last executing test programs: 1m24.367024189s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) 1m24.056616856s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000280), 0x0}, 0x20) 1m23.947411663s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m23.792248178s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000080)='\f', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 1m13.516675187s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000080)='\f', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 48.438949402s ago: executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 48.271900466s ago: executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x12, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 48.200399775s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000002080)={@multicast, @random="22d32f5f005f", @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xf, 0x6, 0x0, @dev, @local}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 48.069876584s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0x3c, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 47.765765562s ago: executing program 3: r0 = epoll_create(0x4) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000b000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x20, 0x2004, 0xffffffffffffffff, @prog_fd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='workqueue_queue_work\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001c00)=ANY=[], 0x114}], 0x1}, 0x0) 47.613988846s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2}, 0x2) 47.096942284s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000080)='\f', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 31.601663439s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "14b558ce46b1a633415380d443905153a1adff2564d8e1abdd1d4ebaa6e7e96419b662a18ed0ab599839259aaf62f44ac84b3a0ed2e2cdd0ec77a450b71f3b"}, 0x80, 0x0}}], 0x1, 0x2c000011) 31.473260606s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x6a}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 31.392385815s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000540)="ae", 0x1) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000), 0x4) 31.341382785s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f00000005c0)=@ethtool_gfeatures}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 31.304977366s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x64) 31.225007709s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) 31.17748219s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x90}}, 0x0) 31.073586228s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x4c}}, 0x0) 31.032706052s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0xffffffffffffffff, &(0x7f0000000000)=0x55) 30.975074564s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.266426742s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.241492681s ago: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_add_to_resolv_list={{0x2027, 0x27}, {0x0, @any, "00de08000200000000ffff00", "8a35836a3d4b920430dcd61361b96fe5"}}}, 0x2b) 30.144106604s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x24, 0x32, 0x909, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) 30.090129781s ago: executing program 2: unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) 30.026492718s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x80}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}]}, 0x44}}, 0x0) 946.47481ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000540)="ae", 0x1) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000), 0x4) 116.785633ms ago: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x80080400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r3, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}}, 0x1c}}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000200)=0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001240), &(0x7f0000001280)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000012c0)={'gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x4c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_RT_PRIORITY={0x8}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x20, 0x28, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r8 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r8, 0x6a, 0x4, 0x0, 0x20000071) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x8, [@enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x5}, {0x2, 0x7fff}, {0xc, 0x400}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0x60, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x9}}]}, {0x0, [0x61, 0x30, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/4096, 0x6c, 0x1000, 0x1, 0xccb}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc5, &(0x7f0000000080)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10}, 0x90) 0s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000b15000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x4efb7000) mmap(&(0x7f000050c000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r0, 0x0) mmap(&(0x7f0000b16000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): 394.713318][T17937] tipc: Enabling of bearer rejected, failed to enable media [ 395.072365][T17954] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 395.379221][T17966] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.494798][T17970] dccp_invalid_packet: P.Data Offset(144) too large [ 395.519941][T17929] lo speed is unknown, defaulting to 1000 [ 395.846858][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.877066][T17990] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.975789][T17991] vlan2: entered promiscuous mode [ 395.980902][T17991] dummy0: entered promiscuous mode [ 396.022921][T17991] dummy0: left promiscuous mode [ 396.398452][T18011] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 396.922813][ T5123] Bluetooth: hci1: command 0x0405 tx timeout [ 397.579702][T18050] vcan0 speed is unknown, defaulting to 1000 [ 398.055734][T18083] openvswitch: netlink: Message has 4 unknown bytes. [ 398.264359][T18095] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 398.360189][T18099] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 398.397771][T18099] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 398.462251][T18101] bond2: entered promiscuous mode [ 398.533150][T18050] lo speed is unknown, defaulting to 1000 [ 398.617153][T18112] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 398.625866][T18101] ip6gretap1: entered promiscuous mode [ 398.626411][T18101] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 398.678253][T18107] bond2: entered allmulticast mode [ 398.744264][T18107] ip6gretap1: entered allmulticast mode [ 398.785788][T18107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.002622][ T5123] Bluetooth: hci1: command 0x0405 tx timeout [ 399.499975][T18148] __nla_validate_parse: 11 callbacks suppressed [ 399.499998][T18148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.632444][T18148] bond1: entered promiscuous mode [ 399.656074][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.667086][T18152] bond1: entered allmulticast mode [ 399.674038][T18152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.746459][T18151] ip6gretap1: entered promiscuous mode [ 399.766751][T18151] ip6gretap1: entered allmulticast mode [ 399.776014][T18151] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 400.435064][T18167] ip6gretap0: entered promiscuous mode [ 400.449563][T18167] ip6gretap0: left promiscuous mode [ 400.536157][T18168] vlan2: entered promiscuous mode [ 400.606790][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.618095][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.628661][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.638389][T18176] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.870427][T18181] tun0: tun_chr_ioctl cmd 2147767507 [ 401.083824][ T5123] Bluetooth: hci1: command 0x0405 tx timeout [ 401.291798][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 401.306495][T18204] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 402.031485][T18236] set match dimension is over the limit! [ 402.341297][T18251] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.540315][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.831806][T18295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.368851][T18324] xt_connbytes: Forcing CT accounting to be enabled [ 404.394029][T18324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.912280][T18342] tun0: tun_chr_ioctl cmd 2147767507 [ 406.084652][T18417] __nla_validate_parse: 1 callbacks suppressed [ 406.084674][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.134507][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.172569][T18417] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.353322][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.973340][T18500] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 408.271929][T18518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.402459][T18525] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 408.445638][T18525] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 408.464569][T18525] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.3'. [ 408.476258][T18525] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 408.816996][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.322267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.635044][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 409.771703][T18589] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 409.786419][T18589] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.014130][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.023957][T18602] xt_connbytes: Forcing CT accounting to be enabled [ 410.034053][T18602] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.244993][T18616] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 410.362179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.163131][T18659] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 411.189905][T18659] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 412.352419][T18719] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 412.423200][T18719] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.886117][T18745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.917265][T18745] vlan1: entered promiscuous mode [ 413.506072][T18788] sctp: [Deprecated]: syz-executor.4 (pid 18788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.506072][T18788] Use struct sctp_sack_info instead [ 414.672896][T18851] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 415.510631][T18896] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 415.538514][T18896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.825534][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.685540][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.103088][T18995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.123798][T18996] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.600798][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.664650][T19023] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 417.707492][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.159119][T19046] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 418.211542][T19050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.487926][T19063] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 418.536878][T19065] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.750043][T19075] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 418.770418][T19075] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.926959][T19082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 418.938818][T19083] Cannot find set identified by id 0 to match [ 418.955671][T19082] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.976222][T19082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 418.997822][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.165357][ T51] wlan1: Trigger new scan to find an IBSS to join [ 419.313174][T19100] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 419.635748][T19116] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.645604][T19116] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.654437][T19116] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.663327][T19116] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.702605][T19116] vxlan0: entered promiscuous mode [ 419.723502][T19118] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 420.146092][T19140] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 420.377221][T19151] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 421.049319][T19192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 421.056754][T19192] IPv6: NLM_F_CREATE should be set when creating new route [ 421.064117][T19192] IPv6: NLM_F_CREATE should be set when creating new route [ 421.616016][T19222] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 421.693210][T19222] team0: Device veth1_vlan failed to register rx_handler [ 421.931908][T19227] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 422.123568][ T1051] wlan1: Trigger new scan to find an IBSS to join [ 