last executing test programs: 41.91405747s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)}, 0x10) 41.503047277s ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}], 0x2, 0x0, 0x0) 40.159706049s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1d"}]}], {0x14}}, 0x70}}, 0x0) 39.909183561s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="cd", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x800c6613, &(0x7f0000000400)="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") 39.179177384s ago: executing program 2: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x4f, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaee4caaaaaaaaaaaaaa86dd6000000000193afffe8000000000000000000000000000bbfe8000000000000000000000000000aa87009078fe8000000000000000000000000000000000b0"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) unshare(0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 38.747238293s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="cd", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x800c6613, &(0x7f0000000400)="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") 38.646568629s ago: executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x621}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 38.566574272s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="cd", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x800c6613, &(0x7f0000000400)="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") 38.463842325s ago: executing program 4: r0 = accept(0xffffffffffffffff, &(0x7f0000000bc0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000b40)=0x28) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="78c52a00", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf252b0000000a00340001010101010100001f002a0001000301b4dd0bb90f543cf34eaf0b09375e7107ffff0101020040001e00940010000e000000000000000009007f001b00000000080800000001000004003c000400460008006b000080000008006b0000800000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20040840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000ee4dbb35b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000200"/231], 0x110) close(0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x2}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000000)="7d32c6269c6bf4a116e3a544c6c78d60ac7479d0172b408a7abe630a0d7a856656258f16c58f833703192674af1fe7f212b2d4e59699c6020d94aef9535de739", 0x40}, {&(0x7f0000000100)="51c63883379dc1441b0ce2f1748a12461b70e11e218ce5d550adcc9aaf88266a04250c0dfba496021b799f6b383849ef9d07b06ee5e64f1ff793e02449cd12682a8f897e", 0x44}, {&(0x7f0000000180)="24c8e20ba32f2d3928d0439367a4983ed77fa6ac189276590609dfbffb42e05810d9bd91f71df7fe7f5a28638a35952559665be1197edaed3d51551bb44bb13a5d79c2ba8eaedf265e64654f14ac68d90204263df341cf79e6d555f5", 0x5c}, {&(0x7f0000000340)="1de773d012b98734012ed5d4b9137098396a4eaf34375583055dc3147a4284c15c5e28a936bfaf9457dc58bf0a00892297b73a2af0c0e9091e55a3bb9ce78a8fd26ae6333002090f97d30f7ad60e80d58b53954d9218723b8efa66cd56a82f1f850089d45f87f677d28eef4f513656d2044b3771dce1bc89d97a1b8bf107f005e47c068ed8e710a5420325", 0x8b}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)}, {&(0x7f0000000600)="f497d17ebca1b342fc1d78042eb6628cc99f7da13d6f7f8995e5417d88b4b028dc9411b0bcffcbfd438a345b0596b8365acd14e4f0b27302bee846ac87a6662e2e560b54194e22b9831e4ed60944d39fc354e78b054b0b7dad9e1329723440ce3def9260f7750471693179070b9dbc10d94f54660be00064accf972d5dacbab6e66ba9880141787b91a0e59a48242837c851bd90248f07b4b4d79184927c20ff0430b1aba940bc0c", 0xa8}], 0x7}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000006280)={r8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @random="429ca2e4534e"}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a600200ff0f040b067c55a1bc000900b8000699e3ffffff04000500fe8081780d000567b8b7b9400200000901ac040000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6e4edef3d93492a92307f003fad44", 0xd8}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000a00)="19f310d9fd49c802734e0f25348c4f4f5ff70a11e072df269edbbc22f70ec85ee16ed6d5f36f3d990705a15c439b6101d482aa17db057aa759da0b9b22f2afd8a2f461974b5e255633bba89d336674f89b4cebc9f5b9b52f50b6d2c854dfb2901b21174f4ba27ac61c52f558eb9af3f703f260cca0ee006c7b14782dcd043cc6f9aa2daedb2a6fa450eb9ba569ab82a6b6a84b2c7b22ac63b9676fc71eee3469fa1aba07d33b6d7fec829f43908e8df0eed8378a0c607e3a5d00b1efcc040169e9ba28e38be1450ee9dceb8d8ed5758b4de6c66ac4a2", 0xd6}], 0x2}, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200"/267], 0x110) 38.363543316s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000024000900000000000000000007"], 0x14}}, 0x0) 31.085134378s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getnexthop={0x20, 0x6a, 0x48e274f25096b26b, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NHA_MASTER={0x8, 0xa, 0xffffbffc}]}, 0x20}}, 0x0) 31.04725501s ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xa4, &(0x7f0000000000), &(0x7f0000000240)=0x4) 30.625187857s ago: executing program 3: socket$igmp6(0xa, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 30.533174958s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "66cf7a5d"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "bd9b7d67a50761e888d20e56fd491d1357"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 30.478075984s ago: executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000002240)={0xa, 0x0, 0x0, @local, 0x2c1}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x20) 30.413945162s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)={{0x2d, 0x30, 0x58, 0x46, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 30.342198487s ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) connect$vsock_stream(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x0, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r8, r1, 0x4, r5}, 0x10) 30.299910617s ago: executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000040a84bfc6fc"], 0x58}}, 0x0) 30.264867214s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000980), &(0x7f0000000a40)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.222650881s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5}}}}]}, 0x38}}, 0x0) 30.176914173s ago: executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000380)="1695", 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x9, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000640)=""/195, 0x41100, 0x4, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r1, r1, r1, r3], 0x0, 0x10, 0x7}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 30.173892094s ago: executing program 1: unshare(0x2c060000) unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 30.083062592s ago: executing program 1: socket$igmp6(0xa, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 30.052097074s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.021067323s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000fdc600850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_emit_ethernet(0xc6, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x90, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000"}, {0x0, 0x4, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd"}]}}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2701330080000000ffffffffffff080211000000505050505050"], 0x144}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 9.15227278s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250300000006000a004e2000000500030001000000060001"], 0x44}}, 0x0) 8.334914852s ago: executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000180)={{0x2d, 0x30, 0x58, 0x46, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 310.490659ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="2a000e002a"], 0x48}}, 0x0) 15.466318ms ago: executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000040a84bfc6fc"], 0x58}}, 0x0) 0s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 71][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.653921][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.678922][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.686146][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.953710][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.015096][ T7348] veth0_vlan: entered promiscuous mode [ 118.033033][ T7348] veth1_vlan: entered promiscuous mode [ 118.074936][ T7348] veth0_macvtap: entered promiscuous mode [ 118.092645][ T7348] veth1_macvtap: entered promiscuous mode [ 118.132696][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.143616][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.157422][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.182256][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.192507][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.212745][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.222913][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.235079][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.247313][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.258107][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.270212][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.312033][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.331349][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.342721][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.361517][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.372224][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.389355][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.406932][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.417877][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.427934][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.439737][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.452614][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.469416][ T7348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.481310][ T7348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.490189][ T7348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.498952][ T7348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.726171][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.747256][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.797811][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.808988][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.070703][ T53] Bluetooth: hci5: command tx timeout [ 119.661135][ T7441] __nla_validate_parse: 1 callbacks suppressed [ 119.661163][ T7441] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.234642][ T7452] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 120.244707][ T7452] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.260055][ T7447] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 120.270958][ T7447] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.150407][ T53] Bluetooth: hci5: command tx timeout [ 121.212642][ T7460] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 121.238078][ T7460] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.303785][ T7463] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.727791][ T7481] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 121.743608][ T7481] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.835758][ T7485] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.582184][ T7517] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 122.628538][ T7517] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.869455][ T29] audit: type=1804 audit(1716906403.064:12): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir26158426/syzkaller.PEnxPy/254/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 122.959014][ T7536] syzkaller0: entered allmulticast mode [ 123.045798][ T7540] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.104928][ T7543] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 123.114153][ T7543] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.230786][ T53] Bluetooth: hci5: command tx timeout [ 123.268477][ T5119] IPVS: starting estimator thread 0... [ 123.279608][ T7551] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 123.360765][ T7552] IPVS: using max 22 ests per chain, 52800 per kthread [ 123.533845][ T7570] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 123.542229][ T7570] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.582111][ T5154] IPVS: starting estimator thread 0... [ 123.690479][ T7573] IPVS: using max 25 ests per chain, 60000 per kthread [ 123.941471][ T7597] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 123.960637][ T7597] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 124.195048][ T7610] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 124.500877][ T5119] IPVS: starting estimator thread 0... [ 124.620722][ T7631] IPVS: using max 18 ests per chain, 43200 per kthread [ 124.668250][ T7640] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 124.677879][ T7640] __nla_validate_parse: 3 callbacks suppressed [ 124.677898][ T7640] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.982907][ T7650] syzkaller0: entered promiscuous mode [ 124.989403][ T7650] syzkaller0: entered allmulticast mode [ 124.990534][ T7654] xt_TCPMSS: Only works on TCP SYN packets [ 125.547869][ T7664] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 126.019697][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.613069][ T7681] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 126.621417][ T7681] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.875707][ T7683] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 126.967665][ T7689] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 127.066280][ T29] audit: type=1804 audit(1716906407.264:13): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3404012300/syzkaller.GbFiHr/118/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 127.325035][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.440719][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.611978][ T7725] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 127.627821][ T7725] bond0: entered promiscuous mode [ 127.641889][ T7725] bond_slave_0: entered promiscuous mode [ 127.647897][ T7725] bond_slave_1: entered promiscuous mode [ 127.674399][ T7725] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 127.809732][ T7724] bond0: left promiscuous mode [ 127.819137][ T7724] bond_slave_0: left promiscuous mode [ 127.828867][ T7724] bond_slave_1: left promiscuous mode [ 127.990963][ T7731] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.087879][ T7731] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.213776][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 128.256599][ T7731] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.355306][ T7731] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.375932][ T7758] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.391527][ T7761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.415220][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.426121][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.533824][ T53] block nbd0: Receive control failed (result -107) [ 128.568988][ T7731] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.589082][ T7731] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.603224][ T7766] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 128.764964][ T7772] bond0: entered promiscuous mode [ 128.770306][ T7772] bond_slave_0: entered promiscuous mode [ 128.776447][ T7772] bond_slave_1: entered promiscuous mode [ 128.783206][ T7772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.821967][ T7772] bond0: left promiscuous mode [ 128.830517][ T7772] bond_slave_0: left promiscuous mode [ 128.842134][ T7772] bond_slave_1: left promiscuous mode [ 128.887601][ T7766] bond0: entered promiscuous mode [ 128.899647][ T7766] bond_slave_0: entered promiscuous mode [ 128.912776][ T7766] bond_slave_1: entered promiscuous mode [ 128.968403][ T7731] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.987045][ T7763] bond0: left promiscuous mode [ 128.992255][ T7763] bond_slave_0: left promiscuous mode [ 129.000552][ T7763] bond_slave_1: left promiscuous mode [ 129.019414][ T7731] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.046799][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.060500][ T7788] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 129.089745][ T7787] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.116394][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.123410][ T7787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 129.702123][ T7815] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.864303][ T7815] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.006496][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.091965][ T7815] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.159496][ T7840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.263221][ T7840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.336897][ T7815] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.412439][ T7840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.474923][ T7815] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.497058][ T7815] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.540139][ T7840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.557691][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.568835][ T7853] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 130.606587][ T7815] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.647046][ T7840] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.666169][ T7840] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.699016][ T7815] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.722423][ T7840] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.748850][ T7840] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.879960][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.256874][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.267298][ T7879] nbd: nbd0 already in use [ 131.326285][ T7881] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.407225][ T7881] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.477259][ T7881] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.558824][ T7881] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.146841][ T7920] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 132.162481][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.337870][ T7930] Unsupported ieee802154 address type: 0 [ 132.400781][ T7932] vlan0: entered promiscuous mode [ 132.406956][ T7932] vlan0: entered allmulticast mode [ 132.521568][ T29] audit: type=1804 audit(1716906412.724:14): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir26158426/syzkaller.PEnxPy/320/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 132.655677][ T29] audit: type=1804 audit(1716906412.854:15): pid=7942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3909176285/syzkaller.t6sdUp/59/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 132.714756][ T7945] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.773428][ T7945] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.857236][ T7945] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.884448][ T7953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.904461][ T7955] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 132.920045][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.964842][ T7945] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.014464][ T7959] Unsupported ieee802154 address type: 0 [ 133.129794][ T7965] vlan0: entered promiscuous mode [ 133.135192][ T7965] vlan0: entered allmulticast mode [ 133.236410][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.366412][ T7977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.622081][ T7991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.879409][ T29] audit: type=1804 audit(1716906414.074:16): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3404012300/syzkaller.GbFiHr/151/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 134.205539][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.720209][ T8045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.081780][ T7881] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.098058][ T7881] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.113033][ T7881] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.129922][ T7881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.400171][ T7945] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.423229][ T7945] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.442831][ T7945] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.459762][ T7945] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.479923][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.653597][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.760480][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.818916][ T8128] IPv6: Can't replace route, no match found [ 136.889029][ T8133] sit0: entered promiscuous mode [ 136.916376][ T8133] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 136.930604][ T8133] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.108969][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.229436][ T8154] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.255830][ T8154] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 137.410054][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.459377][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.613323][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.783527][ T8187] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 137.936848][ T8199] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 137.944804][ T8195] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 137.945823][ T8199] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.056511][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.305495][ T8220] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 138.603487][ T8233] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 138.988865][ T8244] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 139.053229][ T8244] bridge0: port 3(bond2) entered blocking state [ 139.064926][ T8244] bridge0: port 3(bond2) entered disabled state [ 139.080661][ T8244] bond2: entered allmulticast mode [ 139.087386][ T8244] bond2: entered promiscuous mode [ 139.583358][ T8276] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 139.675286][ T8276] bridge0: port 3(bond1) entered blocking state [ 139.695642][ T8276] bridge0: port 3(bond1) entered disabled state [ 139.719747][ T8276] bond1: entered allmulticast mode [ 139.751097][ T8276] bond1: entered promiscuous mode [ 139.821879][ T8286] xt_NFQUEUE: number of total queues is 0 [ 139.867993][ T8288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.297648][ T8312] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 140.378681][ T8312] bridge0: port 3(bond1) entered blocking state [ 140.388722][ T8312] bridge0: port 3(bond1) entered disabled state [ 140.401368][ T8312] bond1: entered allmulticast mode [ 140.408226][ T8312] bond1: entered promiscuous mode [ 141.565041][ T8369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.486184][ T9] IPVS: starting estimator thread 0... [ 142.605548][ T8419] IPVS: using max 29 ests per chain, 69600 per kthread [ 143.027648][ T8446] Bluetooth: MGMT ver 1.22 [ 143.046976][ T8446] wg2: entered promiscuous mode [ 143.076721][ T8446] wg2: entered allmulticast mode [ 143.259642][ T8459] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 143.298984][ T8459] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 143.717750][ T8485] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 143.775963][ T8485] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 143.802116][ T8491] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 144.354898][ T8523] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.662693][ T8538] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 144.806250][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.955338][ T8557] Bluetooth: MGMT ver 1.22 [ 145.311703][ T53] Bluetooth: hci5: command tx timeout [ 146.417856][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.427740][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.436931][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.464056][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.472204][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.479658][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.742986][ T8606] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.890178][ T8597] chnl_net:caif_netlink_parms(): no params data found [ 147.218022][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.250505][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.257813][ T8597] bridge_slave_0: entered allmulticast mode [ 147.301992][ T8597] bridge_slave_0: entered promiscuous mode [ 147.318511][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.326239][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.341056][ T8597] bridge_slave_1: entered allmulticast mode [ 147.348507][ T8597] bridge_slave_1: entered promiscuous mode [ 147.445961][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.468281][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.635632][ T8597] team0: Port device team_slave_0 added [ 147.647039][ T8597] team0: Port device team_slave_1 added [ 147.759219][ T8630] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 147.804427][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.811969][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.838400][ T8597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.859277][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.867601][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.910475][ T8597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.997063][ T8597] hsr_slave_0: entered promiscuous mode [ 148.015353][ T8597] hsr_slave_1: entered promiscuous mode [ 148.029745][ T8597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.044422][ T8597] Cannot create hsr debugfs directory [ 148.108339][ T8642] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 148.365239][ T8644] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 148.375754][ T8644] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 148.413466][ T8644] bond1: (slave vcan0): making interface the new active one [ 148.458831][ T8644] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 148.530467][ T53] Bluetooth: hci6: command tx timeout [ 148.615752][ T8597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.663578][ T8664] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 148.766895][ T8597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.879235][ T8597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.979269][ T8597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.128246][ T8597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.145871][ T8597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.173789][ T8597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.191411][ T8597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.342028][ T8597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.384929][ T8597] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.413788][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.421041][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.461338][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.468510][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.776538][ T8597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.040170][ T8597] veth0_vlan: entered promiscuous mode [ 150.058872][ T8597] veth1_vlan: entered promiscuous mode [ 150.095048][ T8597] veth0_macvtap: entered promiscuous mode [ 150.111788][ T8597] veth1_macvtap: entered promiscuous mode [ 150.133907][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.144541][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.160197][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.179132][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.189098][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.202162][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.212196][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.223862][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.237042][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.247652][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.263598][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.280316][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.292214][ T8597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.335408][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.358535][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.379510][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.399730][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.409889][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.420677][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.430794][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.452725][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.469719][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.483138][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.493058][ T8597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.503695][ T8597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.524515][ T8597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.537848][ T8597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.548923][ T8597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.565768][ T8597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.578115][ T8597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.594125][ T53] Bluetooth: hci6: command tx timeout [ 150.600695][ T8701] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.652644][ T8706] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 150.666077][ T8706] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 150.679534][ T8706] bond2: (slave vcan2): making interface the new active one [ 150.688886][ T8706] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 150.698359][ T8705] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 150.859091][ T2446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.886671][ T2446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.939345][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.957122][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.257149][ T8732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.705108][ T8753] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96 [ 152.210915][ T8762] ieee802154 phy1 wpan1: encryption failed: -90 [ 152.218986][ T8759] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.230641][ T8759] tipc: Enabling of bearer rejected, failed to enable media [ 152.670981][ T53] Bluetooth: hci6: command tx timeout [ 153.427063][ T8833] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.458173][ T8833] syzkaller0: entered promiscuous mode [ 153.467871][ T8833] syzkaller0: entered allmulticast mode [ 154.763352][ T53] Bluetooth: hci6: command tx timeout [ 155.306826][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.671541][ T8877] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 155.718349][ T8879] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.752164][ T8879] syzkaller0: entered promiscuous mode [ 155.767380][ T8879] syzkaller0: entered allmulticast mode [ 157.743839][ T8921] xt_TCPMSS: Only works on TCP SYN packets [ 157.804914][ T8919] wg2: left promiscuous mode [ 157.809564][ T8919] wg2: left allmulticast mode [ 157.933525][ T8928] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 158.165173][ T8947] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 158.177950][ T29] audit: type=1800 audit(1716906438.384:17): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 158.692771][ T8978] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 158.705454][ T29] audit: type=1800 audit(1716906438.914:18): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 159.138836][ T9007] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.151741][ T9004] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.202606][ T9004] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.231209][ T9013] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.264402][ T9015] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.470026][ T9028] syz-executor.4[9028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.470195][ T9028] syz-executor.4[9028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.832066][ T9050] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.959128][ T9059] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.019967][ T9056] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.248316][ T9074] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.128293][ T9106] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.246029][ T9113] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.526603][ T9167] __nla_validate_parse: 3 callbacks suppressed [ 164.526623][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.329479][ T9212] atomic_op ffff8880610cb198 conn xmit_atomic 0000000000000000 [ 165.396207][ T9212] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 165.420518][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.010417][ T9250] atomic_op ffff888020e1a998 conn xmit_atomic 0000000000000000 [ 166.027744][ T9250] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 166.039023][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.529914][ T9345] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.122793][ T9337] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.312633][ T9349] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.849791][ T9381] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 170.919963][ T9383] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.936910][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.948538][ T9385] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 171.388489][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.498121][ T9395] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.738702][ T9416] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 172.117251][ T9435] Driver unsupported XDP return value 0 on prog (id 572) dev N/A, expect packet loss! [ 172.136020][ T9436] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 172.347981][ T9439] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.919716][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.953965][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.964065][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.979574][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.010612][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 173.023753][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.073901][ T2922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.243350][ T2922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.331141][ T2922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.451834][ T2922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.487933][ T9463] vlan3: entered promiscuous mode [ 173.500559][ T9463] team0: entered promiscuous mode [ 173.507377][ T9463] team_slave_0: entered promiscuous mode [ 173.513788][ T9463] team_slave_1: entered promiscuous mode [ 173.522123][ T9463] vlan3: entered allmulticast mode [ 173.527445][ T9463] team0: entered allmulticast mode [ 173.533120][ T9463] team_slave_0: entered allmulticast mode [ 173.539144][ T9463] team_slave_1: entered allmulticast mode [ 173.549019][ T9463] team0: left allmulticast mode [ 173.555258][ T9463] team_slave_0: left allmulticast mode [ 173.561067][ T9463] team_slave_1: left allmulticast mode [ 173.566755][ T9463] team0: left promiscuous mode [ 173.572020][ T9463] team_slave_0: left promiscuous mode [ 173.577814][ T9463] team_slave_1: left promiscuous mode [ 173.785292][ T9448] chnl_net:caif_netlink_parms(): no params data found [ 173.799265][ T2922] bridge_slave_1: left allmulticast mode [ 173.805918][ T2922] bridge_slave_1: left promiscuous mode [ 173.812985][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.834170][ T2922] bridge_slave_0: left allmulticast mode [ 173.839886][ T2922] bridge_slave_0: left promiscuous mode [ 173.848273][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.869158][ T9474] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 174.500961][ T2922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.535886][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.556819][ T2922] bond0 (unregistering): Released all slaves [ 174.832773][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.840060][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.850711][ T9448] bridge_slave_0: entered allmulticast mode [ 174.858148][ T9448] bridge_slave_0: entered promiscuous mode [ 174.881073][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.019486][ T9479] bond1: left allmulticast mode [ 175.038396][ T9479] bond1: left promiscuous mode [ 175.068427][ T9479] bridge0: port 3(bond1) entered disabled state [ 175.076816][ T53] Bluetooth: hci6: command tx timeout [ 175.127061][ T9479] bridge_slave_1: left allmulticast mode [ 175.182721][ T9479] bridge_slave_1: left promiscuous mode [ 175.201745][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.290035][ T9479] bridge_slave_0: left allmulticast mode [ 175.308959][ T9479] bridge_slave_0: left promiscuous mode [ 175.354493][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.678457][ T9497] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 175.801822][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.814949][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.822433][ T9448] bridge_slave_1: entered allmulticast mode [ 175.829416][ T9448] bridge_slave_1: entered promiscuous mode [ 176.094099][ T2922] hsr_slave_0: left promiscuous mode [ 176.171700][ T9518] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 176.189508][ T9518] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 176.197951][ T9518] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.259303][ T2922] hsr_slave_1: left promiscuous mode [ 176.320517][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.328044][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.337169][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.351087][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.395138][ T2922] veth1_macvtap: left promiscuous mode [ 176.400829][ T2922] veth0_macvtap: left promiscuous mode [ 176.406585][ T2922] veth1_vlan: left promiscuous mode [ 176.421664][ T2922] veth0_vlan: left promiscuous mode [ 176.974605][ T9548] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 176.986686][ T9548] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 176.995474][ T9548] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.151600][ T53] Bluetooth: hci6: command tx timeout [ 177.158807][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 177.196987][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 177.644459][ T9556] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 177.714071][ T9448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.728023][ T9448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.814007][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.824024][ T9547] bond2: left allmulticast mode [ 177.829013][ T9547] bond2: left promiscuous mode [ 177.834318][ T9547] bridge0: port 3(bond2) entered disabled state [ 177.844284][ T9547] bridge_slave_1: left allmulticast mode [ 177.850227][ T9547] bridge_slave_1: left promiscuous mode [ 177.856735][ T9547] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.867483][ T9547] bridge_slave_0: left allmulticast mode [ 177.873876][ T9547] bridge_slave_0: left promiscuous mode [ 177.881360][ T9547] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.019156][ T9448] team0: Port device team_slave_0 added [ 178.031436][ T9448] team0: Port device team_slave_1 added [ 178.427832][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.433851][ T9582] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 178.455166][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.509856][ T9448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.549133][ T9448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.556269][ T9448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.592234][ T9448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.741991][ T9448] hsr_slave_0: entered promiscuous mode [ 178.789343][ T9448] hsr_slave_1: entered promiscuous mode [ 178.806352][ T9448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.814392][ T9448] Cannot create hsr debugfs directory [ 179.233196][ T53] Bluetooth: hci6: command tx timeout [ 179.233861][ T9606] netlink: 182 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.324178][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.341168][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.366740][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.580204][ T9628] veth1_macvtap: left promiscuous mode [ 179.586242][ T9628] macsec0: entered promiscuous mode [ 179.642485][ T9628] veth1_macvtap: entered promiscuous mode [ 179.672953][ T9628] macsec0: left promiscuous mode [ 179.815405][ T9448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.861312][ T9448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.882997][ T9448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.898651][ T9448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.126142][ T9448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.163263][ T9448] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.177604][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.184866][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.214160][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.221564][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.276884][ T9648] netlink: 182 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.359284][ T9448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.406684][ T9652] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 180.562504][ T9662] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 180.629962][ T9448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.704074][ T9671] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 180.966716][ T9448] veth0_vlan: entered promiscuous mode [ 180.982666][ T9448] veth1_vlan: entered promiscuous mode [ 181.029077][ T9448] veth0_macvtap: entered promiscuous mode [ 181.043773][ T9448] veth1_macvtap: entered promiscuous mode [ 181.066864][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.078998][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.089244][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.101207][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.113212][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.123912][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.134128][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.146435][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.157790][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.168894][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.190206][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.209651][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.234700][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.270111][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.285111][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.297822][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.308582][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.318740][ T9659] Bluetooth: hci6: command tx timeout [ 181.324611][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.336647][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.370599][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.386873][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.392505][ T9659] Bluetooth: hci2: command 0x0406 tx timeout [ 181.404507][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.406683][ T9659] Bluetooth: hci4: command 0x0406 tx timeout [ 181.421628][ T5111] Bluetooth: hci3: command 0x0406 tx timeout [ 181.429269][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.439365][ T9448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.460338][ T9448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.472735][ T9448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.588299][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.617882][ T9699] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 181.643818][ T9448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.660958][ T9448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.671362][ T9448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.686294][ T9448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.800766][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.815174][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.867143][ T5158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.881390][ T5158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.321331][ T9736] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.616915][ T9751] bond0: entered promiscuous mode [ 182.624383][ T9751] bond_slave_0: entered promiscuous mode [ 182.630977][ T9751] bond_slave_1: entered promiscuous mode [ 182.641183][ T9751] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 182.672523][ T9751] dummy0: entered promiscuous mode [ 182.680064][ T9751] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.718844][ T9750] bond0: left promiscuous mode [ 182.746500][ T9750] bond_slave_0: left promiscuous mode [ 182.760156][ T9750] bond_slave_1: left promiscuous mode [ 182.766378][ T9750] dummy0: left promiscuous mode [ 183.116245][ T9768] bond0: entered promiscuous mode [ 183.135218][ T9768] bond_slave_0: entered promiscuous mode [ 183.141510][ T9768] bond_slave_1: entered promiscuous mode [ 183.159310][ T9768] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 183.202371][ T9768] dummy0: entered promiscuous mode [ 183.208437][ T9768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.234419][ T9772] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 183.305136][ T9767] bond0: left promiscuous mode [ 183.343148][ T9767] bond_slave_0: left promiscuous mode [ 183.358627][ T9767] bond_slave_1: left promiscuous mode [ 183.367605][ T9767] dummy0: left promiscuous mode [ 183.380331][ T9778] bond0: entered promiscuous mode [ 183.385556][ T9778] bond_slave_0: entered promiscuous mode [ 183.390599][ T4492] Bluetooth: hci6: command 0x0405 tx timeout [ 183.408413][ T9778] bond_slave_1: entered promiscuous mode [ 183.419738][ T9781] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 183.479157][ T9781] dummy0: entered promiscuous mode [ 183.486236][ T9781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 183.523393][ T9776] bond0: left promiscuous mode [ 183.537944][ T9776] bond_slave_0: left promiscuous mode [ 183.547988][ T9776] bond_slave_1: left promiscuous mode [ 183.561542][ T9776] dummy0: left promiscuous mode [ 183.639023][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.727451][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.737500][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.905271][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.864011][ T9841] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 185.471644][ T4492] Bluetooth: hci6: command 0x0405 tx timeout [ 185.914741][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.025472][ T9908] hsr0: entered promiscuous mode [ 186.247457][ T9921] macvlan0: entered promiscuous mode [ 186.256592][ T9921] ipvlan0: entered promiscuous mode [ 186.265057][ T9921] ipvlan0: left promiscuous mode [ 186.272201][ T9921] macvlan0: left promiscuous mode [ 186.608026][ T9945] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.622310][ T9945] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.746941][ T29] audit: type=1800 audit(1716906466.944:19): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 186.781067][ T29] audit: type=1804 audit(1716906466.944:20): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3404012300/syzkaller.GbFiHr/287/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 186.809478][ T29] audit: type=1804 audit(1716906466.984:21): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3404012300/syzkaller.GbFiHr/287/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 186.844283][ T29] audit: type=1800 audit(1716906467.044:22): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 186.879780][ T29] audit: type=1804 audit(1716906467.074:23): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3909176285/syzkaller.t6sdUp/201/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 187.431827][ T29] audit: type=1800 audit(1716906467.634:24): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 187.475419][ T29] audit: type=1804 audit(1716906467.634:25): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4105658579/syzkaller.sCA3US/39/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 187.557031][ T4492] Bluetooth: hci6: command 0x0405 tx timeout [ 187.982939][ T29] audit: type=1800 audit(1716906468.184:26): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 188.009575][ T29] audit: type=1804 audit(1716906468.204:27): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4105658579/syzkaller.sCA3US/44/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 188.265131][ T29] audit: type=1800 audit(1716906468.464:28): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 188.339758][T10040] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 188.468408][T10046] xt_NFQUEUE: number of total queues is 0 [ 188.800960][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.810741][T10069] tipc: Enabling of bearer rejected, failed to enable media [ 189.206701][T10096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.216327][T10096] tipc: Enabling of bearer rejected, failed to enable media [ 189.535397][T10115] vlan2: entered promiscuous mode [ 189.546808][T10115] macvlan1: entered promiscuous mode [ 189.589497][T10116] xt_NFQUEUE: number of total queues is 0 [ 189.612823][T10115] team0: Port device vlan2 added [ 190.077943][T10140] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 191.908312][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 191.908329][ T29] audit: type=1800 audit(1716906472.104:31): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1970 res=0 errno=0 [ 191.942227][ T29] audit: type=1804 audit(1716906472.114:32): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3909176285/syzkaller.t6sdUp/217/memory.events" dev="sda1" ino=1970 res=1 errno=0 [ 191.968753][ T29] audit: type=1804 audit(1716906472.144:33): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3909176285/syzkaller.t6sdUp/217/memory.events" dev="sda1" ino=1970 res=1 errno=0 [ 192.637085][T10280] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 192.843542][T10289] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 192.984871][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.005504][T10292] ip6gretap0: entered promiscuous mode [ 193.012493][T10292] macvtap1: entered promiscuous mode [ 193.026097][T10292] macvtap1: entered allmulticast mode [ 193.036441][T10292] ip6gretap0: entered allmulticast mode [ 193.060411][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.084324][T10299] ip6gretap0: left allmulticast mode [ 193.090556][T10299] ip6gretap0: left promiscuous mode [ 193.105139][T10299] macvtap1: left promiscuous mode [ 193.115908][T10299] macvtap1: left allmulticast mode [ 193.982625][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.001637][T10341] ip6gretap0: entered promiscuous mode [ 194.007551][T10341] macvtap1: entered promiscuous mode [ 194.013387][T10341] macvtap1: entered allmulticast mode [ 194.019046][T10341] ip6gretap0: entered allmulticast mode [ 194.061406][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.071728][T10341] ip6gretap0: left allmulticast mode [ 194.077320][T10341] ip6gretap0: left promiscuous mode [ 194.089292][T10341] macvtap1: left promiscuous mode [ 194.096155][T10341] macvtap1: left allmulticast mode [ 194.284915][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 194.307882][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 194.518978][T10364] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 194.690932][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.025777][T10379] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 195.853498][T10384] vlan3: entered allmulticast mode [ 195.869720][T10384] bond0: entered allmulticast mode [ 195.876623][T10384] bond_slave_0: entered allmulticast mode [ 195.893129][T10384] bond_slave_1: entered allmulticast mode [ 195.901665][T10384] dummy0: entered allmulticast mode [ 195.941544][T10384] bond0: left allmulticast mode [ 195.946730][T10384] bond_slave_0: left allmulticast mode [ 195.971275][T10384] bond_slave_1: left allmulticast mode [ 195.976888][T10384] dummy0: left allmulticast mode [ 196.097414][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 196.162679][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.179632][T10396] ip6gretap0: entered promiscuous mode [ 196.186009][T10396] macvtap2: entered promiscuous mode [ 196.192083][T10396] macvtap2: entered allmulticast mode [ 196.197887][T10396] ip6gretap0: entered allmulticast mode [ 196.237975][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.267540][T10396] ip6gretap0: left allmulticast mode [ 196.276110][T10396] ip6gretap0: left promiscuous mode [ 196.282158][T10396] macvtap2: left promiscuous mode [ 196.287359][T10396] macvtap2: left allmulticast mode [ 