last executing test programs: 33.474179136s ago: executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) 33.047087992s ago: executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) 32.897585078s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r1, &(0x7f0000000100)="1edf0d50d5770ac0de6e0136413b9eca963f867c5e6917fd92021c1665c39c849c28f3a771", 0x25, 0x81, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x1b) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0) 32.871926677s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', '', [{0x20, 'byteorder\x00\x02\x12q\x81(~\xbb\xf7\xe0\x8c\x12\x1a\xd1pDd\"\xd3\xe8Q\xf2\xf5\xb9\xec\xe1]\xe5\xc3\x95\x9b\x82\xae:\xc9\xf7Iu\xad\xe2\xa8\x83\x13L\xcfT\x8cvK$\xd9\n\x01\xb7\xcf\r\xd1>\xbc\x986H{\x883\xcdY@\xa4\xa2\x91\xcaP\xd5S5\xa4Q\x16\xb1'}, {0x20, '\xbb\x88\x7f\t\x8d\xbda\xb5\x83\xfe\xb3\xf2\x83\x91\x1dw|!\xfdl\f\xb0\rX}\xe3H\x83\x81\x9b\xa7\xad\xb7\xeb\xf2\xe4\xa1\n\v\xd0\x15B\x1c`\x98\xb6\x98\xd4^/\xdd\xa0\x81\x7fiB\xb8\xc2&W\xaf\xb0\xc2R\x1b\xd5I\xe1\x98\x97\xb3|\xb4\xf8\xe3\xf8\'\x99c\x04y\xe8\xb0\x0f\x9cR\x13Lc\xf7\xacxIl\xf3\x10\xac\x9aPS\xaf\x10\ac\xed{i\xf5\xda:\xea\x1a\x9eT\x91\xf4h\xd1\x8c\xcdB$=\x00\x00\x82\x8fl\aT\x83\xee\x17\xc0\x8d\x18B7\x96\xd00\x18\xde>\x8ca{Rn \xbe\xa6K\xc4\x9f\xa5\x19\x14\xb4F\xb8\x1a\xfd\xf6\x0f\xf7\x93\"\xb9\xa0\xd9\xc0\x049\x88k\xe2\x82\xd1c\xb8\xe1o}\xd9\xf4\xee\x16\xa5N\"g\xf18\xaeg\xc5\x17\x9bAj\xfc)c\xf4\x92\xdd\xdc'}]}, 0x12f) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000300)=""/118, 0x76}], 0x2}}], 0x1, 0x0, 0x0) 32.76630432s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x32}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 32.709395893s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) 32.69856121s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={0x0, 0x12000000, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 32.689763694s ago: executing program 2: ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/523], 0x290) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 32.544090513s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x4c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x1, 0x0) 31.802009685s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000a000850000004500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 30.924304477s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="2df24d8a", 0x7ffff000}, {&(0x7f0000000280)="edb31d7be648da153ddb1ac8a0dec7af29a2a59dc91e0a68f4465452b8c79cf645b833f12b35209a", 0x28}], 0x2) 30.888157738s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{0x0, 0x0, 0x9}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 30.861815882s ago: executing program 4: r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1800", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 30.842921076s ago: executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000), 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000800)="ff", &(0x7f0000000680)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) 30.831157635s ago: executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000004980)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@generic={0x89, 0x2}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@dev}, &(0x7f0000000140)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0xba01}, 0x0) 30.762700191s ago: executing program 3: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0) 30.671081036s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}]}, 0x28}}, 0x0) 30.650930365s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000001900)=""/4119, 0x1017}, {&(0x7f00000005c0)=""/85, 0x55}], 0x4}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 30.606531574s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001500000070002b804c00038008000200feffffff06000300a1aa00000800020002000000060001000100000006000300a2aa000006000100020000000600010000000000080002000200000006000300a0aa00000800040009000000080001000200000008e3030001000000050002000000000005002900000000000c00060001"], 0x98}}, 0x0) 30.422598764s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.35641456s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.332850853s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={0x0, 0x12000000, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 30.325126907s ago: executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)={0x44, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2d2340b1febd3dad8fbf086cb9bd3319"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) 30.194245277s ago: executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002840)={'gretap0\x00', &(0x7f0000002740)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0x4f, {{0x21, 0x4, 0x0, 0x33, 0x84, 0x0, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x3, 0xa1}, @timestamp_prespec={0x44, 0x3c, 0xe, 0x3, 0x0, [{@local, 0x2}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x73}, {@loopback, 0x6}, {@broadcast, 0xffffcd7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @rr={0x7, 0x3, 0x4c}, @rr={0x7, 0xf, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x6, [{@multicast1, 0x7}]}, @ssrr={0x89, 0x13, 0x75, [@broadcast, @broadcast, @loopback, @multicast1]}]}}}}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x10}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x2, 0x6}, 0xfffffffffffffdd9) r9 = socket$kcm(0x2, 0xa, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}}) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 30.035048146s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000a000850000004500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 393.818344ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 306.19766ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0x4) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 250.19619ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{0x0, 0x0, 0x9}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 129.643593ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000003c0), &(0x7f0000000400)=0x4) kernel console output (not intermixed with test programs): stent configuration, please check. [ 276.732346][T12392] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.765846][T12392] tipc: Enabling of bearer rejected, failed to enable media [ 277.305193][T12424] netlink: 658 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.332082][T12426] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 277.448031][ T5122] Bluetooth: hci3: command tx timeout [ 277.473757][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.609895][T12433] netlink: 'syz-executor.0': attribute type 64 has an invalid length. [ 277.641778][T12433] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 277.803646][T12444] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 277.952813][T12454] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 278.125284][T12462] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 278.178049][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.193120][T12462] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 278.212516][T12462] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 278.277102][T12462] team0: Port device wlan1 removed [ 278.294308][T12462] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 278.311361][T12462] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 278.592926][T12484] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 278.614039][T12486] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 278.703325][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.921452][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.077704][T12516] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 279.503129][T12539] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 279.517344][T12543] __nla_validate_parse: 3 callbacks suppressed [ 279.517367][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.523614][ T5122] Bluetooth: hci3: command 0x0405 tx timeout [ 279.564713][T12539] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.992671][T12561] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.500909][T12597] openvswitch: netlink: Unknown nsh attribute 0 [ 280.835057][T12619] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 280.844641][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.841843][T12658] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 281.863421][T12658] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 281.880828][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.201501][T12690] xt_HMARK: spi-set and port-set can't be combined [ 282.321756][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.388003][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.711106][T12723] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 283.056089][T12744] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 283.074994][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.213642][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.289467][T12758] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.361159][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.494034][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.512183][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.652510][T12780] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 284.034159][T12801] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 284.154960][T12810] nbd: nbd0 already in use [ 284.398327][ T5170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.449110][T12823] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 284.476596][T12830] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 284.686737][T12838] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 284.738137][T12838] __nla_validate_parse: 4 callbacks suppressed [ 284.738162][T12838] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.858820][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.900212][T12842] nbd: nbd0 already in use [ 285.358320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.440713][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.518542][ T5129] Bluetooth: hci3: command 0x0405 tx timeout [ 285.527309][T12883] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.251117][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.480678][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.731878][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.841580][T12962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.034486][T12970] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.333079][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.359718][ T5168] net_ratelimit: 1 callbacks suppressed [ 287.359739][ T5168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.378033][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.476964][T12993] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 287.500548][T12993] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.518282][ T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.792033][T13014] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 287.809434][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.918771][T13020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.999319][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.120370][T13031] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 288.131539][T13031] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.233830][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.252489][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.368550][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.377615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.387529][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.404998][T13045] pimreg12: entered allmulticast mode [ 288.445715][T13044] pimreg12: left allmulticast mode [ 288.558822][ T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.641168][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.944241][T13026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.654032][T13140] __nla_validate_parse: 2 callbacks suppressed [ 290.654053][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.735707][T13147] bridge: RTM_NEWNEIGH bridge2 with NTF_USE is not supported [ 290.791507][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.827519][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.842372][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.899083][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.916592][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.927124][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.937310][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.953179][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.963711][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.118588][T13165] sctp: [Deprecated]: syz-executor.4 (pid 13165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.118588][T13165] Use struct sctp_sack_info instead [ 291.432233][T13153] chnl_net:caif_netlink_parms(): no params data found [ 291.448591][T13185] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 291.467742][T13185] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.484612][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.714045][T13153] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.729292][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.737197][T13153] bridge_slave_0: entered allmulticast mode [ 291.745530][T13153] bridge_slave_0: entered promiscuous mode [ 291.767296][T13153] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.778633][T13153] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.786443][T13153] bridge_slave_1: entered allmulticast mode [ 291.794149][T13153] bridge_slave_1: entered promiscuous mode [ 291.853489][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.867161][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.924497][T13153] team0: Port device team_slave_0 added [ 291.936702][T13153] team0: Port device team_slave_1 added [ 291.968717][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.975700][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.004100][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.019777][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.026760][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.054448][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.104231][T13153] hsr_slave_0: entered promiscuous mode [ 292.112933][T13153] hsr_slave_1: entered promiscuous mode [ 292.119760][T13153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.127346][T13153] Cannot create hsr debugfs directory [ 292.290166][T13153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.301159][T13153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.411808][T13153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.426516][T13153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.523279][T13153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.533778][T13153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.713098][T13153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.722441][ T5202] net_ratelimit: 12 callbacks suppressed [ 292.722461][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.734686][T13153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.757119][T13153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.775925][T13153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.872280][T13153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.900267][T13153] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.922710][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.929913][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.945321][ T931] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.952646][ T931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.043150][ T5129] Bluetooth: hci2: command tx timeout [ 293.156910][T13153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.206174][T13153] veth0_vlan: entered promiscuous mode [ 293.227155][T13153] veth1_vlan: entered promiscuous mode [ 293.266972][T13153] veth0_macvtap: entered promiscuous mode [ 293.280701][T13153] veth1_macvtap: entered promiscuous mode [ 293.302801][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.313934][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.324559][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.335378][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.346134][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.357094][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.369287][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.379845][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.390230][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.400856][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.410818][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.421349][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.434428][T13153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.456621][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.468075][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.480031][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.490747][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.501163][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.512350][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.522589][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.534833][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.545576][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.556061][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.565939][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.577274][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.589190][T13153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.603383][T13153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.613044][T13153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.625466][T13153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.634738][T13153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.763925][ T6905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.776346][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.803158][ T6905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.825950][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.864136][T13212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.879248][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.887608][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.930225][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.946789][T13215] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 293.959038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.983492][T13215] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.992471][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.011792][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.021623][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.027533][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.040078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.051322][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.362323][T13229] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.614146][T13244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.763844][T13252] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.899362][T13255] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 295.118995][ T5129] Bluetooth: hci2: command tx timeout [ 295.412991][T13283] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 295.898207][T13305] __nla_validate_parse: 4 callbacks suppressed [ 295.898232][T13305] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.947418][T13305] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 295.978230][T13305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.146937][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.448929][T13333] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 296.466290][T13333] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.481978][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.586877][T13336] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.645309][T13336] Êü: entered promiscuous mode [ 296.722738][T13341] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 296.738386][T13341] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.834473][T13349] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 297.198110][ T5129] Bluetooth: hci2: command tx timeout [ 297.265426][T13374] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.763724][ T45] net_ratelimit: 154 callbacks suppressed [ 297.763748][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.919611][ T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.947676][T13475] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.987500][T13475] Êü: entered promiscuous mode [ 299.278998][ T5129] Bluetooth: hci2: command tx timeout [ 299.436577][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.622368][T13510] openvswitch: Êü: Dropping previously announced user features [ 300.167920][ T29] audit: type=1804 audit(1718789059.924:12): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/97/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 300.492243][T13561] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 300.655775][T13558] bond0: entered promiscuous mode [ 300.666477][T13558] bond_slave_0: entered promiscuous mode [ 300.688298][T13558] bond_slave_1: entered promiscuous mode [ 300.713193][T13558] team0: entered promiscuous mode [ 300.725051][T13558] team_slave_0: entered promiscuous mode [ 300.733520][T13558] team_slave_1: entered promiscuous mode [ 300.750941][T13558] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 300.765435][T13558] Cannot create hsr debugfs directory [ 300.959783][T13586] __nla_validate_parse: 2 callbacks suppressed [ 300.959808][T13586] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.067692][T13594] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 301.576076][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.742971][T13628] wg1: entered promiscuous mode [ 301.813111][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.115736][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.852723][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.919168][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.943890][T13762] nbd: couldn't find a device at index 1073741824 [ 305.169759][T13771] tap0: tun_chr_ioctl cmd 1074025677 [ 305.198523][T13771] tap0: linktype set to 780 [ 306.409890][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.787441][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.502283][T13936] tun0: tun_chr_ioctl cmd 1074025675 [ 310.514179][T13936] tun0: persist enabled [ 310.521093][T13936] tun0: tun_chr_ioctl cmd 1074025675 [ 310.526529][T13936] tun0: persist enabled [ 310.626353][T13941] nbd: couldn't find a device at index 1073741824 [ 311.610945][T14000] Cannot find add_set index 0 as target [ 311.965248][T14020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.994172][T14022] netlink: del zone limit has 8 unknown bytes [ 312.304224][T14039] sch_fq: defrate 0 ignored. [ 312.566522][T14052] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 312.618974][T14052] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.819726][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.838181][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.850240][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.871257][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.886515][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 313.895281][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.532474][T14090] chnl_net:caif_netlink_parms(): no params data found [ 314.588112][T14124] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 314.610192][T14124] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.656962][T14127] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 314.683582][T14127] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 314.715145][T14127] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 314.791147][T14140] sctp: [Deprecated]: syz-executor.0 (pid 14140) Use of int in max_burst socket option. [ 314.791147][T14140] Use struct sctp_assoc_value instead [ 314.872041][T14090] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.902204][T14090] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.920807][T14090] bridge_slave_0: entered allmulticast mode [ 314.929907][T14090] bridge_slave_0: entered promiscuous mode [ 314.951942][ T29] audit: type=1804 audit(1718789074.714:13): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/91/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 314.976530][T14090] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.986322][T14090] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.003566][T14090] bridge_slave_1: entered allmulticast mode [ 315.011667][T14090] bridge_slave_1: entered promiscuous mode [ 315.467659][T14090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.604032][T14090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.995336][T14090] team0: Port device team_slave_0 added [ 316.008984][ T5129] Bluetooth: hci4: command tx timeout [ 316.068293][T14090] team0: Port device team_slave_1 added [ 316.205344][T14090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.222274][T14090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.255130][T14175] sctp: [Deprecated]: syz-executor.2 (pid 14175) Use of int in max_burst socket option. [ 316.255130][T14175] Use struct sctp_assoc_value instead [ 316.277889][T14090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.322258][T14090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.337926][T14090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.375396][T14090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.522435][T14179] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64) [ 316.549749][T14090] hsr_slave_0: entered promiscuous mode [ 316.571434][T14090] hsr_slave_1: entered promiscuous mode [ 316.592304][T14090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.617353][T14090] Cannot create hsr debugfs directory [ 316.683174][ T29] audit: type=1804 audit(1718789076.444:14): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/479/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 316.735500][T14183] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 316.761639][T14183] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.317037][T14090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.335082][T14090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 