422.278767][T19248] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 422.288126][T19248] __nla_validate_parse: 5 callbacks suppressed [ 422.288145][T19248] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 422.511330][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 422.915400][T19278] dccp_invalid_packet: P.Data Offset(144) too large [ 423.229973][T19297] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 423.383927][T19306] dccp_invalid_packet: P.Data Offset(144) too large [ 423.824644][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 425.162765][ T995] wlan1: Trigger new scan to find an IBSS to join [ 426.073837][ T51] wlan1: Creating new IBSS network, BSSID be:ef:a7:57:89:7f [ 428.258151][T19378] syzkaller0: entered allmulticast mode [ 428.411480][T19394] TCP: request_sock_TCP: Possible SYN flooding on port 172.20.20.170:20002. Sending cookies. [ 430.863984][T19421] vlan0: entered promiscuous mode [ 430.968405][T19424] vlan0 (unregistering): left promiscuous mode [ 431.026362][T19444] TCP: request_sock_TCP: Possible SYN flooding on port 172.20.20.170:20002. Sending cookies. [ 432.280768][T19512] vlan0: entered promiscuous mode [ 432.372997][T19512] vlan0 (unregistering): left promiscuous mode [ 432.820704][T19545] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 433.080006][T19562] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.222663][T19567] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 433.439933][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 433.876769][T19603] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 434.030307][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.474305][T19634] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.526622][T19642] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.627286][T19644] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 435.030794][T19665] syzkaller0: entered promiscuous mode [ 435.059542][T19665] syzkaller0: entered allmulticast mode [ 435.657602][ T29] audit: type=1804 audit(1718038495.262:29): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2215086162/syzkaller.S5Tuuy/1275/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 435.709551][T19703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.871122][T19712] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 435.897820][T19714] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.219938][T19728] netlink: 105120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.411673][T19741] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.514411][T19746] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.762173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.439838][T19800] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 437.812186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.189995][T19822] __nla_validate_parse: 5 callbacks suppressed [ 438.190018][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 438.820398][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 438.915862][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.602534][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.913279][T19901] sock: sock_timestamping_bind_phc: sock not bind to device [ 440.285038][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.948268][T19953] netlink: zone id is out of range [ 440.972469][T19953] netlink: zone id is out of range [ 440.988472][T19953] netlink: zone id is out of range [ 441.013382][T19953] netlink: zone id is out of range [ 441.044263][T19953] netlink: zone id is out of range [ 441.060743][T19953] netlink: zone id is out of range [ 441.071358][T19953] netlink: zone id is out of range [ 441.099846][T19953] netlink: zone id is out of range [ 441.108381][T19953] netlink: zone id is out of range [ 441.121381][T19953] netlink: zone id is out of range [ 441.444676][T19980] sock: sock_timestamping_bind_phc: sock not bind to device [ 441.607278][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.649806][T19992] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 441.690925][T19995] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 442.353055][T20025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 442.375226][T20029] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 442.859803][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 443.278092][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.871246][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.062884][T20113] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.121763][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 444.178129][T20119] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 444.188236][T20119] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.758786][T20139] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.386789][T20159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 446.070918][T20187] x_tables: duplicate underflow at hook 2 [ 446.258719][T20197] net_ratelimit: 60 callbacks suppressed [ 446.258742][T20197] dccp_invalid_packet: P.Data Offset(232) too large [ 446.639097][T20211] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 446.683717][T20211] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 446.880349][T20222] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 447.071516][T20232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.114238][T20234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.138745][T20234] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 447.562524][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 448.021931][T20261] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 448.122226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.741940][T20294] geneve1: entered allmulticast mode [ 448.819221][T20294] team0: Port device geneve1 added [ 448.857021][T20303] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.162152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.762751][T20343] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 449.797237][T20343] gretap1: entered promiscuous mode [ 449.816697][T20343] gretap1: entered allmulticast mode [ 450.866420][T20386] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.991264][T20390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.044587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.153370][T20434] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 452.450483][T20451] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.574031][T20457] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 452.604403][T20457] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 453.082443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.159060][T20468] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 454.041076][T20488] syz-executor.0[20488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.041242][T20488] syz-executor.0[20488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.407686][T20501] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 454.833551][T20514] ip6tnl2: entered promiscuous mode [ 454.838840][T20514] ip6tnl2: entered allmulticast mode [ 454.992499][T20525] syz-executor.2[20525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.992666][T20525] syz-executor.2[20525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.593006][T20551] ip6tnl2: entered promiscuous mode [ 455.657061][T20551] ip6tnl2: entered allmulticast mode [ 456.844506][T20602] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.584605][T20639] sctp: [Deprecated]: syz-executor.3 (pid 20639) Use of int in maxseg socket option. [ 457.584605][T20639] Use struct sctp_assoc_value instead [ 457.946561][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.956857][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.976783][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.988446][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.996471][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 458.007199][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.115227][T20652] vcan0 speed is unknown, defaulting to 1000 [ 458.215208][ T2442] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.469412][T20652] lo speed is unknown, defaulting to 1000 [ 458.907378][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 459.045747][T20686] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 459.267353][T20652] chnl_net:caif_netlink_parms(): no params data found [ 459.541637][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.574645][T20652] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.610139][T20652] bridge_slave_0: entered allmulticast mode [ 459.636232][T20652] bridge_slave_0: entered promiscuous mode [ 459.646607][T20652] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.668673][T20652] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.676286][T20652] bridge_slave_1: entered allmulticast mode [ 459.685022][T20652] bridge_slave_1: entered promiscuous mode [ 459.692245][T20717] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.757391][T20652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.796774][T20652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.822564][T20717] tc_dump_action: action bad kind [ 459.968787][T20652] team0: Port device team_slave_0 added [ 460.000718][T20652] team0: Port device team_slave_1 added [ 460.052442][ T5122] Bluetooth: hci4: command tx timeout [ 460.183707][T20652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.190717][T20652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.214848][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.250479][T20652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.264951][T20652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.272309][T20652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.358744][T20652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.437392][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.543862][ T58] IPVS: starting estimator thread 0... [ 460.632453][T20751] IPVS: using max 18 ests per chain, 43200 per kthread [ 460.644740][T20652] hsr_slave_0: entered promiscuous mode [ 460.663689][T20652] hsr_slave_1: entered promiscuous mode [ 460.682348][T20652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.696151][T20758] sctp: [Deprecated]: syz-executor.3 (pid 20758) Use of int in maxseg socket option. [ 460.696151][T20758] Use struct sctp_assoc_value instead [ 460.711489][T20652] Cannot create hsr debugfs directory [ 460.736987][T20756] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 460.776369][T20756] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 460.792662][T20756] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.204570][T20652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.233296][T20652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.420993][T20652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.455617][T20652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.461881][T20783] sock: sock_timestamping_bind_phc: sock not bind to device [ 461.516514][T20785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.595053][T20652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.627999][T20652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.666405][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 461.676606][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 461.803231][T20652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.820075][T20652] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.850609][T20797] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.3'. [ 462.116006][T20652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.130923][ T5122] Bluetooth: hci4: command tx timeout [ 462.134457][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.158551][T20652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.186997][T20652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.234554][T20652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.389981][T20816] bond0: option arp_all_targets: invalid value (3) [ 462.486658][T20822] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 462.522142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.569660][T20824] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.611570][T20652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.681283][T20652] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.753555][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.760787][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.819570][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.826866][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.197806][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 463.287657][T20652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.441879][T20652] veth0_vlan: entered promiscuous mode [ 463.467014][T20652] veth1_vlan: entered promiscuous mode [ 463.524788][T20652] veth0_macvtap: entered promiscuous mode [ 463.537722][T20652] veth1_macvtap: entered promiscuous mode [ 463.562212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.603929][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.651456][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.686602][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.712147][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.730645][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.732461][T20869] sctp: [Deprecated]: syz-executor.1 (pid 20869) Use of int in maxseg socket option. [ 463.732461][T20869] Use struct sctp_assoc_value instead [ 463.759348][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.778858][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.780503][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.802797][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.816251][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.827144][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.841913][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.859194][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.880654][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.893362][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.912256][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.932157][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.965313][T20652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.011994][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.063394][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.089614][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.143166][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.180896][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.210491][ T5122] Bluetooth: hci4: command tx timeout [ 464.226687][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.240930][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.260921][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.283092][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.307360][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.338031][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.352242][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.382212][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.414121][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.452488][T20652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.471404][T20652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.500838][T20652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.568942][T20878] syz_tun: refused to change device tx_queue_len [ 464.577530][T20878] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 464.609789][T20652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.661989][T20652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.670983][T20652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.695214][T20652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.789322][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 464.815676][T20904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.817058][T20901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.053737][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.061638][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.178029][T20921] syz-executor.2[20921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.178293][T20921] syz-executor.2[20921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.212299][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.275623][T20927] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.300537][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.323070][T20927] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 465.331245][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.375936][T20931] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 465.821834][T20959] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 465.889244][T20961] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 466.263376][T20978] syz_tun: refused to change device tx_queue_len [ 466.269791][T20978] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 466.303237][ T5122] Bluetooth: hci4: command tx timeout [ 466.874642][T21019] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 466.914363][T21019] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 467.189817][T21042] openvswitch: netlink: Flow key attr not present in new flow. [ 467.200674][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 467.250222][T21042] __nla_validate_parse: 4 callbacks suppressed [ 467.250249][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.387414][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.704149][T21070] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.744051][T21073] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 467.794368][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 468.034278][T21088] netlink: zone id is out of range [ 468.043913][T21088] netlink: set zone limit has 4 unknown bytes [ 468.738287][T21130] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'. [ 468.906080][T21142] openvswitch: netlink: Flow key attr not present in new flow. [ 468.919053][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 469.203463][T21152] netlink: zone id is out of range [ 469.743620][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 469.847355][T21166] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.2'. [ 469.943163][T21168] mac80211_hwsim hwsim19 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 470.114616][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.127648][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.136260][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.146475][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.154610][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.168290][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.214753][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.235034][ T995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.246830][ T995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.360506][T21180] vcan0 speed is unknown, defaulting to 1000 [ 470.427536][T21192] net_ratelimit: 1 callbacks suppressed [ 470.427558][T21192] netlink: zone id is out of range [ 470.460097][T21192] netlink: set zone limit has 4 unknown bytes [ 470.487273][ T995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.526709][ T995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.764728][ T995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.796524][ T995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.861866][T21198] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 470.884785][T21180] lo speed is unknown, defaulting to 1000 [ 471.024874][ T995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.071717][ T995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.119937][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 471.325093][T21223] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.416759][ T995] bridge_slave_1: left allmulticast mode [ 471.432638][ T995] bridge_slave_1: left promiscuous mode [ 471.446472][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.493904][ T995] bridge_slave_0: left allmulticast mode [ 471.499721][ T995] bridge_slave_0: left promiscuous mode [ 471.516433][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.606192][T21232] xt_l2tp: missing protocol rule (udp|l2tpip) [ 472.095547][ T995] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 472.120861][ T995] ip6gretap1 (unregistering): left promiscuous mode [ 472.133657][ T995] ip6gretap1 (unregistering): left allmulticast mode [ 472.282489][ T5123] Bluetooth: hci2: command tx timeout [ 472.761899][T21275] __nla_validate_parse: 2 callbacks suppressed [ 472.761921][T21275] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.110320][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.127758][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.140654][ T995] bond0 (unregistering): Released all slaves [ 473.285230][ T995] bond1 (unregistering): Released all slaves [ 473.555717][ T995] IPVS: stopping master sync thread 20029 ... [ 473.679456][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 473.699761][T21294] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.743098][T21297] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 473.761597][T21297] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 473.771066][T21297] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 474.086712][T21180] chnl_net:caif_netlink_parms(): no params data found [ 474.337524][T21316] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 474.363105][ T5123] Bluetooth: hci2: command tx timeout [ 474.601240][T21326] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 474.715634][T21331] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 474.727293][T21331] netlink: 112848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.737190][T21331] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 474.775463][ T995] hsr_slave_0: left promiscuous mode [ 474.794119][ T995] hsr_slave_1: left promiscuous mode [ 474.802521][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.810151][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.832678][ T995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.866629][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.930283][ T995] veth1_macvtap: left promiscuous mode [ 474.938401][ T995] veth0_macvtap: left promiscuous mode [ 474.946490][ T995] veth1_vlan: left promiscuous mode [ 474.952040][ T995] : left promiscuous mode [ 475.875527][T21342] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.004578][ T995] team0 (unregistering): Port device team_slave_1 removed [ 476.111168][ T995] team0 (unregistering): Port device team_slave_0 removed [ 476.449205][ T5123] Bluetooth: hci2: command tx timeout [ 476.822644][T21331] bond0: option miimon: invalid value (18446744073072082944) [ 476.830104][T21331] bond0: option miimon: allowed values 0 - 2147483647 [ 477.045793][T21180] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.062364][T21180] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.071415][T21180] bridge_slave_0: entered allmulticast mode [ 477.086426][T21180] bridge_slave_0: entered promiscuous mode [ 477.114356][T21180] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.122063][T21180] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.142688][T21180] bridge_slave_1: entered allmulticast mode [ 477.170624][T21180] bridge_slave_1: entered promiscuous mode [ 477.307857][T21382] xt_TPROXY: Can be used only with -p tcp or -p udp [ 477.310822][T21180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.363029][T21180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.418835][T21386] xt_hashlimit: size too large, truncated to 1048576 [ 477.439921][T21386] xt_hashlimit: overflow, try lower: 0/0 [ 477.466572][T21180] team0: Port device team_slave_0 added [ 477.489560][T21180] team0: Port device team_slave_1 added [ 477.578955][T21390] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 477.591731][T21180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.600324][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.639459][T21180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.660929][T21180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.668215][T21180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.700708][T21180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.815173][T21180] hsr_slave_0: entered promiscuous mode [ 477.834200][T21180] hsr_slave_1: entered promiscuous mode [ 477.847655][T21180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.857315][T21180] Cannot create hsr debugfs directory [ 477.979306][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.110503][T21405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 478.174472][T21407] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.193638][T21407] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.232259][T21407] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.359208][T21409] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.522371][ T5123] Bluetooth: hci2: command tx timeout [ 478.591080][T21420] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 478.606265][T21420] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 478.649499][T21420] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 478.680103][T21420] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 478.710958][T21420] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 478.737759][T21428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 478.753237][T21420] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.904603][T21433] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 478.979630][T21433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.078527][T21180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.122373][T21180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.177391][T21180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.209491][T21180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.559520][T21180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.630812][T21180] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.651519][T21463] syz_tun: Device is already in use. [ 479.702645][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.709854][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.735473][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.742755][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.355575][T21180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.534765][T21180] veth0_vlan: entered promiscuous mode [ 480.590558][T21180] veth1_vlan: entered promiscuous mode [ 480.710782][T21180] veth0_macvtap: entered promiscuous mode [ 480.760114][T21180] veth1_macvtap: entered promiscuous mode [ 480.819771][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.852436][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.892093][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.912242][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.937604][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.967114][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.986767][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.022645][T21508] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 481.025734][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.063764][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.091685][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.116584][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.147263][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.173574][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.204370][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.227485][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.256918][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.325178][T21180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.444080][ T1104] bridge_slave_1: left allmulticast mode [ 481.449793][ T1104] bridge_slave_1: left promiscuous mode [ 481.483601][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.512975][ T1104] bridge_slave_0: left allmulticast mode [ 481.531242][ T1104] bridge_slave_0: left promiscuous mode [ 481.547677][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.911953][T21525] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 482.137351][T21532] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 482.390896][T21537] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 482.565315][ T1104] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 482.593617][ T1104] bond0 (unregistering): Released all slaves [ 482.627009][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.638127][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.648243][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.658799][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.671128][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.681783][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.691696][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.702227][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.714221][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.729880][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.739826][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.750639][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.760600][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.771120][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.780978][T21180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.791546][T21180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.806296][T21180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.816286][T21525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 482.867048][ T1104] ɶƣ0GC¦: left promiscuous mode [ 482.939918][T21180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.980368][T21180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.000364][T21180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.016102][T21180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.174184][T21559] syz-executor.1[21559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.174349][T21559] syz-executor.1[21559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.718523][ T2442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.757190][ T2442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.895330][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.905270][T21585] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 483.922949][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.171555][T21592] syz-executor.0[21592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.171719][T21592] syz-executor.0[21592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.296554][T21597] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 484.370075][T21597] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.436211][T21597] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 484.507336][ T1104] hsr_slave_0: left promiscuous mode [ 484.534317][ T1104] hsr_slave_1: left promiscuous mode [ 484.551276][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.566957][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.608455][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.642346][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.707957][ T1104] dummy0: left allmulticast mode [ 484.722976][ T1104] dummy0: left promiscuous mode [ 484.728599][ T1104] veth1_macvtap: left promiscuous mode [ 484.734559][ T1104] veth0_macvtap: left promiscuous mode [ 484.740234][ T1104] veth1_vlan: left promiscuous mode [ 484.745710][ T1104] veth0_vlan: left promiscuous mode [ 485.749663][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 485.803309][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 486.589383][ T1104] IPVS: stop unused estimator thread 0... [ 488.201373][T21624] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 488.237851][T21624] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 488.273313][T21624] bridge0: port 3(dummy0) entered blocking state [ 488.279993][T21624] bridge0: port 3(dummy0) entered disabled state [ 488.313263][T21624] dummy0: entered allmulticast mode [ 488.328933][T21624] dummy0: entered promiscuous mode [ 488.329566][T21630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.343234][T21624] bridge0: port 3(dummy0) entered blocking state [ 488.349791][T21624] bridge0: port 3(dummy0) entered forwarding state [ 488.471704][T21639] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 489.402209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.417425][T21656] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 489.452511][T21656] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 489.460751][T21656] IPv6: NLM_F_CREATE should be specified when creating new route [ 489.524291][T21662] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.569200][ T62] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.635180][T21667] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 489.676179][T21667] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.712275][T21667] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 489.720646][T21667] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.190554][T21697] Unknown options in mask 1f4 [ 490.210209][T21699] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 490.230232][T21699] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 490.279407][T21699] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 490.360875][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.442146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.531045][T21716] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 490.566591][T21716] hsr0: entered promiscuous mode [ 490.822902][T21730] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 491.236310][T21756] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 491.271671][T21756] hsr0: entered promiscuous mode [ 491.323396][T21756] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 491.372583][T21756] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 491.394114][T21756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 491.431261][T21756] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 491.570201][T21770] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.741678][T21779] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 491.774977][T21779] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.815268][T21779] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 492.382261][T21804] TCP: TCP_TX_DELAY enabled [ 492.515408][ T29] audit: type=1800 audit(1718038552.132:30): pid=21812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 492.520576][T21815] syz-executor.4[21815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.569099][T21815] syz-executor.4[21815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.582934][ T29] audit: type=1804 audit(1718038552.162:31): pid=21812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2186578645/syzkaller.eqHcje/23/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 492.783919][T21828] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.798040][T21828] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 493.019111][T21844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.483822][T21870] ip6t_srh: unknown srh match flags 5294 [ 494.708971][T21933] __nla_validate_parse: 7 callbacks suppressed [ 494.708994][T21933] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 495.154251][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.219336][T21954] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.449361][T21963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.812572][T11184] syz_tun (unregistering): left promiscuous mode [ 495.893929][T21986] hsr0: entered promiscuous mode [ 495.913673][T21986] hsr0: left promiscuous mode [ 496.790956][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 496.832406][T22015] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.203674][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.220666][T22015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.222917][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.243281][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.255031][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.268690][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 497.282228][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.300767][T22034] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 497.319339][T22034] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 497.333728][T22034] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 497.426262][T22030] vcan0 speed is unknown, defaulting to 1000 [ 497.796393][T22030] lo speed is unknown, defaulting to 1000 [ 498.323106][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.398713][T22085] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 498.664938][T22030] chnl_net:caif_netlink_parms(): no params data found [ 498.720001][T22099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.791395][T22104] sctp: [Deprecated]: syz-executor.2 (pid 22104) Use of int in max_burst socket option. [ 498.791395][T22104] Use struct sctp_assoc_value instead [ 498.893996][T22030] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.911542][T22030] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.919681][T22030] bridge_slave_0: entered allmulticast mode [ 498.941256][T22030] bridge_slave_0: entered promiscuous mode [ 498.971210][T22030] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.983517][T22030] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.997658][T22030] bridge_slave_1: entered allmulticast mode [ 499.013982][T22030] bridge_slave_1: entered promiscuous mode [ 499.093914][T22030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.119345][T22030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.215022][T22030] team0: Port device team_slave_0 added [ 499.225337][T22030] team0: Port device team_slave_1 added [ 499.322822][ T5122] Bluetooth: hci0: command tx timeout [ 499.344769][T22030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.374823][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.387326][T22120] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 499.414993][T22120] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 499.460987][T22030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.524903][T22030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.542969][T22030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.641347][T22030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.653904][T22131] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 499.662462][T22131] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 499.722130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.831519][T22030] hsr_slave_0: entered promiscuous mode [ 499.848224][T22030] hsr_slave_1: entered promiscuous mode [ 499.867310][T22030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.876121][T22141] __nla_validate_parse: 2 callbacks suppressed [ 499.876143][T22141] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.884630][T22030] Cannot create hsr debugfs directory [ 499.917212][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 499.929848][T22145] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 500.142820][T22152] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 500.160037][T22152] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.180035][T22152] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 