0f, {@ip4=@local, 0x86dd}}}]}, 0x38}}, 0x0) 11.902505193s ago: executing program 1 (id=2177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="042c31af66424e8f92bb4d98f7fa7426984a61174667fb4a9e7805015a0000e3965ef2cff5198100000000000000", 0x2e}, {&(0x7f0000000040)="d5", 0x1}, {&(0x7f0000000180)="c4d958cb3d3b439702bbee57446d75947a7f47d45eaad4a1680aec21a64fd7c8f188004da2fe697943f8e49f8e8c85547d052a18250ca93a204d89772738710539b013b9351a44aec8dc9caff28462bbbc001692b15db07de2ddd88c464bb7100e983c", 0x63}], 0x3}}], 0x1, 0x41) 11.833175392s ago: executing program 1 (id=2179): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 11.733654011s ago: executing program 1 (id=2181): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 11.584995032s ago: executing program 4 (id=65): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000300), 0x0}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) listen(r5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="ac9e0e521e42a5de6b4140c422f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec01c64c8c95e5de6d", 0x3c}, {&(0x7f00000000c0)="9b8b0a3d30e44e25", 0x8}]}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYBLOB="137463b3d48bee", @ANYBLOB="f4d20afc85557ea626e41f6299fc6cf30e1c0c784d299f7c2f68f02fd7584ad792554e89eae0ddadefb34ca82cf77f181f5d8990e855518ba7affd9e891c7383ab608fc70d925407b218ec8714a7e65bb33269aeec3ad87567500b1deb0a5f8f79f4bc406d53e152ddf02514a2884dcb6a46b59507c148f194ab32089106c218af2c05459a4138fc1fc796ef3c9fa40a9c7ab3aec522ea88392ca61dd3a44bc8e5dc7739ec47630337f2b4d81bda6a0111adfa86e3e1ad593cd13ee0ca177eab991dc3f3"], 0x210}}], 0x2, 0xc8000) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x45, 0x0) 11.261752045s ago: executing program 1 (id=2182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 1.146767963s ago: executing program 3 (id=2321): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 1.003635259s ago: executing program 3 (id=2323): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 902.522461ms ago: executing program 0 (id=2324): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) 849.948579ms ago: executing program 3 (id=2326): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 754.462703ms ago: executing program 0 (id=2328): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}, 0x7e}], 0x2, 0x10000, 0x0) 713.203144ms ago: executing program 3 (id=2329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) shutdown(r2, 0x0) 712.720836ms ago: executing program 2 (id=2330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 605.972587ms ago: executing program 0 (id=2331): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 582.310815ms ago: executing program 2 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 564.208376ms ago: executing program 3 (id=2333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff7525206cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651dde583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467c8a7fa8b58abc37056433edf43fba5566a"], &(0x7f0000000100)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 497.767031ms ago: executing program 3 (id=2334): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000480)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="ce5b550b14dd04c2fa638125e6a08c8afc9544e026080580cd85c3eb2f86929b595b54111a0a8cbb8153b116dbc45fd564375e23c77253e437b511198d77aa69b31a693980b2c127a3436d9b55b08171de831554e27f6e7ce17c453bee12d9ad0b358e1f15586bca82f46501b3c5a531a7ab82770e354d8259f25dd23781314174a7cbdcc14506b95aaaa380d307c46ab27a1bc0b8f53339b2abf7600029e3886ccb38733b55d1", 0xa7}, {&(0x7f0000000380)="f7ef0c2e3fa8667b6e", 0x9}, {&(0x7f00000003c0)="c2a68dacc669ca0bfab693837620e09b1768f23f0456a00677a414", 0x1b}, {&(0x7f0000000e80)="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", 0x382}], 0x4}}], 0x1, 0x0) 373.932702ms ago: executing program 0 (id=2335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x400c041}, 0x8010) 373.69865ms ago: executing program 2 (id=2336): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 227.056575ms ago: executing program 0 (id=2337): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 190.941245ms ago: executing program 2 (id=2338): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x34}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x90) 73.994413ms ago: executing program 2 (id=2339): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 73.643256ms ago: executing program 0 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001b0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) 0s ago: executing program 2 (id=2341): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{0x0, 0x0, 0x0}, 0x7e}], 0x2, 0x10000, 0x0) kernel console output (not intermixed with test programs): ld solve the problem. [ 208.025701][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.041774][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.048998][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.077383][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.123956][ T9826] hsr_slave_0: entered promiscuous mode [ 208.130530][ T9826] hsr_slave_1: entered promiscuous mode [ 208.137090][ T9826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.145309][ T9826] Cannot create hsr debugfs directory [ 208.374071][ T5232] Bluetooth: hci2: command tx timeout [ 208.480594][ T9826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.491588][ T9826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.501847][ T9826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.511398][ T9826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.534846][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.541954][ T9826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.550432][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.557631][ T9826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.618143][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.636326][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.649791][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.669847][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.686232][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.693333][ T7423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.707041][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.714205][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.875604][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.051615][ T9826] veth0_vlan: entered promiscuous mode [ 209.062140][ T9826] veth1_vlan: entered promiscuous mode [ 209.090014][ T9826] veth0_macvtap: entered promiscuous mode [ 209.100169][ T9826] veth1_macvtap: entered promiscuous mode [ 209.120268][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.130950][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.140845][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.151345][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.161403][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.171866][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.186982][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.198058][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.208914][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.220272][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.230752][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.240669][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.255293][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.268695][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.290322][ T9826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.299717][ T9826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.308494][ T9826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.317257][ T9826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.375990][ T7423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.384314][ T7423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.411281][ T7423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.419712][ T7423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.169622][ T9845] veth0_vlan: left allmulticast mode [ 212.385911][ T2920] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.172905][ T9871] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 214.200383][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1337'. [ 214.220029][ T9871] batman_adv: batadv0: Adding interface: virt_wifi0 [ 214.243057][ T9871] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.293510][ T9871] batman_adv: batadv0: Interface activated: virt_wifi0 [ 214.349752][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.362522][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.379952][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.393739][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.403870][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.411764][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.500442][ T9886] lo speed is unknown, defaulting to 1000 [ 214.917816][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1349'. [ 214.932600][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 214.999505][ T2920] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.144030][ T2920] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.289331][ T2920] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.508658][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 215.532692][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 215.670083][ T2920] bridge_slave_1: left allmulticast mode [ 215.676218][ T2920] bridge_slave_1: left promiscuous mode [ 215.681946][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.700783][ T2920] bridge_slave_0: left allmulticast mode [ 215.733738][ T2920] bridge_slave_0: left promiscuous mode [ 215.757141][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.799319][ T9937] FAULT_INJECTION: forcing a failure. [ 215.799319][ T9937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.814497][ T9937] CPU: 1 UID: 0 PID: 9937 Comm: syz.1.1360 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 215.825457][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 215.835500][ T9937] Call Trace: [ 215.838771][ T9937] [ 215.841689][ T9937] dump_stack_lvl+0x241/0x360 [ 215.846364][ T9937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.851547][ T9937] ? __pfx__printk+0x10/0x10 [ 215.856145][ T9937] should_fail_ex+0x3b0/0x4e0 [ 215.860818][ T9937] prepare_alloc_pages+0x1da/0x5d0 [ 215.865929][ T9937] __alloc_pages_noprof+0x166/0x6c0 [ 215.871226][ T9937] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 215.876991][ T9937] alloc_pages_mpol_noprof+0x3e8/0x680 [ 215.882475][ T9937] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 215.888453][ T9937] ? page_ext_put+0x97/0xc0 [ 215.892953][ T9937] ? alloc_pages_noprof+0xef/0x170 [ 215.898061][ T9937] pte_alloc_one+0x88/0x5d0 [ 215.902560][ T9937] ? __pfx_pte_alloc_one+0x10/0x10 [ 215.907666][ T9937] ? mark_lock+0x9a/0x350 [ 215.911999][ T9937] ? __lock_acquire+0x137a/0x2040 [ 215.917020][ T9937] __pte_alloc+0x79/0x3a0 [ 215.921339][ T9937] ? mark_lock+0x9a/0x350 [ 215.925663][ T9937] ? __pfx___pte_alloc+0x10/0x10 [ 215.930593][ T9937] ? __lock_acquire+0x137a/0x2040 [ 215.935617][ T9937] handle_pte_fault+0x55cd/0x6fc0 [ 215.940638][ T9937] ? validate_chain+0x11e/0x5900 [ 215.945565][ T9937] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 215.951282][ T9937] ? __pfx_lock_acquire+0x10/0x10 [ 215.956299][ T9937] ? __pfx_handle_pte_fault+0x10/0x10 [ 215.961659][ T9937] ? mark_lock+0x9a/0x350 [ 215.965988][ T9937] ? __lock_acquire+0x137a/0x2040 [ 215.971037][ T9937] handle_mm_fault+0x1029/0x1980 [ 215.975992][ T9937] ? __pfx_handle_mm_fault+0x10/0x10 [ 215.981282][ T9937] ? __pfx_find_vma+0x10/0x10 [ 215.985955][ T9937] ? vma_is_secretmem+0xd/0x50 [ 215.990728][ T9937] ? check_vma_flags+0x500/0x5a0 [ 215.995684][ T9937] __get_user_pages+0x6ec/0x16a0 [ 216.000634][ T9937] ? __gup_longterm_locked+0xd11/0x17d0 [ 216.006195][ T9937] ? __pfx___get_user_pages+0x10/0x10 [ 216.011585][ T9937] __gup_longterm_locked+0xed7/0x17d0 [ 216.016963][ T9937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.023286][ T9937] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 216.029267][ T9937] ? gup_fast_fallback+0x221d/0x2b50 [ 216.034553][ T9937] gup_fast_fallback+0x2742/0x2b50 [ 216.039696][ T9937] ? __pfx_gup_fast_fallback+0x10/0x10 [ 216.045153][ T9937] ? mark_lock+0x9a/0x350 [ 216.049484][ T9937] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.055480][ T9937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.061820][ T9937] ? irqentry_exit+0x63/0x90 [ 216.066411][ T9937] ? is_valid_gup_args+0x124/0x200 [ 216.071531][ T9937] pin_user_pages_fast+0xcc/0x160 [ 216.076558][ T9937] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 216.082204][ T9937] iov_iter_extract_pages+0x3db/0x720 [ 216.087591][ T9937] extract_iter_to_sg+0x890/0x22b0 [ 216.092703][ T9937] ? __asan_memcpy+0x40/0x70 [ 216.097301][ T9937] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 216.102840][ T9937] ? unpin_user_page+0xe0/0x1e0 [ 216.107686][ T9937] ? __pfx_unpin_user_page+0x10/0x10 [ 216.112964][ T9937] ? __local_bh_enable_ip+0x168/0x200 [ 216.118335][ T9937] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 216.124049][ T9937] ? do_raw_spin_unlock+0x13c/0x8b0 [ 216.129240][ T9937] ? vmac_init+0x8e/0xf0 [ 216.133473][ T9937] ? __asan_memset+0x23/0x50 [ 216.138059][ T9937] hash_sendmsg+0x513/0x1110 [ 216.142660][ T9937] ? __pfx_hash_sendmsg+0x10/0x10 [ 216.147681][ T9937] __sock_sendmsg+0x221/0x270 [ 216.152350][ T9937] ____sys_sendmsg+0x525/0x7d0 [ 216.157115][ T9937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.162404][ T9937] __sys_sendmsg+0x2b0/0x3a0 [ 216.166990][ T9937] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.172087][ T9937] ? vfs_write+0x7c4/0xc90 [ 216.176530][ T9937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.182881][ T9937] ? do_syscall_64+0x100/0x230 [ 216.187660][ T9937] ? do_syscall_64+0xb6/0x230 [ 216.192340][ T9937] do_syscall_64+0xf3/0x230 [ 216.196838][ T9937] ? clear_bhb_loop+0x35/0x90 [ 216.201519][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.207407][ T9937] RIP: 0033:0x7f90cff79e79 [ 216.211818][ T9937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.231420][ T9937] RSP: 002b:00007f90d0cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.239828][ T9937] RAX: ffffffffffffffda RBX: 00007f90d0115f80 RCX: 00007f90cff79e79 [ 216.247789][ T9937] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 216.255752][ T9937] RBP: 00007f90d0cac090 R08: 0000000000000000 R09: 0000000000000000 [ 216.263713][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.271670][ T9937] R13: 0000000000000000 R14: 00007f90d0115f80 R15: 00007fff9f3cc348 [ 216.279649][ T9937] [ 216.453845][ T5232] Bluetooth: hci2: command tx timeout [ 216.857797][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.869766][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.880655][ T2920] bond0 (unregistering): Released all slaves [ 216.911893][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1367'. [ 216.933770][ T9964] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1367'. [ 216.958806][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 216.972437][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 217.248034][ T9986] FAULT_INJECTION: forcing a failure. [ 217.248034][ T9986] name failslab, interval 1, probability 0, space 0, times 0 [ 217.289551][ T9985] FAULT_INJECTION: forcing a failure. [ 217.289551][ T9985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.304282][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.3.1372 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 217.315073][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.325135][ T9986] Call Trace: [ 217.328415][ T9986] [ 217.331354][ T9986] dump_stack_lvl+0x241/0x360 [ 217.336041][ T9986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.341252][ T9986] ? __pfx__printk+0x10/0x10 [ 217.345862][ T9986] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 217.351324][ T9986] ? __pfx___might_resched+0x10/0x10 [ 217.356623][ T9986] should_fail_ex+0x3b0/0x4e0 [ 217.361314][ T9986] should_failslab+0xac/0x100 [ 217.366008][ T9986] ? nfnetlink_rcv+0x1265/0x2ad0 [ 217.370969][ T9986] __kmalloc_cache_noprof+0x6c/0x2c0 [ 217.376277][ T9986] nfnetlink_rcv+0x1265/0x2ad0 [ 217.381100][ T9986] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.386281][ T9986] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.391485][ T9986] ? skb_clone+0x240/0x390 [ 217.395903][ T9986] ? __pfx_lock_release+0x10/0x10 [ 217.400943][ T9986] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.406149][ T9986] netlink_unicast+0x7f6/0x990 [ 217.410930][ T9986] ? __pfx_netlink_unicast+0x10/0x10 [ 217.416220][ T9986] ? __virt_addr_valid+0x183/0x530 [ 217.421348][ T9986] ? __check_object_size+0x49c/0x900 [ 217.426620][ T9986] ? bpf_lsm_netlink_send+0x9/0x10 [ 217.431726][ T9986] netlink_sendmsg+0x8e4/0xcb0 [ 217.436493][ T9986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.441768][ T9986] ? __import_iovec+0x536/0x820 [ 217.446607][ T9986] ? aa_sock_msg_perm+0x91/0x160 [ 217.451618][ T9986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 217.456897][ T9986] ? security_socket_sendmsg+0x87/0xb0 [ 217.462351][ T9986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.467624][ T9986] __sock_sendmsg+0x221/0x270 [ 217.472296][ T9986] ____sys_sendmsg+0x525/0x7d0 [ 217.477057][ T9986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.482356][ T9986] __sys_sendmsg+0x2b0/0x3a0 [ 217.486941][ T9986] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.492042][ T9986] ? vfs_write+0x7c4/0xc90 [ 217.496483][ T9986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.502888][ T9986] ? do_syscall_64+0x100/0x230 [ 217.507642][ T9986] ? do_syscall_64+0xb6/0x230 [ 217.512309][ T9986] do_syscall_64+0xf3/0x230 [ 217.516806][ T9986] ? clear_bhb_loop+0x35/0x90 [ 217.521478][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.527361][ T9986] RIP: 0033:0x7f1b4b979e79 [ 217.531767][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.551360][ T9986] RSP: 002b:00007f1b4c77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.559764][ T9986] RAX: ffffffffffffffda RBX: 00007f1b4bb15f80 RCX: 00007f1b4b979e79 [ 217.567725][ T9986] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 217.575685][ T9986] RBP: 00007f1b4c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.583643][ T9986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.591615][ T9986] R13: 0000000000000000 R14: 00007f1b4bb15f80 R15: 00007fff8ecce8a8 [ 217.599596][ T9986] [ 217.624061][ T9985] CPU: 0 UID: 0 PID: 9985 Comm: syz.2.1371 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 217.629636][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.634752][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 217.634766][ T9985] Call Trace: [ 217.634776][ T9985] [ 217.634785][ T9985] dump_stack_lvl+0x241/0x360 [ 217.634814][ T9985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.643379][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.651857][ T9985] ? __pfx__printk+0x10/0x10 [ 217.651888][ T9985] ? __pfx_lock_release+0x10/0x10 [ 217.651921][ T9985] should_fail_ex+0x3b0/0x4e0 [ 217.651948][ T9985] _copy_from_iter+0x1f6/0x1960 [ 217.667192][ T9886] bridge_slave_0: entered allmulticast mode [ 217.668083][ T9985] ? __virt_addr_valid+0x183/0x530 [ 217.668109][ T9985] ? __pfx_lock_release+0x10/0x10 [ 217.678027][ T9886] bridge_slave_0: entered promiscuous mode [ 217.679683][ T9985] ? __alloc_skb+0x28f/0x440 [ 217.679710][ T9985] ? __pfx__copy_from_iter+0x10/0x10 [ 217.709949][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.710188][ T9985] ? __virt_addr_valid+0x183/0x530 [ 217.710211][ T9985] ? __virt_addr_valid+0x183/0x530 [ 217.710228][ T9985] ? __virt_addr_valid+0x45f/0x530 [ 217.726504][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.732849][ T9985] ? __check_object_size+0x49c/0x900 [ 217.732880][ T9985] netlink_sendmsg+0x73d/0xcb0 [ 217.732914][ T9985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.770490][ T9985] ? __import_iovec+0x536/0x820 [ 217.775343][ T9985] ? aa_sock_msg_perm+0x91/0x160 [ 217.780285][ T9985] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 217.785565][ T9985] ? security_socket_sendmsg+0x87/0xb0 [ 217.791022][ T9985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.796296][ T9985] __sock_sendmsg+0x221/0x270 [ 217.800965][ T9985] ____sys_sendmsg+0x525/0x7d0 [ 217.805751][ T9985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.811049][ T9985] __sys_sendmsg+0x2b0/0x3a0 [ 217.815638][ T9985] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.820757][ T9985] ? vfs_write+0x7c4/0xc90 [ 217.825214][ T9985] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.831543][ T9985] ? do_syscall_64+0x100/0x230 [ 217.836301][ T9985] ? do_syscall_64+0xb6/0x230 [ 217.840971][ T9985] do_syscall_64+0xf3/0x230 [ 217.845465][ T9985] ? clear_bhb_loop+0x35/0x90 [ 217.850141][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.856028][ T9985] RIP: 0033:0x7f4ac0779e79 [ 217.860440][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.880039][ T9985] RSP: 002b:00007f4ac149f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.888472][ T9985] RAX: ffffffffffffffda RBX: 00007f4ac0915f80 RCX: 00007f4ac0779e79 [ 217.896433][ T9985] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 217.904391][ T9985] RBP: 00007f4ac149f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.912440][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.920403][ T9985] R13: 0000000000000000 R14: 00007f4ac0915f80 R15: 00007ffd0e0e6438 [ 217.928381][ T9985] [ 217.943391][ T9886] bridge_slave_1: entered allmulticast mode [ 217.973897][ T9886] bridge_slave_1: entered promiscuous mode [ 217.995870][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'. [ 218.223426][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 218.271821][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.316749][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.480943][ T2920] hsr_slave_0: left promiscuous mode [ 218.490291][ T2920] hsr_slave_1: left promiscuous mode [ 218.499627][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.507467][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.517897][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.525571][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.534262][ T5232] Bluetooth: hci2: command tx timeout [ 218.563175][ T2920] veth1_macvtap: left promiscuous mode [ 218.569086][ T2920] veth0_macvtap: left promiscuous mode [ 218.575477][ T2920] veth1_vlan: left promiscuous mode [ 218.580881][ T2920] veth0_vlan: left promiscuous mode [ 219.063323][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 219.098402][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 219.467313][T10008] netlink: 'syz.3.1378': attribute type 4 has an invalid length. [ 219.476982][T10009] netlink: 'syz.2.1379': attribute type 10 has an invalid length. [ 219.506011][ T9886] team0: Port device team_slave_0 added [ 219.629292][ T9886] team0: Port device team_slave_1 added [ 219.640022][T10028] FAULT_INJECTION: forcing a failure. [ 219.640022][T10028] name failslab, interval 1, probability 0, space 0, times 0 [ 219.646711][T10030] __nla_validate_parse: 3 callbacks suppressed [ 219.646725][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 219.670666][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.2.1384 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 219.681451][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 219.691518][T10028] Call Trace: [ 219.694809][T10028] [ 219.697752][T10028] dump_stack_lvl+0x241/0x360 [ 219.702454][T10028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.707670][T10028] ? __pfx__printk+0x10/0x10 [ 219.712292][T10028] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 219.717767][T10028] ? __pfx___might_resched+0x10/0x10 [ 219.723075][T10028] should_fail_ex+0x3b0/0x4e0 [ 219.727779][T10028] should_failslab+0xac/0x100 [ 219.732473][T10028] ? nfnetlink_rcv+0x1265/0x2ad0 [ 219.737426][T10028] __kmalloc_cache_noprof+0x6c/0x2c0 [ 219.742729][T10028] nfnetlink_rcv+0x1265/0x2ad0 [ 219.747536][T10028] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 219.752721][T10028] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.757924][T10028] ? skb_clone+0x240/0x390 [ 219.762329][T10028] ? __pfx_lock_release+0x10/0x10 [ 219.767378][T10028] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.772563][T10028] netlink_unicast+0x7f6/0x990 [ 219.777341][T10028] ? __pfx_netlink_unicast+0x10/0x10 [ 219.782649][T10028] ? __virt_addr_valid+0x183/0x530 [ 219.787778][T10028] ? __check_object_size+0x49c/0x900 [ 219.793076][T10028] ? bpf_lsm_netlink_send+0x9/0x10 [ 219.798211][T10028] netlink_sendmsg+0x8e4/0xcb0 [ 219.803002][T10028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.808302][T10028] ? __import_iovec+0x536/0x820 [ 219.813171][T10028] ? aa_sock_msg_perm+0x91/0x160 [ 219.815277][T10033] FAULT_INJECTION: forcing a failure. [ 219.815277][T10033] name failslab, interval 1, probability 0, space 0, times 0 [ 219.818109][T10028] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 219.835957][T10028] ? security_socket_sendmsg+0x87/0xb0 [ 219.841440][T10028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.846737][T10028] __sock_sendmsg+0x221/0x270 [ 219.851424][T10028] ____sys_sendmsg+0x525/0x7d0 [ 219.856213][T10028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.861524][T10028] __sys_sendmsg+0x2b0/0x3a0 [ 219.866125][T10028] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.871235][T10028] ? vfs_write+0x7c4/0xc90 [ 219.875686][T10028] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.882011][T10028] ? do_syscall_64+0x100/0x230 [ 219.886770][T10028] ? do_syscall_64+0xb6/0x230 [ 219.891439][T10028] do_syscall_64+0xf3/0x230 [ 219.895933][T10028] ? clear_bhb_loop+0x35/0x90 [ 219.900608][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.906499][T10028] RIP: 0033:0x7f4ac0779e79 [ 219.910906][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.930503][T10028] RSP: 002b:00007f4ac149f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.938909][T10028] RAX: ffffffffffffffda RBX: 00007f4ac0915f80 RCX: 00007f4ac0779e79 [ 219.946872][T10028] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 219.954831][T10028] RBP: 00007f4ac149f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.962790][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.970751][T10028] R13: 0000000000000000 R14: 00007f4ac0915f80 R15: 00007ffd0e0e6438 [ 219.978730][T10028] [ 219.990904][T10033] CPU: 0 UID: 0 PID: 10033 Comm: syz.1.1386 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 220.001683][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 220.011815][T10033] Call Trace: [ 220.015086][T10033] [ 220.018013][T10033] dump_stack_lvl+0x241/0x360 [ 220.022754][T10033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.027949][T10033] ? __pfx__printk+0x10/0x10 [ 220.032557][T10033] ? ref_tracker_alloc+0x332/0x490 [ 220.037704][T10033] should_fail_ex+0x3b0/0x4e0 [ 220.042386][T10033] ? skb_clone+0x20c/0x390 [ 220.046815][T10033] should_failslab+0xac/0x100 [ 220.051601][T10033] ? skb_clone+0x20c/0x390 [ 220.056032][T10033] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 220.061435][T10033] skb_clone+0x20c/0x390 [ 220.065694][T10033] __netlink_deliver_tap+0x3cc/0x7c0 [ 220.070988][T10033] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.076178][T10033] netlink_deliver_tap+0x19d/0x1b0 [ 220.081284][T10033] netlink_unicast+0x7c4/0x990 [ 220.086061][T10033] ? __pfx_netlink_unicast+0x10/0x10 [ 220.091341][T10033] ? __virt_addr_valid+0x183/0x530 [ 