last executing test programs: 38.41130007s ago: executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='b', 0x1, 0x0) 38.410031461s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x891b, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x322}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x133}, {&(0x7f00000007c0)=""/154, 0x85}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 38.398593235s ago: executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x7f4}, {0x0, 0x2}], 0x2, &(0x7f00000008c0)=ANY=[], 0x178}, 0x0) 38.290856734s ago: executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) accept4(r0, 0x0, 0x0, 0x0) 38.117857124s ago: executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="02", 0x1}], 0x1}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000200)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) 37.943159089s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x891b, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x322}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x133}, {&(0x7f00000007c0)=""/154, 0x85}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 31.441817528s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x29}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 31.29906164s ago: executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{}, {}], 0x55, 0x100) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 31.276354618s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 31.206831265s ago: executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000140)={@map=0x1, 0x0, 0x14, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 31.117114326s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 31.116840105s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) 31.0157505s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000680)={0x1d, r2, 0x0, {0x1}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401020000000004000000"], 0x1c}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=@deltclass={0x4c8, 0x29, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0x8}, {0xffff, 0xb}, {0x0, 0xf}}, [@c_atm={{0x8}, {0x8c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x8}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc}}, @TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x23, 0x3, "50fdc7e9d8196e8197d7027980f6138f8b3a8965cd4f5b4114cc950826dbba"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x4}}, @TCA_ATM_HDR={0x31, 0x3, "2e693b9d871d704cda804e8aa0dc4d2edf25bd7de6835e31c85f2c85cb735839d13d369281a5666851bb7bad11"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x80000, 0x2, 0x7, 0x10000, 0x80000001, 0x9, 0x4, 0x9, 0x0, 0x3, 0x3, 0x4, 0x7, 0xfffffffb, 0x7fffffff, 0x2, 0x3f, 0x10001, 0x0, 0x2, 0x0, 0x0, 0x1, 0xa804, 0x3, 0x9, 0x5, 0x0, 0x0, 0x0, 0x93, 0x4, 0x0, 0xffffffff, 0x7fffffff, 0x0, 0x1d9, 0x0, 0x1ff, 0xfff, 0x5, 0x1000, 0x7, 0x1, 0x822, 0x2b, 0x0, 0x3, 0x10000, 0x8, 0x5, 0x1f, 0xee, 0x4, 0x7, 0x6, 0x0, 0x4, 0x20, 0xba, 0x5, 0x0, 0x1, 0x0, 0x800, 0x91, 0x70000, 0x3, 0x1, 0x3, 0x80000001, 0x7, 0x0, 0x5, 0x0, 0x10001, 0x3f, 0x9, 0x200, 0x7, 0x7fff, 0x20000000, 0x1, 0x0, 0x7, 0xfff, 0x3, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0x6, 0x80000000, 0x4, 0x20, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x6, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x6, 0x0, 0x1, 0x9, 0xfffeffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x916, 0x6f797d50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x80, 0x7f, 0x80, 0x81dfb88, 0x0, 0x20, 0x9, 0x2, 0xbf, 0x2b6, 0xb432, 0xffffffff, 0x3ff, 0x8, 0x5ca, 0x401, 0x7, 0xfff, 0x34, 0x6, 0x2, 0xa113, 0xfffff650, 0x8, 0xd0e3, 0x1, 0x3f, 0x8, 0xffffffff, 0x5, 0x51, 0x3, 0x6, 0x3, 0x22c00000, 0xfffff22b, 0xae, 0x80000000, 0xfffffffa, 0xfff, 0x5, 0x7000, 0x92, 0x0, 0x9, 0xe2, 0x9, 0x2, 0x2, 0xfff, 0x2, 0x8000, 0x9, 0x6, 0x6, 0x3b, 0x8, 0x0, 0x20, 0x2d31, 0xf6, 0x7fff, 0xffffffff, 0x80000001, 0x6, 0x6, 0x101, 0x8, 0x5, 0x9, 0x80000001, 0x4, 0x9, 0x80000001, 0xffffffff, 0x10001, 0x6, 0x80000000, 0x5d3, 0x3ff, 0x1, 0xfff, 0x3, 0x0, 0x9, 0x1, 0x5, 0x7fffffff, 0x3f63, 0x8, 0x8, 0x7, 0xfffffffd, 0x3, 0x5, 0x4, 0x989, 0x6, 0x4, 0x5, 0x2f3, 0x7, 0x8, 0x0, 0xffffffff, 0x80000001, 0x3, 0x80]}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) pselect6(0x7fff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x8001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4750000", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf250900000008000400090000000500050020000000080004000010000005000500080000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0xfffffffffffffedd}}, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000020000000900010073797a3000000000140002006272696467655f736c6176655f3100000900030073797a320000000071fd9636e17e3650ebfd38c1c15a2b79227062379d268fb240c41b37327d56bde01e89f63196e7742f1ace30e7dc88b5e293240ab3d384047d0759497244002ac59cbe17a1ba28544731c0a228b3173b564cccf4432d26e5310249262193b117f8d08a2f003a85de98d54d930c766475a792409c01c9fd3bcc5c3605c973f9aaf344452433abb9c5bbf72a1bd09b34d1ee5abd0140555f95f20a2d1b09088de0da645b2511ba4e6f3834192c973298bcc27364e3"], 0x40}}, 0x0) 31.011562212s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x1, @none}, 0xe) 30.936281166s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpeername(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x38, 0x0, &(0x7f0000000b80)="e0b9547ed387dbe9abc89b6f5becda21cc10dbf39e5dadca038fd03a99a83bcc18df2c27bc338f9fc8713a3f794424e0f94483faea1aa3b5", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000980)=0x74ae, 0x4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0xfde7}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, 0x4e22, 0x101, 0x4e1f, 0x5dd0, 0x2, 0x0, 0x80, 0x29}, {0x3, 0xfffffffffffffff9, 0x7, 0x100000000, 0x640, 0xfe, 0x800, 0x81}, {0x3ff, 0x4000000000dc, 0xfffffffffffffffa, 0xffffffffffffffff}, 0x1000, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x32}, 0xa, @in=@multicast2, 0x3502, 0x2, 0x0, 0xb9, 0x2d, 0x8, 0xde}}, 0xe8) socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xe017be05}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x3}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 30.917834219s ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 30.893141772s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x29}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 30.797495374s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000003c0), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.765678261s ago: executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) 30.676565621s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 30.669862443s ago: executing program 1: ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000003c0)={{}, "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"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0), 0x98) 30.635862534s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_TXQLEN={0x8}]}, 