last executing test programs: 1m22.486140046s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 1m20.919629627s ago: executing program 1 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) 1m6.783351559s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 1m5.701146854s ago: executing program 1 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) 50.37077918s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 47.441028576s ago: executing program 1 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) 34.614809673s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 32.687030325s ago: executing program 1 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) 19.798906996s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 16.745063715s ago: executing program 1 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) 3.378919586s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) 3.378320413s ago: executing program 4 (id=3772): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebca17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 2.285828468s ago: executing program 4 (id=3775): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x3, @private0, 0xffff}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x64) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x600) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x800, 0x3e) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5d}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="800000007063490011000200300000300000000008008c00040000000800010070636900180446e444302e300000000000000000b5db7eda6fb0c1efebd82f71371f6daaef431e6754a4e6c42b45bf3e9a48cd79811047c41b863c33a12d8699f14697dcf25df01b2dd4c2d415941798ca1273395278073b916d25ee54a46cdba29c84ee056e326f101f36bb3aac43e283bd020e03a53d53e805cfde55327658f62b52b4542e7041c21ab08f804a3a9df1ac015085f9c0d2b16baab6f577d42e6643"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 2.006123046s ago: executing program 2 (id=3777): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x40}}, 0x0) 1.980920624s ago: executing program 4 (id=3778): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000340)=@ethernet={0x0, @random}, &(0x7f0000000180)=0x80, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) 1.919685985s ago: executing program 3 (id=3779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}}, 0x0) 1.887906444s ago: executing program 2 (id=3780): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x4e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r2, 0x3, 0x0) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0x0) 1.825944995s ago: executing program 3 (id=3781): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061105a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.804103495s ago: executing program 4 (id=3782): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000480)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x28}, {&(0x7f0000000fc0)=""/4096, 0x44}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x2, 0x9}, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0), 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x90) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.768471715s ago: executing program 2 (id=3783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd80000000000000000400000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.741774166s ago: executing program 3 (id=3784): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) 1.700896913s ago: executing program 2 (id=3785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = accept4(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000340)="207bc9875a5ce52a", 0x8}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x19, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000008b0aae2ea90799c000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&'], 0x54}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 1.663029877s ago: executing program 1 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f}, 0x48) 518.581938ms ago: executing program 2 (id=3786): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 518.448137ms ago: executing program 3 (id=3787): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 518.251853ms ago: executing program 4 (id=3788): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, 0x0, 0x0) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000180), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7ff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x8100000018000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000088dbb5fb0000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpeername(0xffffffffffffffff, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x80) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 369.819303ms ago: executing program 2 (id=3789): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x3, @private0, 0xffff}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x64) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x600) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x800, 0x3e) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5d}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000", @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="800000007063490011000200300000300000000008008c00040000000800010070636900180446e444302e300000000000000000b5db7eda6fb0c1efebd82f71371f6daaef431e6754a4e6c42b45bf3e9a48cd79811047c41b863c33a12d8699f14697dcf25df01b2dd4c2d415941798ca1273395278073b916d25ee54a46cdba29c84ee056e326f101f36bb3aac43e283bd020e03a53d53e805cfde55327658f62b52b4542e7041c21ab08f804a3a9df1ac015085f9c0d2b16baab6f577d42e6643"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 328.198733ms ago: executing program 3 (id=3790): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x40}}, 0x0) 71.790384ms ago: executing program 3 (id=3791): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2b, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x7, 0x0, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0xcb, 0x3, 0x0, [{@empty}, {@empty}, {@loopback}, {@empty}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500020000008c879ebf6463558ab37a2b695d3de0f0ea40e4d12bed52146767c1c8e27fb75584ba43517aec67cd34b5162ec309745a6976b938b93791f8a39b8372837abce2237d6f7de038133a8078cdb7a8604cf2098d4d3039b88a8145292afc9cfedcd7f342137217b2000000008a35927dabe2fb08905ffca585e46daa7c327a783da9610b8d4d5b665442899d490114ea0abc0148c0c791f9eaa9dbcb93eb0cbc7ba19739"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000800)=ANY=[@ANYBLOB="b00000000802110000010802118000000802110031fa869f7ff9cbdb0000b10dad06bc06379fcb23582b29edad48d8fd56b32f1df81dd3de4f16704c028ec778802ffd5b512c17330326b17a190050c66ae0fadcfa6f76b540ddb2739bd28e87a4abfe28b7bea1e4aaf3ac1dac2a6e76dab4c2ef30b7534dde1ddddedaae0d594519b05802cf6922737e981193b7dbedef118009df2c41d1e3cf8de654b1580b3b3008a451df484cb6289abd834a439ece113b96ca4dc322f36f77637f507a7dbf68b5cb2542d27204c63220bb14027c7245dceca15744f9c73667a58b240000ee15c565c1381ed713d16cae2c51aa"], 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000040) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000180)={&(0x7f00000016c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x30064845) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="ba", 0x1}], 0x1}}], 0x1, 0x41) gettid() r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r10, 0x1}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): ould solve the problem. [ 221.959890][T11964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.039929][T11964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.077683][T11964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.127054][T11964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.144684][T12020] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.152457][T12020] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.159821][T12020] bridge_slave_0: entered allmulticast mode [ 222.171035][T12020] bridge_slave_0: entered promiscuous mode [ 222.225790][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 222.266789][T12020] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.274561][T12020] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.291019][T12020] bridge_slave_1: entered allmulticast mode [ 222.310154][T12020] bridge_slave_1: entered promiscuous mode [ 222.378242][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2698'. [ 222.499723][T12020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.696348][ T1101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.737722][T11964] hsr_slave_0: entered promiscuous mode [ 222.746995][T11964] hsr_slave_1: entered promiscuous mode [ 222.763528][T11964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.777692][T11964] Cannot create hsr debugfs directory [ 222.788035][T12020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.886224][ T1101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.021709][T12199] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 223.121835][ T1101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.229144][T12020] team0: Port device team_slave_0 added [ 223.241594][T12020] team0: Port device team_slave_1 added [ 223.275440][ T1101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.414115][ T5106] Bluetooth: hci2: command tx timeout [ 223.469967][T12020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.511285][T12020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.562629][T12020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.585763][T12020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.593096][T12020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.628662][T12020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.641296][T12235] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 223.735269][ T5106] Bluetooth: hci0: command tx timeout [ 223.856492][T12252] Bluetooth: MGMT ver 1.22 [ 223.880114][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.888359][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.907018][T12245] bridge0: left allmulticast mode [ 223.935453][T12020] hsr_slave_0: entered promiscuous mode [ 223.952355][T12020] hsr_slave_1: entered promiscuous mode [ 223.971407][T12020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.990954][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2740'. [ 224.000230][T12020] Cannot create hsr debugfs directory [ 224.164690][ T1101] bridge_slave_1: left allmulticast mode [ 224.170376][ T1101] bridge_slave_1: left promiscuous mode [ 224.184878][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.214083][ T1101] bridge_slave_0: left allmulticast mode [ 224.220681][ T1101] bridge_slave_0: left promiscuous mode [ 224.227193][T12268] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 224.237267][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.508843][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2753'. [ 224.718655][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.730475][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.740849][ T1101] bond0 (unregistering): Released all slaves [ 224.778210][T12288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2754'. [ 224.995984][T12298] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 225.342715][T12316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2768'. [ 225.493390][ T5106] Bluetooth: hci2: command tx timeout [ 225.596763][T12326] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 225.768043][T12331] netlink: 'syz.4.2776': attribute type 3 has an invalid length. [ 225.793666][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2777'. [ 225.820218][T11964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.859248][T11964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.994407][T11964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.075314][T11964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.217342][ T1101] hsr_slave_0: left promiscuous mode [ 226.231597][ T1101] hsr_slave_1: left promiscuous mode [ 226.241837][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.259685][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.270771][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.286187][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.339192][ T1101] veth1_macvtap: left promiscuous mode [ 226.351486][ T1101] veth0_macvtap: left promiscuous mode [ 226.362209][ T1101] veth1_vlan: left promiscuous mode [ 226.372658][ T1101] veth0_vlan: left promiscuous mode [ 226.506286][T12362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2791'. [ 226.875592][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 226.908324][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 227.268072][T12359] netlink: 'syz.4.2789': attribute type 3 has an invalid length. [ 227.473594][T11964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.680980][T11964] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.718966][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.726153][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.740049][T12385] SET target dimension over the limit! [ 227.745295][T12020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.784181][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.791351][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.809583][T12020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.832667][T12020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.860126][T12389] netlink: 'syz.3.2804': attribute type 3 has an invalid length. [ 227.889529][T12020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.128837][T12020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.202669][T12020] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.249978][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.257160][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.301635][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.308856][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.425175][T11964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.509408][T12414] SET