220.096457][T10033] ? __check_object_size+0x49c/0x900 [ 220.101737][T10033] ? bpf_lsm_netlink_send+0x9/0x10 [ 220.106852][T10033] netlink_sendmsg+0x8e4/0xcb0 [ 220.111618][T10033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.116897][T10033] ? __import_iovec+0x536/0x820 [ 220.121743][T10033] ? aa_sock_msg_perm+0x91/0x160 [ 220.126678][T10033] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 220.131953][T10033] ? security_socket_sendmsg+0x87/0xb0 [ 220.137408][T10033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.142680][T10033] __sock_sendmsg+0x221/0x270 [ 220.147357][T10033] ____sys_sendmsg+0x525/0x7d0 [ 220.152146][T10033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.157450][T10033] __sys_sendmsg+0x2b0/0x3a0 [ 220.162055][T10033] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.167169][T10033] ? vfs_write+0x7c4/0xc90 [ 220.171616][T10033] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.177948][T10033] ? do_syscall_64+0x100/0x230 [ 220.182713][T10033] ? do_syscall_64+0xb6/0x230 [ 220.187391][T10033] do_syscall_64+0xf3/0x230 [ 220.191892][T10033] ? clear_bhb_loop+0x35/0x90 [ 220.196575][T10033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.202483][T10033] RIP: 0033:0x7f90cff79e79 [ 220.206904][T10033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.226525][T10033] RSP: 002b:00007f90d0cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.234942][T10033] RAX: ffffffffffffffda RBX: 00007f90d0115f80 RCX: 00007f90cff79e79 [ 220.242907][T10033] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 220.250870][T10033] RBP: 00007f90d0cac090 R08: 0000000000000000 R09: 0000000000000000 [ 220.258832][T10033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.266817][T10033] R13: 0000000000000000 R14: 00007f90d0115f80 R15: 00007fff9f3cc348 [ 220.274797][T10033] [ 220.308379][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 220.399096][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.406538][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.442105][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.485234][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.507805][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.613759][ T5232] Bluetooth: hci2: command tx timeout [ 220.631581][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.689367][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.708812][T10044] team0: Port device bond0 added [ 220.861749][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1394'. [ 220.874612][T10056] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1394'. [ 220.889721][ T9886] hsr_slave_0: entered promiscuous mode [ 220.904211][ T9886] hsr_slave_1: entered promiscuous mode [ 220.910685][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.920875][ T9886] Cannot create hsr debugfs directory [ 220.949633][T10060] netlink: 'syz.1.1396': attribute type 10 has an invalid length. [ 220.998353][T10060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.039971][T10060] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 221.210704][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1399'. [ 221.250875][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1400'. [ 221.311510][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 221.350682][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1401'. [ 221.644083][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 221.764780][T10098] pim6reg: entered allmulticast mode [ 221.803523][T10098] pim6reg: left allmulticast mode [ 222.037682][ T9886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.063228][ T9886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.082698][ T9886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.102775][ T9886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.363387][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.409801][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.433074][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.440284][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.484127][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.491319][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.604457][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'. [ 222.694917][ T5232] Bluetooth: hci2: command tx timeout [ 222.796312][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.170080][ T9886] veth0_vlan: entered promiscuous mode [ 223.216419][ T9886] veth1_vlan: entered promiscuous mode [ 223.283178][ T9886] veth0_macvtap: entered promiscuous mode [ 223.304715][ T9886] veth1_macvtap: entered promiscuous mode [ 223.330649][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.352381][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.365009][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.376616][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.386533][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.414341][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.430232][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.449784][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.476491][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.492511][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.503977][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.529320][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.554686][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.567152][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.597295][ T9886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.609555][ T9886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.619856][ T9886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.631303][ T9886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.763001][T10180] pim6reg1: entered allmulticast mode [ 223.824985][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.842909][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.885400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.912977][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.125692][T10188] syz.0.1439 (10188) used greatest stack depth: 17304 bytes left [ 224.386761][T10206] netlink: 'syz.3.1445': attribute type 1 has an invalid length. [ 224.519299][T10216] Cannot find map_set index 63 as target [ 224.542023][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.583496][T10219] macvlan12: entered promiscuous mode [ 224.673789][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.852247][T10231] xt_l2tp: v2 sid > 0xffff: 4278190080 [ 225.332414][T10247] __nla_validate_parse: 7 callbacks suppressed [ 225.332432][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 225.362999][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 225.382021][T10250] macvlan13: entered promiscuous mode [ 225.669783][T10264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'. [ 226.001778][T10282] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1470'. [ 226.030801][T10282] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 226.345089][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.932302][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 227.952085][T10306] macvlan14: entered promiscuous mode [ 228.023258][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.203079][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.214382][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.225126][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.256782][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.280067][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.291441][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.431986][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.481713][T10319] veth1_macvtap: left promiscuous mode [ 228.487474][T10319] macsec0: entered allmulticast mode [ 228.498791][T10319] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 228.538136][T10313] lo speed is unknown, defaulting to 1000 [ 228.631805][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.744719][T10327] netlink: 'syz.2.1479': attribute type 8 has an invalid length. [ 228.764414][T10327] netlink: 'syz.2.1479': attribute type 10 has an invalid length. [ 228.772347][T10327] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1479'. [ 228.995118][ T35] bridge_slave_1: left allmulticast mode [ 229.000812][ T35] bridge_slave_1: left promiscuous mode [ 229.037446][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.054707][ T35] bridge_slave_0: left allmulticast mode [ 229.060513][ T35] bridge_slave_0: left promiscuous mode [ 229.066966][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.432537][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.448045][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.458913][ T35] bond0 (unregistering): Released all slaves [ 229.561824][T10336] delete_channel: no stack [ 229.680199][T10347] tipc: Bearer : already 2 bearers with priority 10 [ 229.708626][T10347] tipc: Bearer : trying with adjusted priority [ 229.722716][T10347] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 229.805826][T10313] chnl_net:caif_netlink_parms(): no params data found [ 230.215293][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.227179][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.237975][T10313] bridge_slave_0: entered allmulticast mode [ 230.292522][T10313] bridge_slave_0: entered promiscuous mode [ 230.316048][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.323246][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.340868][T10313] bridge_slave_1: entered allmulticast mode [ 230.366845][T10313] bridge_slave_1: entered promiscuous mode [ 230.374536][ T5232] Bluetooth: hci2: command tx timeout [ 230.402771][ T35] hsr_slave_0: left promiscuous mode [ 230.412894][ T35] hsr_slave_1: left promiscuous mode [ 230.426927][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.434822][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.442618][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.450186][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.473577][ T35] veth1_macvtap: left promiscuous mode [ 230.480463][ T35] veth0_macvtap: left promiscuous mode [ 230.486185][ T35] veth1_vlan: left promiscuous mode [ 230.491471][ T35] veth0_vlan: left promiscuous mode [ 230.937985][ T35] team0 (unregistering): Port device team_slave_1 removed [ 230.973573][ T35] team0 (unregistering): Port device team_slave_0 removed [ 231.123573][T10382] delete_channel: no stack [ 231.436676][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.474926][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.517472][T10395] netlink: 'syz.2.1499': attribute type 21 has an invalid length. [ 231.668789][T10313] team0: Port device team_slave_0 added [ 231.712066][T10313] team0: Port device team_slave_1 added [ 231.843789][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'. [ 231.871421][T10408] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1505'. [ 231.893913][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'. [ 231.915882][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.941581][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.968364][T10414] FAULT_INJECTION: forcing a failure. [ 231.968364][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 231.999322][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.016971][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.3.1506 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 232.024402][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.027746][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.042604][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.044699][T10414] Call Trace: [ 232.044715][T10414] [ 232.044725][T10414] dump_stack_lvl+0x241/0x360 [ 232.044756][T10414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.044777][T10414] ? __pfx__printk+0x10/0x10 [ 232.072296][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.073898][T10414] ? ref_tracker_alloc+0x332/0x490 [ 232.073932][T10414] should_fail_ex+0x3b0/0x4e0 [ 232.073957][T10414] ? skb_clone+0x20c/0x390 [ 232.089281][ T5228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.091267][T10414] should_failslab+0xac/0x100 [ 232.091302][T10414] ? skb_clone+0x20c/0x390 [ 232.091326][T10414] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 232.105325][ T5228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.107068][T10414] skb_clone+0x20c/0x390 [ 232.113086][ T5228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.116112][T10414] __netlink_deliver_tap+0x3cc/0x7c0 [ 232.116151][T10414] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.125269][ T5228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.127727][T10414] netlink_deliver_tap+0x19d/0x1b0 [ 232.127760][T10414] netlink_sendskb+0x68/0x140 [ 232.133062][ T5228] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 232.137506][T10414] netlink_unicast+0x39d/0x990 [ 232.137538][T10414] ? __asan_memcpy+0x40/0x70 [ 232.137567][T10414] ? __pfx_netlink_unicast+0x10/0x10 [ 232.137600][T10414] nfnetlink_rcv+0x26c4/0x2ad0 [ 232.137657][T10414] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 232.137728][T10414] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.137744][T10414] ? skb_clone+0x240/0x390 [ 232.137767][T10414] ? __pfx_lock_release+0x10/0x10 [ 232.137801][T10414] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.147393][ T5228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.148939][T10414] netlink_unicast+0x7f6/0x990 [ 232.246160][T10414] ? __pfx_netlink_unicast+0x10/0x10 [ 232.251451][T10414] ? __virt_addr_valid+0x183/0x530 [ 232.256552][T10414] ? __check_object_size+0x49c/0x900 [ 232.261828][T10414] ? bpf_lsm_netlink_send+0x9/0x10 [ 232.266946][T10414] netlink_sendmsg+0x8e4/0xcb0 [ 232.271729][T10414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.277003][T10414] ? __import_iovec+0x536/0x820 [ 232.281846][T10414] ? aa_sock_msg_perm+0x91/0x160 [ 232.286782][T10414] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.292075][T10414] ? security_socket_sendmsg+0x87/0xb0 [ 232.297528][T10414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.302806][T10414] __sock_sendmsg+0x221/0x270 [ 232.307479][T10414] ____sys_sendmsg+0x525/0x7d0 [ 232.312236][T10414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.317514][T10414] __sys_sendmsg+0x2b0/0x3a0 [ 232.322111][T10414] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.327243][T10414] ? vfs_write+0x7c4/0xc90 [ 232.331702][T10414] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.338092][T10414] ? do_syscall_64+0x100/0x230 [ 232.342951][T10414] ? do_syscall_64+0xb6/0x230 [ 232.347637][T10414] do_syscall_64+0xf3/0x230 [ 232.352137][T10414] ? clear_bhb_loop+0x35/0x90 [ 232.356877][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.362763][T10414] RIP: 0033:0x7f1b4b979e79 [ 232.367167][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.386935][T10414] RSP: 002b:00007f1b4c77f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.395351][T10414] RAX: ffffffffffffffda RBX: 00007f1b4bb15f80 RCX: 00007f1b4b979e79 [ 232.403334][T10414] RDX: 0000000000000000 RSI: 000000002000c2c0 RDI: 0000000000000003 [ 232.411318][T10414] RBP: 00007f1b4c77f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.419292][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.427252][T10414] R13: 0000000000000000 R14: 00007f1b4bb15f80 R15: 00007fff8ecce8a8 [ 232.435240][T10414] [ 232.455126][ T5228] Bluetooth: hci2: command tx timeout [ 232.460565][ T5231] Bluetooth: hci5: command 0x0405 tx timeout [ 232.578867][T10428] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1508'. [ 232.639380][T10418] lo speed is unknown, defaulting to 1000 [ 232.678487][T10313] hsr_slave_0: entered promiscuous mode [ 232.712345][T10313] hsr_slave_1: entered promiscuous mode [ 232.741689][T10313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.769466][T10313] Cannot create hsr debugfs directory [ 232.815591][T10440] sctp: [Deprecated]: syz.3.1510 (pid 10440) Use of int in max_burst socket option deprecated. [ 232.815591][T10440] Use struct sctp_assoc_value instead [ 232.899850][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1510'. [ 233.120623][T10418] chnl_net:caif_netlink_parms(): no params data found [ 233.206737][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.214297][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.221475][T10418] bridge_slave_0: entered allmulticast mode [ 233.229556][T10418] bridge_slave_0: entered promiscuous mode [ 233.238997][T10418] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.247659][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.255470][T10418] bridge_slave_1: entered allmulticast mode [ 233.262213][T10418] bridge_slave_1: entered promiscuous mode [ 233.301968][T10418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.314671][T10418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.352302][T10418] team0: Port device team_slave_0 added [ 233.372546][T10418] team0: Port device team_slave_1 added [ 233.415688][T10418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.422751][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.450256][T10418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.473188][T10418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.480473][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.508092][T10418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.543977][T10313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.565598][T10313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.586407][T10452] FAULT_INJECTION: forcing a failure. [ 233.586407][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.609765][T10452] CPU: 0 UID: 0 PID: 10452 Comm: syz.2.1514 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 233.620560][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 233.630708][T10452] Call Trace: [ 233.633985][T10452] [ 233.636905][T10452] dump_stack_lvl+0x241/0x360 [ 233.641584][T10452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.646774][T10452] ? __pfx__printk+0x10/0x10 [ 233.651367][T10452] ? __pfx_lock_release+0x10/0x10 [ 233.656391][T10452] should_fail_ex+0x3b0/0x4e0 [ 233.661061][T10452] _copy_from_user+0x2f/0xe0 [ 233.665645][T10452] copy_msghdr_from_user+0xae/0x680 [ 233.670834][T10452] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.676641][T10452] __sys_sendmsg+0x23d/0x3a0 [ 233.681227][T10452] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.686327][T10452] ? vfs_write+0x7c4/0xc90 [ 233.690787][T10452] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.697116][T10452] ? do_syscall_64+0x100/0x230 [ 233.701871][T10452] ? do_syscall_64+0xb6/0x230 [ 233.706540][T10452] do_syscall_64+0xf3/0x230 [ 233.711031][T10452] ? clear_bhb_loop+0x35/0x90 [ 233.715705][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.721587][T10452] RIP: 0033:0x7f4ac0779e79 [ 233.725995][T10452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.745593][T10452] RSP: 002b:00007f4ac149f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.754003][T10452] RAX: ffffffffffffffda RBX: 00007f4ac0915f80 RCX: 00007f4ac0779e79 [ 233.761962][T10452] RDX: 0000000000004000 RSI: 00000000200082c0 RDI: 0000000000000003 [ 233.769926][T10452] RBP: 00007f4ac149f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.777886][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.785860][T10452] R13: 0000000000000000 R14: 00007f4ac0915f80 R15: 00007ffd0e0e6438 [ 233.793858][T10452] [ 233.829289][T10313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.842967][T10455] Bluetooth: hci3: unsupported parameter 64512 [ 233.844117][T10313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.849602][T10455] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 233.922788][T10418] hsr_slave_0: entered promiscuous mode [ 233.942578][T10418] hsr_slave_1: entered promiscuous mode [ 233.959819][T10418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.970760][T10418] Cannot create hsr debugfs directory [ 234.024850][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1517'. [ 234.034453][T10459] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1517'. [ 234.214308][ T5232] Bluetooth: hci6: command tx timeout [ 234.297102][T10418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.387292][T10418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.414450][T10471] netlink: 'syz.2.1521': attribute type 10 has an invalid length. [ 234.531321][T10418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.546075][ T5232] Bluetooth: hci2: command tx timeout [ 234.571466][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.599550][T10478] sctp: [Deprecated]: syz.0.1522 (pid 10478) Use of int in max_burst socket option deprecated. [ 234.599550][T10478] Use struct sctp_assoc_value instead [ 234.628662][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.693773][T10418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.846470][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.853733][ T7423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.863085][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 234.885992][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.893165][ T7423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.110781][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1528'. [ 235.121303][T10490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1528'. [ 235.145374][T10418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.182763][T10418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.214943][T10418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.267285][T10418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.447849][T10504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 235.526735][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.579802][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.628361][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.670975][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.678212][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.710039][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.717219][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.851923][T10525] netlink: 'syz.0.1535': attribute type 4 has an invalid length. [ 235.924911][T10525] netlink: 'syz.0.1535': attribute type 4 has an invalid length. [ 235.987762][T10313] veth0_vlan: entered promiscuous mode [ 236.009864][T10313] veth1_vlan: entered promiscuous mode [ 236.084604][T10313] veth0_macvtap: entered promiscuous mode [ 236.108314][T10313] veth1_macvtap: entered promiscuous mode [ 236.164504][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.176100][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.186946][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.197478][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.215414][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.232137][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.253461][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.283292][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.294289][ T5232] Bluetooth: hci6: command tx timeout [ 236.302577][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.327263][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.360617][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.384177][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.401942][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.424709][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.486988][T10313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.498565][T10313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.517598][T10313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.529676][T10313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.561038][T10418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.614358][ T5232] Bluetooth: hci2: command tx timeout [ 236.634786][T10551] sctp: [Deprecated]: syz.0.1542 (pid 10551) Use of int in max_burst socket option deprecated. [ 236.634786][T10551] Use struct sctp_assoc_value instead [ 236.766562][T10418] veth0_vlan: entered promiscuous mode [ 236.797965][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.817881][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.837978][T10418] veth1_vlan: entered promiscuous mode [ 236.882834][ T7423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.907634][ T7423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.945669][T10418] veth0_macvtap: entered promiscuous mode [ 236.963167][T10418] veth1_macvtap: entered promiscuous mode [ 237.021020][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.039784][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.051060][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.062239][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.074072][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.084864][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.096426][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.106929][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.118603][T10418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.148899][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.162469][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.173387][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.184890][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.194846][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.205965][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.221374][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.233697][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.252487][T10418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.306747][T10418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.316232][T10418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.325512][T10418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.339696][T10418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.593284][ T7424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.626422][ T7424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.672114][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.688517][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.819808][T10580] tipc: Started in network mode [ 237.825291][T10580] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 237.832869][T10580] tipc: Enabled bearer , priority 10 [ 237.940762][T10587] __nla_validate_parse: 4 callbacks suppressed [ 237.940784][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.961927][T10587] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1552'. [ 237.973041][T10587] vlan0: entered allmulticast mode [ 237.986719][T10587] veth0_vlan: entered allmulticast mode [ 238.118183][T10591] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 238.136255][T10591] ip6gretap0: entered promiscuous mode [ 238.160322][T10591] batman_adv: batadv0: Adding interface: macsec1 [ 238.176090][T10591] batman_adv: batadv0: The MTU of interface macsec1 is too small (1402) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.233011][T10591] batman_adv: batadv0: Interface activated: macsec1 [ 238.339288][T10603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1560'. [ 238.374599][ T5232] Bluetooth: hci6: command tx timeout [ 238.947197][ T5308] tipc: Node number set to 11578026 [ 239.037528][T10645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1572'. [ 239.141778][ T7423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.181519][ T7423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.250206][ T7423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.289722][ T7423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.391706][ T7423] bridge_slave_1: left allmulticast mode [ 240.398954][ T7423] bridge_slave_1: left promiscuous