0x3c}}, 0x0) 30.545472145s ago: executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) 30.456771971s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'team_slave_1\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0xea0, 0x0, 0x0, 0x0, 0x3, 0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 30.371023957s ago: executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) poll(&(0x7f0000000000)=[{}, {}], 0x55, 0x100) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 30.037774237s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(r0, &(0x7f00000007c0)=ANY=[], 0x8) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast2, @private1, @dev}) 761.976441ms ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x40}, {0x80000006}]}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 604.073316ms ago: executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x6018, 0x4) 526.130637ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) 0s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpeername(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x38, 0x0, &(0x7f0000000b80)="e0b9547ed387dbe9abc89b6f5becda21cc10dbf39e5dadca038fd03a99a83bcc18df2c27bc338f9fc8713a3f794424e0f94483faea1aa3b5", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000980)=0x74ae, 0x4) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0xfde7}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, 0x4e22, 0x101, 0x4e1f, 0x5dd0, 0x2, 0x0, 0x80, 0x29}, {0x3, 0xfffffffffffffff9, 0x7, 0x100000000, 0x640, 0xfe, 0x800, 0x81}, {0x3ff, 0x4000000000dc, 0xfffffffffffffffa, 0xffffffffffffffff}, 0x1000, 0x6e6bb8, 0x2, 0x1, 0x0, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x32}, 0xa, @in=@multicast2, 0x3502, 0x2, 0x0, 0xb9, 0x2d, 0x8, 0xde}}, 0xe8) socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xe017be05}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x3}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b40)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. 2024/06/19 10:11:18 fuzzer started 2024/06/19 10:11:19 dialing manager at 10.128.0.169:30016 [ 67.686892][ T5093] cgroup: Unknown subsys name 'net' [ 67.850534][ T5093] cgroup: Unknown subsys name 'rlimit' 2024/06/19 10:11:20 starting 5 executor processes [ 69.161718][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.219704][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.225506][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.227921][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.235223][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.242019][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.255342][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.269059][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.278026][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.278962][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.285542][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.293692][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.299418][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.307648][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.315406][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.321828][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.335245][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.340891][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.344857][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.351271][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.357033][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.363222][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.372912][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.384831][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.387249][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.402558][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.410028][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.417635][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.418631][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.432116][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.439755][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.997062][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 71.084747][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 71.133123][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 71.265868][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.273800][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.281359][ T5112] bridge_slave_0: entered allmulticast mode [ 71.289740][ T5112] bridge_slave_0: entered promiscuous mode [ 71.306221][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 71.344593][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.351736][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.361483][ T5112] bridge_slave_1: entered allmulticast mode [ 71.368550][ T5112] bridge_slave_1: entered promiscuous mode [ 71.403335][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.410784][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.418329][ T5115] bridge_slave_0: entered allmulticast mode [ 71.425726][ T5115] bridge_slave_0: entered promiscuous mode [ 71.471493][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.481231][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 71.492102][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.500029][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.507720][ T5115] bridge_slave_1: entered allmulticast mode [ 71.515091][ T5115] bridge_slave_1: entered promiscuous mode [ 71.558538][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.565502][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.576741][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.668461][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.683096][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.691135][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.699108][ T5113] bridge_slave_0: entered allmulticast mode [ 71.706552][ T5113] bridge_slave_0: entered promiscuous mode [ 71.717292][ T5112] team0: Port device team_slave_0 added [ 71.733657][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.766683][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.773807][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.781630][ T5113] bridge_slave_1: entered allmulticast mode [ 71.788806][ T5113] bridge_slave_1: entered promiscuous mode [ 71.799041][ T5112] team0: Port device team_slave_1 added [ 71.820921][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.828439][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.835654][ T5128] bridge_slave_0: entered allmulticast mode [ 71.842525][ T5128] bridge_slave_0: entered promiscuous mode [ 71.891233][ T5115] team0: Port device team_slave_0 added [ 71.900220][ T5115] team0: Port device team_slave_1 added [ 