317.346085][T14090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.447719][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.500698][T14090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.548106][T14090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 317.578647][T14090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.725912][T14090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.753940][T14090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 317.777928][T14090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.080643][ T5129] Bluetooth: hci4: command tx timeout [ 318.311304][T14090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.343577][T14090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.447657][T14090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.481951][T14090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.805806][T14090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.852784][T14235] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 318.870527][T14235] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.901755][T14090] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.952108][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.959430][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.989892][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.997111][ T5202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.117045][T14240] ip6t_rpfilter: unknown options [ 319.640900][T14090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.869508][T14090] veth0_vlan: entered promiscuous mode [ 319.911421][ T29] audit: type=1804 audit(1718789079.674:15): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir493822305/syzkaller.eOxh9G/732/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 320.023951][T14090] veth1_vlan: entered promiscuous mode [ 320.163860][T14090] veth0_macvtap: entered promiscuous mode [ 320.170713][ T5129] Bluetooth: hci4: command tx timeout [ 320.206103][T14090] veth1_macvtap: entered promiscuous mode [ 320.228550][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.242462][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.252391][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.264325][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.274254][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.299526][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.347795][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.370366][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.382547][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.393921][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.406288][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.416995][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.427722][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.449997][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.476426][T14268] xt_HMARK: proto mask must be zero with L3 mode [ 320.482159][T14090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.507257][T14265] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 320.516813][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.574149][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.606417][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.657904][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.685769][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.701365][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.727891][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.737750][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.746177][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.778131][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.797097][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.818974][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.838400][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.858042][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.878615][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.901555][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.925385][T14090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.979626][T14280] sctp: [Deprecated]: syz-executor.0 (pid 14280) Use of int in max_burst socket option deprecated. [ 320.979626][T14280] Use struct sctp_assoc_value instead [ 321.032672][T14090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.067928][T14090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.076705][T14090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.107916][T14090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.371732][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.381988][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.495948][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.527922][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.059718][T14312] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 322.104421][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.238646][ T5129] Bluetooth: hci4: command tx timeout [ 323.196245][T14344] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 323.356704][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.386708][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.407375][T14363] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 323.428597][T14363] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 323.470748][T14363] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 323.486632][T14363] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.145461][T14386] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.806488][T14433] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 324.838481][T14433] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 325.277735][T14451] Bluetooth: MGMT ver 1.22 [ 325.632838][T14463] Bluetooth: MGMT ver 1.22 [ 325.890779][T14468] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 325.919030][T14468] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 325.939817][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.083934][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.096036][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.104970][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.114379][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.122681][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.131827][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 326.194878][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.352719][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.546024][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.607599][ T29] audit: type=1804 audit(1718789086.364:16): pid=14487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/134/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 326.727572][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.796832][T14496] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 326.810488][T14496] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 326.965550][T14502] Unknown options in mask 1f4 [ 327.349030][ T11] bridge_slave_1: left allmulticast mode [ 327.354751][ T11] bridge_slave_1: left promiscuous mode [ 327.387394][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.448892][ T11] bridge_slave_0: left allmulticast mode [ 327.454622][ T11] bridge_slave_0: left promiscuous mode [ 327.479298][T14519] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 327.498366][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.565897][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.701552][T14526] Unknown options in mask 1f4 [ 328.238086][ T5119] Bluetooth: hci4: command tx timeout [ 328.664192][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.707667][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.750504][ T11] bond0 (unregistering): Released all slaves [ 328.923353][T14472] chnl_net:caif_netlink_parms(): no params data found [ 329.710587][T14472] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.748478][T14472] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.755842][T14472] bridge_slave_0: entered allmulticast mode [ 329.759684][T14560] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 329.789562][T14472] bridge_slave_0: entered promiscuous mode [ 329.820011][T14472] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.827195][T14472] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.846804][T14472] bridge_slave_1: entered allmulticast mode [ 329.860245][T14472] bridge_slave_1: entered promiscuous mode [ 329.882121][ T11] hsr_slave_0: left promiscuous mode [ 329.888764][ T11] hsr_slave_1: left promiscuous mode [ 329.895372][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.903525][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.916346][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.935447][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.994131][ T11] veth1_macvtap: left promiscuous mode [ 330.008554][ T11] veth0_macvtap: left promiscuous mode [ 330.014517][ T11] veth1_vlan: left promiscuous mode [ 330.023092][ T11] veth0_vlan: left promiscuous mode [ 330.328016][ T5119] Bluetooth: hci4: command tx timeout [ 330.955675][ T11] team0 (unregistering): Port device team_slave_1 removed [ 331.003238][ T11] team0 (unregistering): Port device team_slave_0 removed [ 331.493065][T14562] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 331.514523][T14562] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 331.649717][T14573] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 331.674521][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.709665][T14577] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.730365][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.782530][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.832407][T14583] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 331.862425][T14472] team0: Port device team_slave_0 added [ 331.919767][T14472] team0: Port device team_slave_1 added [ 332.108103][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.115112][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.176248][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.206953][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.212109][T14599] xt_hashlimit: size too large, truncated to 1048576 [ 332.237972][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.240803][T14599] xt_hashlimit: overflow, try lower: 0/0 [ 332.286889][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.408093][ T5119] Bluetooth: hci4: command tx timeout [ 332.512420][T14472] hsr_slave_0: entered promiscuous mode [ 332.540518][T14472] hsr_slave_1: entered promiscuous mode [ 332.573720][T14472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.605935][T14472] Cannot create hsr debugfs directory [ 332.734275][T14609] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 332.753536][T14609] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.333573][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.444249][T14635] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 333.465895][T14635] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.552024][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.647048][T14643] tipc: Enabling of bearer rejected, failed to enable media [ 333.752840][T14641] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 333.854439][T14655] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.866636][T14655] unsupported nlmsg_type 40 [ 333.959064][T14472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.990940][T14472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.017666][T14472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.059566][T14472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.102113][T14667] xt_TCPMSS: Only works on TCP SYN packets [ 334.478013][ T5119] Bluetooth: hci4: command tx timeout [ 334.501610][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.546018][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.575477][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.582713][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.626883][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.634145][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.829634][T14696] xt_TCPMSS: Only works on TCP SYN packets [ 335.188372][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.377726][T14472] veth0_vlan: entered promiscuous mode [ 335.474155][T14472] veth1_vlan: entered promiscuous mode [ 335.599839][T14472] veth0_macvtap: entered promiscuous mode [ 335.649768][T14472] veth1_macvtap: entered promiscuous mode [ 