mode [ 240.404969][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.414552][ T7423] bridge_slave_0: left allmulticast mode [ 240.420211][ T7423] bridge_slave_0: left promiscuous mode [ 240.426465][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.454183][ T5232] Bluetooth: hci6: command tx timeout [ 240.750180][ T7423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.762897][ T7423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.807038][ T7423] bond0 (unregistering): Released all slaves [ 240.854427][T10651] dccp_v6_rcv: dropped packet with invalid checksum [ 241.177399][T10667] sctp: [Deprecated]: syz.1.1578 (pid 10667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.177399][T10667] Use struct sctp_sack_info instead [ 241.233185][T10670] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1581'. [ 241.313422][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1582'. [ 241.380399][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.390820][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.399157][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.408365][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.417825][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.429623][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.612588][T10673] lo speed is unknown, defaulting to 1000 [ 241.644344][T10685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1586'. [ 241.898177][ T7423] hsr_slave_0: left promiscuous mode [ 241.962400][ T7423] hsr_slave_1: left promiscuous mode [ 241.969380][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.990451][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.018071][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.030723][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.118895][ T7423] veth1_macvtap: left promiscuous mode [ 242.148927][ T7423] veth0_macvtap: left promiscuous mode [ 242.159490][ T7423] veth1_vlan: left promiscuous mode [ 242.169319][ T7423] veth0_vlan: left promiscuous mode [ 242.780329][ T7423] team0 (unregistering): Port device team_slave_1 removed [ 242.819186][ T7423] team0 (unregistering): Port device team_slave_0 removed [ 243.188181][T10704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1595'. [ 243.408767][T10727] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1600'. [ 243.446883][T10673] chnl_net:caif_netlink_parms(): no params data found [ 243.493809][ T5232] Bluetooth: hci2: command tx timeout [ 243.652729][T10733] lo speed is unknown, defaulting to 1000 [ 243.767299][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 244.045662][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.052885][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.071165][T10673] bridge_slave_0: entered allmulticast mode [ 244.095348][T10673] bridge_slave_0: entered promiscuous mode [ 244.132875][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.172250][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.180442][T10673] bridge_slave_1: entered allmulticast mode [ 244.196069][T10673] bridge_slave_1: entered promiscuous mode [ 244.297677][T10755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1609'. [ 244.316957][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.351848][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.473359][T10673] team0: Port device team_slave_0 added [ 244.494963][T10673] team0: Port device team_slave_1 added [ 244.614237][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.629240][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 244.642397][T10764] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 244.660965][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.684982][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.743692][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.768988][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.777217][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.803982][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.869540][T10768] netlink: 'syz.1.1613': attribute type 6 has an invalid length. [ 245.002915][T10673] hsr_slave_0: entered promiscuous mode [ 245.073296][T10673] hsr_slave_1: entered promiscuous mode [ 245.131263][T10673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.155860][T10673] Cannot create hsr debugfs directory [ 245.184832][T10776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 245.230163][T10779] pimreg: entered allmulticast mode [ 245.313773][T10768] lo speed is unknown, defaulting to 1000 [ 245.583923][ T5232] Bluetooth: hci2: command tx timeout [ 245.967264][T10784] lo speed is unknown, defaulting to 1000 [ 246.014842][T10795] bond0: entered promiscuous mode [ 246.020010][T10795] bond_slave_0: entered promiscuous mode [ 246.044016][T10795] bond_slave_1: entered promiscuous mode [ 246.106478][T10797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1621'. [ 246.501110][T10673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.591969][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1628'. [ 246.602318][T10818] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1628'. [ 246.611961][T10818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1628'. [ 246.651438][T10673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.765835][T10673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.790114][T10673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.148601][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.192833][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.281469][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.288777][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.342941][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.350180][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.664338][ T5232] Bluetooth: hci2: command tx timeout [ 247.914978][T10854] tap0: tun_chr_ioctl cmd 1074812118 [ 247.996125][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.385259][T10673] veth0_vlan: entered promiscuous mode [ 248.409903][T10673] veth1_vlan: entered promiscuous mode [ 248.476254][T10673] veth0_macvtap: entered promiscuous mode [ 248.491146][T10673] veth1_macvtap: entered promiscuous mode [ 248.519508][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.534275][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.549144][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.562243][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.584287][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.599808][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.610613][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.622111][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.634486][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.672884][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.684848][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.700786][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.713192][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.726847][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.737627][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.750775][T10673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.761256][T10673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.772880][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.787904][T10673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.814251][T10673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.825343][T10673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.840927][T10673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.975930][T10895] __nla_validate_parse: 10 callbacks suppressed [ 248.975950][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 249.019932][T10895] erspan0: entered promiscuous mode [ 249.035386][T10895] macvtap1: entered promiscuous mode [ 249.041423][T10895] macvtap1: entered allmulticast mode [ 249.054240][T10895] erspan0: entered allmulticast mode [ 249.065618][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 249.180380][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.191443][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.241078][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.252218][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.277016][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.861304][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 251.542616][ T7423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.801967][ T7423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.851848][ T7423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.953256][ T7423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.033260][ T7423] bridge_slave_1: left allmulticast mode [ 253.040431][ T7423] bridge_slave_1: left promiscuous mode [ 253.047477][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.057190][ T7423] bridge_slave_0: left allmulticast mode [ 253.062843][ T7423] bridge_slave_0: left promiscuous mode [ 253.068908][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.723406][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1692'. [ 253.723985][ T7423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.746290][ T7423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.768267][ T7423] bond0 (unregistering): Released all slaves [ 253.888723][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.903002][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.911967][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.924314][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.934923][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 253.942692][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.015671][T10985] lo speed is unknown, defaulting to 1000 [ 254.483009][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 254.566894][ T7423] hsr_slave_0: left promiscuous mode [ 254.573113][ T7423] hsr_slave_1: left promiscuous mode [ 254.582772][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.590284][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.605628][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.616443][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.641812][ T7423] veth1_macvtap: left promiscuous mode [ 254.647639][ T7423] veth0_macvtap: left promiscuous mode [ 254.653243][ T7423] veth1_vlan: left promiscuous mode [ 254.658714][ T7423] veth0_vlan: left promiscuous mode [ 255.238492][ T7423] team0 (unregistering): Port device team_slave_1 removed [ 255.288939][ T7423] team0 (unregistering): Port device team_slave_0 removed [ 255.842727][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.851885][T11019] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 255.926404][T10985] chnl_net:caif_netlink_parms(): no params data found [ 255.986209][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.987201][ T5228] Bluetooth: hci2: command tx timeout [ 255.992522][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.369663][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.392780][T10985] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.414599][T10985] bridge_slave_0: entered allmulticast mode [ 256.421906][T10985] bridge_slave_0: entered promiscuous mode [ 256.453391][T10985] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.472938][T10985] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.482723][T10985] bridge_slave_1: entered allmulticast mode [ 256.540121][T10985] bridge_slave_1: entered promiscuous mode [ 256.672744][T10985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.703155][T10985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.029340][T11064] ebtables: ebtables: counters copy to user failed while replacing table [ 257.144347][T10985] team0: Port device team_slave_0 added [ 257.164535][T10985] team0: Port device team_slave_1 added [ 257.226415][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'. [ 257.301118][T10985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.324287][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.386709][T10985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.409731][T10985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.421462][T10985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.456976][T10985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.588695][T10985] hsr_slave_0: entered promiscuous mode [ 257.629772][T10985] hsr_slave_1: entered promiscuous mode [ 257.654765][T10985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.662362][T10985] Cannot create hsr debugfs directory [ 258.053927][ T5228] Bluetooth: hci2: command tx timeout [ 258.473244][T10985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.493157][T10985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.521999][T10985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.542547][T10985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.586873][T11142] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.650585][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 258.772395][T10985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.819546][T10985] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.841338][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.848543][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.877398][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.884616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.453195][T10985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.163702][ T5228] Bluetooth: hci2: command tx timeout [ 260.721485][T10985] veth0_vlan: entered promiscuous mode [ 260.752383][T10985] veth1_vlan: entered promiscuous mode [ 260.859307][T10985] veth0_macvtap: entered promiscuous mode [ 260.896820][T10985] veth1_macvtap: entered promiscuous mode [ 