71.907712][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.914893][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.922017][ T5128] bridge_slave_1: entered allmulticast mode [ 71.929532][ T5128] bridge_slave_1: entered promiscuous mode [ 71.950812][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.973672][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.980656][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.007207][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.089545][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.100071][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.107402][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.135184][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.146647][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.153867][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.161432][ T5114] bridge_slave_0: entered allmulticast mode [ 72.168449][ T5114] bridge_slave_0: entered promiscuous mode [ 72.177170][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.184259][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.210310][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.290079][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.297656][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.305638][ T5114] bridge_slave_1: entered allmulticast mode [ 72.312585][ T5114] bridge_slave_1: entered promiscuous mode [ 72.320362][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.327430][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.353463][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.373334][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.386180][ T5113] team0: Port device team_slave_0 added [ 72.395295][ T5113] team0: Port device team_slave_1 added [ 72.406052][ T5112] hsr_slave_0: entered promiscuous mode [ 72.412554][ T5112] hsr_slave_1: entered promiscuous mode [ 72.434803][ T5126] Bluetooth: hci1: command tx timeout [ 72.435054][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.488234][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.514259][ T5126] Bluetooth: hci2: command tx timeout [ 72.514280][ T53] Bluetooth: hci4: command tx timeout [ 72.514539][ T53] Bluetooth: hci0: command tx timeout [ 72.520095][ T5126] Bluetooth: hci3: command tx timeout [ 72.555076][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.562055][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.588100][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.602769][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.609845][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.636369][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.650195][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.721131][ T5115] hsr_slave_0: entered promiscuous mode [ 72.729071][ T5115] hsr_slave_1: entered promiscuous mode [ 72.735547][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.743482][ T5115] Cannot create hsr debugfs directory [ 72.753285][ T5128] team0: Port device team_slave_0 added [ 72.762433][ T5128] team0: Port device team_slave_1 added [ 72.806359][ T5114] team0: Port device team_slave_0 added [ 72.871558][ T5114] team0: Port device team_slave_1 added [ 72.892089][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.899157][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.925677][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.943623][ T5113] hsr_slave_0: entered promiscuous mode [ 72.950319][ T5113] hsr_slave_1: entered promiscuous mode [ 72.957623][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.965348][ T5113] Cannot create hsr debugfs directory [ 73.004825][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.011788][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.038546][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.139088][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.146419][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.173038][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.187085][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.194187][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.220712][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.324644][ T5128] hsr_slave_0: entered promiscuous mode [ 73.331084][ T5128] hsr_slave_1: entered promiscuous mode [ 73.338001][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.346056][ T5128] Cannot create hsr debugfs directory [ 73.436424][ T5114] hsr_slave_0: entered promiscuous mode [ 73.443003][ T5114] hsr_slave_1: entered promiscuous mode [ 73.449753][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.458017][ T5114] Cannot create hsr debugfs directory [ 73.652377][ T5112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.663755][ T5112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.680902][ T5112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.722231][ T5112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.830623][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.840856][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.871260][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.883141][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.942790][ T5113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.959877][ T5113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.971473][ T5113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.986030][ T5113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.083722][ T5128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.128284][ T5128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.161211][ T5128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.174883][ T5128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.197349][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.208277][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.219262][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.232883][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.370522][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.409167][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.448277][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.482045][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.489382][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.509855][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.525939][ T5126] Bluetooth: hci1: command tx timeout [ 74.568240][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.575416][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.590232][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.597387][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.604820][ T5126] Bluetooth: hci3: command tx timeout [ 74.610674][ T5124] Bluetooth: hci0: command tx timeout [ 74.611358][ T53] Bluetooth: hci2: command tx timeout [ 74.616583][ T5124] Bluetooth: hci4: command tx timeout [ 