500.260364][T22030] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.282752][T22030] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.434892][T22030] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.487626][T22030] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.556040][T22030] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.567618][T22030] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.659741][T22030] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.672627][T22030] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.762118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.788247][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.830712][T22181] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.876450][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 500.904160][T22184] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 500.959465][T22030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.987439][T22030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.019156][T22030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.080095][T22030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.122530][T22181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 501.162491][T22193] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 501.180973][T22193] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.205525][T22193] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 501.388260][T22030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.402827][ T5122] Bluetooth: hci0: command tx timeout [ 501.451817][T22030] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.468494][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.475781][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.511396][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.518671][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.596114][T22030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.727389][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.040792][T22030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.165202][T22030] veth0_vlan: entered promiscuous mode [ 502.192313][T22030] veth1_vlan: entered promiscuous mode [ 502.305657][T22030] veth0_macvtap: entered promiscuous mode [ 502.328479][T22030] veth1_macvtap: entered promiscuous mode [ 502.390090][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.413038][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.434382][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.456622][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.467024][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.479049][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.490337][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.500925][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.511296][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.527516][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.537799][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.549767][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.559795][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.570771][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.581845][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.594061][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.607118][T22030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.619705][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.631076][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.641610][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.652860][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.663127][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.675898][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.686911][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.697885][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.709458][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.721652][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.731840][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.742880][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.753493][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.764149][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.774205][T22030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.786800][T22030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.798529][T22030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.838655][T22030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.848251][T22030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.857321][T22030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.869484][T22030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.046043][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.072674][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.193920][ T2442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.222207][ T2442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.311555][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.323826][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.346489][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.367004][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.385936][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 504.403328][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.543392][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.697903][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.858696][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.892596][T22289] vcan0 speed is unknown, defaulting to 1000 [ 505.031281][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.267222][T22289] lo speed is unknown, defaulting to 1000 [ 505.271602][T22317] tipc: Enabled bearer , priority 10 [ 505.376060][ T62] bridge_slave_1: left allmulticast mode [ 505.382666][ T62] bridge_slave_1: left promiscuous mode [ 505.392342][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.421358][ T62] bridge_slave_0: left promiscuous mode [ 505.445001][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.347392][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.364051][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.377467][ T62] bond0 (unregistering): Released all slaves [ 506.393346][T22321] __nla_validate_parse: 3 callbacks suppressed [ 506.393366][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.414364][T22326] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.444693][ T5122] Bluetooth: hci0: command tx timeout [ 506.456893][T22340] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.663895][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.690351][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.712411][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.736323][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.746626][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 506.755006][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.911478][T22357] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (33024) [ 506.955720][T22360] validate_nla: 2 callbacks suppressed [ 506.955742][T22360] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 506.992164][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 507.117785][T22349] vcan0 speed is unknown, defaulting to 1000 [ 507.133092][T22289] chnl_net:caif_netlink_parms(): no params data found [ 507.369471][T22379] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 507.401694][T22289] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.420190][T22289] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.427720][T22289] bridge_slave_0: entered allmulticast mode [ 507.440699][T22289] bridge_slave_0: entered promiscuous mode [ 507.458010][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 507.473171][T22289] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.490646][T22289] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.510990][T22289] bridge_slave_1: entered allmulticast mode [ 507.529438][T22289] bridge_slave_1: entered promiscuous mode [ 507.720583][T22387] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.815389][T22349] lo speed is unknown, defaulting to 1000 [ 507.829983][T22289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.912586][T22289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.964679][T22395] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 508.047326][T22397] workqueue: name exceeds WQ_NAME_LEN. Truncating to: à»Rà.È””y™l‰²àöü;{²49Þ.0ðS&– [ 508.074506][T22289] team0: Port device team_slave_0 added [ 508.095821][T22289] team0: Port device team_slave_1 added [ 508.300066][T22405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 508.352795][T22289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.372105][T22289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.462049][T22289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.528196][ T5122] Bluetooth: hci0: command tx timeout [ 508.557405][T22289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.569309][T22289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.616198][T22289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.671263][ T62] hsr_slave_0: left promiscuous mode [ 508.678690][ T62] hsr_slave_1: left promiscuous mode [ 508.691036][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.706562][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.715474][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.725199][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.784415][ T62] veth1_macvtap: left promiscuous mode [ 508.796823][ T62] veth0_macvtap: left promiscuous mode [ 508.802942][ T62] veth1_vlan: left promiscuous mode [ 508.808505][ T62] veth0_vlan: left promiscuous mode [ 508.842565][ T5122] Bluetooth: hci4: command tx timeout [ 509.620550][ T62] team0 (unregistering): Port device team_slave_1 removed [ 509.686108][ T62] team0 (unregistering): Port device team_slave_0 removed [ 510.231308][T22415] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (33024) [ 510.299336][T22421] tun0: tun_chr_ioctl cmd 1074025677 [ 510.312837][T22421] tun0: linktype set to 6 [ 510.461285][T22289] hsr_slave_0: entered promiscuous mode [ 510.479337][T22289] hsr_slave_1: entered promiscuous mode [ 510.497379][T22289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.514347][T22289] Cannot create hsr debugfs directory [ 510.602516][ T5122] Bluetooth: hci0: command tx timeout [ 510.610588][T22441] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.726375][T22446] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 510.923011][ T5122] Bluetooth: hci4: command tx timeout [ 510.960818][T22452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 511.313311][T22465] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 511.437995][T22349] chnl_net:caif_netlink_parms(): no params data found [ 511.464403][T22473] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 511.541613][T22477] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 511.590570][T22470] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 511.735753][T22486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 511.765813][T22490] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 511.861500][T22495] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.888959][T22486] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 511.912125][T22497] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 511.943507][T22349] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.951018][T22349] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.982821][T22349] bridge_slave_0: entered allmulticast mode [ 512.010769][T22349] bridge_slave_0: entered promiscuous mode [ 512.054076][T22503] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.056932][T22349] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.064033][T22503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.123072][T22349] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.130433][T22349] bridge_slave_1: entered allmulticast mode [ 512.169318][T22349] bridge_slave_1: entered promiscuous mode [ 512.330407][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 512.393152][T22349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.423150][T22349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.682336][ T5122] Bluetooth: hci0: command tx timeout [ 512.701355][T22524] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 512.752396][T22349] team0: Port device team_slave_0 added [ 512.819531][T22349] team0: Port device team_slave_1 added [ 512.945082][T22529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.986030][T22529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.002715][ T5122] Bluetooth: hci4: command tx timeout [ 513.082203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.140734][T22349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.164141][T22349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.232171][T22349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.279399][T22289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.317071][T22539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.343631][T22539] batadv_slave_1: entered allmulticast mode [ 