last executing test programs: 4.305153814s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="ffffff8d00"}) 4.17215121s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4.019611009s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000040)) 3.775700713s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040009a118000200ff0200000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.657737977s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f0000000000003490f82bf77b2a82a671c1209e6e873b9a19135d607149c68d0daa96906e4da3c227a9acb2c3375c46c0ba56dc4f8d9d38b589d9186011473191ed5f2a8ed07eeacc55e3f2ab18e97b0ec7bf5ba59d120dc6aa8139383d1a56ae44e6f30032482a4f1160b92532ba84de32848e8944e29e7ff15ad8901a8d04"], 0x0, 0x26}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f29"], 0xfdef) 3.637174846s ago: executing program 2: socket(0x10, 0x0, 0x10002) 3.425466796s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 3.375501717s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) unshare(0x60400) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x0) 3.337828407s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 3.316749452s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.207811586s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @dev}}}}) 3.167466518s ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x48}}, 0x0) 3.026938224s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 1.492315602s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="ffffff8d00"}) 1.291542706s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) 1.035706151s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e563541", 0xff8d}], 0x1}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) 892.930554ms ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000300), &(0x7f0000000380)=0x8) 620.303899ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @nop, @md5sig={0x13, 0x12, "7d35dde9d29a377b7568ef4d9440558a"}, @timestamp={0x8, 0xa}, @mptcp=@ack={0x1e, 0xe, 0x0, 0x4, "3d6b90942bd3ad84de46"}, @md5sig={0x13, 0x12, "9b113ff4c4385514c5bc5149cf7f48c8"}]}}}}}}}}, 0x0) 610.232519ms ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 600.660722ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 561.676401ms ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) 480.847501ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) socket$igmp(0x2, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xcfb9cc821fc0631b}}}}}}, 0x0) 460.844374ms ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000005640)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0xffffffffffffff14, 0x2c, 0x0, @remote, @loopback, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x7209}], 0x1, 0x0) 371.405758ms ago: executing program 2: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) close(r0) 356.301824ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) writev(r0, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="1e151984d1250aff3f290e31e5048b30", 0x10}, {&(0x7f0000000900)="fd52", 0x2}], 0x2) 236.988299ms ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x13) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000507000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xd}]}, 0x28}}, 0x0) 184.931847ms ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd37039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06acaff0c23374ec7c4aadbb8b985f14893ea78f67026db363c4356dea91d750e168350685e0f4f079d2d8e79be174ef9355b707129d8055ed83d5599bdbb3e3d323e163db2312c1ea84c10b0abd8599692167dcdee8f2a5c751023cf328e86d355eebc", 0xdd}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 98.617983ms ago: executing program 3: syz_emit_ethernet(0x3e, 0x0, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x30}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000001300000100000008000100", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) 56.103478ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x6602, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x42, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x49a) 0s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 2483027968 [ 112.406551][ T6013] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.529431][ T6021] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.771805][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.798970][ T6037] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 112.817205][ T6037] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 112.847300][ T6031] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 112.890923][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.898877][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.688524][ T6077] __nla_validate_parse: 3 callbacks suppressed [ 113.688547][ T6077] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.833685][ T6086] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 114.174386][ T6104] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.402086][ T6113] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 114.525134][ T6118] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 114.629927][ T6126] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 114.638531][ T6126] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.672825][ T6132] Zero length message leads to an empty skb [ 114.766898][ T6131] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.816762][ T6139] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 0, id = 0 [ 115.254453][ T6161] netlink: 193372 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.273716][ T6161] netlink: zone id is out of range [ 115.280345][ T6161] netlink: zone id is out of range [ 115.289202][ T6161] netlink: zone id is out of range [ 115.298043][ T6161] netlink: zone id is out of range [ 115.308384][ T6161] netlink: zone id is out of range [ 115.318658][ T6161] netlink: zone id is out of range [ 115.325235][ T6164] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.336806][ T6161] netlink: zone id is out of range [ 115.876620][ T6180] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.230424][ T6188] net_ratelimit: 272 callbacks suppressed [ 116.230448][ T6188] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 116.628753][ T6200] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.949694][ T6219] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 117.185203][ T6231] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.225163][ T6233] bond0: entered promiscuous mode [ 117.230383][ T6233] bond_slave_0: entered promiscuous mode [ 117.245224][ T6233] bond_slave_1: entered promiscuous mode [ 117.253414][ T6233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.279196][ T6233] bond0: left promiscuous mode [ 117.297236][ T6236] openvswitch: netlink: Unknown nsh attribute 0 [ 117.301110][ T6233] bond_slave_0: left promiscuous mode [ 117.309422][ T6233] bond_slave_1: left promiscuous mode [ 117.875241][ T6254] Bluetooth: MGMT ver 1.22 [ 118.101808][ T6264] syz_tun: entered promiscuous mode [ 118.118782][ T6264] vlan3: entered promiscuous mode [ 118.128148][ T6264] vlan3: entered allmulticast mode [ 118.142232][ T6264] syz_tun: entered allmulticast mode [ 118.164650][ T6264] syz_tun: left allmulticast mode [ 118.170318][ T6264] syz_tun: left promiscuous mode [ 118.709120][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.748645][ T6300] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 118.766060][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.797046][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.881169][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.959238][ T6307] syz_tun: entered promiscuous mode [ 118.975775][ T6307] vlan2: entered promiscuous mode [ 118.983180][ T6307] vlan2: entered allmulticast mode [ 118.988537][ T6307] syz_tun: entered allmulticast mode [ 118.997968][ T6307] syz_tun: left allmulticast mode [ 119.006740][ T6307] syz_tun: left promiscuous mode [ 119.525912][ T6334] Driver unsupported XDP return value 0 on prog (id 113) dev N/A, expect packet loss! [ 119.627610][ T6340] syz_tun: entered promiscuous mode [ 119.651432][ T6340] vlan2: entered promiscuous mode [ 119.659782][ T6340] vlan2: entered allmulticast mode [ 119.691794][ T6340] syz_tun: entered allmulticast mode [ 119.715282][ T6340] syz_tun: left allmulticast mode [ 119.722518][ T6340] syz_tun: left promiscuous mode [ 119.895880][ T6352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.921486][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.927921][ T5127] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.973690][ T6352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.054148][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.519929][ T6384] sctp: [Deprecated]: syz-executor.1 (pid 6384) Use of int in max_burst socket option. [ 120.519929][ T6384] Use struct sctp_assoc_value instead [ 121.153595][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.188314][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 121.207557][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 121.247003][ T1110] wlan1: authenticated [ 121.250126][ T6420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.272702][ T1110] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 121.330277][ T6425] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 121.342236][ T6425] macvlan2: entered promiscuous mode [ 121.353446][ T6412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.364585][ T35] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 121.376078][ T6425] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 121.385098][ T35] wlan1: associated [ 121.476033][ T6430] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 122.081060][ T5127] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.148613][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.166832][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.644453][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.900460][ T6505] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 123.656460][ T6537] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 123.768031][ T6543] syz-executor.1[6543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.768616][ T6543] syz-executor.1[6543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.344342][ T6573] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 124.561260][ T5127] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.664075][ T29] audit: type=1804 audit(1717338127.116:8): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2454297569/syzkaller.IdAE0V/139/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 124.728610][ T6592] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 124.737850][ T6592] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.882145][ T6601] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 124.900443][ T6601] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.945785][ T6603] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 125.104889][ T6609] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 125.484135][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.643356][ T6636] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 125.653044][ T6636] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.842090][ T6639] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 125.877664][ T6639] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.340707][ T29] audit: type=1804 audit(1717338128.786:9): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2454297569/syzkaller.IdAE0V/144/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 126.350370][ T6666] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 126.380317][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.610435][ T6669] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 126.631812][ T6669] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.159360][ T6693] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.178350][ T6693] 0ªX¹¦D: renamed from gretap0 (while UP) [ 127.196977][ T6693] 0ªX¹¦D: entered allmulticast mode [ 127.210321][ T6693] A link change request failed with some changes committed already. Interface c0ªX¹¦D may have been left with an inconsistent configuration, please check. [ 127.878733][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.106394][ T6747] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.306373][ T6761] xt_TCPMSS: Only works on TCP SYN packets [ 128.564931][ T6774] bridge0: port 3(macsec0) entered blocking state [ 128.581183][ T6774] bridge0: port 3(macsec0) entered disabled state [ 128.596223][ T6774] macsec0: entered allmulticast mode [ 128.608545][ T6774] veth1_macvtap: entered allmulticast mode [ 128.618778][ T6774] macsec0: entered promiscuous mode [ 128.628625][ T6774] bridge0: port 3(macsec0) entered blocking state [ 128.636343][ T6774] bridge0: port 3(macsec0) entered forwarding state [ 128.955632][ T6797] tipc: Started in network mode [ 128.961484][ T6797] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.983227][ T6797] tipc: Enabling of bearer rejected, failed to enable media [ 129.268502][ T6814] veth3: entered promiscuous mode [ 129.278425][ T6814] veth3: entered allmulticast mode [ 129.505916][ T6830] sctp: [Deprecated]: syz-executor.3 (pid 6830) Use of int in maxseg socket option. [ 129.505916][ T6830] Use struct sctp_assoc_value instead [ 130.065367][ T6857] __nla_validate_parse: 3 callbacks suppressed [ 130.065389][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.108929][ T6858] sctp: [Deprecated]: syz-executor.3 (pid 6858) Use of int in maxseg socket option. [ 130.108929][ T6858] Use struct sctp_assoc_value instead [ 130.151822][ T6857] veth3: entered promiscuous mode [ 130.163904][ T6857] veth3: entered allmulticast mode [ 130.300324][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.228667][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.482555][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.496950][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.507783][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.517348][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.523257][ T6969] xt_CT: No such helper "snmp" [ 132.530156][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 132.551438][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.882881][ T5127] Bluetooth: hci2: command tx timeout [ 132.961319][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.244160][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.287563][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.296145][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.327653][ T6990] veth5: entered promiscuous mode [ 133.340038][ T6990] veth5: entered allmulticast mode [ 133.524217][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.643434][ T7003] xt_CT: No such helper "snmp" [ 133.864597][ T6971] chnl_net:caif_netlink_parms(): no params data found [ 134.096873][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.104308][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.112241][ T6971] bridge_slave_0: entered allmulticast mode [ 134.121377][ T6971] bridge_slave_0: entered promiscuous mode [ 134.131784][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.139375][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.146854][ T6971] bridge_slave_1: entered allmulticast mode [ 134.154776][ T6971] bridge_slave_1: entered promiscuous mode [ 134.280543][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.313911][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.446620][ T6971] team0: Port device team_slave_0 added [ 134.479221][ T6971] team0: Port device team_slave_1 added [ 134.587314][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.596067][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.629679][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.642359][ T5127] Bluetooth: hci5: command tx timeout [ 134.664521][ T7033] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 134.684116][ T7033] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.736546][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.770925][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.830288][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.046625][ T6971] hsr_slave_0: entered promiscuous mode [ 135.065791][ T6971] hsr_slave_1: entered promiscuous mode [ 135.077821][ T6971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.087106][ T6971] Cannot create hsr debugfs directory [ 135.564892][ T6971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.926734][ T6971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.080322][ T6971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.235343][ T6971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.590100][ T6971] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.625717][ T6971] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.669948][ T6971] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.708854][ T6971] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.721326][ T5127] Bluetooth: hci5: command tx timeout [ 136.866085][ T7082] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 136.944864][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.020067][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.063455][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.071674][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.106961][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.114233][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.716743][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.874978][ T6971] veth0_vlan: entered promiscuous mode [ 137.943139][ T6971] veth1_vlan: entered promiscuous mode [ 138.046822][ T6971] veth0_macvtap: entered promiscuous mode [ 138.108504][ T6971] veth1_macvtap: entered promiscuous mode [ 138.164051][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.200537][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.216354][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.227067][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.237768][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.260390][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.283352][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.310975][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.330981][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.352956][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.379753][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.437435][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.460421][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.481104][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.500257][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.524565][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.538297][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.548431][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.559194][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.569502][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.587866][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.600256][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.650635][ T6971] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.670928][ T6971] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.679886][ T6971] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.700999][ T6971] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.801124][ T5127] Bluetooth: hci5: command tx timeout [ 139.031425][ T5166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.057819][ T5166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.135950][ T7132] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 139.170183][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.188140][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.133838][ T7157] tipc: Failed to remove unknown binding: 66,1,1/0:1096565089/1096565091 [ 140.157694][ T7157] tipc: Failed to remove unknown binding: 66,1,1/0:1096565089/1096565091 [ 140.302274][ T7160] tipc: Started in network mode [ 140.313320][ T7160] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 140.336241][ T7160] tipc: Enabled bearer , priority 0 [ 140.701807][ T7175] tipc: Failed to remove unknown binding: 66,1,1/0:4100953344/4100953346 [ 140.722802][ T7175] tipc: Failed to remove unknown binding: 66,1,1/0:4100953344/4100953346 [ 140.880977][ T5127] Bluetooth: hci5: command tx timeout [ 141.029640][ T7188] tipc: Failed to remove unknown binding: 66,1,1/0:2707833551/2707833553 [ 141.053111][ T7188] tipc: Failed to remove unknown binding: 66,1,1/0:2707833551/2707833553 [ 141.283599][ T7203] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 141.331959][ T58] tipc: Node number set to 10136234 [ 141.633851][ T7220] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 141.677621][ T7219] tipc: Failed to remove unknown binding: 66,1,1/0:2375585897/2375585899 [ 141.728654][ T7219] tipc: Failed to remove unknown binding: 66,1,1/0:2375585897/2375585899 [ 141.765355][ T7220] bond1: entered promiscuous mode [ 141.854665][ T7226] bond0: (slave bond_slave_0): Releasing backup interface [ 141.968322][ T7226] bond1: (slave bond_slave_0): making interface the new active one [ 141.985209][ T7226] bond_slave_0: entered promiscuous mode [ 142.009078][ T7226] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.148026][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.319723][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.352701][ T7253] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.446680][ T7253] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.471133][ T7253] ipt_REJECT: TCP_RESET invalid for non-tcp [ 143.486490][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.496817][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.511269][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.549643][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.567664][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.576921][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.125511][ T7321] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.841620][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 145.098596][ T7359] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.168126][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.176633][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.195410][ T7296] bridge_slave_0: entered allmulticast mode [ 145.212886][ T7296] bridge_slave_0: entered promiscuous mode [ 145.228967][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.246280][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.259549][ T7366] tipc: Failed to remove unknown binding: 66,1,1/0:121145935/121145937 [ 145.268654][ T7296] bridge_slave_1: entered allmulticast mode [ 145.276934][ T7366] tipc: Failed to remove unknown binding: 66,1,1/0:121145935/121145937 [ 145.299100][ T7296] bridge_slave_1: entered promiscuous mode [ 145.325334][ T7366] tipc: Failed to remove unknown binding: 66,1,1/0:121145935/121145937 [ 145.408032][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.435257][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.562638][ T7296] team0: Port device team_slave_0 added [ 145.584693][ T7296] team0: Port device team_slave_1 added [ 145.690969][ T53] Bluetooth: hci4: command tx timeout [ 145.744728][ T7381] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 145.751322][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.759361][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.818671][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.836358][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.844397][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.872282][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.885568][ T7388] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 145.907253][ T7388] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 146.032800][ T7296] hsr_slave_0: entered promiscuous mode [ 146.044547][ T7296] hsr_slave_1: entered promiscuous mode [ 146.062573][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.077705][ T7296] Cannot create hsr debugfs directory [ 146.213929][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.251920][ T7401] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 146.349656][ T7407] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 146.657516][ T7296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.783358][ T7296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.898827][ T7296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.988947][ T7296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.279317][ T7296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.305649][ T7296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.335537][ T7296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.381610][ T7296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.439838][ T7435] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 147.449374][ T7435] netem: change failed [ 147.761302][ T5127] Bluetooth: hci4: command tx timeout [ 147.778210][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.978684][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.056539][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.063799][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.126301][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.133635][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.705380][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.959885][ T7296] veth0_vlan: entered promiscuous mode [ 149.001827][ T7296] veth1_vlan: entered promiscuous mode [ 149.113669][ T7296] veth0_macvtap: entered promiscuous mode [ 149.146140][ T7296] veth1_macvtap: entered promiscuous mode [ 149.196351][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.225878][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.241322][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.259790][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.271580][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.337103][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.384683][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.406740][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.429190][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.452256][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.473951][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.501031][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.552674][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.594989][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.629818][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.662566][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.708323][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.742275][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.758617][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.776609][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.806188][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.839132][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.850932][ T5127] Bluetooth: hci4: command 0x040f tx timeout [ 149.883587][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.931058][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.971017][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.005500][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.098873][ T7296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.130979][ T7296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.140033][ T7296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.181032][ T7296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.458957][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.484199][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.589390][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.647463][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.926627][ T7502] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 150.982246][ T7502] bond0: (slave bond_slave_0): Releasing backup interface [ 151.921530][ T53] Bluetooth: hci4: command 0x040f tx timeout [ 151.981036][ T7543] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 152.682551][ T7573] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.699702][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.813857][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.983475][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 153.198717][ T7601] xt_TCPMSS: Only works on TCP SYN packets [ 153.285554][ T7603] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.355077][ T7606] netlink: zone id is out of range [ 153.373095][ T7606] netlink: zone id is out of range [ 153.385774][ T7606] netlink: zone id is out of range [ 153.398427][ T7606] netlink: get zone limit has 4 unknown bytes [ 153.405361][ T7607] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 153.463116][ T7612] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.641985][ T7618] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 153.661232][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 153.736280][ T7618] bond1: entered promiscuous mode [ 153.764684][ T7625] bond0: (slave bond_slave_0): Releasing backup interface [ 153.826577][ T7625] bond1: (slave bond_slave_0): making interface the new active one [ 153.834877][ T7625] bond_slave_0: entered promiscuous mode [ 153.843167][ T7625] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.003635][ T53] Bluetooth: hci4: command 0x040f tx timeout [ 154.034739][ T7642] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.040394][ T7637] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.067114][ T7637] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 154.763669][ T7677] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.802984][ T7677] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 155.555635][ T7715] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.890203][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 156.292379][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.946840][ T7780] sctp: [Deprecated]: syz-executor.1 (pid 7780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.946840][ T7780] Use struct sctp_sack_info instead [ 158.350493][ T7831] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.508259][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.795520][ T7854] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 159.386233][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.100656][ T7902] sctp: [Deprecated]: syz-executor.3 (pid 7902) Use of int in maxseg socket option. [ 160.100656][ T7902] Use struct sctp_assoc_value instead [ 160.686369][ T7918] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.708580][ T7917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.922575][ T7923] tipc: Enabling of bearer rejected, failed to enable media [ 161.381401][ T7938] tun0: tun_chr_ioctl cmd 1074025675 [ 161.386798][ T7938] tun0: persist enabled [ 161.436786][ T7939] tun0: tun_chr_ioctl cmd 1074025675 [ 161.487025][ T7939] tun0: persist enabled [ 162.142388][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.176208][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.618083][ T8009] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.651176][ T8009] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.932289][ T8019] unknown channel width for channel at 909000KHz? [ 163.958150][ T8021] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 163.979919][ T8021] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.112023][ T8058] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 165.134396][ T8058] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.350275][ T8063] sctp: [Deprecated]: syz-executor.2 (pid 8063) Use of int in maxseg socket option. [ 165.350275][ T8063] Use struct sctp_assoc_value instead [ 165.486657][ T8069] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 166.410175][ T8089] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 166.432771][ T8089] macvlan2: entered promiscuous mode [ 166.488868][ T8089] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 166.796114][ T8103] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 167.059261][ T8114] sctp: [Deprecated]: syz-executor.4 (pid 8114) Use of int in maxseg socket option. [ 167.059261][ T8114] Use struct sctp_assoc_value instead [ 167.386622][ T8130] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 167.486377][ T8132] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 168.170493][ T8161] bridge0: port 4(geneve1) entered blocking state [ 168.195688][ T8161] bridge0: port 4(geneve1) entered disabled state [ 168.216844][ T8161] geneve1: entered allmulticast mode [ 168.248009][ T8161] geneve1: entered promiscuous mode [ 168.280314][ T8161] bridge0: port 4(geneve1) entered blocking state [ 168.287021][ T8161] bridge0: port 4(geneve1) entered forwarding state [ 168.597870][ T8179] netlink: 210596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.539805][ T8235] bridge0: port 1(geneve1) entered blocking state [ 170.569430][ T8235] bridge0: port 1(geneve1) entered disabled state [ 170.612081][ T8235] geneve1: entered allmulticast mode [ 170.640048][ T8235] geneve1: entered promiscuous mode [ 170.665157][ T8235] bridge0: port 1(geneve1) entered blocking state [ 170.671855][ T8235] bridge0: port 1(geneve1) entered forwarding state [ 171.349567][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.555458][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.959638][ T8311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.967897][ T8311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 172.062347][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.399691][ T8327] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.525038][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.803430][ T8343] tun1: tun_chr_ioctl cmd 2147767520 [ 173.106081][ T8359] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.227531][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.762107][ T8393] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.369069][ T51] bridge_slave_1: left allmulticast mode [ 174.385146][ T51] bridge_slave_1: left promiscuous mode [ 174.414177][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.445815][ T51] bridge_slave_0: left allmulticast mode [ 174.480927][ T51] bridge_slave_0: left promiscuous mode [ 174.501534][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.780650][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 174.787319][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 174.894606][ T51] ip6gretap0 (unregistering): left promiscuous mode [ 175.055669][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.209218][ T8432] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.663012][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.676701][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.696387][ T51] bond0 (unregistering): Released all slaves [ 175.714691][ T51] bond1 (unregistering): Released all slaves [ 175.749419][ T8439] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 175.761309][ T8439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.769286][ T8439] IPv6: NLM_F_CREATE should be set when creating new route [ 175.776775][ T8439] IPv6: NLM_F_CREATE should be set when creating new route [ 176.208170][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.314998][ T8475] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 176.342683][ T8477] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 176.351191][ T8476] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.357772][ T8476] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.447570][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.538968][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.999536][ T51] batadv_slave_0: left promiscuous mode [ 177.028423][ T51] hsr_slave_0: left promiscuous mode [ 177.070963][ T51] hsr_slave_1: left promiscuous mode [ 177.138409][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.171124][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.224918][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.258992][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.374605][ T51] veth1_macvtap: left promiscuous mode [ 177.406420][ T51] veth0_macvtap: left promiscuous mode [ 177.427336][ T51] veth1_vlan: left promiscuous mode [ 177.451040][ T51] veth0_vlan: left promiscuous mode [ 177.665046][ T51] infiniband syz0: set down [ 177.829206][ T51] pimreg (unregistering): left allmulticast mode [ 177.839239][ T8526] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 178.308956][ T2787] smc: removing ib device syz0 [ 178.404140][ T51] team0 (unregistering): Port device team_slave_1 removed [ 178.466880][ T51] team0 (unregistering): Port device team_slave_0 removed [ 178.486518][ T5127] Bluetooth: hci4: command 0x040f tx timeout [ 179.048570][ T45] infiniband syz0: ib_query_port failed (-19) [ 179.074401][ T8513] ipip0: entered promiscuous mode [ 179.083537][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.378082][ T8536] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.425538][ T8536] nbd: couldn't find a device at index 19 [ 179.550832][ T8543] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 179.581077][ T8541] veth0Wvlan: renamed from syz_tun (while UP) [ 179.664028][ T8543] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.835662][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.056409][ T8554] ipip0: entered promiscuous mode [ 180.078417][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.120424][ T8560] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 180.561058][ T53] Bluetooth: hci4: command 0x040f tx timeout [ 180.627182][ T8578] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.637030][ T8578] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.646871][ T8578] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.656002][ T8578] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.665162][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.775926][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.719849][ T8613] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.729300][ T8613] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.738570][ T8613] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.749171][ T8613] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.061438][ T29] audit: type=1800 audit(1717338184.516:10): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 182.098909][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.125074][ T29] audit: type=1804 audit(1717338184.516:11): pid=8634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3690477435/syzkaller.sXSKcW/290/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 182.228745][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.269533][ T8641] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.304999][ T8641] batadv_slave_0: entered promiscuous mode [ 182.650937][ T5127] Bluetooth: hci4: command 0x040f tx timeout [ 183.387676][ T8677] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 183.417533][ T8677] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 183.436771][ T8677] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 183.521257][ T8679] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.339962][ T8718] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.878164][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.017832][ T8746] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 185.035910][ T8744] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.049904][ T8746] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.158266][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.186298][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.783147][ T8786] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 186.423627][ T8811] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 186.576136][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.983852][ T8829] dccp_invalid_packet: P.Data Offset(0) too small [ 187.174720][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.232126][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.242476][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.255495][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.282099][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.299946][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.322112][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.454614][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.677252][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 