74.629792][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.636928][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.694188][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.753057][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.773171][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.816141][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.840937][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.848142][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.876192][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.901760][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.909001][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.961937][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.969170][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.992176][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.019617][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.026791][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.071796][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.079005][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.143728][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.150952][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.269290][ T5128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.360599][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.579330][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.722042][ T5112] veth0_vlan: entered promiscuous mode [ 75.749025][ T5112] veth1_vlan: entered promiscuous mode [ 75.855723][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.869887][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.910989][ T5112] veth0_macvtap: entered promiscuous mode [ 75.946780][ T5112] veth1_macvtap: entered promiscuous mode [ 76.000977][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.039458][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.078929][ T5128] veth0_vlan: entered promiscuous mode [ 76.091795][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.123730][ T5112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.134530][ T5112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.143249][ T5112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153413][ T5112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.172220][ T5113] veth0_vlan: entered promiscuous mode [ 76.183152][ T5128] veth1_vlan: entered promiscuous mode [ 76.212268][ T5115] veth0_vlan: entered promiscuous mode [ 76.258740][ T5113] veth1_vlan: entered promiscuous mode [ 76.269133][ T5115] veth1_vlan: entered promiscuous mode [ 76.353936][ T5114] veth0_vlan: entered promiscuous mode [ 76.393696][ T5115] veth0_macvtap: entered promiscuous mode [ 76.413753][ T5128] veth0_macvtap: entered promiscuous mode [ 76.421197][ T2413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.429302][ T5128] veth1_macvtap: entered promiscuous mode [ 76.448280][ T2413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.466005][ T5115] veth1_macvtap: entered promiscuous mode [ 76.476920][ T5113] veth0_macvtap: entered promiscuous mode [ 76.491261][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.509204][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.522141][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.542985][ T5114] veth1_vlan: entered promiscuous mode [ 76.568712][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.579537][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.591863][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.602524][ T5113] veth1_macvtap: entered promiscuous mode [ 76.616470][ T5124] Bluetooth: hci1: command tx timeout [ 76.638285][ T5128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.647317][ T5128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.656765][ T5128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.667605][ T5128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.676729][ T5126] Bluetooth: hci0: command tx timeout [ 76.676835][ T5124] Bluetooth: hci2: command tx timeout [ 76.691661][ T5126] Bluetooth: hci4: command tx timeout [ 76.691670][ T53] Bluetooth: hci3: command tx timeout [ 76.727345][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.742419][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.753090][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.764078][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.775719][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.785815][ T3295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.791929][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.793633][ T3295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.812045][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.822386][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.835800][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.847526][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.868996][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.880003][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.890917][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.901572][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.911500][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.923578][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.935948][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.966079][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.979655][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.990038][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.999322][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.022137][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.033723][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.045624][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.056465][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.066911][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.080022][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.091969][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.140697][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.158693][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.168607][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.187693][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.268125][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.289259][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.317208][ T5114] veth0_macvtap: entered promiscuous mode [ 77.378064][ T5114] veth1_macvtap: entered promiscuous mode [ 