target dimension over the limit! [ 228.611459][T11964] veth0_vlan: entered promiscuous mode [ 228.651054][T12421] netlink: 'syz.4.2817': attribute type 3 has an invalid length. [ 228.671776][T11964] veth1_vlan: entered promiscuous mode [ 228.770967][T11964] veth0_macvtap: entered promiscuous mode [ 228.816743][T11964] veth1_macvtap: entered promiscuous mode [ 228.875567][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.892966][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.921215][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.937406][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.948301][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.958925][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.970437][T11964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.987521][T12020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.014852][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.042647][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.068191][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.090773][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.101756][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.112957][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.123022][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.137358][T12445] SET target dimension over the limit! [ 229.142618][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.152677][T11964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.171465][T11964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.185404][T11964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.202142][T11964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.222777][T11964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.232134][T11964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.250055][T11964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.402070][T12020] veth0_vlan: entered promiscuous mode [ 229.417562][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.425775][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.468577][T12020] veth1_vlan: entered promiscuous mode [ 229.475739][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.485273][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.553702][T12020] veth0_macvtap: entered promiscuous mode [ 229.567434][T12020] veth1_macvtap: entered promiscuous mode [ 229.637036][T12454] netlink: 'syz.2.2830': attribute type 3 has an invalid length. [ 229.690190][T12456] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2831'. [ 229.701236][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.714742][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.727730][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.738465][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.748516][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.759356][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.769252][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.780295][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.792532][T12020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.805515][T12456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2831'. [ 229.837174][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.858151][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.871664][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.887674][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.921372][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.941765][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.972669][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.993392][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.019194][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.037982][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.048616][T12469] SET target dimension over the limit! [ 230.054895][T12020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.073286][T12020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.090151][T12020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.120054][T12020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.134568][T12020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.151938][T12020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.160801][T12020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.360923][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.363400][T12481] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 230.378767][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.406222][T12481] netlink: 9384 bytes leftover after parsing attributes in process `syz.2.2842'. [ 230.466976][T12484] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2844'. [ 230.488806][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.499534][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.524743][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2844'. [ 230.686088][T12496] SET target dimension over the limit! [ 230.888391][T12509] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 230.896350][T12509] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.2856'. [ 230.968942][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 230.980348][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2857'. [ 231.143094][T12524] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2862'. [ 231.274998][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.929906][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 231.939126][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 232.101054][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.112804][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.128269][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.139342][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.151614][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.178230][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.230498][T12547] lo speed is unknown, defaulting to 1000 [ 232.440820][T12547] vcan0 speed is unknown, defaulting to 1000 [ 232.512722][T12569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2883'. [ 232.523396][T12570] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2882'. [ 232.659495][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.772675][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.893384][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2890'. [ 232.896493][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.137247][ T11] bridge_slave_1: left allmulticast mode [ 233.142937][ T11] bridge_slave_1: left promiscuous mode [ 233.148713][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.159829][ T11] bridge_slave_0: left allmulticast mode [ 233.165830][ T11] bridge_slave_0: left promiscuous mode [ 233.173248][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.462491][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.480753][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.505224][ T11] bond0 (unregistering): Released all slaves [ 233.801467][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.811402][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.822313][T12602] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2895'. [ 233.839201][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.855012][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.863147][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.870679][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.969215][T12606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2898'. [ 234.033036][T12613] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 234.086104][T12613] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2901'. [ 234.161716][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2904'. [ 234.199140][T12599] lo speed is unknown, defaulting to 1000 [ 234.234273][ T5106] Bluetooth: hci0: command tx timeout [ 234.341708][T12547] chnl_net:caif_netlink_parms(): no params data found [ 234.886666][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2913'. [ 235.108678][ T11] hsr_slave_0: left promiscuous mode [ 235.128546][ T11] hsr_slave_1: left promiscuous mode [ 235.139164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.146807][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.156158][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.163717][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.202302][ T11] veth1_macvtap: left promiscuous mode [ 235.208086][ T11] veth0_macvtap: left promiscuous mode [ 235.214444][ T11] veth1_vlan: left promiscuous mode [ 235.215289][T12655] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 235.220836][ T11] veth0_vlan: left promiscuous mode [ 235.716153][ T11] team0 (unregistering): Port device team_slave_1 removed [ 235.755706][ T11] team0 (unregistering): Port device team_slave_0 removed [ 235.893607][ T5106] Bluetooth: hci2: command tx timeout [ 236.127486][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.142539][T12547] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.149759][T12547] bridge_slave_0: entered allmulticast mode [ 236.159152][T12547] bridge_slave_0: entered promiscuous mode [ 236.166905][T12599] vcan0 speed is unknown, defaulting to 1000 [ 236.167708][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.194031][T12547] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.201219][T12547] bridge_slave_1: entered allmulticast mode [ 236.214740][T12547] bridge_slave_1: entered promiscuous mode [ 236.293556][ T5106] Bluetooth: hci0: command tx timeout [ 236.309856][T12547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.358357][T12547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.549904][T12547] team0: Port device team_slave_0 added [ 236.616028][T12547] team0: Port device team_slave_1 added [ 236.744214][T12547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.785541][T12547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.839262][T12547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.869976][T12547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.891590][T12547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.963261][T12547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.068935][T12696] __nla_validate_parse: 3 callbacks suppressed [ 237.068953][T12696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2934'. [ 237.095279][T12692] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 237.131955][T12547] hsr_slave_0: entered promiscuous mode [ 237.138821][T12547] hsr_slave_1: entered promiscuous mode [ 237.146036][T12547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.154437][T12547] Cannot create hsr debugfs directory [ 237.166152][T12692] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2932'. [ 237.250522][ T1101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.296792][T12705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2936'. [ 237.375302][ T1101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.468035][T12711] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 237.540247][ T1101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.646078][ T1101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.924088][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 237.979290][ T5106] Bluetooth: hci2: command 0x041b tx timeout [ 237.998873][T12599] chnl_net:caif_netlink_parms(): no params data found [ 238.149634][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2951'. [ 238.260254][ T1101] bridge_slave_1: left allmulticast mode [ 238.266239][ T1101] bridge_slave_1: left promiscuous mode [ 238.271984][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.292735][ T1101] bridge_slave_0: left allmulticast mode [ 238.298563][ T1101] bridge_slave_0: left promiscuous mode [ 238.304590][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.373552][ T5092] Bluetooth: hci0: command tx timeout [ 238.751744][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.764525][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.779860][ T1101] bond0 (unregistering): Released all slaves [ 238.813723][T12751] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 238.911765][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.919089][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.928857][T12599] bridge_slave_0: entered allmulticast mode [ 238.936766][T12599] bridge_slave_0: entered promiscuous mode [ 238.978398][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.985650][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.992937][T12599] bridge_slave_1: entered allmulticast mode [ 239.002968][T12599] bridge_slave_1: entered promiscuous mode [ 239.082046][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.160190][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.221651][T12777] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 239.261162][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 239.302783][T12599] team0: Port device team_slave_0 added [ 239.328533][T12777] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2964'. [ 239.435622][T12599] team0: Port device team_slave_1 added [ 239.679279][T12547] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.765616][T12547] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.781574][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2966'. [ 239.800913][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.833503][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.910262][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.001212][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.026873][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.054799][ T5092] Bluetooth: hci2: command 0x041b tx timeout [ 240.062134][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.090754][T12547] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.191720][ T1101] hsr_slave_0: left promiscuous mode [ 240.195428][T12799] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2970'. [ 240.206669][ T1101] hsr_slave_1: left promiscuous mode [ 240.233899][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.242470][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.260905][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.272092][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.328704][ T1101] veth1_macvtap: left promiscuous mode [ 240.337188][ T1101] veth0_macvtap: left promiscuous mode [ 240.344027][ T1101] veth1_vlan: left promiscuous mode [ 240.349406][ T1101] veth0_vlan: left promiscuous mode [ 240.455005][ T5092] Bluetooth: hci0: command tx timeout [ 240.671046][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 241.116278][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 241.177861][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 241.768798][T12547] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.037856][T12599] hsr_slave_0: entered promiscuous mode [ 242.073383][T12599] hsr_slave_1: entered promiscuous mode [ 242.089186][T12599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.098208][T12599] Cannot create hsr debugfs directory [ 242.133505][ T5092] Bluetooth: hci2: command 0x041b tx timeout [ 242.172762][T12882] netlink: 'syz.3.3000': attribute type 21 has an invalid length. [ 242.323801][T12889] __nla_validate_parse: 2 callbacks suppressed [ 242.323819][T12889] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3003'. [ 242.504391][T12547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.573894][T12547] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.620788][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.627959][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.668364][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.675480][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.954505][T12912] netlink: 'syz.2.3012': attribute type 21 has an invalid length. [ 243.038141][T12599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.072689][T12599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.116171][T12599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.150437][T12599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.221403][T12930] netlink: 'syz.2.3017': attribute type 21 has an invalid length. [ 243.281669][T12547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.467167][T12547] veth0_vlan: entered promiscuous mode [ 243.484645][T12547] veth1_vlan: entered promiscuous mode [ 243.613538][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.648037][T12547] veth0_macvtap: entered promiscuous mode [ 243.675710][T12547] veth1_macvtap: entered promiscuous mode [ 243.751284][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.775631][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.782780][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.797285][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.804468][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.857433][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.874357][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.886004][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.896870][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.902327][T12932] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 243.906846][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.906867][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.908512][T12547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.953762][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.990998][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.012203][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.028361][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.043638][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.056289][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.066338][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.078456][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.089235][T12547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.099892][T12547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.112258][T12547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.147593][T12963] netlink: 'syz.2.3029': attribute type 21 has an invalid length. [ 244.167916][T12547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.183035][T12547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.203087][T12547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.212016][T12547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.221271][ T5092] Bluetooth: hci2: command 0x041b tx timeout [ 244.426805][T12983] dccp_invalid_packet: P.Data Offset(0) too small [ 244.514916][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.527142][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.620870][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.654191][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.880553][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.070228][T12599] veth0_vlan: entered promiscuous mode [ 245.107385][T12599] veth1_vlan: entered promiscuous mode [ 245.155107][T12599] veth0_macvtap: entered promiscuous mode [ 245.166546][T12599] veth1_macvtap: entered promiscuous mode [ 245.216940][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.233624][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.253474][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.273279][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.290030][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.293588][T13022] xt_hashlimit: overflow, try lower: 2647300743266041856/8 [ 245.311061][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.348475][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.359889][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.371472][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.386645][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.397429][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.407754][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.420486][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.430504][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.442594][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.452581][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.464403][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.474857][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.485407][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.495377][T12599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.506306][T13005] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 245.514404][T12599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.537148][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.557139][T13026] netlink: 'syz.2.3050': attribute type 21 has an invalid length. [ 245.577415][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 245.590147][T12599] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.613264][T12599] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.628430][T12599] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.638645][T12599] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.814766][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.836287][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.881876][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.929984][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.410621][T13070] netlink: 'syz.3.3064': attribute type 3 has an invalid length. [ 246.419449][T13070] netlink: 'syz.3.3064': attribute type 11 has an invalid length. [ 246.427572][T13070] netlink: 128512 bytes leftover after parsing attributes in process `syz.3.3064'. [ 246.734853][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'. [ 246.751950][T13093] netlink: 'syz.3.3072': attribute type 10 has an invalid length. [ 246.762043][T13093] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.769455][T13093] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.781624][T13093] bridge0: left allmulticast mode [ 246.987387][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.000217][T13057] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 247.019191][T13102] netlink: 'syz.3.3077': attribute type 3 has an invalid length. [ 247.044102][T13102] netlink: 'syz.3.3077': attribute type 11 has an invalid length. [ 247.058269][T13102] netlink: 128512 bytes leftover after parsing attributes in process `syz.3.3077'. [ 247.711058][T13113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3080'. [ 248.063918][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.074549][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.083340][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.101068][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.111055][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.118622][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.171660][T13125] lo speed is unknown, defaulting to 1000 [ 248.266383][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.319360][T13125] vcan0 speed is unknown, defaulting to 1000 [ 248.363130][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.446524][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.593164][ T51] bridge_slave_1: left allmulticast mode [ 248.598967][ T51] bridge_slave_1: left promiscuous mode [ 248.604717][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.614031][ T51] bridge_slave_0: left allmulticast mode [ 248.619696][ T51] bridge_slave_0: left promiscuous mode [ 248.626856][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.045306][T13143] netlink: 'syz.2.3090': attribute type 3 has an invalid length. [ 249.073675][T13143] netlink: 'syz.2.3090': attribute type 11 has an invalid length. [ 249.101865][T13143] netlink: 128512 bytes leftover after parsing attributes in process `syz.2.3090'. [ 249.175493][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.184884][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.193091][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.222034][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.236623][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.244980][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.332079][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.357309][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.382959][ T51] bond0 (unregistering): Released all slaves [ 249.509566][T13151] lo speed is unknown, defaulting to 1000 [ 249.567972][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3095'. [ 249.622721][T13149] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 249.974952][T13151] vcan0 speed is unknown, defaulting to 1000 [ 250.068064][T13125] chnl_net:caif_netlink_parms(): no params data found [ 250.157255][T13191] netlink: 'syz.3.3107': attribute type 3 has an invalid length. [ 250.185745][T13191] netlink: 'syz.3.3107': attribute type 11 has an invalid length. [ 250.211151][T13191] netlink: 128512 bytes leftover after parsing attributes in process `syz.3.3107'. [ 250.223469][ T5092] Bluetooth: hci0: command tx timeout [ 250.365969][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.388538][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.404420][T13125] bridge_slave_0: entered allmulticast mode [ 250.436556][T13125] bridge_slave_0: entered promiscuous mode [ 250.480474][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.550978][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.568889][T13125] bridge_slave_1: entered allmulticast mode [ 250.608946][T13125] bridge_slave_1: entered promiscuous mode [ 250.950114][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.965271][T13224] netlink: 'syz.3.3117': attribute type 1 has an invalid length. [ 251.033039][T13202] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 251.044438][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.170244][T13125] team0: Port device team_slave_0 added [ 251.200859][T13125] team0: Port device team_slave_1 added [ 251.214204][T13231] netlink: 'syz.2.3120': attribute type 3 has an invalid length. [ 251.221963][T13231] netlink: 'syz.2.3120': attribute type 11 has an invalid length. [ 251.269390][T13231] netlink: 128512 bytes leftover after parsing attributes in process `syz.2.3120'. [ 251.334190][ T5092] Bluetooth: hci2: command tx timeout [ 251.377393][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.384544][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.444801][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.503836][ T51] hsr_slave_0: left promiscuous mode [ 251.529743][ T51] hsr_slave_1: left promiscuous mode [ 251.537146][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.552555][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.561338][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.575183][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.599382][ T51] veth1_macvtap: left promiscuous mode [ 251.605985][ T51] veth0_macvtap: left promiscuous mode [ 251.611663][ T51] veth1_vlan: left promiscuous mode [ 251.617040][ T51] veth0_vlan: left promiscuous mode [ 252.047182][ T51] team0 (unregistering): Port device team_slave_1 removed [ 252.088041][ T51] team0 (unregistering): Port device team_slave_0 removed [ 252.293490][ T5092] Bluetooth: hci0: command tx timeout [ 252.451564][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.458983][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.485013][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.531468][T13247] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 252.689373][T13125] hsr_slave_0: entered promiscuous mode [ 252.728965][T13125] hsr_slave_1: entered promiscuous mode [ 252.750892][T13125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.770845][T13125] Cannot create hsr debugfs directory [ 252.923695][T13275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3135'. [ 