187.696229][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.963013][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.973912][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.993066][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.008607][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.022916][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 188.033330][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.171269][ T51] geneve1: left allmulticast mode [ 188.176567][ T51] geneve1: left promiscuous mode [ 188.193973][ T51] bridge0: port 1(geneve1) entered disabled state [ 188.746506][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.762100][ T51] bond0 (unregistering): Released all slaves [ 188.778616][ T51] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 188.787449][ T51] bond_slave_0: left promiscuous mode [ 188.797769][ T51] bond1 (unregistering): Released all slaves [ 188.832013][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.082165][ T8882] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 189.090537][ T8882] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.130974][ T8882] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 189.181281][ T5166] IPVS: starting estimator thread 0... [ 189.289631][ T8833] chnl_net:caif_netlink_parms(): no params data found [ 189.301029][ T8885] IPVS: using max 17 ests per chain, 40800 per kthread [ 189.361224][ T5127] Bluetooth: hci0: command tx timeout [ 189.441075][ T8895] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 189.449750][ T8895] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 189.491005][ T51] batadv_slave_0: left promiscuous mode [ 189.493285][ T8895] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 189.592839][ T51] hsr_slave_0: left promiscuous mode [ 189.614401][ T51] hsr_slave_1: left promiscuous mode [ 189.630839][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.642939][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.662614][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.670283][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.769417][ T51] veth1_macvtap: left promiscuous mode [ 189.775626][ T51] veth0_macvtap: left promiscuous mode [ 189.789625][ T51] veth1_vlan: left promiscuous mode [ 189.801159][ T51] veth0_vlan: left promiscuous mode [ 190.081418][ T5127] Bluetooth: hci3: command tx timeout [ 190.748912][ T8918] xt_socket: unknown flags 0x8 [ 191.448462][ T5127] Bluetooth: hci0: command tx timeout [ 191.712286][ T51] team0 (unregistering): Port device team_slave_1 removed [ 191.985078][ T51] team0 (unregistering): Port device team_slave_0 removed [ 192.161953][ T5127] Bluetooth: hci3: command tx timeout [ 193.120134][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.137768][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.149848][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.175164][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.197368][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 193.206444][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.521154][ T5127] Bluetooth: hci0: command tx timeout [ 193.708761][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.730090][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.746663][ T8833] bridge_slave_0: entered allmulticast mode [ 193.762916][ T8833] bridge_slave_0: entered promiscuous mode [ 193.859639][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.872226][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.881214][ T8968] sctp: [Deprecated]: syz-executor.3 (pid 8968) Use of int in max_burst socket option deprecated. [ 193.881214][ T8968] Use struct sctp_assoc_value instead [ 193.891361][ T8833] bridge_slave_1: entered allmulticast mode [ 193.919258][ T8833] bridge_slave_1: entered promiscuous mode [ 194.028507][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 194.092524][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.127391][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.241439][ T5127] Bluetooth: hci3: command tx timeout [ 194.502992][ T8833] team0: Port device team_slave_0 added [ 194.541989][ T8833] team0: Port device team_slave_1 added [ 194.749272][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.764006][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.987837][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.999289][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.027921][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.043684][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.056044][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.082266][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.092517][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.132738][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.284661][ T5127] Bluetooth: hci5: command tx timeout [ 195.359625][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.421695][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.429040][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.451157][ T8857] bridge_slave_0: entered allmulticast mode [ 195.475451][ T8857] bridge_slave_0: entered promiscuous mode [ 195.602116][ T5127] Bluetooth: hci0: command tx timeout [ 195.611717][ T8833] hsr_slave_0: entered promiscuous mode [ 195.618662][ T8833] hsr_slave_1: entered promiscuous mode [ 195.634823][ T8833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.648886][ T8833] Cannot create hsr debugfs directory [ 195.695217][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.720115][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.727887][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.736491][ T8857] bridge_slave_1: entered allmulticast mode [ 195.747843][ T8857] bridge_slave_1: entered promiscuous mode [ 195.761605][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.794678][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.809588][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.880447][ T8950] chnl_net:caif_netlink_parms(): no params data found [ 195.948952][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.027360][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.144127][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.321088][ T5127] Bluetooth: hci3: command tx timeout [ 196.595115][ T8857] team0: Port device team_slave_0 added [ 196.873949][ T8857] team0: Port device team_slave_1 added [ 196.954060][ T8950] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.977485][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.000454][ T8950] bridge_slave_0: entered allmulticast mode [ 197.018063][ T8950] bridge_slave_0: entered promiscuous mode [ 197.035594][ T51] bridge_slave_1: left allmulticast mode [ 197.061003][ T51] bridge_slave_1: left promiscuous mode [ 197.067405][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.080918][ T51] bridge_slave_0: left allmulticast mode [ 197.086822][ T51] bridge_slave_0: left promiscuous mode [ 197.096831][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.363547][ T5127] Bluetooth: hci5: command tx timeout [ 197.728874][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.752856][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.773781][ T51] bond0 (unregistering): Released all slaves [ 197.941331][ T8950] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.948647][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.962774][ T8950] bridge_slave_1: entered allmulticast mode [ 197.963295][ T51] IPVS: stopping backup sync thread 6139 ... [ 197.970395][ T8950] bridge_slave_1: entered promiscuous mode [ 198.048434][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.067426][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.085840][ T9035] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 198.100919][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.135253][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.154786][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.192543][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.276882][ T8950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.359545][ T8950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.447357][ T9046] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.535626][ T8857] hsr_slave_0: entered promiscuous mode [ 198.565109][ T8857] hsr_slave_1: entered promiscuous mode [ 198.571951][ T8857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.579578][ T8857] Cannot create hsr debugfs directory [ 198.716933][ T8950] team0: Port device team_slave_0 added [ 198.752442][ T8950] team0: Port device team_slave_1 added [ 198.854701][ T51] hsr_slave_0: left promiscuous mode [ 198.890275][ T51] hsr_slave_1: left promiscuous mode [ 198.901849][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.909446][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.933928][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.955767][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.991699][ T51] veth1_macvtap: left promiscuous mode [ 199.000061][ T51] veth1_vlan: left promiscuous mode [ 199.007958][ T51] veth0_vlan: left promiscuous mode [ 199.199677][ T51] pimreg (unregistering): left allmulticast mode [ 199.451676][ T5127] Bluetooth: hci5: command tx timeout [ 199.885434][ T51] team0 (unregistering): Port device team_slave_1 removed [ 199.949643][ T51] team0 (unregistering): Port device team_slave_0 removed [ 200.438241][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.446254][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.472601][ T8950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.492067][ T8950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.499198][ T8950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.526342][ T8950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.716876][ T8833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.753178][ T8950] hsr_slave_0: entered promiscuous mode [ 200.763191][ T8950] hsr_slave_1: entered promiscuous mode [ 200.787456][ T8950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.797216][ T8950] Cannot create hsr debugfs directory [ 200.815537][ T8833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.950495][ T8833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.974338][ T8833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.447569][ T9106] Bluetooth: MGMT ver 1.22 [ 201.521226][ T53] Bluetooth: hci5: command tx timeout [ 201.669456][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.735947][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.847068][ T8950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.914458][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.921764][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.933141][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 202.042589][ T8950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.067469][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.074725][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.086262][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.161933][ T8950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.206847][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.287537][ T8950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.389162][ T8833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.583633][ T8950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.659009][ T8950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.754243][ T8950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.823912][ T8950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.012675][ T8857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.025102][ T8857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.062335][ T8857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.093622][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.108821][ T8857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.529463][ T8950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.608240][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.639015][ T8950] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.686313][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.693639][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.755682][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.762970][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.825173][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.874276][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.881625][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.983649][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.991056][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.091576][ T8833] veth0_vlan: entered promiscuous mode [ 204.173972][ T8833] veth1_vlan: entered promiscuous mode [ 204.297868][ T8833] veth0_macvtap: entered promiscuous mode [ 204.337863][ T8833] veth1_macvtap: entered promiscuous mode [ 