513.356249][T22539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.370611][T22539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.393838][T22539] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 513.422932][T22349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.431489][T22349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.502125][T22349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.542365][T22289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.566030][T22289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.595636][T22289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.779994][T22349] hsr_slave_0: entered promiscuous mode [ 513.810790][T22349] hsr_slave_1: entered promiscuous mode [ 513.840833][T22349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.870484][T22349] Cannot create hsr debugfs directory [ 514.122230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.141167][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.154320][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.166260][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.181227][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.196736][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 514.212253][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.256506][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.291138][T22558] bridge0: port 3(team0) entered blocking state [ 514.302443][T22558] bridge0: port 3(team0) entered disabled state [ 514.387300][T22553] vcan0 speed is unknown, defaulting to 1000 [ 514.436546][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.615943][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.742631][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.813693][T22553] lo speed is unknown, defaulting to 1000 [ 514.977250][ T62] bridge_slave_1: left allmulticast mode [ 514.986643][ T62] bridge_slave_1: left promiscuous mode [ 514.993677][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.018903][ T62] bridge_slave_0: left allmulticast mode [ 515.043058][ T62] bridge_slave_0: left promiscuous mode [ 515.059160][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.079079][ T62] tipc: Resetting bearer [ 515.086055][ T5122] Bluetooth: hci4: command tx timeout [ 515.170028][T22574] dccp_v4_rcv: dropped packet with invalid checksum [ 515.829177][ T62] tipc: Disabling bearer [ 516.099805][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.113634][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.127444][ T62] bond0 (unregistering): Released all slaves [ 516.141534][ T62] bond1 (unregistering): Released all slaves [ 516.159367][ T62] bond2 (unregistering): Released all slaves [ 516.179952][ T62] bond3 (unregistering): Released all slaves [ 516.283957][ T5122] Bluetooth: hci1: command tx timeout [ 516.312855][ T62] bond4 (unregistering): Released all slaves [ 516.440435][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.457193][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.468686][ T62] bond0 (unregistering): Released all slaves [ 516.503956][T22572] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 516.719289][ T62] tipc: Disabling bearer [ 516.741731][ T62] tipc: Left network mode [ 516.825073][T22289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.071868][T22289] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.159244][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.166516][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.323895][T22602] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 518.362592][ T5122] Bluetooth: hci1: command tx timeout [ 518.839130][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.846408][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.192693][T22553] chnl_net:caif_netlink_parms(): no params data found [ 519.356620][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 519.381052][T22349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.432780][T22349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.459091][T22635] Bluetooth: MGMT ver 1.22 [ 519.538733][T22289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.576546][T22349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.639639][T22349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 519.946623][T22651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.113200][T22657] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 520.135429][T22553] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.144773][T22553] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.162340][T22553] bridge_slave_0: entered allmulticast mode [ 520.174042][T22553] bridge_slave_0: entered promiscuous mode [ 520.212472][T22553] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.219756][T22553] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.272414][T22553] bridge_slave_1: entered allmulticast mode [ 520.301458][T22553] bridge_slave_1: entered promiscuous mode [ 520.442970][ T5122] Bluetooth: hci1: command tx timeout [ 520.676231][T22553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.755884][T22553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.970029][T22289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.991051][ T62] hsr_slave_0: left promiscuous mode [ 521.006004][ T62] hsr_slave_1: left promiscuous mode [ 521.024587][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.043341][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.051714][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.067476][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.081460][ T62] hsr_slave_0: left promiscuous mode [ 521.093912][ T62] hsr_slave_1: left promiscuous mode [ 521.101376][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.110757][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.119420][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.127227][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.238443][ T62] veth0_macvtap: left promiscuous mode [ 521.252839][ T62] veth1_vlan: left promiscuous mode [ 521.258322][ T62] veth0_vlan: left promiscuous mode [ 521.290561][ T62] veth1_macvtap: left promiscuous mode [ 521.296328][ T62] veth0_macvtap: left promiscuous mode [ 521.301943][ T62] veth1_vlan: left promiscuous mode [ 521.322982][ T62] veth0_vlan: left promiscuous mode [ 521.563284][ T12] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.219206][ T62] team0 (unregistering): Port device team_slave_1 removed [ 522.268218][ T62] team0 (unregistering): Port device team_slave_0 removed [ 522.522480][ T5122] Bluetooth: hci1: command tx timeout [ 523.123603][ T62] team0 (unregistering): Port device team_slave_1 removed [ 523.173299][ T62] team0 (unregistering): Port device team_slave_0 removed [ 523.710134][T22553] team0: Port device team_slave_0 added [ 523.744794][T22553] team0: Port device team_slave_1 added [ 523.763950][T22685] vcan0 speed is unknown, defaulting to 1000 [ 523.939195][T22553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.972288][T22553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.042563][T22553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.082364][T22553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.089410][T22553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.181785][T22553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.224306][T22697] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 524.266731][T22685] lo speed is unknown, defaulting to 1000 [ 524.356811][T22289] veth0_vlan: entered promiscuous mode [ 524.448498][T22553] hsr_slave_0: entered promiscuous mode [ 524.473422][T22553] hsr_slave_1: entered promiscuous mode [ 524.487896][T22553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.512430][T22553] Cannot create hsr debugfs directory [ 524.544114][T22349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.743515][T22289] veth1_vlan: entered promiscuous mode [ 524.821159][T22349] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.964328][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.971508][ T5115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.996911][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.004215][ T5115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.378710][ T62] IPVS: stop unused estimator thread 0... [ 525.515651][T22553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.543553][T22289] veth0_macvtap: entered promiscuous mode [ 525.556193][T22289] veth1_macvtap: entered promiscuous mode [ 525.675383][T22553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.732144][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.761198][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.782254][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.802543][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.812755][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.824764][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.836206][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.846910][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.857251][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.867953][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.881000][T22289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.949097][T22553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.993611][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.020712][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.037908][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.062305][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.081808][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.101854][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.123909][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.135942][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.146003][T22289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.158040][T22289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.169925][T22289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.246975][T22553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.285904][T22289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.296710][T22289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.305893][T22289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.314994][T22289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.377810][T22349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.480243][ T2442] bridge_slave_1: left allmulticast mode [ 526.512388][ T2442] bridge_slave_1: left promiscuous mode [ 526.518218][ T2442] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.553751][ T2442] bridge_slave_0: left promiscuous mode [ 526.562753][ T2442] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.171683][ T2442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.185823][ T2442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.198293][ T2442] bond0 (unregistering): Released all slaves [ 527.475008][T22553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 527.502724][T22553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 527.531286][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.543395][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.654246][T22553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.747309][T22553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 527.814792][T22349] veth0_vlan: entered promiscuous mode [ 527.977978][T22349] veth1_vlan: entered promiscuous mode [ 528.007639][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.018530][T22758] vcan0 speed is unknown, defaulting to 1000 [ 528.054917][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.219204][T22766] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 528.251412][T22349] veth0_macvtap: entered promiscuous mode [ 528.300579][T22349] veth1_macvtap: entered promiscuous mode [ 528.364925][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.393431][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.416654][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.441102][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.459614][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.489092][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.516358][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.540253][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.552099][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.568700][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.586757][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.605279][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.644778][T22349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.660530][T22758] lo speed is unknown, defaulting to 1000 [ 