77.423281][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.434561][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.445092][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.455749][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.466158][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.477453][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.487780][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.498991][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.511074][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.531785][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.545735][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.556169][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.566712][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.576588][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.587351][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.597198][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.607760][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.619087][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.645125][ T2421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.660253][ T2421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.710478][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.723442][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745204][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.755246][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.767539][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.786996][ T2413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.812494][ T2413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.860483][ T3295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.893625][ T3295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.999338][ T2413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.034586][ T2413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.068190][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.100581][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.213309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.264931][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.274580][ T5215] x_tables: duplicate underflow at hook 4 [ 78.384542][ T2421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.431262][ T2421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.684852][ T5124] Bluetooth: hci1: command tx timeout [ 78.693212][ T5229] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 78.723722][ T5229] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 78.754133][ T5124] Bluetooth: hci3: command tx timeout [ 78.759582][ T5124] Bluetooth: hci2: command tx timeout [ 78.765636][ T5126] Bluetooth: hci4: command tx timeout [ 78.766580][ T53] Bluetooth: hci0: command tx timeout [ 78.885166][ T5239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.902277][ T5229] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 78.911636][ T5229] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 79.185943][ T5250] x_tables: duplicate underflow at hook 4 [ 79.715526][ T5275] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 80.139328][ T5294] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 80.710698][ T5320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.933274][ T5333] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.250952][ T5345] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 81.383388][ T5349] x_tables: duplicate underflow at hook 4 [ 81.772092][ T5371] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 82.065516][ T5383] x_tables: duplicate underflow at hook 4 [ 82.578597][ T5402] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 83.044120][ T29] audit: type=1804 audit(1718791894.692:2): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir759960015/syzkaller.UBtBrC/20/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 83.125911][ T5428] syz-executor.3[5428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.126064][ T5428] syz-executor.3[5428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.682982][ T5440] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 83.825843][ T5460] nftables ruleset with unbound chain [ 83.849529][ T5459] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 83.976248][ T5459] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 84.088211][ T29] audit: type=1804 audit(1718791895.742:3): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2720331373/syzkaller.NIDtfh/28/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 84.105130][ T5459] syz-executor.0 (5459) used greatest stack depth: 18608 bytes left [ 84.219602][ T5474] syz-executor.2[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.219763][ T5474] syz-executor.2[5474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.774766][ T5492] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.987565][ T5502] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 85.111753][ T5502] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 85.232399][ T5516] macvlan2: entered promiscuous mode [ 85.242255][ T5516] macvlan2: entered allmulticast mode [ 85.256781][ T5516] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 85.269717][ T5516] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 85.299242][ T5516] team0: Port device macvlan2 added [ 85.869022][ T5548] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 85.969245][ T5554] macvlan2: entered promiscuous mode [ 85.979776][ T5554] macvlan2: entered allmulticast mode [ 85.988448][ T5554] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 86.004538][ T5554] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 86.060656][ T5554] team0: Port device macvlan2 added [ 86.067596][ T5548] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 86.086994][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.326108][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.703873][ T5583] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.844913][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.922351][ T9] cfg80211: failed to load regulatory.db [ 86.988962][ T5593] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.573583][ T5614] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.203800][ T29] audit: type=1804 audit(1718791899.852:4): pid=5637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir759960015/syzkaller.UBtBrC/39/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 88.251543][ T5637] syz-executor.3[5637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.251711][ T5637] syz-executor.3[5637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.319542][ T5643] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.458082][ T29] audit: type=1804 audit(1718791901.102:5): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2720331373/syzkaller.NIDtfh/44/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 89.668937][ T5690] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.762823][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.005134][ T5703] delete_channel: no stack [ 90.462234][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.632110][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.860311][ T5740] delete_channel: no stack [ 91.102060][ T5746] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.119669][ T5746] bond0: option all_slaves_active: invalid value (2) [ 91.303611][ T5758] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 91.433943][ T5758] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 91.575407][ T5772] delete_channel: no stack [ 92.089999][ T5792] ip6gre1: entered allmulticast mode [ 92.349779][ T5805] delete_channel: no stack [ 92.366069][ T5806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.875972][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.100727][ T5834] ip6gre1: entered allmulticast mode [ 94.017268][ T5868] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 94.044894][ T5868] netlink: 12258 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.066853][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.953740][ T5918] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.964666][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.199632][ T5927] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 95.249049][ T5928] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 95.268490][ T5928] netlink: 12258 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.909371][ T5964] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 96.843477][ T6015] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 96.867048][ T6015] netlink: 12258 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.378958][ T6050] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.401591][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.419036][ T6049] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 97.833439][ T6078] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 97.842623][ T6080] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.864448][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.892034][ T6082] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 98.287473][ T6107] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.333474][ T6111] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 98.792266][ T6139] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 98.959219][ T6154] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.977583][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.157176][ T6164] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 99.167706][ T6164] netlink: 12258 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.533824][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.045831][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.602219][ T6246] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.492672][ T6349] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 103.049960][ T6373] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 103.080605][ T6373] __nla_validate_parse: 4 callbacks suppressed [ 103.080627][ T6373] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.336216][ T6389] xt_hashlimit: max too large, truncated to 1048576 [ 103.370077][ T6393] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.884522][ T29] audit: type=1804 audit(1718791915.542:6): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2720331373/syzkaller.NIDtfh/117/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 104.057126][ T6437] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.620552][ T6471] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 104.652098][ T6473] xt_hashlimit: max too large, truncated to 1048576 [ 105.065384][ T6499] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.113290][ T6502] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 105.653326][ T6535] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 105.744883][ T29] audit: type=1804 audit(1718791917.392:7): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2720331373/syzkaller.NIDtfh/132/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 106.587993][ T6576] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.152701][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.224937][ T6613] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.434875][ T6623] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 107.696036][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.733690][ T6640] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 107.794796][ T6642] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 108.084753][ T6652] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.250345][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.296874][ T6671] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 108.322313][ T6674] Driver unsupported XDP return value 0 on prog (id 179) dev N/A, expect packet loss! [ 108.400281][ T6677] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 108.725480][ T6693] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.825848][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.946546][ T6712] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.009848][ T6721] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.322098][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.510913][ T6752] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 109.565751][ T6759] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 110.125400][ T6793] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 110.185476][ T6801] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 111.189114][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.240037][ T6857] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.301021][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.758398][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.913104][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.035036][ T6899] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 112.485668][ T6912] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.319425][ T6952] __nla_validate_parse: 2 callbacks suppressed [ 113.319447][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.569008][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.218029][ T7022] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 115.455081][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.704477][ T7043] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 115.892180][ T7057] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 116.503193][ T7078] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 116.751157][ T7094] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 116.982953][ T7110] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 117.154157][ T7121] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 117.412181][ T7132] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 117.559378][ T7143] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 117.736704][ T7155] vlan2: entered promiscuous mode [ 117.753430][ T7155] ip6gretap0: entered promiscuous mode [ 117.774049][ T7155] vlan2: entered allmulticast mode [ 117.783571][ T7155] ip6gretap0: entered allmulticast mode [ 117.828669][ T7155] ip6gretap0: left allmulticast mode [ 117.834189][ T7155] ip6gretap0: left promiscuous mode [ 117.891459][ T7156] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 