253.244126][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3137'. [ 253.320601][T13151] chnl_net:caif_netlink_parms(): no params data found [ 253.414011][ T5092] Bluetooth: hci2: command tx timeout [ 253.734287][ T1088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.761802][T13151] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.774493][T13151] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.782113][T13151] bridge_slave_0: entered allmulticast mode [ 253.792745][T13151] bridge_slave_0: entered promiscuous mode [ 253.863814][ T1088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.961426][T13151] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.978023][T13151] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.995842][T13151] bridge_slave_1: entered allmulticast mode [ 254.014574][T13151] bridge_slave_1: entered promiscuous mode [ 254.116226][ T1088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.373703][ T5092] Bluetooth: hci0: command tx timeout [ 255.496935][ T5092] Bluetooth: hci2: command tx timeout [ 255.680961][T13151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.695413][T13151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.748463][ T1088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.790095][T13345] syzkaller1: entered promiscuous mode [ 255.795875][T13345] syzkaller1: entered allmulticast mode [ 255.957466][T13151] team0: Port device team_slave_0 added [ 255.967162][T13151] team0: Port device team_slave_1 added [ 255.979463][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.046429][T13125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 256.196682][T13125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 256.264793][T13125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.302617][T13151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.325270][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.404199][T13151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.447072][T13125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.454763][ T5092] Bluetooth: hci0: command tx timeout [ 256.561764][T13151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.593301][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.625104][T13151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.741636][T13391] Bluetooth: MGMT ver 1.22 [ 256.792429][ T1088] bridge_slave_1: left allmulticast mode [ 256.801725][ T1088] bridge_slave_1: left promiscuous mode [ 256.818355][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.854355][ T1088] bridge_slave_0: left allmulticast mode [ 256.860023][ T1088] bridge_slave_0: left promiscuous mode [ 256.901162][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.372990][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.398317][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.410240][ T1088] bond0 (unregistering): Released all slaves [ 257.446461][T13151] hsr_slave_0: entered promiscuous mode [ 257.478048][T13151] hsr_slave_1: entered promiscuous mode [ 257.501958][T13151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.510922][T13151] Cannot create hsr debugfs directory [ 257.548746][T13397] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.555939][T13397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.574430][ T5092] Bluetooth: hci2: command tx timeout [ 257.938549][T13426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3195'. [ 258.181219][T13435] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.188410][T13435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.448237][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.567901][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.757690][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.764891][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.864194][ T1088] hsr_slave_0: left promiscuous mode [ 258.879415][ T1088] hsr_slave_1: left promiscuous mode [ 258.890164][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.898040][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.909604][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.917386][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.981220][ T1088] veth1_macvtap: left promiscuous mode [ 258.990508][ T1088] veth0_macvtap: left promiscuous mode [ 259.003458][ T1088] veth1_vlan: left promiscuous mode [ 259.008804][ T1088] veth0_vlan: left promiscuous mode [ 259.108790][T13469] netlink: 'syz.2.3210': attribute type 9 has an invalid length. [ 259.124582][T13469] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3210'. [ 259.518428][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 259.558851][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 259.956735][T13477] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.963925][T13477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.977083][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.984267][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.045113][T13472] netlink: 'syz.2.3210': attribute type 9 has an invalid length. [ 260.052867][T13472] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3210'. [ 260.356410][T13151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.413046][T13490] netlink: 'syz.4.3216': attribute type 4 has an invalid length. [ 260.456733][T13151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.482310][T13151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.504459][T13151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.621317][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.755415][T13509] raw_sendmsg: syz.4.3223 forgot to set AF_INET. Fix it! [ 260.826257][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.833415][T13513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.931031][T13151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.015955][T13125] veth0_vlan: entered promiscuous mode [ 261.052609][T13151] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.082718][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.089895][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.135854][T13125] veth1_vlan: entered promiscuous mode [ 261.145534][T13530] netlink: 'syz.3.3230': attribute type 4 has an invalid length. [ 261.207585][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.214768][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.316527][T13125] veth0_macvtap: entered promiscuous mode [ 261.360906][T13125] veth1_macvtap: entered promiscuous mode [ 261.426532][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.461837][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.482417][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.493873][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.510325][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.522165][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.541151][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.575087][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.603315][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.613352][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.623885][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.633839][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.645327][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.655725][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.671183][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.681354][T13125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.692117][T13125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.706500][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.715005][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.722116][T13549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.738327][T13125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.751137][T13125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.761617][T13125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.772013][T13125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.890626][T13151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.037742][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.052333][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.136278][T13151] veth0_vlan: entered promiscuous mode [ 262.171701][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.178941][T13151] veth1_vlan: entered promiscuous mode [ 262.185448][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.292852][T13151] veth0_macvtap: entered promiscuous mode [ 262.332971][T13151] veth1_macvtap: entered promiscuous mode [ 262.491597][T13577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3245'. [ 262.523329][T13577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.531653][T13577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.553935][T13577] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 262.565605][T13577] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 262.593640][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3250'. [ 262.638099][T13580] bond4: entered promiscuous mode [ 262.679213][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.714547][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.741125][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.764916][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.775594][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.786173][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.798478][T13151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.813745][T13580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 262.873903][T13580] ip6gretap1: entered promiscuous mode [ 262.884096][T13580] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 262.900951][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 262.921106][T13588] bond4: left promiscuous mode [ 262.926177][T13588] ip6gretap1: left promiscuous mode [ 262.933112][T13588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.960357][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.991596][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.013732][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.033459][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.055500][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.084312][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.113254][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.128502][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.140139][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.152018][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.163076][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.184580][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.212563][T13151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.261868][T13601] netlink: 'syz.2.3256': attribute type 24 has an invalid length. [ 263.296190][T13151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.322875][T13151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.342181][T13151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.351089][T13151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.457554][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.581067][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.652341][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.661938][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.686836][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.719564][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.728452][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.342372][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.409136][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3268'. [ 264.477272][T13620] bond5: entered promiscuous mode [ 264.524015][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 264.591404][T13620] bond5: left promiscuous mode [ 264.635233][T13620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.658857][T13631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3267'. [ 264.682237][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.693825][T13631] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 264.701682][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.710861][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.732156][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.739236][T13631] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 264.775756][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.786185][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.922082][T13632] lo speed is unknown, defaulting to 1000 [ 264.946438][ T51] bridge_slave_1: left allmulticast mode [ 264.952154][ T51] bridge_slave_1: left promiscuous mode [ 264.963411][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.974550][ T51] bridge_slave_0: left allmulticast mode [ 264.980209][ T51] bridge_slave_0: left promiscuous mode [ 264.987636][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.643808][T13665] Bluetooth: MGMT ver 1.22 [ 265.745474][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.757959][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.769014][ T51] bond0 (unregistering): Released all slaves [ 265.788404][T13632] vcan0 speed is unknown, defaulting to 1000 [ 265.799439][T13665] tipc: Enabling of bearer rejected, failed to enable media [ 266.481291][T13695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3296'. [ 266.562074][T13698] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3296'. [ 266.676971][T13698] Êü: entered promiscuous mode [ 266.853673][ T5106] Bluetooth: hci0: command tx timeout [ 266.992179][T13632] chnl_net:caif_netlink_parms(): no params data found [ 267.047773][ T51] hsr_slave_0: left promiscuous mode [ 267.056184][ T51] hsr_slave_1: left promiscuous mode [ 267.062816][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.070546][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.079545][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.087016][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.109168][ T51] veth1_macvtap: left promiscuous mode [ 267.114766][ T51] veth0_macvtap: left promiscuous mode [ 267.120298][ T51] veth1_vlan: left promiscuous mode [ 267.126400][ T51] veth0_vlan: left promiscuous mode [ 267.600858][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.633769][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.642289][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.652014][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.680751][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.688767][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.849266][T13735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3311'. [ 267.923597][T13737] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3311'. [ 268.183840][ T51] team0 (unregistering): Port device team_slave_1 removed [ 268.276256][ T51] team0 (unregistering): Port device team_slave_0 removed [ 268.850888][T13737] Êü: entered promiscuous mode [ 268.914502][T13769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3326'. [ 268.943569][ T5106] Bluetooth: hci0: command tx timeout [ 268.952039][T13769] bond6: entered promiscuous mode [ 269.012775][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 269.048410][T13769] bond6: left promiscuous mode [ 269.073790][T13769] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.080960][T13724] lo speed is unknown, defaulting to 1000 [ 269.086186][T13632] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.103469][T13632] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.143362][T13632] bridge_slave_0: entered allmulticast mode [ 269.155480][T13632] bridge_slave_0: entered promiscuous mode [ 269.181727][T13632] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.213746][T13632] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.221284][T13632] bridge_slave_1: entered allmulticast mode [ 269.242402][T13632] bridge_slave_1: entered promiscuous mode [ 269.251607][T13773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3327'. [ 269.277524][T13773] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 269.303442][T13773] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 269.400447][T13632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.425879][T13724] vcan0 speed is unknown, defaulting to 1000 [ 269.445633][T13632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.576235][T13632] team0: Port device team_slave_0 added [ 269.598323][T13632] team0: Port device team_slave_1 added [ 269.706190][T13632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.729122][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.764203][ T5106] Bluetooth: hci2: command tx timeout [ 269.793757][T13632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.860969][T13792] netlink: 'syz.3.3332': attribute type 4 has an invalid length. [ 269.965046][T13632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.003419][T13632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.073003][T13632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.189291][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.238837][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 270.289490][T13801] bond7: entered promiscuous mode [ 270.335046][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3338'. [ 270.369711][T13807] bond7: left promiscuous mode [ 270.380325][T13807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.441471][T13820] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 270.450726][T13820] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3345'. [ 270.498783][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.535909][T13826] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 270.596426][T13632] hsr_slave_0: entered promiscuous mode [ 270.606229][T13632] hsr_slave_1: entered promiscuous mode [ 270.613433][T13632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.621110][T13632] Cannot create hsr debugfs directory [ 270.630463][T13828] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3349'. [ 270.698150][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.731095][T13834] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 270.865658][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.977733][T13847] netlink: 'syz.4.3358': attribute type 1 has an invalid length. [ 270.986176][T13847] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3358'. [ 271.013757][ T5106] Bluetooth: hci0: command tx timeout [ 271.202526][T13858] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3361'. [ 271.260954][T13724] chnl_net:caif_netlink_parms(): no params data found [ 271.342750][ T51] bridge_slave_1: left allmulticast mode [ 271.354372][ T51] bridge_slave_1: left promiscuous mode [ 271.360437][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.394114][ T51] bridge_slave_0: left allmulticast mode [ 271.399810][ T51] bridge_slave_0: left promiscuous mode [ 271.423853][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.788294][T13876] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3368'. [ 271.823798][ T5106] Bluetooth: hci2: command tx timeout [ 271.933080][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.945418][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.959874][ T51] bond0 (unregistering): Released all slaves [ 271.986469][T13866] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 272.109357][T13882] netlink: 'syz.3.3370': attribute type 1 has an invalid length. [ 272.118021][T13882] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3370'. [ 272.289176][T13890] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3374'. [ 272.369012][T13724] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.385238][T13901] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3379'. [ 272.387260][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.412179][T13724] bridge_slave_0: entered allmulticast mode [ 272.420328][T13724] bridge_slave_0: entered promiscuous mode [ 272.542939][T13724] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.550555][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.557974][T13724] bridge_slave_1: entered allmulticast mode [ 272.566514][T13724] bridge_slave_1: entered promiscuous mode [ 272.608126][T13908] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 272.811504][T13724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.824535][T13914] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 272.848706][T13724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.094206][ T5106] Bluetooth: hci0: command tx timeout [ 273.232209][T13724] team0: Port device team_slave_0 added [ 273.249854][T13632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.314164][T13724] team0: Port device team_slave_1 added [ 273.326916][T13936] netlink: 'syz.3.3395': attribute type 1 has an invalid length. [ 273.342992][T13632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.507225][T13632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.575200][T13946] netlink: 'syz.4.3400': attribute type 1 has an invalid length. [ 273.586781][ T51] hsr_slave_0: left promiscuous mode [ 273.613812][ T51] hsr_slave_1: left promiscuous mode [ 273.621826][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.634965][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.649608][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.658069][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.690628][ T51] veth1_macvtap: left promiscuous mode [ 273.696354][ T51] veth0_macvtap: left promiscuous mode [ 273.702111][ T51] veth1_vlan: left promiscuous mode [ 273.708450][ T51] veth0_vlan: left promiscuous mode [ 273.894697][ T5106] Bluetooth: hci2: command tx timeout [ 274.283780][ T51] team0 (unregistering): Port device team_slave_1 removed [ 274.321134][ T51] team0 (unregistering): Port device team_slave_0 removed [ 274.680979][T13724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.688335][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.715812][T13724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.728833][T13632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.764538][T13724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.771495][T13724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.822013][T13724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.921953][T13724] hsr_slave_0: entered promiscuous mode [ 274.961477][T13724] hsr_slave_1: entered promiscuous mode [ 275.002615][T13724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.033368][T13724] Cannot create hsr debugfs directory [ 275.280653][T13995] __nla_validate_parse: 9 callbacks suppressed [ 275.280672][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 275.525543][T13632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.638138][T13632] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.726820][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.734094][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.765033][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.772206][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.795523][T14020] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3436'. [ 275.808056][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 275.973689][ T5106] Bluetooth: hci2: command tx timeout [ 276.037060][T14037] netlink: 'syz.3.3440': attribute type 10 has an invalid length. [ 276.063239][T14037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3440'. [ 276.072229][T14037] team0: entered allmulticast mode [ 276.078247][T14037] team_slave_0: entered allmulticast mode [ 276.084118][T14037] team_slave_1: entered allmulticast mode [ 276.090608][T14037] bridge0: port 4(team0) entered blocking state [ 276.099503][T14037] bridge0: port 4(team0) entered disabled state [ 276.121528][T14037] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 276.231671][T13724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.265085][T13724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.280753][T13724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.291832][T13724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.352399][T13632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.478612][T13632] veth0_vlan: entered promiscuous mode [ 276.516151][T13632] veth1_vlan: entered promiscuous mode [ 276.562873][T13724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.588191][T13632] veth0_macvtap: entered promiscuous mode [ 276.607552][T13632] veth1_macvtap: entered promiscuous mode [ 276.651129][T14057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 276.672318][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.683056][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.703248][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.716952][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.728643][T13632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.739990][T13724] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.769401][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.776591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.810292][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.821002][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.833862][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.844985][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.854966][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.869433][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.882817][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.901936][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.922503][T13632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.936546][T13632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.948613][T13632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.967502][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.974685][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.001148][T13632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.010322][T13632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.026112][T13632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.037122][T13632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.314022][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.321871][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.411570][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.437757][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.657476][T13724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.741417][T13724] veth0_vlan: entered promiscuous mode [ 277.770451][T13724] veth1_vlan: entered promiscuous mode [ 277.827237][T13724] veth0_macvtap: entered promiscuous mode [ 277.844397][T13724] veth1_macvtap: entered promiscuous mode [ 277.868783][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.880712][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.892398][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.906831][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.917129][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.931940][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.944553][T13724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.959733][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.970340][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.980606][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.991830][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.001674][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.023279][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.036089][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.053244][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.067866][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.083212][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.099226][T13724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.109783][T13724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.121805][T13724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.159350][T13724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.172382][T13724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.190770][T13724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.199695][T13724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.384104][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.403713][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.460501][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.471554][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.511786][T14123] netlink: 