528.666909][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.767398][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.779396][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.791235][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.801956][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.821894][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.832682][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.844192][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.855419][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.866743][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.882182][T22349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.912212][T22349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.926029][T22349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.985541][T22349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.012669][T22349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.021450][T22349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.048887][T22349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.158307][T22553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.331800][ T2442] hsr_slave_0: left promiscuous mode [ 529.347184][ T2442] hsr_slave_1: left promiscuous mode [ 529.364145][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.371631][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.380147][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.388359][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.425731][ T2442] veth1_macvtap: left promiscuous mode [ 529.431367][ T2442] veth0_macvtap: left promiscuous mode [ 529.437216][ T2442] veth0_vlan: left promiscuous mode [ 529.468913][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801cfb7800: rx timeout, send abort [ 529.477938][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801cfb7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 530.270594][ T2442] team0 (unregistering): Port device team_slave_1 removed [ 530.326778][ T2442] team0 (unregistering): Port device team_slave_0 removed [ 531.037552][T22553] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.275519][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.282785][T21236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.370047][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.377298][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.454780][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.483585][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.599501][T22798] vcan0 speed is unknown, defaulting to 1000 [ 531.720907][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.775760][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.191515][T22798] lo speed is unknown, defaulting to 1000 [ 532.238927][T22553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.431878][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.625177][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.109692][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.355640][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.548049][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.558370][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.568325][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.584073][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.604859][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 533.614282][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.793370][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 533.806741][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 533.816339][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 533.818969][T22553] veth0_vlan: entered promiscuous mode [ 533.862608][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 533.873011][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 533.880455][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.944396][T22829] vcan0 speed is unknown, defaulting to 1000 [ 533.989054][T22838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.074395][T22553] veth1_vlan: entered promiscuous mode [ 534.122976][ T51] bridge_slave_1: left allmulticast mode [ 534.147049][ T51] bridge_slave_1: left promiscuous mode [ 534.162612][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.169919][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.188919][ T51] bridge_slave_0: left allmulticast mode [ 534.202460][ T51] bridge_slave_0: left promiscuous mode [ 534.208280][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.751408][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.763762][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.776655][ T51] bond0 (unregistering): Released all slaves [ 534.800465][T22840] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 534.845753][T22829] lo speed is unknown, defaulting to 1000 [ 534.904136][T22833] vcan0 speed is unknown, defaulting to 1000 [ 534.961338][T22553] veth0_macvtap: entered promiscuous mode [ 535.006304][T22553] veth1_macvtap: entered promiscuous mode [ 535.160666][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.198758][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.212081][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.240665][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.277685][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.302156][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.322993][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.342048][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.362774][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.386572][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.401929][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.413198][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.433562][T22553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.462992][T22847] netem: incorrect gi model size [ 535.486134][T22847] netem: change failed [ 535.527685][T22833] lo speed is unknown, defaulting to 1000 [ 535.538465][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.563899][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.579539][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.597929][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.612714][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.634949][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.645907][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.668613][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.688918][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.716664][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.722975][ T5122] Bluetooth: hci2: command tx timeout [ 535.747973][T22553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.790256][T22553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.807477][T22553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.887567][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 535.963418][ T5122] Bluetooth: hci4: command tx timeout [ 535.994715][T22553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.003699][T22553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.013856][T22553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.024948][T22553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.440818][T22867] vcan0 speed is unknown, defaulting to 1000 [ 536.465681][T22870] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 536.889608][ T51] hsr_slave_0: left promiscuous mode [ 536.907783][ T51] hsr_slave_1: left promiscuous mode [ 536.926346][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.942239][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.950520][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.958362][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.989131][ T51] veth1_macvtap: left promiscuous mode [ 536.995046][ T51] veth0_macvtap: left promiscuous mode [ 537.000750][ T51] veth1_vlan: left promiscuous mode [ 537.006337][ T51] veth0_vlan: left promiscuous mode [ 537.627670][ T51] team0 (unregistering): Port device team_slave_1 removed [ 537.679947][ T51] team0 (unregistering): Port device team_slave_0 removed [ 537.803588][ T5122] Bluetooth: hci2: command tx timeout [ 538.043911][ T5122] Bluetooth: hci4: command tx timeout [ 538.228362][T22867] lo speed is unknown, defaulting to 1000 [ 538.257316][T22875] vcan0 speed is unknown, defaulting to 1000 [ 538.509863][T22829] chnl_net:caif_netlink_parms(): no params data found [ 538.555120][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.586337][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.728506][T22833] chnl_net:caif_netlink_parms(): no params data found [ 538.754351][T22875] lo speed is unknown, defaulting to 1000 [ 538.774841][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.792095][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.993949][T22829] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.001154][T22829] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.009802][T22829] bridge_slave_0: entered allmulticast mode [ 539.017490][T22829] bridge_slave_0: entered promiscuous mode [ 539.137210][T22829] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.145336][T22829] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.152763][T22829] bridge_slave_1: entered allmulticast mode [ 539.160617][T22829] bridge_slave_1: entered promiscuous mode [ 539.416175][T22833] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.435649][T22833] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.448835][T22833] bridge_slave_0: entered allmulticast mode [ 539.465278][T22833] bridge_slave_0: entered promiscuous mode [ 539.481751][T22833] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.498492][T22833] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.507422][T22833] bridge_slave_1: entered allmulticast mode [ 539.525415][T22833] bridge_slave_1: entered promiscuous mode [ 539.678616][T22829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.701465][T22829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.850986][T22829] team0: Port device team_slave_0 added [ 539.861770][T22833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.882484][ T5122] Bluetooth: hci2: command tx timeout [ 539.967255][T22898] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.996884][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.084121][T22829] team0: Port device team_slave_1 added [ 540.123085][ T5122] Bluetooth: hci4: command tx timeout [ 540.143374][T22833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.295166][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.553134][T22833] team0: Port device team_slave_0 added [ 540.650880][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.671371][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.699862][T22829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.707541][T22829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.733979][T22829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.748538][T22829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.755785][T22829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.786477][T22829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.804514][T22833] team0: Port device team_slave_1 added [ 540.836926][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.941874][T22833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.949582][T22833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.978764][T22833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.007328][T22829] hsr_slave_0: entered promiscuous mode [ 541.014768][T22829] hsr_slave_1: entered promiscuous mode [ 541.021247][T22829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.029066][T22829] Cannot create hsr debugfs directory [ 541.037732][T22833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.045485][T22833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.071546][T22833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.287303][T22833] hsr_slave_0: entered promiscuous mode [ 541.294646][T22833] hsr_slave_1: entered promiscuous mode [ 541.302414][T22833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.314143][T22833] Cannot create hsr debugfs directory [ 541.548779][ T51] dummy0: left allmulticast mode [ 541.572758][ T51] dummy0: left promiscuous mode [ 541.577907][ T51] bridge0: port 3(dummy0) entered disabled state [ 541.613138][ T51] bridge_slave_1: left allmulticast mode [ 541.633312][ T51] bridge_slave_1: left promiscuous mode [ 541.640958][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.683850][ T51] bridge_slave_0: left allmulticast mode [ 541.696440][ T51] bridge_slave_0: left promiscuous mode [ 541.714719][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.966446][ T5122] Bluetooth: hci2: command tx timeout [ 542.006107][T22946] syz-executor.4[22946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.006273][T22946] syz-executor.4[22946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.202470][ T5122] Bluetooth: hci4: command tx timeout [ 543.270306][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.282957][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.294952][ T51] bond0 (unregistering): Released all slaves [ 543.344425][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 543.404485][T22956] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 543.429131][T22956] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.436965][T22956] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.494803][T22956] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.502091][T22956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.509668][T22956] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.517014][T22956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.534828][T22962] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 