204.390567][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.413601][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.451072][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.488984][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.520790][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.542559][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.553227][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.564197][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.579558][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.694603][ T8950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.720947][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.739764][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.751794][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.762863][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.776845][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.791966][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.809425][ T8833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.822050][ T8833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.835812][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.904883][ T8833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.931777][ T8833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.940966][ T8833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.949712][ T8833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.094433][ T8950] veth0_vlan: entered promiscuous mode [ 205.117950][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.193081][ T8950] veth1_vlan: entered promiscuous mode [ 205.413231][ T9196] syzkaller0: entered promiscuous mode [ 205.419531][ T9196] syzkaller0: entered allmulticast mode [ 205.497796][ T8950] veth0_macvtap: entered promiscuous mode [ 205.688587][ T9204] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.307891][ T8950] veth1_macvtap: entered promiscuous mode [ 208.317630][ T8857] veth0_vlan: entered promiscuous mode [ 208.410323][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.445236][ T8857] veth1_vlan: entered promiscuous mode [ 208.459670][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.467511][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.467540][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.467554][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.467570][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.467584][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.467600][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.467614][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.467630][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.467644][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.467659][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.470450][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.619479][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.630280][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.640310][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.670810][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.682560][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.694729][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.707146][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.717939][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.728499][ T8950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.739551][ T8950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.751995][ T8950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.807852][ T8950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.820928][ T8950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.829692][ T8950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.850006][ T8950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.875757][ T2787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.890866][ T2787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.905547][ T8857] veth0_macvtap: entered promiscuous mode [ 208.988574][ T8857] veth1_macvtap: entered promiscuous mode [ 209.065570][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.107745][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.137082][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.149566][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.168605][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.185160][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.218239][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.231713][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.252871][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.270944][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.294089][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.305160][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.325588][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.428461][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.448380][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.476890][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.498570][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.509113][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.525717][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.538281][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.555001][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.565763][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.581667][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.600309][ T8857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.623665][ T8857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.642732][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.665856][ T8857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.683404][ T8857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.697290][ T8857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.706542][ T8857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.870365][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.889351][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.980338][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.006316][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.153476][ T9248] IPv6: sit1: Disabled Multicast RS [ 210.159792][ T9248] sit1: entered allmulticast mode [ 210.286757][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.308514][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.442797][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.502980][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.973598][ T9283] IPv6: sit1: Disabled Multicast RS [ 210.988673][ T9283] sit1: entered allmulticast mode [ 213.288850][ T9369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.358675][ T9356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.030127][ T9399] team0: Device vlan3 is already an upper device of the team interface [ 214.104287][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.839202][ T9434] team0: Device vlan2 is already an upper device of the team interface [ 215.640556][ T9466] syz-executor.1 (9466) used greatest stack depth: 17840 bytes left [ 215.820269][ T9456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.868845][ T9456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.989072][ T9487] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.154995][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.189508][ T9494] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.207352][ T9494] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.217924][ T9494] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.233145][ T9494] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.250120][ T9494] geneve2: entered allmulticast mode [ 216.442257][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.158577][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.200212][ T9520] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.213995][ T9520] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.232497][ T9520] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.261687][ T9520] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 217.273637][ T9520] geneve2: entered allmulticast mode [ 217.407299][ T9535] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 217.438526][ T9535] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.649212][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.069583][ T9541] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 218.082355][ T9563] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.122004][ T9563] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 218.182270][ T9561] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 218.284445][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.990926][ T9604] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 219.047404][ T9604] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 220.006709][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.063293][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 220.094761][ T9651] team0: Port device batadv1 added [ 220.541344][ T29] audit: type=1800 audit(1717338222.996:12): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1939 res=0 errno=0 [ 220.604831][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.640476][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 220.640866][ T29] audit: type=1804 audit(1717338223.086:13): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3974961510/syzkaller.myEIAH/40/memory.events" dev="sda1" ino=1939 res=1 errno=0 [ 220.652671][ T9676] team0: Port device batadv1 added [ 221.272961][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.313072][ T9705] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 221.334623][ T9705] team0: Port device batadv2 added [ 221.896157][ T9729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.951404][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.969821][ T9729] netem: invalid attributes len -24 [ 221.987195][ T9729] netem: change failed [ 222.147668][ T29] audit: type=1804 audit(1717338224.596:14): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3690477435/syzkaller.sXSKcW/416/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 222.317073][ T9747] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 222.326376][ T9747] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.353617][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.362552][ T9749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.372602][ T9749] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 222.381638][ T9749] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 222.484680][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.870989][ T29] audit: type=1804 audit(1717338226.316:15): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2356246549/syzkaller.4trnuu/67/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 223.987578][ T9781] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 223.995919][ T9781] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 224.526293][ T9801] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.265619][ T9861] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.302005][ T9861] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 226.344546][ T9861] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 226.966670][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.212994][ T9903] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.228854][ T9903] siw: device registration error -23 [ 227.592446][ T9915] team_slave_0: entered promiscuous mode [ 227.598627][ T9915] team_slave_1: entered promiscuous mode [ 227.604549][ T9915] batadv1: entered promiscuous mode [ 227.614701][ T9915] macsec1: entered promiscuous mode [ 227.620076][ T9915] team0: entered promiscuous mode [ 227.626382][ T9915] macsec1: entered allmulticast mode [ 227.631975][ T9915] team0: entered allmulticast mode [ 227.637307][ T9915] team_slave_0: entered allmulticast mode [ 227.643270][ T9915] team_slave_1: entered allmulticast mode [ 227.649051][ T9915] batadv1: entered allmulticast mode [ 227.661662][ T9915] team0: left allmulticast mode [ 227.666596][ T9915] team_slave_0: left allmulticast mode [ 227.672574][ T9915] team_slave_1: left allmulticast mode [ 227.678374][ T9915] batadv1: left allmulticast mode [ 227.684315][ T9915] team0: left promiscuous mode [ 227.690296][ T9915] team_slave_0: left promiscuous mode [ 227.695911][ T9915] team_slave_1: left promiscuous mode [ 227.701666][ T9915] batadv1: left promiscuous mode [ 227.979824][ T9928] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 227.988764][ T9928] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.184080][ T9938] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSRP.]L3 index 0 [ 228.385862][ T9945] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.420505][ T9949] TCP segment has incorrect auth options set for [fc01::].0->[fe80::aa].16385 [] [ 228.430534][ T9945] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.535995][ T9953] batadv_slave_1: entered promiscuous mode [ 228.557088][ T9952] batadv_slave_1: left promiscuous mode [ 228.602531][ T9955] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 228.625979][ T9955] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.636780][ T9957] netlink: zone id is out of range [ 228.653597][ T9957] netlink: set zone limit has 4 unknown bytes [ 228.769853][ T9963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.031120][ T45] IPVS: starting estimator thread 0... [ 229.122803][ T9981] IPVS: using max 19 ests per chain, 45600 per kthread [ 229.206513][ T9988] batadv_slave_1: entered promiscuous mode [ 229.218017][ T9987] batadv_slave_1: left promiscuous mode [ 229.289008][ T9990] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 229.297961][ T9990] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.476164][T10000] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 229.636301][T10006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.861452][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.408527][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.685440][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.292794][T10049] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 231.591920][T10062] vxcan2: entered promiscuous mode [ 231.598095][T10062] vxcan2: entered allmulticast mode [ 231.652474][T10066] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.699654][T10070] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.599168][T10107] syzkaller0: entered promiscuous mode [ 232.605074][T10107] syzkaller0: entered allmulticast mode [ 235.260541][T10135] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.531148][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.663328][T10158] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.903941][T10170] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 236.234690][T10187] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 236.287508][T10187] : entered promiscuous mode [ 236.350131][T10190] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.672648][T10203] bridge0: port 4(geneve1) entered disabled state [ 236.679570][T10203] bridge0: port 3(macsec0) entered disabled state [ 236.686353][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.694454][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.772205][T10206] bridge0: port 4(geneve1) entered blocking state [ 236.779386][T10206] bridge0: port 4(geneve1) entered forwarding state [ 236.787002][T10206] bridge0: port 3(macsec0) entered blocking state [ 236.794208][T10206] bridge0: port 3(macsec0) entered forwarding state [ 236.802263][T10206] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.811234][T10206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.821865][T10206] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.830873][T10206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.908305][T10206] bridge0: entered promiscuous mode [ 236.921816][T10206] bridge0: entered allmulticast mode [ 236.941304][T10212] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.995447][T10212] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.196958][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.214944][T10222] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.455693][T10234] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 238.084340][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.501783][T10280] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.616808][T10288] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.890292][T10298] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 238.990148][T10302] sctp: [Deprecated]: syz-executor.0 (pid 10302) Use of int in maxseg socket option. [ 238.990148][T10302] Use struct sctp_assoc_value instead [ 239.063350][T10305] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.095342][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.499228][T10328] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.319791][T10369] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 240.348556][T10370] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 240.419349][T10372] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.999847][T10398] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 241.141929][T10405] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 243.124336][T10473] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 243.196688][T10480] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 243.261866][T10482] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 243.393477][T10482] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 243.813497][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.830914][T10480] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.379529][T10480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.418379][T10480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.741639][T10480] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.751426][T10480] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.760555][T10480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.769822][T10480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.894056][T10481] __nla_validate_parse: 7 callbacks suppressed [ 244.894081][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.175175][T10526] ip6gretap0: entered promiscuous mode [ 245.201277][T10526] batadv_slave_0: entered promiscuous mode [ 245.585010][T10546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.917713][T10606] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (129) [ 247.229855][T10612] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.143587][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.158809][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.168222][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.205960][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.217712][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 248.226331][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.299854][T10642] ip6t_rpfilter: unknown options [ 248.819577][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.865037][T10636] chnl_net:caif_netlink_parms(): no params data found [ 249.181241][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.202379][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.220025][T10636] bridge_slave_0: entered allmulticast mode [ 249.236765][T10636] bridge_slave_0: entered promiscuous mode [ 249.260409][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.295329][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.305456][T10636] bridge_slave_1: entered allmulticast mode [ 249.322917][T10636] bridge_slave_1: entered promiscuous mode [ 249.595321][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.633531][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.773440][T10636] team0: Port device team_slave_0 added [ 249.783008][T10682] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 249.797624][T10636] team0: Port device team_slave_1 added [ 249.886560][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.903140][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.960836][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.993557][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.000574][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.051930][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.215420][T10636] hsr_slave_0: entered promiscuous mode [ 250.233150][T10636] hsr_slave_1: entered promiscuous mode [ 250.251736][T10636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.259384][T10636] Cannot create hsr debugfs directory [ 250.323435][ T5127] Bluetooth: hci6: command tx timeout [ 250.496170][T10700] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.507413][T10700] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 250.520271][T10700] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 250.941893][T10636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.954177][T10636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.968268][T10636] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 251.174959][T10636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.190839][T10636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.214107][T10636] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 251.608135][T10636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.630322][T10636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.644051][T10636] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 251.783241][T10636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.801834][T10636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.825835][T10636] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 252.059642][T10727] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.145097][T10636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.184754][T10636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.208449][T10636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.230494][T10636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 252.400884][ T5127] Bluetooth: hci6: command tx timeout [ 252.647140][T10636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.711366][T10737] netlink: 3584 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.736043][T10636] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.774663][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.781954][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.826899][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.834181][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.361332][T10757] Bluetooth: MGMT ver 1.22 [ 253.419568][T10636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.430223][T10759] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.571554][T10636] veth0_vlan: entered promiscuous mode [ 253.595806][T10636] veth1_vlan: entered promiscuous mode [ 253.713120][T10636] veth0_macvtap: entered promiscuous mode [ 253.748832][T10636] veth1_macvtap: entered promiscuous mode [ 253.804199][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.828705][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.867310][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.892520][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.914853][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.939047][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.950560][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.978250][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.988788][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.011515][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.026096][T10636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.044515][T10771] netlink: 1086 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.088785][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.111876][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.131084][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.145941][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.156233][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.167206][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.177467][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.190116][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.202885][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.217601][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.227767][T10636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.255949][T10636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.278556][T10636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.333206][T10636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.347793][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.359743][T10636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.371847][T10636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.390922][T10636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.481212][ T5127] Bluetooth: hci6: command tx timeout [ 254.587500][T10785] Bluetooth: hci3: unsupported parameter 65535 [ 254.595950][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.624817][T10785] Bluetooth: hci3: unsupported parameter 65535 [ 254.632174][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.707542][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.730795][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.022859][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.835224][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.141969][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.168527][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.239413][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.303568][T10830] vlan2: entered promiscuous mode [ 256.322542][T10830] syz_tun: entered promiscuous mode [ 256.563121][ T53] Bluetooth: hci6: command tx timeout [ 256.808929][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.956783][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.388502][T10850] Bluetooth: hci3: unsupported parameter 65535 [ 257.396979][T10850] Bluetooth: hci3: unsupported parameter 65535 [ 257.926300][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.243870][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 258.337571][T10925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.370530][T10925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.393909][T10925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.429943][T10925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 258.970905][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.222705][T10955] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 259.258338][T10955] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.351824][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.063412][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.158744][ T29] audit: type=1800 audit(1717338263.606:16): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 261.225066][ T29] audit: type=1804 audit(1717338263.646:17): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2356246549/syzkaller.4trnuu/217/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 