'syz.3.3479': attribute type 1 has an invalid length. [ 278.650460][T14128] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3480'. [ 278.898950][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3487'. [ 279.117649][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.142301][T14149] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.149693][T14149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.157220][T14149] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.164432][T14149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.174297][T14149] bridge0: entered allmulticast mode [ 279.196836][T14149] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 280.098457][T14163] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3494'. [ 280.227007][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.236260][ T5092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.244768][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.254027][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.262347][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.270023][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.369450][T14176] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 280.386867][T14171] lo speed is unknown, defaulting to 1000 [ 280.442951][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.450164][T14180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.457682][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.464864][T14180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.480619][T14180] bridge0: entered allmulticast mode [ 280.511726][T14180] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 280.613691][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.637630][T14171] vcan0 speed is unknown, defaulting to 1000 [ 280.686730][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.825797][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.036277][ T11] bridge_slave_1: left allmulticast mode [ 281.045694][ T11] bridge_slave_1: left promiscuous mode [ 281.057380][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.102786][ T11] bridge_slave_0: left allmulticast mode [ 281.118629][ T11] bridge_slave_0: left promiscuous mode [ 281.139016][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.525756][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.537075][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.549554][ T11] bond0 (unregistering): Released all slaves [ 281.733613][T14171] chnl_net:caif_netlink_parms(): no params data found [ 281.828162][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.835430][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.842546][T14171] bridge_slave_0: entered allmulticast mode [ 281.853905][T14171] bridge_slave_0: entered promiscuous mode [ 281.868436][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.875883][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.883004][T14171] bridge_slave_1: entered allmulticast mode [ 281.890587][T14171] bridge_slave_1: entered promiscuous mode [ 282.054892][T14211] ipt_ECN: cannot use operation on non-tcp rule [ 282.137647][T14212] netlink: 'syz.4.3512': attribute type 5 has an invalid length. [ 282.284705][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.316799][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.318519][ T5106] Bluetooth: hci0: command tx timeout [ 282.538755][T14171] team0: Port device team_slave_0 added [ 282.580444][T14230] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3519'. [ 282.600320][T14224] netlink: 'syz.2.3517': attribute type 10 has an invalid length. [ 282.611151][T14224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3517'. [ 282.648057][T14224] team0: entered allmulticast mode [ 282.658200][T14224] team_slave_0: entered allmulticast mode [ 282.666691][T14224] team_slave_1: entered allmulticast mode [ 282.672587][T14224] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 282.680776][T14224] bridge0: port 3(team0) entered blocking state [ 282.687719][T14224] bridge0: port 3(team0) entered disabled state [ 282.697105][T14224] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 282.723972][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.728772][T14171] team0: Port device team_slave_1 added [ 282.741650][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.750407][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.767073][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.775849][ T11] hsr_slave_0: left promiscuous mode [ 282.777316][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.790278][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.810141][ T11] hsr_slave_1: left promiscuous mode [ 282.821912][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.834585][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.845091][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.852501][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.894234][ T11] veth1_macvtap: left promiscuous mode [ 282.899790][ T11] veth0_macvtap: left promiscuous mode [ 282.906973][ T11] veth1_vlan: left promiscuous mode [ 282.912470][ T11] veth0_vlan: left promiscuous mode [ 283.616115][ T11] team0 (unregistering): Port device team_slave_1 removed [ 283.661238][ T11] team0 (unregistering): Port device team_slave_0 removed [ 284.039676][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3520'. [ 284.060286][T14255] netlink: 'syz.4.3526': attribute type 5 has an invalid length. [ 284.125169][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.132125][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.201920][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.215784][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.222741][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.264919][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.298698][T14234] lo speed is unknown, defaulting to 1000 [ 284.383235][ T5092] Bluetooth: hci0: command tx timeout [ 284.435780][T14171] hsr_slave_0: entered promiscuous mode [ 284.459515][T14171] hsr_slave_1: entered promiscuous mode [ 284.486141][T14171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.495790][T14171] Cannot create hsr debugfs directory [ 284.713307][T14234] vcan0 speed is unknown, defaulting to 1000 [ 284.745432][T14294] netlink: 'syz.4.3543': attribute type 5 has an invalid length. [ 284.856215][ T5092] Bluetooth: hci2: command tx timeout [ 284.967452][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.072053][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.328443][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.472594][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.601134][T14318] netlink: 'syz.2.3554': attribute type 196 has an invalid length. [ 285.731083][T14171] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.817731][T14171] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.860814][T14171] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.091782][T14171] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.192049][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 286.378833][T14347] macvlan1 (unregistering): left promiscuous mode [ 286.388552][T14347] team0: Port device macvlan1 removed [ 286.400378][ T11] bridge_slave_1: left allmulticast mode [ 286.410338][ T11] bridge_slave_1: left promiscuous mode [ 286.426522][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.438645][ T11] bridge_slave_0: left allmulticast mode [ 286.444745][ T11] bridge_slave_0: left promiscuous mode [ 286.450478][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.460492][ T5092] Bluetooth: hci0: command tx timeout [ 286.779729][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.790763][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.801244][ T11] bond0 (unregistering): Released all slaves [ 286.933755][ T5092] Bluetooth: hci2: command tx timeout [ 287.151492][T14360] can: request_module (can-proto-0) failed. [ 287.187606][T14234] chnl_net:caif_netlink_parms(): no params data found [ 287.742486][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.750731][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.758192][T14234] bridge_slave_0: entered allmulticast mode [ 287.774704][T14234] bridge_slave_0: entered promiscuous mode [ 287.816093][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.840469][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.862726][T14234] bridge_slave_1: entered allmulticast mode [ 287.904088][T14234] bridge_slave_1: entered promiscuous mode [ 287.946808][T14171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.221458][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.335017][T14171] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.406771][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.497843][ T11] hsr_slave_0: left promiscuous mode [ 288.504225][ T11] hsr_slave_1: left promiscuous mode [ 288.510296][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.518265][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.531126][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.543647][ T5092] Bluetooth: hci0: command tx timeout [ 288.563059][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.610825][ T11] veth1_macvtap: left promiscuous mode [ 288.620036][ T11] veth0_macvtap: left promiscuous mode [ 288.625793][ T11] veth1_vlan: left promiscuous mode [ 288.631074][ T11] veth0_vlan: left promiscuous mode [ 289.025862][ T5092] Bluetooth: hci2: command tx timeout [ 289.067051][ T11] team0 (unregistering): Port device team_slave_1 removed [ 289.106075][ T11] team0 (unregistering): Port device team_slave_0 removed [ 289.599028][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.606255][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.627714][T14414] bond0: (slave vlan2): Opening slave failed [ 289.704527][T14423] lo speed is unknown, defaulting to 1000 [ 289.721719][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.728909][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.762733][T14234] team0: Port device team_slave_0 added [ 289.806706][T14234] team0: Port device team_slave_1 added [ 289.859219][T14424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'. [ 290.038949][T14234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.063111][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.124141][T14234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.217476][T14423] vcan0 speed is unknown, defaulting to 1000 [ 290.231706][T14234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.238936][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.293271][T14234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.325321][T14437] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 290.544730][T14234] hsr_slave_0: entered promiscuous mode [ 290.557522][T14446] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3607'. [ 290.564393][T14234] hsr_slave_1: entered promiscuous mode [ 290.583299][T14234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.590882][T14234] Cannot create hsr debugfs directory [ 291.079328][T14171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.093661][ T5092] Bluetooth: hci2: command tx timeout [ 291.338537][T14171] veth0_vlan: entered promiscuous mode [ 291.358698][T14171] veth1_vlan: entered promiscuous mode [ 291.508910][T14171] veth0_macvtap: entered promiscuous mode [ 291.555152][T14171] veth1_macvtap: entered promiscuous mode [ 291.592620][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.617445][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.637647][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.648575][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.660503][T14171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.719561][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.752783][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.772977][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.791642][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.822575][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.843272][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.869804][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.899544][T14474] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3618'. [ 291.913302][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.935790][T14171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.962067][T14171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.986928][T14171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.075710][T14171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.103478][T14171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.112194][T14171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.142282][T14171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.435025][T14234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.457683][T14234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.483058][T14234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.510747][T14234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.616064][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.641153][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.666864][T14478] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 