543.569373][T22956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 543.795107][T22972] syz-executor.4[22972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.795276][T22972] syz-executor.4[22972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.525500][T23000] dccp_v4_rcv: dropped packet with invalid checksum [ 544.542604][T23001] syz-executor.4[23001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.545318][T23001] syz-executor.4[23001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.720849][ T51] hsr_slave_0: left promiscuous mode [ 544.748955][ T51] hsr_slave_1: left promiscuous mode [ 544.756272][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.765814][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.789333][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.802319][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.865387][ T51] veth1_macvtap: left promiscuous mode [ 544.870995][ T51] veth0_macvtap: left promiscuous mode [ 544.880604][ T51] veth1_vlan: left promiscuous mode [ 544.892284][ T51] veth0_vlan: left promiscuous mode [ 546.091493][ T51] team0 (unregistering): Port device team_slave_1 removed [ 546.182226][ T51] team0 (unregistering): Port device team_slave_0 removed [ 547.085938][T22829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 547.161668][T22829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 547.299643][T22829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 547.336491][T22829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.697132][T22829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.747642][T22829] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.814127][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.821290][ T5211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.862015][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.869227][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.922824][ T51] geneve1: left allmulticast mode [ 547.927922][ T51] geneve1: left promiscuous mode [ 547.949063][ T51] bridge0: port 1(geneve1) entered disabled state [ 547.981767][ T51] veth1_to_bond: left allmulticast mode [ 547.996815][ T51] veth1_to_bond: left promiscuous mode [ 548.006960][ T51] bridge2: port 2(veth1_to_bond) entered disabled state [ 548.043997][ T51] bridge_slave_1: left allmulticast mode [ 548.049798][ T51] bridge_slave_1: left promiscuous mode [ 548.073548][ T51] bridge2: port 1(bridge_slave_1) entered disabled state [ 548.934642][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.950321][ T51] bond0 (unregistering): Released all slaves [ 548.970010][ T51] bond1 (unregistering): Released all slaves [ 548.986957][ T51] bond2 (unregistering): Released all slaves [ 553.564227][ T11] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 563.165877][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.989346][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.999117][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.016810][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.026299][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.037392][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 579.044993][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.762698][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 579.773138][ T5122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 579.786304][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 579.795880][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 579.822301][ T5122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 579.832409][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.155499][ T5122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 580.165655][ T5122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 580.174236][ T5122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 580.183275][ T5122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 580.198868][ T5122] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 580.206391][ T5122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 581.083065][ T5123] Bluetooth: hci5: command tx timeout [ 581.888086][ T5123] Bluetooth: hci6: command tx timeout [ 582.283185][ T5123] Bluetooth: hci7: command tx timeout [ 583.173112][ T5123] Bluetooth: hci5: command tx timeout [ 583.972627][ T5123] Bluetooth: hci6: command tx timeout [ 584.362145][ T5123] Bluetooth: hci7: command tx timeout [ 585.249638][ T5123] Bluetooth: hci5: command tx timeout [ 585.564178][ T11] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 586.047428][ T5123] Bluetooth: hci6: command tx timeout [ 586.442524][ T5123] Bluetooth: hci7: command tx timeout [ 587.329985][ T5123] Bluetooth: hci5: command tx timeout [ 588.123425][ T5123] Bluetooth: hci6: command tx timeout [ 588.522381][ T5123] Bluetooth: hci7: command tx timeout [ 598.533143][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 598.547857][ T5122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 598.558165][ T5122] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 598.566974][T23118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 598.572612][T23116] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 598.590137][T23116] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 598.598780][T23116] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 598.609865][T23118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 598.618065][T23116] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 598.618892][T23118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 598.634760][T23118] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 598.642421][T23116] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 600.692482][T23118] Bluetooth: hci9: command tx timeout [ 600.692525][T23116] Bluetooth: hci8: command tx timeout [ 602.762194][T23118] Bluetooth: hci9: command tx timeout [ 602.769216][T23116] Bluetooth: hci8: command tx timeout [ 604.842267][T23118] Bluetooth: hci9: command tx timeout [ 604.848888][T23116] Bluetooth: hci8: command tx timeout [ 606.922200][T23116] Bluetooth: hci8: command tx timeout [ 606.927691][T23116] Bluetooth: hci9: command tx timeout [ 617.563076][ T2442] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.605472][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.686845][T23116] Bluetooth: hci0: command 0x0406 tx timeout [ 636.932057][T23118] Bluetooth: hci1: command 0x0405 tx timeout [ 644.088346][T23118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 644.102956][T23118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 644.111028][T23118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 644.120611][T23118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 644.132757][T23118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 644.140268][T23118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 644.797250][T23116] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 644.808199][T23116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 644.819816][T23116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 644.829626][T23116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 644.839656][T23116] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 644.848051][T23116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 645.171347][T23116] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 645.186685][T23116] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 645.195108][T23116] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 645.204383][T23116] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 645.212628][T23116] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 645.224493][T23116] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 646.202311][T23118] Bluetooth: hci10: command tx timeout [ 646.922478][T23118] Bluetooth: hci11: command tx timeout [ 647.322240][T23118] Bluetooth: hci12: command tx timeout [ 648.282193][T23118] Bluetooth: hci10: command tx timeout [ 649.002447][T23118] Bluetooth: hci11: command tx timeout [ 649.404009][T23118] Bluetooth: hci12: command tx timeout [ 649.567800][ T11] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 650.362601][T23118] Bluetooth: hci10: command tx timeout [ 651.082609][T23118] Bluetooth: hci11: command tx timeout [ 651.483247][T23118] Bluetooth: hci12: command tx timeout [ 652.442189][T23118] Bluetooth: hci10: command tx timeout [ 653.172132][T23118] Bluetooth: hci11: command tx timeout [ 653.563247][T23118] Bluetooth: hci12: command tx timeout [ 657.408538][ T5128] Bluetooth: hci4: command 0x0406 tx timeout [ 657.408655][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 663.579207][T23116] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 663.589638][T23116] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 663.598969][T23116] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 663.607373][T23116] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 663.616683][T23116] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 663.624247][T23116] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 663.777108][T23118] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 663.786987][T23118] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 663.795942][T23118] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 663.804600][T23118] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 663.813852][T23118] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 663.821310][T23118] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 665.723410][T23116] Bluetooth: hci13: command tx timeout [ 665.882425][T23116] Bluetooth: hci14: command tx timeout [ 667.802649][T23116] Bluetooth: hci13: command tx timeout [ 667.962381][T23116] Bluetooth: hci14: command tx timeout [ 669.882347][T23116] Bluetooth: hci13: command tx timeout [ 670.042767][T23116] Bluetooth: hci14: command tx timeout [ 671.962282][T23116] Bluetooth: hci13: command tx timeout [ 672.122708][T23116] Bluetooth: hci14: command tx timeout [ 681.563727][ T11] ÿÿÿÿÿÿ: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 686.050378][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.490041][ T5128] Bluetooth: hci5: command 0x0406 tx timeout [ 703.496753][ T5128] Bluetooth: hci6: command 0x0406 tx timeout [ 703.502995][ T5128] Bluetooth: hci7: command 0x0406 tx timeout [ 704.602558][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 704.611030][ T30] Not tainted 6.10.0-rc2-syzkaller-00461-g2ba6d15786f6 #0 [ 704.632096][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.640830][ T30] task:kworker/u8:3 state:D stack:20752 pid:51 tgid:51 ppid:2 flags:0x00004000 2024/06/10 16:59:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 704.664342][ T30] Workqueue: netns cleanup_net [ 704.703833][ T30] Call Trace: [ 704.707181][ T30] [ 704.710853][ T30] __schedule+0x17e8/0x4a20 [ 704.722299][ T30] ? __pfx___schedule+0x10/0x10 [ 704.727219][ T30] ? __pfx_lock_release+0x10/0x10 [ 704.752303][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 704.757925][ T30] ? kthread_data+0x52/0xd0 [ 704.771989][ T30] ? schedule+0x90/0x320 [ 704.776298][ T30] ? wq_worker_sleeping+0x66/0x240 [ 704.781450][ T30] ? schedule+0x90/0x320 [ 704.801988][ T30] schedule+0x14b/0x320 [ 704.806217][ T30] schedule_preempt_disabled+0x13/0x30 [ 704.811718][ T30] __mutex_lock+0x6a4/0xd70 [ 704.832033][ T30] ? __mutex_lock+0x527/0xd70 [ 704.836784][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 704.853007][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 704.858107][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 704.872263][ T30] ? rcu_is_watching+0x15/0xb0 [ 704.877097][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 704.902288][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 704.907915][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 704.922675][ T30] hwsim_exit_net+0x5c1/0x670 [ 704.927428][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 704.942001][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 704.947877][ T30] cleanup_net+0x802/0xcc0 [ 704.963297][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 704.968311][ T30] ? process_scheduled_works+0x945/0x1830 [ 704.992274][ T30] process_scheduled_works+0xa2c/0x1830 [ 704.997918][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.012021][ T30] ? assign_work+0x364/0x3d0 [ 705.016673][ T30] worker_thread+0x86d/0xd70 [ 705.031994][ T30] ? __kthread_parkme+0x169/0x1d0 [ 705.037084][ T30] ? __pfx_worker_thread+0x10/0x10 [ 705.062004][ T30] kthread+0x2f0/0x390 [ 705.066236][ T30] ? __pfx_worker_thread+0x10/0x10 [ 705.071373][ T30] ? __pfx_kthread+0x10/0x10 [ 705.084108][ T30] ret_from_fork+0x4b/0x80 [ 705.088598][ T30] ? __pfx_kthread+0x10/0x10 [ 705.102598][ T30] ret_from_fork_asm+0x1a/0x30 [ 705.107532][ T30] [ 705.110653][ T30] INFO: task kworker/u8:6:1051 blocked for more than 143 seconds. [ 705.142289][ T30] Not tainted 6.10.0-rc2-syzkaller-00461-g2ba6d15786f6 #0 [ 705.149987][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 705.181995][ T30] task:kworker/u8:6 state:D stack:22328 pid:1051 tgid:1051 ppid:2 flags:0x00004000 [