335.722897][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.768818][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.790135][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.812307][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.844672][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.893343][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.929233][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.951460][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.980100][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.011487][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.033378][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.051543][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.062542][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.075345][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.094197][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.108252][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.152697][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.240003][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.278338][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.303163][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.338865][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.360594][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.387838][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.398255][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.409735][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.430422][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.449276][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.467470][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.472067][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.494694][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.513837][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.536343][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.564142][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.601714][T14472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.620345][T14472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.640783][T14472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.657890][T14472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.942665][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.965845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.034157][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.054850][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.509616][T14792] __nla_validate_parse: 1 callbacks suppressed [ 337.509637][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.610085][T14798] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 337.635849][T14798] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.688240][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.884062][T14813] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.655563][T14819] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 338.880077][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.198372][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.273718][T14907] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 340.642924][T14932] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 341.210516][T14954] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.478809][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.838683][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.111080][ T29] audit: type=1800 audit(1718789101.874:17): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 342.155119][ T29] audit: type=1804 audit(1718789101.914:18): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/182/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 342.221520][ T29] audit: type=1804 audit(1718789101.914:19): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/182/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 342.382461][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.471440][T15025] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 342.676967][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.899907][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.175167][ T29] audit: type=1800 audit(1718789102.924:20): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 343.245451][ T29] audit: type=1804 audit(1718789102.974:21): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/185/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 343.275233][ T29] audit: type=1804 audit(1718789102.984:22): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/185/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 343.483602][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.173281][T15112] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 344.186095][T15112] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.709456][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.906687][T15149] bridge_slave_0: left allmulticast mode [ 344.938004][T15149] bridge_slave_0: left promiscuous mode [ 344.959356][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.997000][T15149] bridge_slave_1: left allmulticast mode [ 345.014178][T15149] bridge_slave_1: left promiscuous mode [ 345.026700][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.080856][T15149] bond0: (slave bond_slave_0): Releasing backup interface [ 345.136909][T15149] bond0: (slave bond_slave_1): Releasing backup interface [ 345.255610][T15149] team0: Port device team_slave_0 removed [ 345.307506][T15149] team0: Port device team_slave_1 removed [ 345.328490][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.336014][T15149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.349494][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.357635][T15149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.437742][T15162] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 345.461295][T15152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.486152][T15152] team0: Port device bond0 added [ 345.743515][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.952008][T15181] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.531380][T15217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.038998][T15251] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 347.827659][T15296] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 348.129759][T15314] veth0_vlan: entered allmulticast mode [ 348.445373][T15331] bond0: (slave bond_slave_0): Releasing backup interface [ 348.548936][T15331] bond0: (slave bond_slave_1): Releasing backup interface [ 348.641881][T15331] team0: Port device team_slave_0 removed [ 348.704817][T15331] team0: Port device team_slave_1 removed [ 348.724236][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.732734][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.742410][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.757509][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.893849][T15334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.910353][T15334] team0: Device bond0 failed to register rx_handler [ 349.036426][T15357] veth0_vlan: entered allmulticast mode [ 349.409420][T15375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.623338][T15389] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 349.653180][T15389] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 349.768551][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.047686][T15398] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 350.300448][T15423] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 350.328179][T15423] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.462951][ T5202] IPVS: starting estimator thread 0... [ 350.480493][T15427] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 350.578366][T15429] IPVS: using max 17 ests per chain, 40800 per kthread [ 350.944081][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.955869][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.965885][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.977180][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.986652][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.996763][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.408315][T15470] bond0: entered promiscuous mode [ 351.689715][T15449] chnl_net:caif_netlink_parms(): no params data found [ 351.773926][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.781882][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.789685][T15449] bridge_slave_0: entered allmulticast mode [ 351.796892][T15449] bridge_slave_0: entered promiscuous mode [ 351.806592][T15449] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.815298][T15449] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.822753][T15449] bridge_slave_1: entered allmulticast mode [ 351.830718][T15449] bridge_slave_1: entered promiscuous mode [ 351.874666][T15449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.889275][T15449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.939386][T15449] team0: Port device team_slave_0 added [ 351.948031][T15449] team0: Port device team_slave_1 added [ 351.983644][T15449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.990746][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.017610][T15449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.044843][T15449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.052932][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.079973][T15449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.133070][T15449] hsr_slave_0: entered promiscuous mode [ 352.143617][T15449] hsr_slave_1: entered promiscuous mode [ 352.150472][T15449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.159285][T15449] Cannot create hsr debugfs directory [ 352.331268][T15449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.419960][T15449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.515177][T15449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.611415][T15449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.739493][T15449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.750307][T15449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.763210][T15449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.773990][T15449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.882126][T15449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.914008][T15449] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.927316][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.934501][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.964484][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.971718][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.038536][ T5119] Bluetooth: hci1: command tx timeout [ 353.185230][T15449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.244288][T15449] veth0_vlan: entered promiscuous mode [ 353.265260][T15449] veth1_vlan: entered promiscuous mode [ 353.315652][T15449] veth0_macvtap: entered promiscuous mode [ 353.327288][T15449] veth1_macvtap: entered promiscuous mode [ 353.350564][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.362844][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.374898][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.385435][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.395552][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.406076][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.416131][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.427280][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.437443][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.451431][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.462240][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.474617][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.487684][T15449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.505182][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.516409][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.527260][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.538491][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.548676][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.560415][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.571175][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.583959][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.593954][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.606832][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.617049][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.628015][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.640521][T15449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.658548][T15449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.667291][T15449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.678828][T15449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.687569][T15449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.858317][T15502] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.886171][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.911943][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.958775][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.966669][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.125455][ T29] audit: type=1800 audit(1718789113.884:23): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 354.168525][ T29] audit: type=1804 audit(1718789113.924:24): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/228/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 354.500722][T15528] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.822875][ T29] audit: type=1800 audit(1718789114.584:25): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 354.862784][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.918080][ T29] audit: type=1804 audit(1718789114.614:26): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1505925704/syzkaller.7ITs0E/3/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 355.124172][ T5119] Bluetooth: hci1: command tx timeout [ 355.579085][T15580] team_slave_0: entered promiscuous mode [ 355.585344][T15580] team_slave_1: entered promiscuous mode [ 355.627097][T15580] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.648551][T15580] team_slave_0: left promiscuous mode [ 355.654111][T15580] team_slave_1: left promiscuous mode [ 356.190760][ T29] audit: type=1804 audit(1718789115.954:27): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3261271336/syzkaller.AxxjJE/77/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 357.114372][T15654] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 357.200036][ T5119] Bluetooth: hci1: command tx timeout [ 357.564860][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.746000][T15691] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.765988][T15696] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.778867][T15691] nbd: nbd0 already in use [ 357.787037][T15696] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.923113][T15704] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.986394][T15707] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.006814][T15707] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 358.191011][ T29] audit: type=1804 audit(1718789117.954:28): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/244/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 358.900183][T15738] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 358.951610][T15738] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 359.004443][T15742] tipc: Started in network mode [ 359.031128][T15742] tipc: Node identity 8278e5d4332d, cluster identity 4711 [ 359.091398][T15742] tipc: Enabled bearer , priority 10 [ 359.279670][ T5119] Bluetooth: hci1: command tx timeout [ 359.636390][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.645975][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802dbd9800: rx timeout, send abort [ 359.654968][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802dbd9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 360.083114][T15766] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.208149][ T8] tipc: Node number set to 2975196628 [ 360.825600][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.839870][T15771] infiniband syz2: set active [ 360.859086][T15771] infiniband syz2: added bond_slave_1 [ 360.935974][T15771] RDS/IB: syz2: added [ 360.940597][T15771] smc: adding ib device syz2 with port count 1 [ 360.949117][T15771] smc: ib device syz2 port 1 has pnetid [ 361.056264][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.098191][ T29] audit: type=1804 audit(1718789120.854:29): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/301/memory.events" dev="sda1" ino=1939 res=1 errno=0 [ 361.180450][ T29] audit: type=1804 audit(1718789120.884:30): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/301/memory.events" dev="sda1" ino=1939 res=1 errno=0 [ 361.260983][ T29] audit: type=1804 audit(1718789120.894:31): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/301/memory.events" dev="sda1" ino=1939 res=1 errno=0 [ 361.777610][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.860065][T15826] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 362.070100][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.581109][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.419310][T15887] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 363.437202][T15889] tun0: tun_chr_ioctl cmd 1074025680 [ 363.827526][T15902] syz-executor.4[15902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.828023][T15902] syz-executor.4[15902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.059777][T15912] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.118075][T15912] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.236795][T15919] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 364.266654][T15919] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.294058][T15919] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 364.943666][T15940] syz-executor.2[15940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.943945][T15940] syz-executor.2[15940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.479157][T15955] __nla_validate_parse: 2 callbacks suppressed [ 365.479183][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.581504][T15961] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 365.618108][T15961] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.648493][T15961] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 365.682119][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.834921][T15971] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 366.103701][T15988] dccp_close: ABORT with 1964 bytes unread [ 366.285675][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.318787][T16000] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 366.588980][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.261774][T16056] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 367.271391][T16053] macvlan0: entered allmulticast mode [ 367.294600][T16053] veth1_vlan: entered allmulticast mode [ 369.304041][T16167] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 369.630655][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.973410][T16202] macvlan2: entered promiscuous mode [ 370.008073][T16202] macvlan2: entered allmulticast mode [ 370.045696][T16202] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 370.064491][T16202] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 370.078177][ T5119] Bluetooth: hci1: command tx timeout [ 370.132229][T16202] team0: Port device macvlan2 added [ 370.205600][T16214] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 370.656945][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.679350][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.808876][T16246] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.311876][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.333520][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.441900][T16276] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.714058][T16291] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 372.904880][T16351] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.915713][T16351] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 373.525029][T16381] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 373.540761][T16378] batadv1: entered allmulticast mode [ 373.959937][T16398] Bluetooth: hci3: unsupported parameter 64512 [ 373.976301][T16398] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 374.227305][T16411] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.252139][T16411] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.679093][T16431] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 374.814039][T16437] netlink: zone id is out of range [ 374.828409][T16437] netlink: zone id is out of range [ 374.837958][T16435] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 374.869863][T16437] netlink: zone id is out of range [ 374.892624][T16437] netlink: zone id is out of range [ 374.912632][T16437] netlink: zone id is out of range [ 374.937634][T16442] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 374.951919][T16437] netlink: zone id is out of range [ 374.968600][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.981697][T16437] netlink: zone id is out of range [ 374.986975][T16437] netlink: zone id is out of range [ 375.152498][T16450] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 375.631756][T16469] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 376.175868][T16486] tun0: tun_chr_ioctl cmd 1074025677 [ 376.192799][T16486] tun0: linktype set to 6 [ 376.449067][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.748875][T16505] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.758580][T16505] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.767569][T16505] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.776701][T16505] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 376.860703][T16505] vxlan0: entered promiscuous mode [ 376.865906][T16505] vxlan0: entered allmulticast mode [ 376.918196][T16505] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.928807][T16505] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.940251][T16505] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.949248][T16505] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.468961][T16534] tun0: tun_chr_ioctl cmd 1074025677 [ 377.474447][T16534] tun0: linktype set to 6 [ 377.798762][T16550] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 378.060903][T16553] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 378.673104][T16574] tun0: tun_chr_ioctl cmd 1074025677 [ 378.687620][T16574] tun0: linktype set to 6 [ 378.884509][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.329034][T16601] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 380.295838][T16638] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 380.380644][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.493787][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 380.856618][T16665] bridge0: entered promiscuous mode [ 380.889088][T16665] bridge0: left promiscuous mode [ 381.097365][T16679] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.149750][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.346823][T16687] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.396046][T16695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.852553][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.866148][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.039327][T16720] tls_set_device_offload_rx: netdev not found [ 382.308632][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 382.419550][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.441816][T16744] nbd: socks must be embedded in a SOCK_ITEM attr [ 382.489856][T16751] tls_set_device_offload_rx: netdev not found [ 382.558891][T16749] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 382.606900][T16757] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 382.652235][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.950005][T16773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.593020][T16795] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 383.744021][T16797] bridge0: entered promiscuous mode [ 383.784917][T16797] bridge0: left promiscuous mode [ 383.960064][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.411579][T16825] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 384.780469][T16836] bridge0: entered promiscuous mode [ 384.856583][T16836] bridge0: left promiscuous mode [ 384.905622][T16846] tipc: Failed to remove unknown binding: 66,1,1/0:1158678359/1158678361 [ 384.953220][T16846] tipc: Failed to remove unknown binding: 66,1,1/0:1158678359/1158678361 [ 385.048296][T16850] sch_tbf: burst 3 is lower than device lo mtu (65550) ! [ 385.100189][T16854] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 385.833602][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.040011][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.049994][T16884] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 386.050254][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.067560][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.076070][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.084228][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.091886][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.101250][T16879] sch_tbf: burst 3 is lower than device lo mtu (11337746) ! [ 386.317363][T16892] tipc: Failed to remove unknown binding: 66,1,1/0:324872454/324872456 [ 386.345238][T16892] tipc: Failed to remove unknown binding: 66,1,1/0:324872454/324872456 [ 386.346232][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.545802][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.741924][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.906860][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.140489][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.255318][ T11] bridge_slave_1: left allmulticast mode [ 387.268621][ T11] bridge_slave_1: left promiscuous mode [ 387.280573][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.290769][ T11] bridge_slave_0: left allmulticast mode [ 387.296467][ T11] bridge_slave_0: left promiscuous mode [ 387.303195][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.338415][ T11] tipc: Resetting bearer [ 387.361222][T16931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.777803][ T11] tipc: Disabling bearer [ 388.130988][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.146993][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.158778][ T5119] Bluetooth: hci1: command tx timeout [ 388.177134][ T11] bond0 (unregistering): Released all slaves [ 388.343918][ T11] tipc: Left network mode [ 388.542587][T16880] chnl_net:caif_netlink_parms(): no params data found [ 388.645107][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 388.928899][T16979] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 388.965181][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.115688][T16986] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 389.302836][ T11] hsr_slave_0: left promiscuous mode [ 389.317520][ T11] hsr_slave_1: left promiscuous mode [ 389.337548][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.359041][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.377395][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.395857][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.484318][ T11] veth1_macvtap: left promiscuous mode [ 389.498112][ T11] veth0_macvtap: left promiscuous mode [ 389.507252][ T11] veth1_vlan: left promiscuous mode [ 389.517504][ T11] veth0_vlan: left promiscuous mode [ 390.238563][ T5119] Bluetooth: hci1: command tx timeout [ 390.606527][ T11] team0 (unregistering): Port device team_slave_1 removed [ 390.665728][ T11] team0 (unregistering): Port device team_slave_0 removed [ 391.276172][T16880] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.283907][T16880] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.291488][T16880] bridge_slave_0: entered allmulticast mode [ 391.320496][T16880] bridge_slave_0: entered promiscuous mode [ 391.337501][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.388164][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.434357][T16880] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.467372][T16880] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.484648][T16880] bridge_slave_1: entered allmulticast mode [ 391.508039][T16880] bridge_slave_1: entered promiscuous mode [ 391.662991][T16880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.741964][T16880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.924477][T16880] team0: Port device team_slave_0 added [ 391.966555][T16880] team0: Port device team_slave_1 added [ 392.126721][T16880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.135641][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.164108][T16880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.208946][T16880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.216669][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.273794][T16880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.318722][ T5119] Bluetooth: hci1: command tx timeout [ 392.445773][T16880] hsr_slave_0: entered promiscuous mode [ 392.466299][T16880] hsr_slave_1: entered promiscuous mode [ 392.484047][T16880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.503890][T16880] Cannot create hsr debugfs directory [ 393.090687][T17085] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 393.101948][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 393.283222][T17089] xt_socket: unknown flags 0x8 [ 393.296858][T17091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.375645][T16880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.418735][T16880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.461657][T16880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.498464][T16880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 393.751996][T16880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.794737][T16880] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.809840][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.817139][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.907564][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.914848][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.319146][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.347916][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.398481][ T5129] Bluetooth: hci1: command tx timeout [ 394.443890][T16880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.585387][T16880] veth0_vlan: entered promiscuous mode [ 394.632285][T16880] veth1_vlan: entered promiscuous mode [ 394.662195][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.794098][T16880] veth0_macvtap: entered promiscuous mode [ 394.831355][T16880] veth1_macvtap: entered promiscuous mode [ 394.852571][T17153] xt_socket: unknown flags 0x8 [ 394.894838][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.919244][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.940874][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.956107][T17157] net_ratelimit: 146 callbacks suppressed [ 394.956129][T17157] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 394.970023][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.009416][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.020213][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.030676][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.041654][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.055877][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.068082][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.078024][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.088973][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.130515][T16880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.187225][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.206945][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.265366][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.300552][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.322374][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.360992][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.383668][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.419659][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.452713][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.513160][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.551252][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.577101][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.600790][T16880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.658866][T16880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.681557][T16880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.697100][T16880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.706414][T16880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.880934][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.908655][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.028680][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.045672][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.142043][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.314173][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 396.321044][ T5129] Bluetooth: hci3: command 0x0405 tx timeout [ 396.622947][T17224] ebtables: ebtables: counters copy to user failed while replacing table [ 397.693717][T17280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 397.985954][T17293] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.235151][T17309] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 398.249326][T17309] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.259672][T17309] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 398.269880][T17309] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 398.288832][T17309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.460029][T17320] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.542368][T17325] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.927157][T17339] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 399.502447][T17361] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 399.923978][T17376] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.950320][T17376] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.127499][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.134734][T17378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.189916][T17378] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.197093][T17378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.311807][T17383] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 400.329040][T17383] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.373356][T17383] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 400.382191][T17383] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 400.413519][T17383] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 404.024051][T17414] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.060947][T17414] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.082292][T17414] infiniband syz2: set active [ 404.098380][T17414] infiniband syz2: set active [ 404.272756][T17415] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.280027][T17415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.309089][T17415] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.316305][T17415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.337712][T17415] infiniband syz2: set active [ 404.346726][T17415] infiniband syz2: set active [ 404.403496][T17417] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 404.526081][T17436] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 404.954911][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.971442][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.172404][T17464] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 405.235313][T17458] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.242605][T17458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.329995][T17458] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.337226][T17458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.915027][T17488] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 408.569867][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.722131][T17580] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 408.742083][T17580] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.398595][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 409.416344][T17605] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 409.448030][T17605] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.481180][T17610] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 412.654850][T17648] tipc: Started in network mode [ 412.666958][T17648] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 412.676898][T17648] tipc: Enabling of bearer rejected, failed to enable media [ 412.844929][T17661] Bluetooth: MGMT ver 1.22 [ 414.370973][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.382650][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.395146][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.406443][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.430113][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.440535][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.443988][ T1034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.519955][T17730] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 414.738526][ T1034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.971041][ T1034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.101380][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.427556][ T1034] bridge_slave_1: left allmulticast mode [ 415.436116][ T1034] bridge_slave_1: left promiscuous mode [ 415.448361][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.470404][ T1034] bridge_slave_0: left allmulticast mode [ 415.479627][ T1034] bridge_slave_0: left promiscuous mode [ 415.491130][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.222609][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.236587][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.251759][ T1034] bond0 (unregistering): Released all slaves [ 416.280101][T17768] tap0: tun_chr_ioctl cmd 1074025678 [ 416.285555][T17768] tap0: group set to 0 [ 416.313416][T17776] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 416.558383][ T5119] Bluetooth: hci2: command tx timeout [ 416.755573][ T1034] mac80211_hwsim hwsim28 wlan0 (unregistering): left allmulticast mode [ 416.839347][ T1034] team0: Port device macvlan2 removed [ 417.517985][T17816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.575257][ T1034] hsr_slave_0: left promiscuous mode [ 417.608332][ T1034] hsr_slave_1: left promiscuous mode [ 417.620409][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.639560][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.655997][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.668431][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.725002][ T1034] veth1_macvtap: left promiscuous mode [ 417.738004][ T1034] veth0_macvtap: left promiscuous mode [ 417.743686][ T1034] veth1_vlan: left promiscuous mode [ 417.757802][ T1034] veth0_vlan: left promiscuous mode [ 418.456699][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 418.520939][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 418.649484][ T5119] Bluetooth: hci2: command tx timeout [ 419.052781][T17819] tap0: tun_chr_ioctl cmd 1074025678 [ 419.058678][T17819] tap0: group set to 0 [ 419.082470][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.094870][T17827] tun0: tun_chr_ioctl cmd 2147767507 [ 419.137231][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.146885][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.156666][T17829] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 419.213215][T17731] chnl_net:caif_netlink_parms(): no params data found [ 419.543225][T17851] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 419.702542][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 419.719782][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.732949][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.741392][T17731] bridge_slave_0: entered allmulticast mode [ 419.760248][T17731] bridge_slave_0: entered promiscuous mode [ 419.785260][T17855] tap0: tun_chr_ioctl cmd 1074025678 [ 419.805286][T17855] tap0: group set to 0 [ 419.820232][T17858] tun0: tun_chr_ioctl cmd 2147767507 [ 