197.676427][T10419] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 198.899347][T10484] IPv6: Can't replace route, no match found [ 198.981962][T10488] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 199.249837][T10498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 199.405051][T10504] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.495066][T10501] Bluetooth: hci3: invalid length 0, exp 2 for type 29 [ 199.667790][T10515] xt_ecn: cannot match TCP bits for non-tcp packets [ 200.156170][T10537] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.554275][T10549] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 200.561346][T10549] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 200.929068][T10567] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.036874][T10570] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.093305][T10575] Bluetooth: hci3: invalid length 0, exp 2 for type 29 [ 201.841458][T10605] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 201.854653][T10605] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 202.016023][ T4492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.031771][ T4492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.040860][ T4492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.049814][ T4492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.057990][ T4492] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 202.074575][ T4492] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 202.189200][T10611] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 202.413742][T10625] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.604477][T10613] chnl_net:caif_netlink_parms(): no params data found [ 202.816446][T10647] netem: incorrect ge model size [ 202.822304][T10647] netem: change failed [ 202.934042][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.951890][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.959384][T10613] bridge_slave_0: entered allmulticast mode [ 202.978157][T10613] bridge_slave_0: entered promiscuous mode [ 203.001375][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.008765][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.027306][T10613] bridge_slave_1: entered allmulticast mode [ 203.038273][T10613] bridge_slave_1: entered promiscuous mode [ 203.147722][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.265906][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.288740][T10673] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.350819][T10613] team0: Port device team_slave_0 added [ 203.359599][T10672] netem: incorrect ge model size [ 203.374203][T10672] netem: change failed [ 203.405929][T10613] team0: Port device team_slave_1 added [ 203.485052][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.500188][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.533610][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.566712][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.573958][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.603773][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.616257][T10685] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.749842][T10613] hsr_slave_0: entered promiscuous mode [ 203.761189][T10613] hsr_slave_1: entered promiscuous mode [ 203.770948][T10613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.778714][T10613] Cannot create hsr debugfs directory [ 203.977175][T10613] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.089951][T10613] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.120542][T10710] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.190543][ T4492] Bluetooth: hci7: command tx timeout [ 204.235482][T10613] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.403145][T10613] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.655842][T10613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.673019][T10613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.732818][T10613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.754162][T10613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.934799][T10613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.959804][T10613] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.976155][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.983399][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.001368][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.008682][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.206282][T10751] netem: incorrect ge model size [ 205.217958][T10751] netem: change failed [ 205.327828][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.656017][T10613] veth0_vlan: entered promiscuous mode [ 205.706853][ T51] bridge_slave_1: left allmulticast mode [ 205.713625][ T51] bridge_slave_1: left promiscuous mode [ 205.734151][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.769132][ T51] bridge_slave_0: left allmulticast mode [ 205.775251][ T51] bridge_slave_0: left promiscuous mode [ 205.782434][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.272811][ T5115] Bluetooth: hci7: command tx timeout [ 206.352025][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.367810][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.387300][ T51] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 206.399662][ T51] bond0 (unregistering): Released all slaves [ 206.471144][T10613] veth1_vlan: entered promiscuous mode [ 206.512595][ T4492] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.623887][T10613] veth0_macvtap: entered promiscuous mode [ 206.635169][T10613] veth1_macvtap: entered promiscuous mode [ 206.722551][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.737759][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.749857][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.768393][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.789479][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.806207][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.817640][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.832256][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.843183][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.854157][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.864790][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.875373][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.887376][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.898258][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.925144][T10613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.939114][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.951552][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.961954][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.972541][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.984607][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.995630][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.005716][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.016362][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.026708][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.037458][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.059557][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.084777][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.095088][T10613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.106119][T10613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.118153][T10613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.152451][T10613] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.163597][T10613] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.174798][T10613] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.183765][T10613] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.437803][ T51] hsr_slave_0: left promiscuous mode [ 207.443051][T10815] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 207.456114][ T51] hsr_slave_1: left promiscuous mode [ 207.463749][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.484985][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.504645][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.528825][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.621804][ T51] macvlan1: left promiscuous mode [ 207.627744][ T51] veth1_macvtap: left promiscuous mode [ 207.634335][ T51] veth0_macvtap: left promiscuous mode [ 207.640323][ T51] veth1_vlan: left promiscuous mode [ 207.645961][ T51] veth0_vlan: left promiscuous mode [ 207.858012][ T51] team0 (unregistering): Port device vlan2 removed [ 208.354543][ T4492] Bluetooth: hci7: command tx timeout [ 208.387917][ T51] team0 (unregistering): Port device team_slave_1 removed [ 208.468915][ T51] team0 (unregistering): Port device team_slave_0 removed [ 209.118304][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.130998][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.187426][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.202295][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.251234][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.854282][T10877] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (45225) [ 210.121366][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.215225][T10888] Êü: entered promiscuous mode [ 210.430494][ T4492] Bluetooth: hci7: command tx timeout [ 210.880889][T10917] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.663181][T10950] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.731270][T10954] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 211.739528][T10954] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.805619][T10958] netlink: 872 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.081149][T10970] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 212.119919][T10970] bond4: entered promiscuous mode [ 212.255616][T10970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.385113][T10970] bond4: (slave bond5): Enslaving as an active interface with a down link [ 212.463693][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.746555][T10977] bond4 (unregistering): (slave bond5): Releasing active interface [ 212.965472][T10977] bond4 (unregistering): Released all slaves [ 215.660841][T11010] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 215.717568][T11010] bond4: entered promiscuous mode [ 215.743464][T11019] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.754555][T11019] bond4: (slave bond6): Enslaving as an active interface with a down link [ 215.899305][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.925811][T11010] bond4 (unregistering): (slave bond6): Releasing active interface [ 215.948588][T11010] bond4 (unregistering): Released all slaves [ 216.889971][T11080] netem: unknown loss type 8 [ 216.895400][T11080] netem: change failed [ 216.900631][T11078] netem: unknown loss type 8 [ 216.919489][T11078] netem: change failed [ 218.189393][T11157] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.417941][T11172] syz-executor.4[11172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.418182][T11172] syz-executor.4[11172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.612617][T11181] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.653395][T11182] bond0: option min_links: invalid value (18446744073709486080) [ 218.662797][T11182] bond0: option min_links: allowed values 0 - 2147483647 [ 218.737435][T11190] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.779010][T11189] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.088048][T11211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.111466][T11210] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.287835][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.356863][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.354300][ T4492] Bluetooth: hci1: command 0x0406 tx timeout [ 222.662024][T11220] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.899621][T11239] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.954683][T11241] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.891913][T11253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.909402][T11250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.093190][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.216060][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.243900][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.282805][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.582921][T11271] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.742418][T11280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.779465][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.804979][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.365880][T11318] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 226.852406][T11341] nbd: nbd0 already in use [ 226.922808][T11344] nbd: nbd0 already in use [ 227.285991][T11365] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 227.454316][T11375] nbd: nbd0 already in use [ 227.982743][T11401] __nla_validate_parse: 5 callbacks suppressed [ 227.982762][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.010425][T11401] nbd: nbd0 already in use [ 228.362088][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.382713][T11428] nbd: nbd0 already in use [ 228.437524][T11431] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 228.680978][ T4492] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.693597][ T4492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.702269][ T4492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.713049][ T4492] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.724881][ T4492] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.733512][ T4492] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.934218][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.959061][T11449] nbd: nbd0 already in use [ 229.531475][ T61] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.573596][T11440] chnl_net:caif_netlink_parms(): no params data found [ 229.672902][ T61] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.756292][ T61] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.883842][ T61] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.898282][T11440] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.914045][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.930060][T11440] bridge_slave_0: entered allmulticast mode [ 229.945082][T11440] bridge_slave_0: entered promiscuous mode [ 229.954964][T11440] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.979783][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.989124][T11440] bridge_slave_1: entered allmulticast mode [ 229.998602][T11440] bridge_slave_1: entered promiscuous mode [ 230.066876][T11440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.087855][T11440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.088723][T11509] ebtables: ebtables: counters copy to user failed while replacing table [ 230.157138][T11440] team0: Port device team_slave_0 added [ 230.172824][T11440] team0: Port device team_slave_1 added [ 230.267039][T11440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.278982][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.307278][T11440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.346402][T11440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.353743][T11440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.381669][T11440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.453358][ T61] bond1: left allmulticast mode [ 230.458604][ T61] bond1: left promiscuous mode [ 230.468823][ T61] bridge0: port 3(bond1) entered disabled state [ 230.494424][ T61] bridge_slave_1: left allmulticast mode [ 230.500466][ T61] bridge_slave_1: left promiscuous mode [ 230.506239][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.534976][ T61] bridge_slave_0: left allmulticast mode [ 230.546203][ T61] bridge_slave_0: left promiscuous mode [ 230.552902][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.833324][ T4492] Bluetooth: hci6: command tx timeout [ 231.720096][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.736299][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.748174][ T61] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 231.758997][ T61] bond0 (unregistering): Released all slaves [ 231.778811][ T61] bond1 (unregistering): Released all slaves [ 231.795747][T11440] hsr_slave_0: entered promiscuous mode [ 231.802805][T11440] hsr_slave_1: entered promiscuous mode [ 231.809100][T11440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.830346][T11440] Cannot create hsr debugfs directory [ 231.879584][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.413893][T11556] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.499512][ T61] hsr_slave_0: left promiscuous mode [ 232.518966][ T61] hsr_slave_1: left promiscuous mode [ 232.527405][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.544635][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.557585][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.572343][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.613638][ T61] veth1_macvtap: left promiscuous mode [ 232.619229][ T61] veth0_macvtap: left promiscuous mode [ 232.625451][ T61] veth1_vlan: left promiscuous mode [ 232.631054][ T61] veth0_vlan: left promiscuous mode [ 232.920621][ T4492] Bluetooth: hci6: command tx timeout [ 233.224913][ T61] team0 (unregistering): Port device team_slave_1 removed [ 233.273355][ T61] team0 (unregistering): Port device team_slave_0 removed [ 234.266003][ T61] IPVS: stop unused estimator thread 0... [ 234.307807][T11440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.344117][T11440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.369248][T11440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.403354][T11440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.596398][T11440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.646684][T11440] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.671263][ T5197] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.678452][ T5197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.725929][ T5197] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.733156][ T5197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.991116][ T4492] Bluetooth: hci6: command tx timeout [ 235.001029][T11632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.027661][T11628] xt_CT: No such helper "pptp" [ 235.072653][T11628] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 235.083778][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.267463][T11628] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.275371][T11628] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.729003][T11628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.805099][T11628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.019235][T11655] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.149781][T11656] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.185852][T11628] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.205056][T11628] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.214351][T11628] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.226605][T11628] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.408326][T11655] IPv6: Can't replace route, no match found [ 236.414589][T11656] IPv6: Can't replace route, no match found [ 236.476153][T11440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.491427][T11659] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.512949][T11661] netlink: 'syz-executor.1': attribute type 309 has an invalid length. [ 236.528046][T11659] IPv6: Can't replace route, no match found [ 236.579181][T11661] macsec0: entered promiscuous mode [ 236.598228][T11661] macsec1: entered promiscuous mode [ 236.657970][T11663] netlink: 'syz-executor.4': attribute type 309 has an invalid length. [ 236.719224][T11663] macsec1: entered promiscuous mode [ 236.730864][T11663] macsec0: entered promiscuous mode [ 236.751192][T11663] macsec0: left promiscuous mode [ 236.799897][T11440] veth0_vlan: entered promiscuous mode [ 236.836957][T11440] veth1_vlan: entered promiscuous mode [ 236.916860][T11440] veth0_macvtap: entered promiscuous mode [ 236.938973][T11440] veth1_macvtap: entered promiscuous mode [ 236.964791][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.995197][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.030408][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.044372][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.070466][ T4492] Bluetooth: hci6: command tx timeout [ 237.090320][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.100988][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.116863][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.127478][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.137442][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.148520][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.162457][T11440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.196548][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.211353][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.221456][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.233529][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.250717][T11686] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 237.259472][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.272861][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.292911][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.308320][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.331298][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.343758][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.355763][T11440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.402829][T11440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.429360][T11440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.439212][T11440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.465462][T11440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.539094][T11697] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.714947][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.729594][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.783841][ T2436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.792744][ T2436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.809098][T11712] IPv6: Can't replace route, no match found [ 237.943516][T11718] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 237.954522][T11718] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.092678][T11726] bridge_slave_0: default FDB implementation only supports local addresses [ 238.262693][T11720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.277758][T11733] tipc: Started in network mode [ 238.309038][T11733] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 238.336422][T11733] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 238.368617][T11733] tipc: Enabled bearer , priority 10 [ 238.446784][T11735] xt_CT: No such helper "pptp" [ 238.487464][T11740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.531000][T11745] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.547419][T11745] IPv6: Can't replace route, no match found [ 238.621336][T11735] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 238.645876][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.012830][T11760] xt_CT: No such helper "pptp" [ 239.033840][T11760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.400010][T11766] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.484980][T11652] tipc: Node number set to 1 [ 239.688812][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.743658][T11735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.968941][T11735] vlan0: left promiscuous mode [ 239.974599][T11735] vlan0: left allmulticast mode [ 240.103750][T11735] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.113956][T11735] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.123260][T11735] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.132333][T11735] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.279216][T11760] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 240.313614][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.628075][T11760] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.636315][T11760] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.081742][T11760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.108033][T11760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.494526][T11760] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.503391][T11760] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.516641][T11760] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.525196][T11760] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.573917][T11760] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 241.656241][T11766] IPv6: Can't replace route, no match found [ 241.690335][T11771] tipc: Started in network mode [ 241.713797][T11771] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 241.727630][T11771] tipc: Enabling of bearer rejected, failed to enable media [ 241.804642][T11777] bond0: entered promiscuous mode [ 241.809738][T11777] bond_slave_0: entered promiscuous mode [ 241.817813][T11777] bond_slave_1: entered promiscuous mode [ 241.835157][T11777] bond0: entered allmulticast mode [ 241.840820][T11777] bond_slave_0: entered allmulticast mode [ 241.846596][T11777] bond_slave_1: entered allmulticast mode [ 241.865030][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.901126][T11779] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.096885][T11802] bridge_slave_0: default FDB implementation only supports local addresses [ 242.107571][T11789] netlink: 'syz-executor.2': attribute type 309 has an invalid length. [ 242.133365][T11789] macsec1: entered promiscuous mode [ 242.138755][T11789] macsec0: entered promiscuous mode [ 242.160094][T11789] macsec0: left promiscuous mode [ 242.247740][T11785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.298749][T11779] IPv6: Can't replace route, no match found [ 242.337573][T11812] tipc: Started in network mode [ 242.344179][T11812] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 242.353649][T11812] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 242.363600][T11812] tipc: Enabled bearer , priority 10 [ 242.666366][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.871897][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.890209][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.916025][T11843] ip6t_srh: unknown srh invflags 7863 [ 242.955892][T11841] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.975525][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.989908][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.168144][T11845] tipc: Started in network mode [ 243.175465][T11845] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 