292.745313][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.780431][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.850196][T14234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.051573][T14492] veth1_macvtap: left promiscuous mode [ 293.087071][T14494] batadv0: entered promiscuous mode [ 293.107112][T14495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3623'. [ 293.132020][T14234] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.143660][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.177425][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.184638][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.249096][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.256359][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.598448][T14234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.726030][T14234] veth0_vlan: entered promiscuous mode [ 293.754778][T14234] veth1_vlan: entered promiscuous mode [ 293.810888][T14234] veth0_macvtap: entered promiscuous mode [ 293.857512][T14234] veth1_macvtap: entered promiscuous mode [ 294.007010][ T2900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.061790][T14524] tipc: Enabling of bearer rejected, failed to enable media [ 294.093066][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.137901][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.156598][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.179000][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.198823][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.217530][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.229204][T14234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.272723][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.291065][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.301980][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.329988][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.344478][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.361639][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.371589][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.386981][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.396842][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.408473][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.418782][T14234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.429294][T14234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.443034][T14234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.456993][T14234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.467477][T14234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.477294][T14234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.486105][T14234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.577080][ T2900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.599189][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.612434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.638632][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.647117][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.759114][ T2900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.817246][ T2900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.888716][ T2900] bridge_slave_1: left allmulticast mode [ 294.894575][ T2900] bridge_slave_1: left promiscuous mode [ 294.900310][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.909725][ T2900] bridge_slave_0: left allmulticast mode [ 294.915553][ T2900] bridge_slave_0: left promiscuous mode [ 294.922057][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.109861][T14535] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3641'. [ 295.431409][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.448003][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.459490][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.477396][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.485939][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.494784][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.675485][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.690626][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.702120][ T2900] bond0 (unregistering): Released all slaves [ 295.849266][T14547] veth1_macvtap: left promiscuous mode [ 295.905561][T14550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3645'. [ 295.959168][T14551] lo speed is unknown, defaulting to 1000 [ 296.296479][T14551] vcan0 speed is unknown, defaulting to 1000 [ 296.910978][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3654'. [ 296.998164][T14571] lo speed is unknown, defaulting to 1000 [ 297.573578][ T5106] Bluetooth: hci0: command tx timeout [ 297.758646][ T2900] hsr_slave_0: left promiscuous mode [ 297.765701][ T2900] hsr_slave_1: left promiscuous mode [ 297.771668][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.779088][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.787408][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.795053][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.814278][ T2900] veth1_macvtap: left promiscuous mode [ 297.819822][ T2900] veth0_macvtap: left promiscuous mode [ 297.825901][ T2900] veth1_vlan: left promiscuous mode [ 297.831168][ T2900] veth0_vlan: left promiscuous mode [ 298.379565][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 298.408428][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.421950][ T5092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.431687][ T5092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.444658][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.453017][ T5092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 298.461493][ T5092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.469385][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 298.888626][T14571] vcan0 speed is unknown, defaulting to 1000 [ 298.895404][T14600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3662'. [ 298.976527][T14551] chnl_net:caif_netlink_parms(): no params data found [ 299.017267][T14598] lo speed is unknown, defaulting to 1000 [ 299.317219][T14607] geneve2: entered promiscuous mode [ 299.333461][T14607] geneve2: entered allmulticast mode [ 299.355695][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.363076][T14551] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.370386][T14551] bridge_slave_0: entered allmulticast mode [ 299.378184][T14551] bridge_slave_0: entered promiscuous mode [ 299.390101][T14551] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.397873][T14551] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.405232][T14551] bridge_slave_1: entered allmulticast mode [ 299.414149][T14551] bridge_slave_1: entered promiscuous mode [ 299.444610][T14598] vcan0 speed is unknown, defaulting to 1000 [ 299.492800][T14551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.541655][T14551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.653793][ T5092] Bluetooth: hci0: command tx timeout [ 299.758021][T14551] team0: Port device team_slave_0 added [ 299.815283][T14551] team0: Port device team_slave_1 added [ 299.887611][T14622] netlink: 203452 bytes leftover after parsing attributes in process `syz.4.3670'. [ 299.904571][T14622] netlink: 'syz.4.3670': attribute type 2 has an invalid length. [ 299.922412][T14551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.937452][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.964027][T14551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.062952][T14551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.084369][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.143564][T14551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.206197][T14624] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 300.259811][ T2900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.431378][T14551] hsr_slave_0: entered promiscuous mode [ 300.457268][T14551] hsr_slave_1: entered promiscuous mode [ 300.472173][T14551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.500937][T14551] Cannot create hsr debugfs directory [ 300.534129][ T5092] Bluetooth: hci2: command tx timeout [ 300.628778][ T2900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.848050][ T2900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.860338][T14634] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3673'. [ 301.056415][ T2900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.480357][T14598] chnl_net:caif_netlink_parms(): no params data found [ 301.581882][ T2900] bridge_slave_1: left allmulticast mode [ 301.594507][ T2900] bridge_slave_1: left promiscuous mode [ 301.609988][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.622592][ T2900] bridge_slave_0: left allmulticast mode [ 301.634452][ T2900] bridge_slave_0: left promiscuous mode [ 301.647884][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.733381][ T5092] Bluetooth: hci0: command tx timeout [ 301.790221][T14647] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 302.002629][T14655] tls_set_device_offload: netdev not found [ 302.269012][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.288858][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.310899][ T2900] bond0 (unregistering): Released all slaves [ 302.613733][ T5092] Bluetooth: hci2: command tx timeout [ 302.911506][T14598] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.923389][T14598] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.930591][T14598] bridge_slave_0: entered allmulticast mode [ 302.940560][T14598] bridge_slave_0: entered promiscuous mode [ 303.035430][T14598] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.042754][T14598] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.083544][T14598] bridge_slave_1: entered allmulticast mode [ 303.118745][T14598] bridge_slave_1: entered promiscuous mode [ 303.321954][T14598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.434861][T14598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.556965][T14551] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.825217][ T5092] Bluetooth: hci0: command tx timeout [ 303.831535][ T2900] hsr_slave_0: left promiscuous mode [ 303.850064][ T2900] hsr_slave_1: left promiscuous mode [ 303.865178][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.872997][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.886863][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.896753][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.919886][ T2900] veth1_macvtap: left promiscuous mode [ 303.925656][ T2900] veth0_macvtap: left promiscuous mode [ 303.931346][ T2900] veth1_vlan: left promiscuous mode [ 303.936867][ T2900] veth0_vlan: left promiscuous mode [ 304.385640][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 304.462339][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 304.649669][T14718] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 304.694388][ T5092] Bluetooth: hci2: command tx timeout [ 305.140180][T14551] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.169791][T14598] team0: Port device team_slave_0 added [ 305.214008][T14551] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.257502][T14598] team0: Port device team_slave_1 added [ 305.314949][T14551] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.420326][T14598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.443533][T14598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.511230][T14598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.546148][T14598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.553650][T14598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.610460][T14598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.808781][T14742] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 305.989283][T14598] hsr_slave_0: entered promiscuous mode [ 306.004760][T14598] hsr_slave_1: entered promiscuous mode [ 306.011165][T14598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.018898][T14598] Cannot create hsr debugfs directory [ 306.231167][T14551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.342304][T14551] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.415882][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.423088][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.452632][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.459908][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.505176][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'. [ 306.788349][ T5092] Bluetooth: hci2: command tx timeout [ 306.869559][T14774] netlink: 'syz.4.3725': attribute type 10 has an invalid length. [ 306.905094][T14774] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 306.916001][T14774] team0: Port device wlan1 removed [ 306.938799][T14774] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 307.005788][T14598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.040874][T14598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.071036][T14598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.111935][T14598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.209836][T14551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.351758][T14598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.388211][T14551] veth0_vlan: entered promiscuous mode [ 307.402747][T14598] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.421979][T14551] veth1_vlan: entered promiscuous mode [ 307.450367][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.457560][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.489886][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.497060][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.561163][T14598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.576754][T14598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.630350][T14551] veth0_macvtap: entered promiscuous mode [ 307.660844][T14551] veth1_macvtap: entered promiscuous mode [ 