118.396180][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.768723][ T7221] vlan2: entered promiscuous mode [ 118.786744][ T7221] ip6gretap0: entered promiscuous mode [ 118.796944][ T7221] vlan2: entered allmulticast mode [ 118.813685][ T7221] ip6gretap0: entered allmulticast mode [ 118.843817][ T7221] ip6gretap0: left allmulticast mode [ 118.859843][ T7221] ip6gretap0: left promiscuous mode [ 119.277507][ T7244] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 119.389315][ T7251] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 119.560355][ T7260] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 119.590620][ T7260] batman_adv: batadv0: Adding interface: team0 [ 119.604912][ T7260] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.664788][ T7260] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 119.754801][ T7269] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 119.847822][ T7273] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 119.934742][ T7279] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 120.021808][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.053556][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.073084][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.141427][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.249012][ T7289] batman_adv: batadv1: Adding interface: netdevsim0 [ 120.264455][ T7289] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.297529][ T7289] batman_adv: batadv1: Interface activated: netdevsim0 [ 120.311687][ T7296] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 120.341888][ T7296] batman_adv: batadv0: Adding interface: team0 [ 120.374488][ T7296] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.454064][ T7296] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.494111][ T7309] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 120.749170][ T7323] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 120.892130][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.930222][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 120.972151][ T7332] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 120.983362][ T7332] batman_adv: batadv1: Removing interface: netdevsim0 [ 121.008657][ T7332] batman_adv: batadv2: Adding interface: netdevsim0 [ 121.020893][ T7332] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.073173][ T7332] batman_adv: batadv2: Interface activated: netdevsim0 [ 121.094989][ T7343] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 121.137921][ T7343] batman_adv: batadv0: Adding interface: team0 [ 121.184383][ T7343] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.255550][ T7343] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 121.437019][ T7359] batman_adv: batadv0: Adding interface: gretap1 [ 121.443615][ T7359] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.486624][ T7359] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 121.610113][ T7368] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 121.838042][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.035530][ T7389] batman_adv: batadv0: Adding interface: gretap1 [ 122.058555][ T7389] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.111321][ T7389] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 122.334937][ T7412] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 122.488716][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.507136][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.515514][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.546612][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.561340][ T7422] batman_adv: batadv1: Adding interface: netdevsim0 [ 122.568667][ T7422] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.607080][ T7422] batman_adv: batadv1: Interface activated: netdevsim0 [ 122.819982][ T7435] netlink: 'syz-executor.1': attribute type 64 has an invalid length. [ 122.832256][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.242137][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.289460][ T7456] batman_adv: batadv1: Adding interface: netdevsim0 [ 123.297865][ T7456] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.327777][ T7456] batman_adv: batadv1: Interface activated: netdevsim0 [ 123.427116][ T7466] batman_adv: batadv0: Adding interface: gretap2 [ 123.441679][ T7466] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.487734][ T7466] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 123.533095][ T7468] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 123.903126][ T53] Bluetooth: hci4: link tx timeout [ 123.923952][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.963480][ T7494] xt_NFQUEUE: number of queues (27721) out of range (got 91309) [ 123.975641][ T7495] __nla_validate_parse: 1 callbacks suppressed [ 123.975673][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.040759][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.080869][ T7496] batman_adv: batadv1: Adding interface: netdevsim0 [ 124.101585][ T7496] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.153130][ T7496] batman_adv: batadv1: Interface activated: netdevsim0 [ 124.591071][ T7516] wg2: entered promiscuous mode [ 124.603817][ T7516] wg2: entered allmulticast mode [ 124.714184][ T7487] delete_channel: no stack [ 125.274548][ T7534] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.414434][ T7536] atomic_op ffff88807de6a198 conn xmit_atomic 0000000000000000 [ 125.466555][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 125.482582][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 125.500565][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 125.518200][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 125.527630][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 125.536107][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.932767][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 125.955565][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 126.365340][ T7578] atomic_op ffff88806f92b998 conn xmit_atomic 0000000000000000 [ 126.365449][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.392246][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.414715][ T7540] bridge_slave_0: entered allmulticast mode [ 126.422367][ T7540] bridge_slave_0: entered promiscuous mode [ 126.432909][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.453464][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.466689][ T7540] bridge_slave_1: entered allmulticast mode [ 126.490870][ T7540] bridge_slave_1: entered promiscuous mode [ 126.604522][ T7588] Zero length message leads to an empty skb [ 126.667140][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.712982][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.860271][ T7540] team0: Port device team_slave_0 added [ 126.915680][ T7540] team0: Port device team_slave_1 added [ 126.959480][ T7607] atomic_op ffff88807bf76198 conn xmit_atomic 