243.187917][T11845] tipc: Enabling of bearer rejected, failed to enable media [ 243.485452][T11652] tipc: Node number set to 1 [ 243.557700][T11869] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 243.578294][T11869] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.047584][T11894] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 244.058029][T11894] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.194496][T11902] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 244.222152][T11902] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 244.408594][T11917] ipt_ECN: cannot use operation on non-tcp rule [ 244.528935][T11924] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.637985][T11930] tipc: Enabling of bearer rejected, failed to enable media [ 244.912083][T11945] xt_cgroup: invalid path, errno=-2 [ 245.349008][T11968] syzkaller0: entered promiscuous mode [ 245.367152][T11968] syzkaller0: entered allmulticast mode [ 246.382256][T11999] dccp_invalid_packet: P.Data Offset(4) too small [ 246.423269][ T29] audit: type=1800 audit(1716906526.614:34): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 246.458313][ T29] audit: type=1800 audit(1716906526.634:35): pid=12001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 246.489923][ T29] audit: type=1800 audit(1716906526.684:36): pid=11999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 246.539890][ T29] audit: type=1800 audit(1716906526.744:37): pid=11999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 247.543306][ T29] audit: type=1800 audit(1716906527.744:38): pid=12016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 247.699506][ T29] audit: type=1800 audit(1716906527.904:39): pid=12017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 248.034299][ T29] audit: type=1800 audit(1716906528.234:40): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 248.062296][ T29] audit: type=1800 audit(1716906528.264:41): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 248.318171][T12043] dccp_invalid_packet: P.Data Offset(4) too small [ 248.337395][ T29] audit: type=1800 audit(1716906528.534:42): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1969 res=0 errno=0 [ 248.372050][ T29] audit: type=1800 audit(1716906528.574:43): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1969 res=0 errno=0 [ 248.478100][T12050] __nla_validate_parse: 5 callbacks suppressed [ 248.478120][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.505291][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.528985][T12050] block nbd0: reconnected socket [ 248.672022][T12057] dccp_invalid_packet: P.Data Offset(4) too small [ 249.099900][T12079] dccp_invalid_packet: P.Data Offset(4) too small [ 249.256067][T12088] dccp_invalid_packet: P.Data Offset(4) too small [ 249.548405][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.587390][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.156435][T12130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.181331][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.204528][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.422896][T12142] syzkaller0: entered promiscuous mode [ 250.428419][T12142] syzkaller0: entered allmulticast mode [ 251.087676][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.097118][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.653781][T12194] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 254.644541][T12275] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 255.732340][T12338] syz-executor.4[12338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.732497][T12338] syz-executor.4[12338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.050170][T12359] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 256.122941][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.647863][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.052917][T12414] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 257.073583][T12414] ipvlan1: entered promiscuous mode [ 257.088956][T12414] team0: Device ipvlan1 failed to register rx_handler [ 257.251939][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.624760][T12442] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 257.716561][T12453] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.038503][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.209763][T12479] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 258.259224][T12479] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.378703][T12483] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 258.692429][T12495] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 259.133262][T12507] syz-executor.1[12507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.133441][T12507] syz-executor.1[12507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.159797][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.190429][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.221775][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.229992][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.239049][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.248286][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.377531][T12519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 259.385887][T12519] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.465084][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.693959][T12508] chnl_net:caif_netlink_parms(): no params data found [ 259.849474][T12549] syz-executor.0[12549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.849782][T12549] syz-executor.0[12549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.869548][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.909052][T12508] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.917808][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.926380][T12508] bridge_slave_0: entered allmulticast mode [ 259.933919][T12508] bridge_slave_0: entered promiscuous mode [ 259.943161][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.951073][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.958336][T12508] bridge_slave_1: entered allmulticast mode [ 259.965867][T12508] bridge_slave_1: entered promiscuous mode [ 260.029917][T12553] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 260.039540][T12553] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.078851][T12508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.096437][T12508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.155206][T12508] team0: Port device team_slave_0 added [ 260.162189][T12558] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 260.194306][T12508] team0: Port device team_slave_1 added [ 260.333451][T12508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.349192][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.377871][T12508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.395289][T12568] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.455690][T12508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.476102][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.509601][T12508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.589137][T12508] hsr_slave_0: entered promiscuous mode [ 260.597139][T12508] hsr_slave_1: entered promiscuous mode [ 260.615784][T12508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.626530][T12508] Cannot create hsr debugfs directory [ 260.665412][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.712313][T12578] syz-executor.1[12578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.712487][T12578] syz-executor.1[12578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.316277][ T53] Bluetooth: hci0: command tx timeout [ 261.741764][T12508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.806953][T12508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.921019][T12508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.946711][T12508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.079788][T12633] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 262.088375][T12633] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 262.097100][T12633] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 262.120098][T12633] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 262.128904][T12508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.177016][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.224639][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.231845][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.266522][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.273727][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.326348][T12508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.571820][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.589285][T12638] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 262.606250][T12638] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 262.631882][T12638] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 262.647934][T12638] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 262.889567][T12508] veth0_vlan: entered promiscuous mode [ 262.936370][T12508] veth1_vlan: entered promiscuous mode [ 262.979716][T12508] veth0_macvtap: entered promiscuous mode [ 263.006638][T12508] veth1_macvtap: entered promiscuous mode [ 263.027525][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.040283][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.055177][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.066201][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.083792][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.094736][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.106938][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.117472][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.129525][T12508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.144919][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.156492][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.178104][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.197376][T12673] __nla_validate_parse: 1 callbacks suppressed [ 263.197543][T12673] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.200585][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.225159][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.235881][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.246045][T12508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.257988][T12508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.269754][T12508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.286286][T12508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.299133][T12508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.320457][T12508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.329232][T12508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.391070][ T53] Bluetooth: hci0: command tx timeout [ 263.432787][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.441415][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.492593][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.501782][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.563100][T12742] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.658134][T12742] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.870053][T12750] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 265.480847][ T53] Bluetooth: hci0: command tx timeout [ 266.788070][T12824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.953092][T12832] openvswitch: netlink: Missing key (keys=40, expected=100) [ 267.001996][T12835] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 267.382221][T12854] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.552928][ T5115] Bluetooth: hci0: command tx timeout [ 267.924315][T12873] validate_nla: 9 callbacks suppressed [ 267.924335][T12873] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 268.018681][T12873] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.241132][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 268.241154][ T29] audit: type=1804 audit(1716906548.444:54): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4261725240/syzkaller.ME53Hw/31/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 268.441166][ T5115] Bluetooth: hci5: command 0x0406 tx timeout [ 268.465551][ T29] audit: type=1804 audit(1716906548.664:55): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir484416839/syzkaller.pSZCmR/58/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 270.258108][T12950] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 270.396008][ T29] audit: type=1804 audit(1716906550.594:56): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4261725240/syzkaller.ME53Hw/37/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 270.528732][T12958] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.542535][T12958] unsupported nlmsg_type 40 [ 271.831519][T13007] fscrypt (sda1, inode 1976): Unsupported encryption modes (contents 0, filenames 0) [ 272.496913][T13028] syz_tun: entered promiscuous mode [ 272.510564][T13027] syz_tun: left promiscuous mode [ 272.609515][T13031] fscrypt (sda1, inode 1964): Unsupported encryption modes (contents 0, filenames 0) [ 273.405174][T13063] fscrypt (sda1, inode 1975): Unsupported encryption modes (contents 0, filenames 0) [ 273.414349][T13061] syz_tun: entered promiscuous mode [ 273.510589][T13059] syz_tun: left promiscuous mode [ 273.612092][T13067] fscrypt (sda1, inode 1975): Unsupported encryption modes (contents 0, filenames 0) [ 273.701621][T13069] syz_tun: entered promiscuous mode [ 273.713101][T13068] syz_tun: left promiscuous mode [ 274.584901][T13089] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.607843][T13089] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 274.945709][T13103] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [FSR] L3 index 0 [ 275.192918][T13116] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.202814][T13116] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 275.802033][T13137] netlink: 4444 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.817030][T13137] netlink: 4444 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.996811][ T29] audit: type=1800 audit(1716906556.194:57): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 276.029293][ T29] audit: type=1804 audit(1716906556.224:58): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3346163146/syzkaller.jExDQZ/539/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 276.058646][ T29] audit: type=1804 audit(1716906556.254:59): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3346163146/syzkaller.jExDQZ/539/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 276.679959][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.789420][T13173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.878488][ T29] audit: type=1800 audit(1716906557.074:60): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 276.916600][ T29] audit: type=1804 audit(1716906557.114:61): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir484416839/syzkaller.pSZCmR/80/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 276.945759][ T29] audit: type=1804 audit(1716906557.114:62): pid=13177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir484416839/syzkaller.pSZCmR/80/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 277.446122][T13193] pim6reg1: entered promiscuous mode [ 277.451665][T13193] pim6reg1: entered allmulticast mode [ 277.669788][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.886453][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.231101][T13223] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 279.495035][T13285] veth1_to_bridge: entered allmulticast mode [ 279.507953][T13285] veth1_to_bridge: left allmulticast mode [ 279.574914][T13287] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 280.175161][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.387156][T13310] veth1_to_bridge: entered allmulticast mode [ 280.397671][T13310] veth1_to_bridge: left allmulticast mode [ 280.589550][T13318] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 280.745803][T13317] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 280.771249][T13325] pim6reg1: entered promiscuous mode [ 280.776673][T13325] pim6reg1: entered allmulticast mode [ 280.838037][ T29] audit: type=1800 audit(1716906561.034:63): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 280.978523][T13333] veth1_to_bridge: entered allmulticast mode [ 280.989073][T13333] veth1_to_bridge: left allmulticast mode [ 281.046028][T13331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.149967][T13343] vlan2: entered promiscuous mode [ 281.155547][T13343] gretap0: entered promiscuous mode [ 281.166341][T13343] vlan2: entered allmulticast mode [ 281.173003][T13343] gretap0: entered allmulticast mode [ 281.181598][T13343] gretap0: left allmulticast mode [ 281.186702][T13343] gretap0: left promiscuous mode [ 281.214953][T13345] veth1_to_bridge: entered allmulticast mode [ 281.225776][T13345] veth1_to_bridge: left allmulticast mode [ 281.480023][ T29] audit: type=1800 audit(1716906561.674:64): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1973 res=0 errno=0 [ 281.663222][T13368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.717996][T13370] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 281.727110][T13370] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 281.970737][ T29] audit: type=1800 audit(1716906562.154:65): pid=13383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 303.245141][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.254842][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.263414][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.273356][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.281222][ T5115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 303.288610][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.029782][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 304.046582][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 304.057095][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 304.065555][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 304.074267][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 304.082052][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 305.310909][ T5115] Bluetooth: hci7: command tx timeout [ 306.110805][ T5115] Bluetooth: hci8: command tx timeout [ 307.390535][ T5115] Bluetooth: hci7: command tx timeout [ 308.190766][ T5115] Bluetooth: hci8: command tx timeout [ 309.477836][ T5115] Bluetooth: hci7: command tx timeout [ 310.275477][ T5115] Bluetooth: hci8: command tx timeout [ 311.550856][ T5115] Bluetooth: hci7: command tx timeout [ 312.091069][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.111197][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.121530][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.135553][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.144409][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 312.159908][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.360335][ T5115] Bluetooth: hci8: command tx timeout [ 312.581377][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 312.595664][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 312.611464][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 312.630437][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 312.639253][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 312.647389][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 312.681655][ T5116] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 312.691811][ T5116] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 312.702521][ T5116] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 312.712473][ T5116] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 312.721516][ T5116] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 312.728980][ T5116] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 314.190949][ T5116] Bluetooth: hci6: command tx timeout [ 314.750533][ T5116] Bluetooth: hci10: command tx timeout [ 314.760569][ T53] Bluetooth: hci9: command tx timeout [ 316.270894][ T5116] Bluetooth: hci6: command tx timeout [ 316.830866][ T5116] Bluetooth: hci10: command tx timeout [ 316.830888][ T53] Bluetooth: hci9: command tx timeout [ 317.560137][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.350792][ T53] Bluetooth: hci6: command tx timeout [ 318.913499][ T53] Bluetooth: hci9: command tx timeout [ 318.913510][ T5116] Bluetooth: hci10: command tx timeout [ 320.437800][ T5116] Bluetooth: hci6: command tx timeout [ 320.990693][ T5116] Bluetooth: hci9: command tx timeout [ 320.996159][ T5116] Bluetooth: hci10: command tx timeout [ 368.253596][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 368.264201][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 368.272918][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 368.281473][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 368.289260][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 368.297951][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 369.088850][ T5116] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 369.100401][ T5116] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 369.108943][ T5116] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 369.122645][ T5116] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 369.131978][ T5116] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 369.139786][ T5116] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 370.350720][ T53] Bluetooth: hci11: command tx timeout [ 371.240476][ T53] Bluetooth: hci12: command tx timeout [ 372.430405][ T53] Bluetooth: hci11: command tx timeout [ 373.320704][ T53] Bluetooth: hci12: command tx timeout [ 374.510572][ T53] Bluetooth: hci11: command tx timeout [ 375.390681][ T53] Bluetooth: hci12: command tx timeout [ 376.600586][ T53] Bluetooth: hci11: command tx timeout [ 377.082961][ T5116] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 377.101947][ T5116] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 377.111337][ T5116] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 377.120934][ T5116] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 377.132107][ T5116] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 377.139636][ T5116] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 377.470718][ T5116] Bluetooth: hci12: command tx timeout [ 377.491654][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 377.510808][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 377.531814][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 377.551269][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 377.562816][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 377.570321][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 377.603468][ T5115] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 377.614504][ T5115] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 377.624542][ T5115] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 377.633025][ T5115] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 377.642123][ T5115] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 377.649973][ T5115] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 379.002468][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.230684][ T5116] Bluetooth: hci13: command tx timeout [ 379.634337][ T5115] Bluetooth: hci14: command tx timeout [ 379.711787][ T5115] Bluetooth: hci15: command tx timeout [ 381.316639][ T5115] Bluetooth: hci13: command tx timeout [ 381.722585][ T5115] Bluetooth: hci14: command tx timeout [ 381.790665][ T5115] Bluetooth: hci15: command tx timeout [ 383.390628][ T5115] Bluetooth: hci13: command tx timeout [ 383.795171][ T5115] Bluetooth: hci14: command tx timeout [ 383.870465][ T5115] Bluetooth: hci15: command tx timeout [ 385.470687][ T5116] Bluetooth: hci13: command tx timeout [ 385.873689][ T5116] Bluetooth: hci14: command tx timeout [ 385.950435][ T5116] Bluetooth: hci15: command tx timeout [ 386.197341][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 422.512302][ T30] INFO: task syz-executor.4:13073 blocked for more than 143 seconds. [ 422.529352][ T30] Not tainted 6.9.0-syzkaller-12079-gc30ff5f3aec3 #0 [ 422.537418][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/05/28 14:31:42 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 422.558431][ T30] task:syz-executor.4 state:D stack:23800 pid:13073 tgid:13072 ppid:12508 flags:0x00000006 [ 422.600694][ T30] Call Trace: [ 422.604043][ T30] [ 422.606999][ T30] __schedule+0x17e8/0x4a20 [ 422.629364][ T30] ? __pfx___schedule+0x10/0x10 [ 422.635187][ T30] ? __pfx_lock_release+0x10/0x10 [ 422.640904][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 422.646420][ T30] ? schedule+0x90/0x320 [ 422.660538][ T30] schedule+0x14b/0x320 [ 422.664797][ T30] schedule_preempt_disabled+0x13/0x30 [ 422.680061][ T30] __mutex_lock+0x6a4/0xd70 [ 422.685599][ T30] ? __mutex_lock+0x527/0xd70 [ 422.700349][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5d0 [ 422.706236][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 422.720528][ T30] ? __asan_memset+0x23/0x50 [ 422.725196][ T30] nfsd_nl_listener_get_doit+0x115/0x5d0 [ 422.740775][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 422.745521][ T30] ? genl_family_rcv_msg_attrs_parse+0x140/0x290 [ 422.770557][ T30] genl_rcv_msg+0xb14/0xec0 [ 422.775213][ T30] ? mark_lock+0x9a/0x350 [ 422.779570][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.790628][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 422.795700][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 422.820434][ T30] ? __pfx___might_resched+0x10/0x10 [ 422.825804][ T30] netlink_rcv_skb+0x1e3/0x430 [ 422.835606][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.841604][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.846959][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 422.852512][ T30] genl_rcv+0x28/0x40 [ 422.856609][ T30] netlink_unicast+0x7ea/0x980 [ 422.862001][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 422.867346][ T30] ? __virt_addr_valid+0x183/0x520 [ 422.872544][ T30] ? __check_object_size+0x49c/0x900 [ 422.877855][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 422.883108][ T30] netlink_sendmsg+0x8db/0xcb0 [ 422.887907][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.893539][ T30] ? __import_iovec+0x536/0x820 [ 422.898431][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 422.903602][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.908907][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 422.914475][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.919787][ T30] __sock_sendmsg+0x221/0x270 [ 422.924858][ T30] ____sys_sendmsg+0x525/0x7d0 [ 422.929672][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.935055]