307.718421][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.746077][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.777718][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.802088][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.814795][T14551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.841835][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.859854][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.869868][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.880710][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.912540][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.934028][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.953333][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.973483][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.994112][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.006886][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.025534][T14551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.097176][T14551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.139305][T14551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.163760][T14551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.172481][T14551] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.233104][T14824] bridge_slave_0: left allmulticast mode [ 308.248983][T14824] bridge_slave_0: left promiscuous mode [ 308.257727][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.351480][T14598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.420637][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 308.568628][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.584889][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.659686][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.670621][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.678221][T14598] veth0_vlan: entered promiscuous mode [ 308.698923][T14598] veth1_vlan: entered promiscuous mode [ 308.798050][T14846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.827017][T14598] veth0_macvtap: entered promiscuous mode [ 308.875585][T14848] netlink: 'syz.3.3752': attribute type 11 has an invalid length. [ 308.920600][T14598] veth1_macvtap: entered promiscuous mode [ 308.935509][T14850] vlan0: entered promiscuous mode [ 308.940770][T14850] macvtap0: entered promiscuous mode [ 308.947703][T14851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 308.948355][T14850] vlan0: entered allmulticast mode [ 308.959468][T14850] macvtap0: entered allmulticast mode [ 308.965294][T14850] veth0_macvtap: entered allmulticast mode [ 308.973102][T14850] macvtap0: left allmulticast mode [ 308.979929][T14850] veth0_macvtap: left allmulticast mode [ 308.986078][T14850] macvtap0: left promiscuous mode [ 309.030929][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.041675][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.052298][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.064252][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.082679][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.094108][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.106557][T14598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.140073][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.173723][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.192673][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.203533][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.213390][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.224773][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.234743][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.245386][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.256180][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.266998][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.276903][T14598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.287564][T14598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.303956][T14598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.343134][T14598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.358927][T14598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.368810][T14598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.377972][T14598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.563800][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.571652][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.667538][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.684594][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.940622][T14871] netlink: 'syz.2.3761': attribute type 10 has an invalid length. [ 309.956462][T14871] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3761'. [ 309.968923][T14871] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 309.979327][T14871] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 309.989628][T14871] team0: Port device virt_wifi0 added [ 309.995781][T14875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.157144][T14883] netlink: 'syz.3.3765': attribute type 2 has an invalid length. [ 310.175938][T14883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3765'. [ 310.283374][T14892] netlink: 210596 bytes leftover after parsing attributes in process `syz.2.3770'. [ 310.367768][T14894] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3771'. [ 310.424989][ T2900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.247680][ T2900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.319365][ T2900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.381578][ T2900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.544211][T14903] netlink: 'syz.4.3775': attribute type 10 has an invalid length. [ 311.552066][T14903] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3775'. [ 311.602937][T14903] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 311.618976][T14903] team0: Port device virt_wifi0 added [ 311.817799][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.826909][ T2900] bridge_slave_1: left allmulticast mode [ 311.832577][ T2900] bridge_slave_1: left promiscuous mode [ 311.838417][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.847827][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.859524][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.869068][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 311.877155][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.891398][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.932437][ T2900] bridge_slave_0: left allmulticast mode [ 311.942695][ T2900] bridge_slave_0: left promiscuous mode [ 311.966916][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.448624][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.459773][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.470386][ T2900] bond0 (unregistering): Released all slaves [ 312.483033][T14924] tipc: Started in network mode [ 312.494213][T14924] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 312.507723][T14924] tipc: Enabled bearer , priority 10 [ 312.584585][T14913] lo speed is unknown, defaulting to 1000 [ 312.729977][T14913] vcan0 speed is unknown, defaulting to 1000 [ 313.353105][T14939] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2047) [ 313.363823][T14939] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 313.427154][T14944] hsr_slave_0: left promiscuous mode [ 313.460785][T14944] hsr_slave_1: left promiscuous mode [ 313.587221][T14913] chnl_net:caif_netlink_parms(): no params data found [ 313.613914][ T2900] hsr_slave_0: left promiscuous mode [ 313.619979][ T2900] hsr_slave_1: left promiscuous mode [ 313.633307][ T5143] tipc: Node number set to 10005162 [ 313.639498][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.663974][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.671814][ T12] ------------[ cut here ]------------ [ 313.677774][ T12] WARNING: CPU: 1 PID: 12 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 313.688176][ T12] Modules linked in: [ 313.692109][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-00194-g8905a2c7d39b #0 [ 313.702313][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 313.712439][ T12] Workqueue: cfg80211 cfg80211_event_work [ 313.718500][ T12] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 313.725188][ T12] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 06 b4 f6 85 db 74 29 e8 4a 32 9a f6 84 c0 74 27 e8 81 02 b4 f6 e9 84 00 00 00 e8 77 02 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 02 b4 f6 eb [ 313.745296][ T12] RSP: 0018:ffffc900001179e0 EFLAGS: 00010293 [ 313.751392][ T12] RAX: ffffffff8ae224f9 RBX: 0000000000000000 RCX: ffff8880172c5a00 [ 313.759844][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.767892][ T12] RBP: ffffc90000117b00 R08: ffffffff8ae220c9 R09: 1ffffffff25f50bd [ 313.775955][ T12] R10: dffffc0000000000 R11: fffffbfff25f50be R12: ffff88806a056098 [ 313.784019][ T12] R13: dffffc0000000000 R14: ffff88806a056018 R15: ffff8880182ce000 [ 313.792008][ T12] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 313.801015][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.807670][ T12] CR2: 00007f4309a356b8 CR3: 0000000071e18000 CR4: 00000000003506f0 [ 313.816322][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.824584][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.832574][ T12] Call Trace: [ 313.835925][ T12] [ 313.838874][ T12] ? __warn+0x163/0x4e0 [ 313.843047][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 313.849141][ T12] ? report_bug+0x2b3/0x500 [ 313.853719][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 313.859725][ T12] ? handle_bug+0x3e/0x70 [ 313.864388][ T12] ? exc_invalid_op+0x1a/0x50 [ 313.869081][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 313.874215][ T12] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 313.880210][ T12] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 313.886268][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 313.892280][ T12] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 313.898829][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 313.903941][ T5106] Bluetooth: hci0: command tx timeout [ 313.904078][ T12] cfg80211_process_wdev_events+0x356/0x510 [ 313.915596][ T12] cfg80211_process_rdev_events+0xac/0x110 [ 313.921415][ T12] ? process_scheduled_works+0x945/0x1830 [ 313.927212][ T12] cfg80211_event_work+0x2f/0x40 [ 313.932174][ T12] process_scheduled_works+0xa2c/0x1830 [ 313.937840][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.943882][ T12] ? assign_work+0x364/0x3d0 [ 313.948491][ T12] worker_thread+0x86d/0xd50 [ 313.953108][ T12] ? __kthread_parkme+0x169/0x1d0 [ 313.958204][ T12] ? __pfx_worker_thread+0x10/0x10 [ 313.963627][ T12] kthread+0x2f0/0x390 [ 313.967712][ T12] ? __pfx_worker_thread+0x10/0x10 [ 313.972840][ T12] ? __pfx_kthread+0x10/0x10 [ 313.978201][ T12] ret_from_fork+0x4b/0x80 [ 313.982639][ T12] ? __pfx_kthread+0x10/0x10 [ 313.987563][ T12] ret_from_fork_asm+0x1a/0x30 [ 313.992370][ T12] [ 313.995480][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.002762][ T12] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-00194-g8905a2c7d39b #0 [ 314.012828][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 314.022886][ T12] Workqueue: cfg80211 cfg80211_event_work [ 314.028633][ T12] Call Trace: [ 314.031914][ T12] [ 314.034831][ T12] dump_stack_lvl+0x241/0x360 [ 314.039497][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.044677][ T12] ? __pfx__printk+0x10/0x10 [ 314.049250][ T12] ? vscnprintf+0x5d/0x90 [ 314.053574][ T12] panic+0x349/0x860 [ 314.057488][ T12] ? __warn+0x172/0x4e0 [ 314.061659][ T12] ? __pfx_panic+0x10/0x10 [ 314.066102][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 314.071048][ T12] __warn+0x346/0x4e0 [ 314.075015][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 314.080978][ T12] report_bug+0x2b3/0x500 [ 314.085288][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 314.091248][ T12] handle_bug+0x3e/0x70 [ 314.095381][ T12] exc_invalid_op+0x1a/0x50 [ 314.099864][ T12] asm_exc_invalid_op+0x1a/0x20 [ 314.104714][ T12] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 314.111314][ T12] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 06 b4 f6 85 db 74 29 e8 4a 32 9a f6 84 c0 74 27 e8 81 02 b4 f6 e9 84 00 00 00 e8 77 02 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 02 b4 f6 eb [ 314.130908][ T12] RSP: 0018:ffffc900001179e0 EFLAGS: 00010293 [ 314.136965][ T12] RAX: ffffffff8ae224f9 RBX: 0000000000000000 RCX: ffff8880172c5a00 [ 314.144920][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.152873][ T12] RBP: ffffc90000117b00 R08: ffffffff8ae220c9 R09: 1ffffffff25f50bd [ 314.160832][ T12] R10: dffffc0000000000 R11: fffffbfff25f50be R12: ffff88806a056098 [ 314.168799][ T12] R13: dffffc0000000000 R14: ffff88806a056018 R15: ffff8880182ce000 [ 314.176774][ T12] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 314.182744][ T12] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 314.188733][ T12] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 314.194879][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 314.200071][ T12] cfg80211_process_wdev_events+0x356/0x510 [ 314.205963][ T12] cfg80211_process_rdev_events+0xac/0x110 [ 314.211766][ T12] ? process_scheduled_works+0x945/0x1830 [ 314.217484][ T12] cfg80211_event_work+0x2f/0x40 [ 314.222414][ T12] process_scheduled_works+0xa2c/0x1830 [ 314.227972][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.233950][ T12] ? assign_work+0x364/0x3d0 [ 314.238535][ T12] worker_thread+0x86d/0xd50 [ 314.243124][ T12] ? __kthread_parkme+0x169/0x1d0 [ 314.248140][ T12] ? __pfx_worker_thread+0x10/0x10 [ 314.253242][ T12] kthread+0x2f0/0x390 [ 314.257311][ T12] ? __pfx_worker_thread+0x10/0x10 [ 314.262408][ T12] ? __pfx_kthread+0x10/0x10 [ 314.266990][ T12] ret_from_fork+0x4b/0x80 [ 314.271399][ T12] ? __pfx_kthread+0x10/0x10 [ 314.275982][ T12] ret_from_fork_asm+0x1a/0x30 [ 314.280751][ T12] [ 314.283973][ T12] Kernel Offset: disabled [ 314.288364][ T12] Rebooting in 86400 seconds..