419.844024][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.854752][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.863780][T17731] bridge_slave_1: entered allmulticast mode [ 419.874558][T17731] bridge_slave_1: entered promiscuous mode [ 420.030493][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.061128][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.168834][T17731] team0: Port device team_slave_0 added [ 420.189665][T17731] team0: Port device team_slave_1 added [ 420.286715][T17873] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 420.311014][T17731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.331972][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.371976][T17731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.394287][T17731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.409971][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.502260][T17731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.637620][T17731] hsr_slave_0: entered promiscuous mode [ 420.654204][T17731] hsr_slave_1: entered promiscuous mode [ 420.668479][T17731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.679370][T17731] Cannot create hsr debugfs directory [ 420.718485][ T5119] Bluetooth: hci2: command tx timeout [ 420.914201][T17897] No such timeout policy "syz0" [ 421.888688][T17731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.917324][T17731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.946996][T17731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.970144][T17731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.236791][T17731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.311633][T17731] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.368429][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.375638][ T5203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.446792][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.454069][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.599500][T17949] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 422.628644][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 422.797989][ T5119] Bluetooth: hci2: command tx timeout [ 423.095043][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.271901][T17731] veth0_vlan: entered promiscuous mode [ 423.356433][T17731] veth1_vlan: entered promiscuous mode [ 423.508029][T17731] veth0_macvtap: entered promiscuous mode [ 423.578111][T17731] veth1_macvtap: entered promiscuous mode [ 423.641067][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.673003][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.697311][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.708664][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.721344][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.732545][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.742557][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.753481][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.770047][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.780690][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.790822][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.793409][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.801457][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.804126][T17731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.860269][T17987] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.916544][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.945797][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.966190][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.990132][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.025412][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.045890][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.082243][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.120050][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.166281][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.199262][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.210162][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.222557][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.237160][T17731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.299800][T17731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.333530][T17731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.348142][T17731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.363695][T17731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.456596][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 424.565569][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.587909][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.634048][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.654958][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.759193][T18024] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 424.999283][ T35] bond0: left allmulticast mode [ 425.004217][ T35] bond_slave_0: left allmulticast mode [ 425.017964][ T35] bond_slave_1: left allmulticast mode [ 425.031388][ T35] dummy0: left allmulticast mode [ 425.045481][ T35] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 425.074069][ T35] bond0: left promiscuous mode [ 425.091544][ T35] bond_slave_0: left promiscuous mode [ 425.097175][ T35] bond_slave_1: left promiscuous mode [ 425.116724][ T35] dummy0: left promiscuous mode [ 425.123944][ T35] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 425.131593][ T35] bridge0: port 3(bond0) entered disabled state [ 425.140603][ T35] bridge_slave_1: left allmulticast mode [ 425.146380][ T35] bridge_slave_1: left promiscuous mode [ 425.154149][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.163643][ T35] bridge_slave_0: left allmulticast mode [ 425.169709][ T35] bridge_slave_0: left promiscuous mode [ 425.175629][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.851154][T18045] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.948182][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.962215][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.979145][ T35] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 425.992153][ T35] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 426.010833][ T35] bond0 (unregistering): Released all slaves [ 426.028648][ T35] bond1 (unregistering): Released all slaves [ 426.203586][ T35] Êüä^q: left promiscuous mode [ 426.762812][T18072] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 426.771578][T18072] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.000381][T18080] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 427.224465][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 427.413161][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.439617][ T35] hsr_slave_0: left promiscuous mode [ 427.447051][ T35] hsr_slave_1: left promiscuous mode [ 427.467052][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.486623][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.512572][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.532858][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.595581][ T35] veth1_macvtap: left promiscuous mode [ 427.603006][ T35] veth0_macvtap: left promiscuous mode [ 427.613375][ T35] veth1_vlan: left promiscuous mode [ 427.620501][ T35] veth0_vlan: left promiscuous mode [ 428.501926][ T35] team0 (unregistering): Port device team_slave_1 removed [ 428.578837][ T35] team0 (unregistering): Port device team_slave_0 removed [ 429.143724][T18098] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.151062][T18098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.196145][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 429.268505][T18109] vlan0: entered promiscuous mode [ 429.275919][T18109] vlan0: entered allmulticast mode [ 429.744002][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.611187][T18189] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 430.658341][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 430.684292][T18192] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 430.724610][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.071817][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.425637][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.539031][T18239] Bluetooth: MGMT ver 1.22 [ 431.956897][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.000148][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.116091][T18260] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.586599][T18292] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.593857][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.430766][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.629850][T18347] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20000 [ 433.690428][T18347] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 433.995095][ T29] audit: type=1804 audit(1718789193.754:32): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/812/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 434.077593][ T29] audit: type=1804 audit(1718789193.764:33): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/812/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 434.080423][T18380] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 434.104252][ T29] audit: type=1804 audit(1718789193.764:34): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/812/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 434.150274][T18381] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 434.252214][T18381] bond1: entered promiscuous mode [ 434.353992][T18382] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.391650][T18382] bond1: (slave bond2): Enslaving as an active interface with a down link [ 434.443910][T18381] bond1 (unregistering): (slave bond2): Releasing active interface [ 434.478596][T18381] bond1 (unregistering): Released all slaves [ 434.848374][T18414] __nla_validate_parse: 4 callbacks suppressed [ 434.848397][T18414] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.037067][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.218957][T18436] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.401290][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 435.573049][T18453] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.602562][T18453] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.668565][T18456] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.002632][T18471] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 436.103293][T18474] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 436.131895][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.159402][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.457111][T18494] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.844273][T18514] netlink: set zone limit has 4 unknown bytes [ 437.455824][T18549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.770042][T18562] netlink: set zone limit has 4 unknown bytes [ 438.010628][T18578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.477156][T18602] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 438.728130][T18615] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 438.736848][T18615] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 439.096604][T18630] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 439.338289][T18645] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 439.358546][T18645] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 439.598312][ T5119] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 439.599817][ T5129] Bluetooth: hci3: command 0x0405 tx timeout [ 439.855218][T18675] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 439.869923][T18675] __nla_validate_parse: 9 callbacks suppressed [ 439.869946][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.885989][T18675] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 439.895920][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 440.336647][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.361886][ T11] geneve1: left allmulticast mode [ 440.373595][ T11] geneve1: left promiscuous mode [ 440.385005][ T11] bridge0: port 4(geneve1) entered disabled state [ 440.396421][ T11] team0: left allmulticast mode [ 440.402018][ T11] team_slave_0: left allmulticast mode [ 440.411299][ T11] team_slave_1: left allmulticast mode [ 440.418281][ T11] bridge0: port 3(team0) entered disabled state [ 440.431167][ T11] bridge_slave_1: left allmulticast mode [ 440.437287][ T11] bridge_slave_1: left promiscuous mode [ 440.443399][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.454013][ T11] bridge_slave_0: left allmulticast mode [ 440.460096][ T11] bridge_slave_0: left promiscuous mode [ 440.479817][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.677102][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 440.949595][ T11] tipc: Disabling bearer [ 441.394034][ T11] bond0 (unregistering): left promiscuous mode [ 441.400919][ T11] bond_slave_0: left promiscuous mode [ 441.406543][ T11] bond_slave_1: left promiscuous mode [ 441.412596][ T11] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 441.444916][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.459768][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.475502][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 441.490301][ T11] bond0 (unregistering): Released all slaves [ 441.506408][ T11] bond1 (unregistering): Released