260.953526][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.975508][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.000160][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.014276][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.040381][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.052170][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.070192][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.105774][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.129999][T10985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.175643][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.196126][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.211238][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.243741][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.261360][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.279384][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.289365][T10985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.300816][T10985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.312372][T10985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.345633][T10985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.376188][T10985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.413771][T10985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.422503][T10985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.586401][ T7424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.611054][ T7424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.702301][ T7424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.716122][ T7424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.530134][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.948983][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.159232][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.426024][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.657305][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.294693][ T52] bridge_slave_1: left allmulticast mode [ 266.300380][ T52] bridge_slave_1: left promiscuous mode [ 266.374724][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.444531][ T52] bridge_slave_0: left allmulticast mode [ 266.450217][ T52] bridge_slave_0: left promiscuous mode [ 266.513846][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.739675][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.805760][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.895493][ T52] bond0 (unregistering): Released all slaves [ 270.114081][ T52] hsr_slave_0: left promiscuous mode [ 270.154542][ T52] hsr_slave_1: left promiscuous mode [ 270.174241][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.181672][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.254643][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.262086][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.455656][ T52] veth1_macvtap: left promiscuous mode [ 270.461244][ T52] veth0_macvtap: left promiscuous mode [ 270.511288][ T52] veth1_vlan: left promiscuous mode [ 270.525083][ T52] veth0_vlan: left promiscuous mode [ 272.316570][ T52] team0 (unregistering): Port device team_slave_1 removed [ 272.443583][ T52] team0 (unregistering): Port device team_slave_0 removed [ 275.427217][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.434378][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.437146][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.455591][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.456275][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.468801][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.478274][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.478334][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.485655][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.514708][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.522510][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.529951][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.547059][ T5234] batman_adv: batadv0: Interface deactivated: macvlan5 [ 275.564993][ T5234] syz_tun (unregistering): left promiscuous mode [ 275.591977][ T5234] batman_adv: batadv0: Removing interface: macvlan5 [ 275.644570][T11337] lo speed is unknown, defaulting to 1000 [ 275.935269][T11338] lo speed is unknown, defaulting to 1000 [ 276.300755][T11337] chnl_net:caif_netlink_parms(): no params data found [ 276.523208][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.541324][T11337] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.567009][T11337] bridge_slave_0: entered allmulticast mode [ 276.586985][T11337] bridge_slave_0: entered promiscuous mode [ 276.610500][T11337] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.633783][T11337] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.643891][T11337] bridge_slave_1: entered allmulticast mode [ 276.660979][T11337] bridge_slave_1: entered promiscuous mode [ 276.738287][T11338] chnl_net:caif_netlink_parms(): no params data found [ 276.777809][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'. [ 276.826020][T11337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.879843][T11337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.042515][T11337] team0: Port device team_slave_0 added [ 277.061095][T11337] team0: Port device team_slave_1 added [ 277.234171][T11337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.241159][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.303914][T11337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.333193][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.364035][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.371322][T11338] bridge_slave_0: entered allmulticast mode [ 277.411966][T11338] bridge_slave_0: entered promiscuous mode [ 277.445293][T11337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.463774][T11337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.522846][T11337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.574630][ T5244] Bluetooth: hci2: command tx timeout [ 277.581568][ T5244] Bluetooth: hci3: command tx timeout [ 277.624979][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.650942][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.663994][T11338] bridge_slave_1: entered allmulticast mode [ 277.671434][T11338] bridge_slave_1: entered promiscuous mode [ 277.835718][T11337] hsr_slave_0: entered promiscuous mode [ 277.861332][T11337] hsr_slave_1: entered promiscuous mode [ 277.867740][T11337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.885123][T11337] Cannot create hsr debugfs directory [ 277.901932][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.915605][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.100769][T11338] team0: Port device team_slave_0 added [ 278.126227][T11338] team0: Port device team_slave_1 added [ 278.296379][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.315671][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.359495][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.373398][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.394453][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.439526][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.606159][T11338] hsr_slave_0: entered promiscuous mode [ 278.628567][T11338] hsr_slave_1: entered promiscuous mode [ 278.647862][T11338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.683709][T11338] Cannot create hsr debugfs directory [ 279.367070][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 279.574408][T11338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.587860][T11338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.653993][ T5244] Bluetooth: hci2: command tx timeout [ 279.654002][ T5232] Bluetooth: hci3: command tx timeout [ 279.760935][T11338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.795163][T11338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.974705][T11338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.998873][T11338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.102014][T11338] team0: Port device netdevsim0 removed [ 280.118732][T11338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.139543][T11338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.383859][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 280.414757][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'. [ 280.446718][T11338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.466269][T11338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.564034][T11338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.614303][T11338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.727734][T11337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.770089][T11337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.796802][T11337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.817171][T11337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.090079][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.147698][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.207476][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.214668][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.237597][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.244850][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.355490][T11337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.420524][T11337] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.493161][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.500363][ T7424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.548044][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.555230][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.734301][ T5232] Bluetooth: hci3: command tx timeout [ 281.740828][ T5244] Bluetooth: hci2: command tx timeout [ 281.918997][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.039688][T11338] veth0_vlan: entered promiscuous mode [ 282.072871][T11338] veth1_vlan: entered promiscuous mode [ 282.100364][T11337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.158185][T11338] veth0_macvtap: entered promiscuous mode [ 282.188227][T11338] veth1_macvtap: entered promiscuous mode [ 282.228454][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.239129][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.250125][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.261464][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.271769][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.285702][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.296579][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.307444][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.320270][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.337460][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.363699][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.396595][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.413689][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.423540][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.439141][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.463807][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.483746][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.501833][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.563517][T11338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.580747][T11338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.592012][T11338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.604052][T11338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.705830][T11337] veth0_vlan: entered promiscuous mode [ 282.795789][T11337] veth1_vlan: entered promiscuous mode [ 282.883780][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.897320][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.003357][T11649] batman_adv: batadv0: Interface deactivated: macvlan5 [ 283.011881][T11649] syz_tun (unregistering): left promiscuous mode [ 283.049668][T11649] batman_adv: batadv0: Removing interface: macvlan5 [ 283.114766][T11655] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1960'. [ 283.126970][T11655] infiniband syz0: set active [ 283.132059][T11655] infiniband syz0: set active [ 283.137708][T11655] infiniband syz0: set active [ 283.142498][T11655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.163572][ T7426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.181826][ T7426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.203082][ T58] lo speed is unknown, defaulting to 1000 [ 283.210836][T11337] veth0_macvtap: entered promiscuous mode [ 283.220612][ T5277] lo speed is unknown, defaulting to 1000 [ 283.233297][ T46] lo speed is unknown, defaulting to 1000 [ 283.241999][T11337] veth1_macvtap: entered promiscuous mode [ 283.250011][T11651] lo speed is unknown, defaulting to 1000 [ 283.272225][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.313961][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.337256][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.360073][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.384358][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.406037][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.432179][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.456121][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.475348][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.492861][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.512199][T11337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.524505][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.535631][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.546043][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.558826][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.569248][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.580110][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.590173][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.600853][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.610980][T11337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.622397][T11337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.633544][T11337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.644345][ T58] lo speed is unknown, defaulting to 1000 [ 283.738627][T11337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.748842][T11337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.758820][T11337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.768420][T11337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.814406][ T5232] Bluetooth: hci3: command tx timeout [ 283.819928][ T5244] Bluetooth: hci2: command tx timeout [ 284.129212][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.168535][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.335045][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.373842][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.822951][T11702] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1977'. [ 285.149172][T11705] pim6reg1: entered promiscuous mode [ 285.162608][T11705] pim6reg1: entered allmulticast mode [ 285.240659][T11714] netlink: 'syz.2.1982': attribute type 9 has an invalid length. [ 285.259373][T11714] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1982'. [ 285.436724][T11715] netlink: 'syz.2.1982': attribute type 9 has an invalid length. [ 285.492315][T11715] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1982'. [ 285.765519][T11735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1990'. [ 285.917116][ T7423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.883113][ T7423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.956086][ T7423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.020588][ T7423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.120511][ T7423] bridge_slave_1: left allmulticast mode [ 287.126455][ T7423] bridge_slave_1: left promiscuous mode [ 287.132142][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.141978][ T7423] bridge_slave_0: left allmulticast mode [ 287.148034][ T7423] bridge_slave_0: left promiscuous mode [ 287.153814][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.481590][ T7423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.492726][ T7423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.503750][ T7423] bond0 (unregistering): Released all slaves [ 288.129889][ T7423] hsr_slave_0: left promiscuous mode [ 288.172553][ T7423] hsr_slave_1: left promiscuous mode [ 288.188982][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.215031][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.272025][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.292674][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.391061][ T7423] veth1_macvtap: left promiscuous mode [ 288.403182][ T7423] veth0_macvtap: left promiscuous mode [ 288.416606][ T7423] veth1_vlan: left promiscuous mode [ 288.432967][ T7423] veth0_vlan: left promiscuous mode [ 288.460777][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.470764][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.481692][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.491411][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.499842][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.507579][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.309090][ T7423] team0 (unregistering): Port device team_slave_1 removed [ 289.401150][ T7423] team0 (unregistering): Port device team_slave_0 removed [ 290.418689][T11767] lo speed is unknown, defaulting to 1000 [ 290.546019][ T5244] Bluetooth: hci2: command tx timeout [ 291.468234][T11767] chnl_net:caif_netlink_parms(): no params data found [ 291.775232][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.793970][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.801265][T11767] bridge_slave_0: entered allmulticast mode [ 291.845222][T11767] bridge_slave_0: entered promiscuous mode [ 291.865272][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.872432][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.913879][T11767] bridge_slave_1: entered allmulticast mode [ 291.921255][T11767] bridge_slave_1: entered promiscuous mode [ 292.051932][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.104435][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.217075][T11767] team0: Port device team_slave_0 added [ 292.236207][T11767] team0: Port device team_slave_1 added [ 292.387801][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.407175][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.463678][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.493730][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.508550][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.583698][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.614253][ T5244] Bluetooth: hci2: command tx timeout [ 292.709839][T11868] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2048'. [ 292.726467][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 292.865171][T11767] hsr_slave_0: entered promiscuous mode [ 292.887114][T11767] hsr_slave_1: entered promiscuous mode [ 292.926689][T11767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.939068][T11767] Cannot create hsr debugfs directory [ 292.951101][T11871] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.2046'. [ 293.646824][T11896] netlink: 'syz.3.2059': attribute type 11 has an invalid length. [ 293.685267][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'. [ 294.233366][T11933] netlink: 'syz.3.2075': attribute type 6 has an invalid length. [ 294.440056][T11767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.477013][T11767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.505626][T11767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.524945][T11767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.694144][ T5244] Bluetooth: hci2: command tx timeout [ 294.741586][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.829974][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.865697][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.872866][ T5964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.924610][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.931794][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.002025][T11767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 295.031473][T11767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.373359][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.923661][T11767] veth0_vlan: entered promiscuous mode [ 295.947853][T11767] veth1_vlan: entered promiscuous mode [ 296.013335][T11767] veth0_macvtap: entered promiscuous mode [ 296.047326][T11767] veth1_macvtap: entered promiscuous mode [ 296.108205][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.136413][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.150962][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.169232][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.180662][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.191740][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.202040][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.214585][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.224957][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.238555][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.251968][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.271745][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.295889][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.313086][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.337456][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.360160][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.378044][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.399915][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.420747][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.443702][T11767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.475092][T11767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.495660][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.571025][T11767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.583305][T11767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.592941][T11767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.608032][T11767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.774774][ T5244] Bluetooth: hci2: command tx timeout [ 296.778729][ T7423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.821255][ T7423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.832376][ T7426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.858382][ T7426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.468468][T12128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2159'. [ 298.704380][T12142] sctp: [Deprecated]: syz.1.2164 (pid 12142) Use of int in maxseg socket option. [ 298.704380][T12142] Use struct sctp_assoc_value instead [ 299.449175][ T7426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.256165][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.273818][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.283074][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.294703][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.315883][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 300.333379][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.341733][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.384116][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.393197][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.412238][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.421140][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 300.428929][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.450514][T12194] lo speed is unknown, defaulting to 1000 [ 300.676108][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 300.730722][ T7426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.781022][T12197] lo speed is unknown, defaulting to 1000 [ 300.875345][ T7426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.969386][ T7426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.323443][ T7426] bridge_slave_1: left allmulticast mode [ 301.338051][ T7426] bridge_slave_1: left promiscuous mode [ 301.344105][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.363140][ T7426] bridge_slave_0: left allmulticast mode [ 301.369044][ T7426] bridge_slave_0: left promiscuous mode [ 301.376056][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.853014][ T7426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.869832][ T7426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.880864][ T7426] bond0 (unregistering): Released all slaves [ 301.997606][T12194] chnl_net:caif_netlink_parms(): no params data found [ 302.232445][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 302.245453][T12256] tipc: Started in network mode [ 302.256155][T12256] tipc: Node identity cpuacct.n, cluster identity 8 [ 302.378477][ T5232] Bluetooth: hci2: command tx timeout [ 302.454010][ T5232] Bluetooth: hci6: command tx timeout [ 302.723736][ T7426] hsr_slave_0: left promiscuous mode [ 302.736753][ T7426] hsr_slave_1: left promiscuous mode [ 302.753996][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.761556][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.770508][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.798463][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.832470][ T7426] veth1_macvtap: left promiscuous mode [ 302.838133][ T7426] veth0_macvtap: left promiscuous mode [ 302.843826][ T7426] veth1_vlan: left promiscuous mode [ 302.849227][ T7426] veth0_vlan: left promiscuous mode [ 303.463670][ T7426] team0 (unregistering): Port device team_slave_1 removed [ 303.522791][ T7426] team0 (unregistering): Port device team_slave_0 removed [ 303.911928][T12197] chnl_net:caif_netlink_parms(): no params data found [ 303.947230][T12286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2223'. [ 303.974268][T12291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2225'. [ 303.984583][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2225'. [ 304.063415][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.077242][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.085030][T12194] bridge_slave_0: entered allmulticast mode [ 304.096969][T12194] bridge_slave_0: entered promiscuous mode [ 304.177061][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.204556][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.214990][T12194] bridge_slave_1: entered allmulticast mode [ 304.234857][T12194] bridge_slave_1: entered promiscuous mode [ 304.453894][ T5232] Bluetooth: hci2: command tx timeout [ 304.480821][T12194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.535411][ T5232] Bluetooth: hci6: command tx timeout [ 304.539834][T12194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.640043][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.651348][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.661553][T12197] bridge_slave_0: entered allmulticast mode [ 304.670638][T12197] bridge_slave_0: entered promiscuous mode [ 304.687268][T12194] team0: Port device team_slave_0 added [ 304.697690][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.710479][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.718990][T12197] bridge_slave_1: entered allmulticast mode [ 304.726714][T12197] bridge_slave_1: entered promiscuous mode [ 304.755480][T12194] team0: Port device team_slave_1 added [ 304.862608][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.899194][T12194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.908381][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.934921][T12194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.958273][T12194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.965960][T12194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.992104][T12194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.010686][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.110314][T12197] team0: Port device team_slave_0 added [ 305.124643][T12194] hsr_slave_0: entered promiscuous mode [ 305.131106][T12194] hsr_slave_1: entered promiscuous mode [ 305.141160][T12194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.148784][T12194] Cannot create hsr debugfs directory [ 305.159785][T12197] team0: Port device team_slave_1 added [ 305.213049][T12197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.222739][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.248973][T12197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.376736][T12197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.393974][T12197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.432314][T12197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.600068][T12197] hsr_slave_0: entered promiscuous mode [ 305.610855][T12197] hsr_slave_1: entered promiscuous mode [ 305.623459][T12197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.632569][T12197] Cannot create hsr debugfs directory [ 306.422586][T12197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.493422][T12380] Bluetooth: MGMT ver 1.23 [ 306.498663][T12380] Bluetooth: hci3: unsupported parameter 64512 [ 306.507322][T12380] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 306.534530][ T5232] Bluetooth: hci2: command tx timeout [ 306.572924][T12197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.614002][ T5232] Bluetooth: hci6: command tx timeout [ 306.729390][T12197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.837795][T12197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.100254][T12197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.150318][T12197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.184330][T12197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.235693][T12197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.310585][T12194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.347508][T12194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.399158][T12194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.474407][T12194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.605239][T12197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.670968][T12197] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.704519][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.711684][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.762568][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.769790][ T7426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.891508][T12194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.959718][T12194] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.014851][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.022185][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.062746][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.069981][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.479123][T12197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.614067][ T5232] Bluetooth: hci2: command tx timeout [ 308.677798][T12197] veth0_vlan: entered promiscuous mode [ 308.694985][ T5232] Bluetooth: hci6: command tx timeout [ 308.717472][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.736623][T12197] veth1_vlan: entered promiscuous mode [ 308.880442][T12197] veth0_macvtap: entered promiscuous mode [ 308.929062][T12197] veth1_macvtap: entered promiscuous mode [ 309.000269][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.023667][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.033532][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.054112][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.074213][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.094668][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.117892][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.153702][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.170476][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.186824][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.205124][T12197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.241687][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.269070][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.279329][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.308044][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.336313][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.356627][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.377855][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.391403][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.401274][T12197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.411969][T12197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.436901][T12197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.475072][T12197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.495620][T12197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.516985][T12197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.538828][T12197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.771619][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.782834][T12194] veth0_vlan: entered promiscuous mode [ 309.810719][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.865426][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.874664][T12194] veth1_vlan: entered promiscuous mode [ 309.890237][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.994785][T12194] veth0_macvtap: entered promiscuous mode [ 310.041858][T12194] veth1_macvtap: entered promiscuous mode [ 310.231368][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.263855][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.283711][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.304887][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.327314][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.348807][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.389286][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.424697][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.441173][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.455580][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.471252][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.496577][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.510048][T12194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.532789][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.562163][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.576049][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.603336][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.623106][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.634046][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.649542][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.660509][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.670661][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.681240][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.691096][T12194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.705603][T12194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.724039][T12194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.762620][T12194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.782696][T12194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.806283][T12194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.817682][T12194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.994545][ T7426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.018448][ T7426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.039534][T12561] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f8: 0000 [#1] PREEMPT SMP KASAN PTI [ 311.052158][T12561] KASAN: null-ptr-deref in range [0x00000000000007c0-0x00000000000007c7] [ 311.060571][T12561] CPU: 0 UID: 0 PID: 12561 Comm: syz.0.2340 Not tainted 6.11.0-rc4-syzkaller-00567-g18aaa82bd36a #0 [ 311.071324][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 311.081371][T12561] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 311.087620][T12561] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 311.107228][T12561] RSP: 0018:ffffc90002d77230 EFLAGS: 00010202 [ 311.113290][T12561] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 311.121256][T12561] RDX: ffffc90009a61000 RSI: 0000000000000c92 RDI: 00000000000007c0 [ 311.129305][T12561] RBP: ffffc90002d77470 R08: ffffffff89cb108d R09: 1ffff1100cb54015 [ 311.137268][T12561] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc90002d773f0 [ 311.145232][T12561] R13: dffffc0000000000 R14: ffffc90002d77740 R15: 0000000000000000 [ 311.153197][T12561] FS: 00007f17fa4db6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 311.162202][T12561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.168786][T12561] CR2: 0000000000000000 CR3: 000000002df46000 CR4: 00000000003506f0 [ 311.176760][T12561] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.184728][T12561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.192696][T12561] Call Trace: [ 311.195971][T12561] [ 311.198894][T12561] ? __die_body+0x88/0xe0 [ 311.203223][T12561] ? die_addr+0x108/0x140 [ 311.207554][T12561] ? exc_general_protection+0x3dd/0x5d0 [ 311.213116][T12561] ? netdev_get_by_index+0x7a/0xb0 [ 311.218242][T12561] ? asm_exc_general_protection+0x26/0x30 [ 311.223965][T12561] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 311.230024][T12561] ? ethnl_act_cable_test_tdr+0x5ad/0x10d0 [ 311.235911][T12561] ? phy_start_cable_test_tdr+0x3a/0x5c0 [ 311.241538][T12561] ? ethnl_ops_begin+0x1ae/0x1f0 [ 311.246473][T12561] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 311.252556][T12561] ethnl_act_cable_test_tdr+0x607/0x10d0 [ 311.258211][T12561] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 311.264281][T12561] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 311.270521][T12561] ? __nla_parse+0x40/0x60 [ 311.274934][T12561] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 311.281261][T12561] genl_rcv_msg+0xb14/0xec0 [ 311.285763][T12561] ? mark_lock+0x9a/0x350 [ 311.290092][T12561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.295133][T12561] ? __pfx_lock_acquire+0x10/0x10 [ 311.300161][T12561] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 311.306222][T12561] ? __pfx___might_resched+0x10/0x10 [ 311.311520][T12561] netlink_rcv_skb+0x1e3/0x430 [ 311.316301][T12561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.321337][T12561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.326630][T12561] ? __netlink_deliver_tap+0x77e/0x7c0 [ 311.332100][T12561] genl_rcv+0x28/0x40 [ 311.336084][T12561] netlink_unicast+0x7f6/0x990 [ 311.340852][T12561] ? __pfx_netlink_unicast+0x10/0x10 [ 311.346131][T12561] ? __virt_addr_valid+0x183/0x530 [ 311.351237][T12561] ? __check_object_size+0x49c/0x900 [ 311.356514][T12561] ? bpf_lsm_netlink_send+0x9/0x10 [ 311.361622][T12561] netlink_sendmsg+0x8e4/0xcb0 [ 311.366382][T12561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.371661][T12561] ? __import_iovec+0x536/0x820 [ 311.376504][T12561] ? aa_sock_msg_perm+0x91/0x160 [ 311.381433][T12561] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 311.386709][T12561] ? security_socket_sendmsg+0x87/0xb0 [ 311.392161][T12561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.397433][T12561] __sock_sendmsg+0x221/0x270 [ 311.402098][T12561] ____sys_sendmsg+0x525/0x7d0 [ 311.406857][T12561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.412144][T12561] __sys_sendmsg+0x2b0/0x3a0 [ 311.416830][T12561] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.421953][T12561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.428271][T12561] ? do_syscall_64+0x100/0x230 [ 311.433025][T12561] ? do_syscall_64+0xb6/0x230 [ 311.437694][T12561] do_syscall_64+0xf3/0x230 [ 311.442184][T12561] ? clear_bhb_loop+0x35/0x90 [ 311.446855][T12561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.452737][T12561] RIP: 0033:0x7f17f9779e79 [ 311.457139][T12561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.476731][T12561] RSP: 002b:00007f17fa4db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.485132][T12561] RAX: ffffffffffffffda RBX: 00007f17f9915f80 RCX: 00007f17f9779e79 [ 311.493089][T12561] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 311.501048][T12561] RBP: 00007f17f97e793e R08: 0000000000000000 R09: 0000000000000000 [ 311.509008][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.516966][T12561] R13: 0000000000000000 R14: 00007f17f9915f80 R15: 00007ffd4bc1f0c8 [ 311.524934][T12561] [ 311.527939][T12561] Modules linked in: [ 311.552486][T12561] ---[ end trace 0000000000000000 ]--- [ 311.558118][T12561] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 311.564744][T12561] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 311.588039][T12561] RSP: 0018:ffffc90002d77230 EFLAGS: 00010202 [ 311.594168][T12561] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 311.602159][T12561] RDX: ffffc90009a61000 RSI: 0000000000000c92 RDI: 00000000000007c0 [ 311.610741][T12561] RBP: ffffc90002d77470 R08: ffffffff89cb108d R09: 1ffff1100cb54015 [ 311.619331][T12561] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc90002d773f0 [ 311.627361][T12561] R13: dffffc0000000000 R14: ffffc90002d77740 R15: 0000000000000000 [ 311.635409][T12561] FS: 00007f17fa4db6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 311.648703][T12561] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.657152][T12561] CR2: 000000110c37a542 CR3: 000000002df46000 CR4: 00000000003506f0 [ 311.665184][T12561] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.673160][T12561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.681252][T12561] Kernel panic - not syncing: Fatal exception [ 311.688745][T12561] Kernel Offset: disabled [ 311.693060][T12561] Rebooting in 86400 seconds..