261.311057][ T29] audit: type=1804 audit(1717338263.656:18): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2356246549/syzkaller.4trnuu/217/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 262.184979][T11022] Bluetooth: MGMT ver 1.22 [ 262.990525][T11049] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 263.002496][T11049] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 263.011028][T11049] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 264.240851][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 264.241128][ T5127] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 264.442054][T11079] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 264.732465][T11089] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 264.812348][T11089] team_slave_1: mtu greater than device maximum [ 264.818865][T11089] team0: Device team_slave_1 failed to change mtu [ 265.019854][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.056077][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.081804][T11101] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 265.104487][ T29] audit: type=1804 audit(1717338267.556:19): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2356246549/syzkaller.4trnuu/233/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 265.192493][ T29] audit: type=1804 audit(1717338267.586:20): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2356246549/syzkaller.4trnuu/233/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 265.480191][T11117] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 265.790644][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.543419][T11146] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.703075][T11149] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 267.185195][T11168] tun0: tun_chr_ioctl cmd 1074025680 [ 267.382534][T11175] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.537166][T11184] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 267.640274][T11184] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 267.972108][T11196] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.056890][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.195206][T11200] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 268.240142][T11200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.489997][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 268.648700][T11218] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 268.780858][T11224] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 268.789799][T11223] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.853011][T11224] team_slave_1: mtu greater than device maximum [ 268.891966][T11224] team0: Device team_slave_1 failed to change mtu [ 270.286645][T11251] openvswitch: netlink: Port 8336768 exceeds max allowable 65535 [ 270.599920][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.831249][T11253] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 270.872107][T11253] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.598119][T11272] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.620918][T11272] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.018483][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.358661][T11347] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.485389][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.595949][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.888752][T11413] openvswitch: netlink: Duplicate key (type 0). [ 275.902922][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.116953][T11419] x_tables: unsorted entry at hook 1 [ 277.085692][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.141388][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.595431][T11497] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.086611][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.248886][T11540] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.228763][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.042685][T11630] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.212723][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.917019][T11650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.244694][T11656] veth0_vlan: entered allmulticast mode [ 284.338246][T11663] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.447594][T11694] veth0_vlan: entered allmulticast mode [ 285.717394][T11701] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 286.293769][T11707] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 286.311016][T11707] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 286.826944][T11730] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.839069][T11722] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.987193][T11721] syz-executor.1 (11721) used greatest stack depth: 17776 bytes left [ 287.032224][T11735] veth0_vlan: entered allmulticast mode [ 287.089805][T11738] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32768) [ 287.126174][T11738] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 287.408791][T11753] xt_policy: output policy not valid in PREROUTING and INPUT [ 287.568760][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.579704][T11761] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.855893][T11777] netdevsim netdevsim3 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 287.885466][T11777] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 287.901209][T11779] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 287.952962][T11781] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.075948][T11785] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 288.111253][T11785] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 288.130163][T11785] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 288.486742][T11803] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 288.505014][T11803] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 288.973149][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.307813][T11879] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 290.347741][T11879] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 290.607514][T11891] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 291.164379][T11920] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.681945][T11947] IPv4: Oversized IP packet from 127.202.26.0 [ 292.299571][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.327717][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.419665][T11970] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 293.187251][T11970] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 293.196297][T11970] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 293.232250][T11970] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 293.257940][T12015] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 293.709229][T12034] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 293.725438][T12034] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.116002][T12048] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 294.259058][T12051] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 294.280876][T12051] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 294.312702][T12051] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 295.050648][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.513529][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.523581][T12115] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 295.736742][T12127] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 296.173426][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.568665][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.326888][T12294] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 299.357607][T12295] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 300.080812][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.177187][T12328] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 300.567743][ T29] audit: type=1804 audit(1717338303.016:21): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1136134601/syzkaller.iKwlIQ/139/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 300.893919][T12352] dccp_invalid_packet: P.Data Offset(68) too large [ 300.903045][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.378561][T12362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.404335][T12362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.422309][T12362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 301.637910][T12362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.656730][T12362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.671547][T12362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 301.822439][T12362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.847708][T12362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.861240][T12362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.072667][T12362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.098686][T12362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.122262][T12362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.483734][ T29] audit: type=1804 audit(1717338304.926:22): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2356246549/syzkaller.4trnuu/364/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 302.511436][T12362] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.520070][T12362] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.546821][T12362] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.609982][T12362] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.630878][T12411] sock: sock_set_timeout: `syz-executor.3' (pid 12411) tries to set negative timeout [ 302.640585][T12362] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.660864][T12362] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.700088][T12362] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.722930][T12362] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.748970][T12362] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.793353][T12362] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.820390][T12362] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 302.829551][T12362] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 304.867959][ T29] audit: type=1804 audit(1717338307.316:23): pid=12464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3690477435/syzkaller.sXSKcW/765/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 305.563859][T12487] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 305.651007][T12491] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 305.663522][T12491] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.907083][T12493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.166982][T12512] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 306.273556][T12515] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 306.377204][T12521] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 306.386520][T12521] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.766215][T12534] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 309.380211][T12534] team0: Port device wlan1 added [ 309.446409][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 314.562576][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 317.605664][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.381096][T12581] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.705317][T12581] rdma_rxe: rxe_newlink: failed to add caif0 [ 325.636770][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.972327][ T5112] syz-executor.2 (5112) used greatest stack depth: 17488 bytes left [ 326.080324][T12615] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.412709][T12615] rdma_rxe: rxe_newlink: failed to add caif0 [ 327.932592][ T64] bridge_slave_1: left allmulticast mode [ 327.938331][ T64] bridge_slave_1: left promiscuous mode [ 328.096951][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.444248][ T64] bridge_slave_0: left allmulticast mode [ 328.449988][ T64] bridge_slave_0: left promiscuous mode [ 328.613882][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.910388][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.291725][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.321777][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.337048][ T64] bond0 (unregistering): Released all slaves [ 331.386159][T12622] bridge0: entered promiscuous mode [ 331.397400][T12622] bridge0: left promiscuous mode [ 331.448300][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.575287][T12641] team0: Port device bridge5 added [ 331.590108][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.790235][T12662] syz-executor.1[12662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.790424][T12662] syz-executor.1[12662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.098486][T12678] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 332.368794][T12689] bridge0: entered promiscuous mode [ 332.399650][T12689] bridge0: left promiscuous mode [ 332.505830][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.543523][ T64] hsr_slave_0: left promiscuous mode [ 332.572444][ T64] hsr_slave_1: left promiscuous mode [ 332.579419][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.588281][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.602153][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.609656][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.660491][ T64] veth1_macvtap: left promiscuous mode [ 332.673960][ T64] veth0_macvtap: left promiscuous mode [ 332.679864][ T64] veth1_vlan: left promiscuous mode [ 332.685605][ T64] veth0_vlan: left promiscuous mode [ 333.693458][ T64] team0 (unregistering): Port device team_slave_1 removed [ 333.749670][ T64] team0 (unregistering): Port device team_slave_0 removed [ 334.162570][ T5127] Bluetooth: hci6: command 0x0405 tx timeout [ 334.688575][T12695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.711074][T12695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.742948][T12695] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 334.781923][T12695] bond0 (unregistering): Released all slaves [ 334.886421][T12710] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.910900][T12710] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 335.045526][T12716] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 335.417789][T12734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.530586][T12729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.567006][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.634552][T12729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.982726][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.986072][T12759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 336.341762][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.387061][T12774] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 336.397995][T12778] Cannot find del_set index 2048 as target [ 336.398003][T12774] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.423676][T12774] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 336.825030][T12787] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 336.852030][T12789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.924097][T12789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.002095][T12789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.119266][T12804] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 337.139186][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.300041][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.366839][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.450150][T12809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.501859][T12811] team0: Port device team_slave_0 removed [ 337.508354][T12811] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 337.654303][T12816] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 337.662928][T12816] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.672779][T12816] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 337.781506][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.837904][T12824] Cannot find del_set index 2048 as target [ 337.898301][T12813] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.126030][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.212380][T12829] team0: Port device bridge3 added [ 338.425003][T12840] tipc: Failed to remove unknown binding: 66,1,1/0:1479709336/1479709338 [ 338.460440][T12840] tipc: Failed to remove unknown binding: 66,1,1/0:1479709336/1479709338 [ 338.468274][T12844] tipc: Failed to remove unknown binding: 66,1,1/0:527677171/527677173 [ 338.475313][T12840] tipc: Failed to remove unknown binding: 66,1,1/0:1479709336/1479709338 [ 338.525072][T12844] tipc: Failed to remove unknown binding: 66,1,1/0:527677171/527677173 [ 338.527226][T12840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.542295][T12844] tipc: Failed to remove unknown binding: 66,1,1/0:527677171/527677173 [ 338.587875][T12844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.608348][T12840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.674420][T12848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.686057][T12843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.724398][T12849] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 338.739127][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.753941][T12844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.827511][T12854] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 339.005680][T12858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.215196][T12866] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 339.249355][T12866] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 339.383347][T12873] dccp_invalid_packet: P.Data Offset(144) too large [ 339.397455][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 339.417251][T12866] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 339.488142][T12876] Cannot find del_set index 2048 as target [ 340.128786][T12902] xt_hashlimit: invalid rate [ 341.194220][T12929] __nla_validate_parse: 3 callbacks suppressed [ 341.194245][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.230935][T12929] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.365608][T12935] xt_hashlimit: invalid rate [ 342.257067][T12982] syz-executor.3[12982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.257256][T12982] syz-executor.3[12982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.456358][T13018] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.806001][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.422492][T13066] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 345.486388][T13068] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.522412][T13068] ip6gretap0: entered promiscuous mode [ 345.541214][T13068] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.519378][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.692358][T13121] pim6reg1: entered promiscuous mode [ 348.721027][T13121] pim6reg1: entered allmulticast mode [ 348.766225][T13125] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [FSP.] L3 index 0 [ 348.993988][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.153209][T10502] ------------[ cut here ]------------ [ 349.159592][T10502] WARNING: CPU: 0 PID: 10502 at net/mptcp/protocol.c:1006 __mptcp_clean_una+0xddb/0xff0 [ 349.169453][T10502] Modules linked in: [ 349.173462][T10502] CPU: 0 PID: 10502 Comm: kworker/0:13 Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 [ 349.175170][T13141] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 349.183945][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 2024/06/02 14:25:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 349.184055][T10502] Workqueue: events mptcp_worker [ 349.184100][T10502] RIP: 0010:__mptcp_clean_una+0xddb/0xff0 [ 349.213602][T10502] Code: fa ff ff 48 8b 4c 24 18 80 e1 07 fe c1 38 c1 0f 8c 8e fa ff ff 48 8b 7c 24 18 e8 c0 a1 8d f6 e9 7f fa ff ff e8 16 e2 27 f6 90 <0f> 0b 90 4c 8b 6c 24 40 4d 89 f4 e9 04 f5 ff ff 44 89 f1 80 e1 07 [ 349.233392][T10502] RSP: 0018:ffffc900033bf800 EFLAGS: 00010293 [ 349.239503][T10502] RAX: ffffffff8b6e346a RBX: ffff88805e13ad18 RCX: ffff88806a395a00 [ 349.247661][T10502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.255725][T10502] RBP: ffffc900033bf918 R08: ffffffff8b6e28ed R09: 1ffffd40002bedc6 [ 349.263795][T10502] R10: dffffc0000000000 R11: fffff940002bedc7 R12: 0000000000000000 [ 349.271872][T10502] R13: ffff88805e13ad08 R14: dffffc0000000000 R15: ffff888011938000 [ 349.279901][T10502] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 349.288923][T10502] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.295592][T10502] CR2: 0000001b2ff28000 CR3: 000000006b3ca000 CR4: 00000000003506f0 [ 349.303658][T10502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.311716][T10502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 349.319743][T10502] Call Trace: [ 349.323113][T10502] [ 349.326175][T10502] ? __warn+0x163/0x4e0 [ 349.330383][T10502] ? __mptcp_clean_una+0xddb/0xff0 [ 349.335608][T10502] ? report_bug+0x2b3/0x500 [ 349.340166][T10502] ? __mptcp_clean_una+0xddb/0xff0 [ 349.345470][T10502] ? handle_bug+0x3e/0x70 [ 349.349853][T10502] ? exc_invalid_op+0x1a/0x50 [ 349.354623][T10502] ? asm_exc_invalid_op+0x1a/0x20 [ 349.359698][T10502] ? __mptcp_clean_una+0x25d/0xff0 [ 349.364910][T10502] ? __mptcp_clean_una+0xdda/0xff0 [ 349.370083][T10502] ? __mptcp_clean_una+0xddb/0xff0 [ 349.375316][T10502] ? __pfx___mptcp_clean_una+0x10/0x10 [ 349.380879][T10502] __mptcp_clean_una_wakeup+0x7f/0x2d0 [ 349.386445][T10502] __mptcp_retrans+0x108/0xe90 [ 349.391335][T10502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.397718][T10502] ? __local_bh_enable_ip+0x168/0x200 [ 349.403154][ T29] audit: type=1800 audit(1717338351.836:24): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.current" dev="sda1" ino=1943 res=0 errno=0 [ 349.403177][T10502] ? lockdep_hardirqs_on+0x99/0x150 [ 349.429199][T10502] ? mptcp_check_data_fin+0x329/0x840 [ 349.434922][T10502] ? __pfx___mptcp_retrans+0x10/0x10 [ 349.440278][T10502] ? __local_bh_enable_ip+0x168/0x200 [ 349.445779][T10502] ? __pfx_mptcp_check_data_fin+0x10/0x10 [ 349.451611][T10502] ? mptcp_check_send_data_fin+0x183/0x410 [ 349.457953][T10502] mptcp_worker+0x9c2/0x11d0 [ 349.462638][T10502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.469021][T10502] ? __pfx_mptcp_worker+0x10/0x10 [ 349.474145][T10502] ? process_scheduled_works+0x945/0x1830 [ 349.479905][T10502] process_scheduled_works+0xa2c/0x1830 [ 349.485686][T10502] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.491769][T10502] ? assign_work+0x364/0x3d0 [ 349.496424][T10502] worker_thread+0x86d/0xd70 [ 349.501196][T10502] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.507152][T10502] ? __kthread_parkme+0x169/0x1d0 [ 349.512349][T10502] ? __pfx_worker_thread+0x10/0x10 [ 349.517596][T10502] kthread+0x2f0/0x390 [ 349.521739][T10502] ? __pfx_worker_thread+0x10/0x10 [ 349.526888][T10502] ? __pfx_kthread+0x10/0x10 [ 349.531590][T10502] ret_from_fork+0x4b/0x80 [ 349.536054][T10502] ? __pfx_kthread+0x10/0x10 [ 349.540725][T10502] ret_from_fork_asm+0x1a/0x30 [ 349.545561][T10502] [ 349.548695][T10502] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 349.555999][T10502] CPU: 0 PID: 10502 Comm: kworker/0:13 Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 [ 349.566326][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 349.576398][T10502] Workqueue: events mptcp_worker [ 349.581352][T10502] Call Trace: [ 349.584635][T10502] [ 349.587566][T10502] dump_stack_lvl+0x241/0x360 [ 349.592253][T10502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.597483][T10502] ? __pfx__printk+0x10/0x10 [ 349.602126][T10502] ? vscnprintf+0x5d/0x90 [ 349.606488][T10502] panic+0x349/0x860 [ 349.610600][T10502] ? __warn+0x172/0x4e0 [ 349.614767][T10502] ? __pfx_panic+0x10/0x10 [ 349.619192][T10502] ? ret_from_fork_asm+0x1a/0x30 [ 349.624139][T10502] __warn+0x346/0x4e0 [ 349.629563][T10502] ? __mptcp_clean_una+0xddb/0xff0 [ 349.634710][T10502] report_bug+0x2b3/0x500 [ 349.639066][T10502] ? __mptcp_clean_una+0xddb/0xff0 [ 349.644204][T10502] handle_bug+0x3e/0x70 [ 349.648372][T10502] exc_invalid_op+0x1a/0x50 [ 349.652890][T10502] asm_exc_invalid_op+0x1a/0x20 [ 349.657768][T10502] RIP: 0010:__mptcp_clean_una+0xddb/0xff0 [ 349.663528][T10502] Code: fa ff ff 48 8b 4c 24 18 80 e1 07 fe c1 38 c1 0f 8c 8e fa ff ff 48 8b 7c 24 18 e8 c0 a1 8d f6 e9 7f fa ff ff e8 16 e2 27 f6 90 <0f> 0b 90 4c 8b 6c 24 40 4d 89 f4 e9 04 f5 ff ff 44 89 f1 80 e1 07 [ 349.683224][T10502] RSP: 0018:ffffc900033bf800 EFLAGS: 00010293 [ 349.689401][T10502] RAX: ffffffff8b6e346a RBX: ffff88805e13ad18 RCX: ffff88806a395a00 [ 349.697397][T10502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.705375][T10502] RBP: ffffc900033bf918 R08: ffffffff8b6e28ed R09: 1ffffd40002bedc6 [ 349.713352][T10502] R10: dffffc0000000000 R11: fffff940002bedc7 R12: 0000000000000000 [ 349.721327][T10502] R13: ffff88805e13ad08 R14: dffffc0000000000 R15: ffff888011938000 [ 349.729322][T10502] ? __mptcp_clean_una+0x25d/0xff0 [ 349.734497][T10502] ? __mptcp_clean_una+0xdda/0xff0 [ 349.739690][T10502] ? __pfx___mptcp_clean_una+0x10/0x10 [ 349.745210][T10502] __mptcp_clean_una_wakeup+0x7f/0x2d0 [ 349.750708][T10502] __mptcp_retrans+0x108/0xe90 [ 349.755496][T10502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.762107][T10502] ? __local_bh_enable_ip+0x168/0x200 [ 349.767488][T10502] ? lockdep_hardirqs_on+0x99/0x150 [ 349.772721][T10502] ? mptcp_check_data_fin+0x329/0x840 [ 349.778102][T10502] ? __pfx___mptcp_retrans+0x10/0x10 [ 349.783453][T10502] ? __local_bh_enable_ip+0x168/0x200 [ 349.788839][T10502] ? __pfx_mptcp_check_data_fin+0x10/0x10 [ 349.794569][T10502] ? mptcp_check_send_data_fin+0x183/0x410 [ 349.800476][T10502] mptcp_worker+0x9c2/0x11d0 [ 349.805158][T10502] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.811496][T10502] ? __pfx_mptcp_worker+0x10/0x10 [ 349.816555][T10502] ? process_scheduled_works+0x945/0x1830 [ 349.822277][T10502] process_scheduled_works+0xa2c/0x1830 [ 349.827856][T10502] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.833882][T10502] ? assign_work+0x364/0x3d0 [ 349.838483][T10502] worker_thread+0x86d/0xd70 [ 349.843089][T10502] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 349.848998][T10502] ? __kthread_parkme+0x169/0x1d0 [ 349.854052][T10502] ? __pfx_worker_thread+0x10/0x10 [ 349.859165][T10502] kthread+0x2f0/0x390 [ 349.863393][T10502] ? __pfx_worker_thread+0x10/0x10 [ 349.868541][T10502] ? __pfx_kthread+0x10/0x10 [ 349.873253][T10502] ret_from_fork+0x4b/0x80 [ 349.877772][T10502] ? __pfx_kthread+0x10/0x10 [ 349.882378][T10502] ret_from_fork_asm+0x1a/0x30 [ 349.887212][T10502] [ 349.890635][T10502] Kernel Offset: disabled [ 349.895112][T10502] Rebooting in 86400 seconds..