all slaves [ 441.525027][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.546850][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.587248][ T11] Êüä^q: left promiscuous mode [ 441.716932][ T11] tipc: Disabling bearer [ 441.727175][ T11] tipc: Left network mode [ 441.837900][ T5119] Bluetooth: hci3: command 0x0405 tx timeout [ 441.838197][ T5129] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 442.302589][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 442.619484][ T11] hsr_slave_0: left promiscuous mode [ 442.635819][ T11] hsr_slave_1: left promiscuous mode [ 442.646032][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.663750][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.674687][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.689173][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.724778][ T11] veth1_macvtap: left promiscuous mode [ 442.731895][ T11] veth0_macvtap: left promiscuous mode [ 442.737569][ T11] veth1_vlan: left promiscuous mode [ 442.743219][ T11] veth0_vlan: left promiscuous mode [ 443.549617][ T11] team_slave_1 (unregistering): left promiscuous mode [ 443.562244][ T11] team0 (unregistering): Port device team_slave_1 removed [ 443.620027][ T11] team_slave_0 (unregistering): left promiscuous mode [ 443.632774][ T11] team0 (unregistering): Port device team_slave_0 removed [ 444.431143][T18777] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 444.611397][T18785] vlan2: entered promiscuous mode [ 444.620021][T18785] gretap0: entered promiscuous mode [ 444.625511][T18785] vlan2: entered allmulticast mode [ 444.638495][T18785] gretap0: entered allmulticast mode [ 444.658140][T18785] gretap0: left allmulticast mode [ 444.663408][T18785] gretap0: left promiscuous mode [ 444.751538][T18790] bridge0: port 3(vlan2) entered blocking state [ 444.758649][T18790] bridge0: port 3(vlan2) entered disabled state [ 444.772673][T18790] vlan2: entered allmulticast mode [ 444.786327][T18790] vlan2: left allmulticast mode [ 473.141928][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 476.070951][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.107970][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.116606][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.131490][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.150581][ T5129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 476.159436][ T5129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.176980][T18822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.193024][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.202288][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.210706][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.219940][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 476.227338][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.271646][T16881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 476.281637][T16881] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 476.292651][T16881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 476.293962][T18826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 476.314220][T18826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 476.321717][T16881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 476.332378][T16881] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 476.339510][T18828] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 476.339869][T16881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 476.353245][T18828] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 476.361621][T16881] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 476.364095][T18828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 476.376907][T18828] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 476.384645][T18828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 476.408005][ T5129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 476.438419][ T5129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 476.458104][ T5129] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 476.465648][ T5129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 478.318239][T18826] Bluetooth: hci6: command tx timeout [ 478.326927][ T5129] Bluetooth: hci5: command tx timeout [ 478.478182][T18826] Bluetooth: hci8: command tx timeout [ 478.486862][ T5129] Bluetooth: hci7: command tx timeout [ 478.558378][ T5129] Bluetooth: hci9: command tx timeout [ 480.398204][ T5129] Bluetooth: hci5: command tx timeout [ 480.403692][ T5129] Bluetooth: hci6: command tx timeout [ 480.558167][T18826] Bluetooth: hci8: command tx timeout [ 480.564027][ T5129] Bluetooth: hci7: command tx timeout [ 480.638666][ T5129] Bluetooth: hci9: command tx timeout [ 482.479196][ T5129] Bluetooth: hci6: command tx timeout [ 482.484672][ T5129] Bluetooth: hci5: command tx timeout [ 482.638027][T18826] Bluetooth: hci8: command tx timeout [ 482.645684][ T5129] Bluetooth: hci7: command tx timeout [ 482.718231][ T5129] Bluetooth: hci9: command tx timeout [ 484.557894][ T5129] Bluetooth: hci5: command tx timeout [ 484.558077][T18826] Bluetooth: hci6: command tx timeout [ 484.718144][ T5129] Bluetooth: hci8: command tx timeout [ 484.723679][T18826] Bluetooth: hci7: command tx timeout [ 484.797954][T18826] Bluetooth: hci9: command tx timeout [ 501.775108][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.958085][ T5129] Bluetooth: hci1: command 0x0406 tx timeout [ 539.684506][ T5129] Bluetooth: hci2: command 0x0406 tx timeout [ 541.481266][T18828] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 541.489499][T16881] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 541.504088][T18828] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 541.513269][T18828] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 541.519074][T18830] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 541.522481][T18828] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 541.530828][T18830] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 541.541005][T18828] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 541.544063][T18830] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 541.551554][T18828] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 541.579071][T18830] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 541.583413][T18828] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 541.589572][T18830] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 541.598896][T18828] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 541.608459][T18830] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 541.610705][T18828] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 541.617483][T18830] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 541.624697][T18828] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 541.631338][T18830] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 541.645460][T18830] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 541.652531][T18844] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 541.654713][T18844] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 541.660511][T18830] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 541.671188][T18844] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 541.677072][T18830] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 541.688292][T18844] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 541.690728][T18830] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 541.700668][T18844] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 541.728946][T18844] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 541.736767][T18822] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 543.758297][T18844] Bluetooth: hci10: command tx timeout [ 543.767945][T18844] Bluetooth: hci12: command tx timeout [ 543.854042][T18844] Bluetooth: hci14: command tx timeout [ 543.854086][T18828] Bluetooth: hci13: command tx timeout [ 543.861401][T18844] Bluetooth: hci11: command tx timeout [ 545.838215][ T5129] Bluetooth: hci10: command tx timeout [ 545.844903][T18844] Bluetooth: hci12: command tx timeout [ 545.918754][T18844] Bluetooth: hci11: command tx timeout [ 545.924322][T18844] Bluetooth: hci14: command tx timeout [ 545.930166][ T5129] Bluetooth: hci13: command tx timeout [ 547.920342][T18844] Bluetooth: hci12: command tx timeout [ 547.926882][ T5129] Bluetooth: hci10: command tx timeout [ 547.998463][T18844] Bluetooth: hci13: command tx timeout [ 548.004108][T18844] Bluetooth: hci11: command tx timeout [ 548.011145][ T5129] Bluetooth: hci14: command tx timeout [ 550.005366][ T5129] Bluetooth: hci12: command tx timeout [ 550.011454][T18844] Bluetooth: hci10: command tx timeout [ 550.080780][ T5129] Bluetooth: hci11: command tx timeout [ 550.086331][ T5129] Bluetooth: hci14: command tx timeout [ 550.092166][T18844] Bluetooth: hci13: command tx timeout [ 563.205982][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 601.152627][ T5129] Bluetooth: hci9: command 0x0406 tx timeout [ 601.152657][T18844] Bluetooth: hci5: command 0x0406 tx timeout [ 601.152711][T16881] Bluetooth: hci6: command 0x0406 tx timeout [ 601.166783][T18828] Bluetooth: hci7: command 0x0406 tx timeout [ 601.180656][T18844] Bluetooth: hci8: command 0x0406 tx timeout [ 602.878386][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 602.886216][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 602.896415][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 602.905227][ T30] task:kworker/u8:0 state:D stack:22056 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 602.915643][ T30] Workqueue: netns cleanup_net [ 602.921889][ T30] Call Trace: [ 602.925209][ T30] 2024/06/19 09:29:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 602.928407][ T30] __schedule+0x17e8/0x4a20 [ 602.933758][ T30] ? __pfx___schedule+0x10/0x10 [ 602.938801][ T30] ? __pfx_lock_release+0x10/0x10 [ 602.943868][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 602.949737][ T30] ? kthread_data+0x52/0xd0 [ 602.954300][ T30] ? schedule+0x90/0x320 [ 602.961817][ T30] ? wq_worker_sleeping+0x66/0x240 [ 602.967069][ T30] ? schedule+0x90/0x320 [ 602.971549][ T30] schedule+0x14b/0x320 [ 602.975750][ T30] schedule_preempt_disabled+0x13/0x30 [ 602.981368][ T30] __mutex_lock+0x6a4/0xd70 [ 602.985925][ T30] ? __mutex_lock+0x527/0xd70 [ 602.990866][ T30] ? cangw_pernet_exit_batch+0x20/0x90 [ 602.996375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 603.003814][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 603.009293][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 603.015320][ T30] cangw_pernet_exit_batch+0x20/0x90 [ 603.022001][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 603.028417][ T30] cleanup_net+0x89d/0xcc0 [ 603.032888][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 603.038146][ T30] ? process_scheduled_works+0x945/0x1830 [ 603.043905][ T30] process_scheduled_works+0xa2c/0x1830 [ 603.049957][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.055991][ T30] ? assign_work+0x364/0x3d0 [ 603.071110][ T30] worker_thread+0x86d/0xd70 [ 603.075774][ T30] ? __kthread_parkme+0x169/0x1d0 [ 603.097782][ T30] ? __pfx_worker_thread+0x10/0x10 [ 603.102965][ T30] kthread+0x2f0/0x390 [ 603.107074][ T30] ? __pfx_worker_thread+0x10/0x10 [ 603.127754][ T30] ? __pfx_kthread+0x10/0x10 [ 603.132420][ T30] ret_from_fork+0x4b/0x80 [ 603.136881][ T30] ? __pfx_kthread+0x10/0x10 [ 603.157773][ T30] ret_from_fork_asm+0x1a/0x30 [ 603.162637][ T30] [ 603.167886][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 603.175576][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 603.207745][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 603.216475][ T30] task:kworker/u8:4 state:D stack:18392 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 603.247919][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 603.254003][ T30] Call Trace: [ 603.257334][ T30] [ 603.277898][ T30] __schedule+0x17e8/0x4a20 [ 603.282545][ T30] ? __pfx___schedule+0x10/0x10 [ 603.297778][ T30] ? __pfx_lock_release+0x10/0x10 [ 603.302946][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 603.317867][ T30] ? kthread_data+0x52/0xd0 [ 603.322457][ T30] ? schedule+0x90/0x320 [ 603.337929][ T30] ? wq_worker_sleeping+0x66/0x240 [ 603.343145][ T30] ? schedule+0x90/0x320 [ 603.347441][ T30] schedule+0x14b/0x320 [ 603.377795][ T30] schedule_preempt_disabled+0x13/0x30 [ 603.383468][ T30] __mutex_lock+0x6a4/0xd70 [ 603.401139][ T30] ? mark_lock+0x9a/0x350 [ 603.405567][ T30] ? __mutex_lock+0x527/0xd70 [ 603.417746][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 603.423114][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 603.438156][ T30] addrconf_dad_work+0xd0/0x16f0 [ 603.443557][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 603.460119][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 603.466544][ T30] ? process_scheduled_works+0x945/0x1830 [ 603.487784][ T30] process_scheduled_works+0xa2c/0x1830 [ 603.494054][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.511080][ T30] ? assign_work+0x364/0x3d0 [ 603.515907][ T30] worker_thread+0x86d/0xd70 [ 603.527864][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 603.535157][ T30] ? __kthread_parkme+0x169/0x1d0 [ 603.557767][ T30] ? __pfx_worker_thread+0x10/0x10 [ 603.562973][ T30] kthread+0x2f0/0x390 [ 603.567111][ T30] ? __pfx_worker_thread+0x10/0x10 [ 603.587