0000000000000000 [ 127.040744][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.066374][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.110688][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.144092][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.161492][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.219280][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.427054][ T7540] hsr_slave_0: entered promiscuous mode [ 127.446206][ T7540] hsr_slave_1: entered promiscuous mode [ 127.457328][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.472101][ T7540] Cannot create hsr debugfs directory [ 127.634266][ T5117] Bluetooth: hci1: command tx timeout [ 127.981153][ T7540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.161400][ T7540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.346153][ T7673] Bluetooth: MGMT ver 1.22 [ 128.390352][ T7679] delete_channel: no stack [ 128.453690][ T7540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.524596][ T7669] veth0_vlan: left promiscuous mode [ 128.644693][ T7682] tipc: Started in network mode [ 128.654139][ T7682] tipc: Node identity fe6c241dacc8, cluster identity 4711 [ 128.675692][ T7682] tipc: Enabled bearer , priority 0 [ 128.704897][ T7540] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 128.810643][ T7540] batman_adv: batadv1: Removing interface: netdevsim0 [ 128.845318][ T7540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.875218][ T7678] €Â: renamed from syzkaller0 [ 128.893631][ T7678] tipc: Disabling bearer [ 128.987499][ T7699] ip6_vti0: entered allmulticast mode [ 129.004045][ T7699] ip6_vti0: left allmulticast mode [ 129.136327][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.202436][ T7540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.224668][ T7540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.262659][ T7540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.295123][ T7540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.515835][ T7728] tipc: Enabled bearer , priority 0 [ 129.526966][ T7728] €Â: renamed from syzkaller0 [ 129.547579][ T7728] tipc: Disabling bearer [ 129.573657][ T7733] ip6_vti0: entered allmulticast mode [ 129.604413][ T7733] ip6_vti0: left allmulticast mode [ 129.670224][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.721842][ T5117] Bluetooth: hci1: command tx timeout [ 129.752382][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.796462][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.803765][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.826777][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.834060][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.851175][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.956737][ T7540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.087585][ T29] audit: type=1800 audit(1718791941.742:8): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 130.151088][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.171006][ T29] audit: type=1804 audit(1718791941.782:9): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1931859057/syzkaller.XEXazT/219/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 130.268362][ T29] audit: type=1804 audit(1718791941.802:10): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1931859057/syzkaller.XEXazT/219/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 130.354564][ T7540] veth0_vlan: entered promiscuous mode [ 130.378989][ T7745] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 130.505094][ T7540] veth1_vlan: entered promiscuous mode [ 130.729366][ T7540] veth0_macvtap: entered promiscuous mode [ 130.768419][ T7540] veth1_macvtap: entered promiscuous mode [ 130.861140][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.888119][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.901315][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.913303][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.934444][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.949703][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.983367][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.006584][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.025358][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.064020][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.094771][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.127326][ T7767] ip6_vti0: entered allmulticast mode [ 131.150070][ T7767] ip6_vti0: left allmulticast mode [ 131.177222][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.202325][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.213418][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.227845][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.238674][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.250332][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.261154][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.286232][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.315831][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.347969][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.366304][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.420382][ T7540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.455126][ T7540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.489169][ T7540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.511786][ T7540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.733305][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.744509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.794163][ T5117] Bluetooth: hci1: command tx timeout [ 131.857756][ T2413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.867432][ T2413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.935862][ T7803] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.973779][ T29] audit: type=1800 audit(1718791943.622:11): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 132.035070][ T29] audit: type=1804 audit(1718791943.652:12): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2563621644/syzkaller.xcoIym/220/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 132.111692][ T29] audit: type=1804 audit(1718791943.662:13): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2563621644/syzkaller.xcoIym/220/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 132.164413][ T7815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.228788][ T7820] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 132.405842][ T7832] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.651187][ T7850] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.001762][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.010237][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.452845][ T7891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.693708][ T7900] ipvlan2: entered promiscuous mode [ 133.706468][ T7900] ipvlan2: entered allmulticast mode [ 133.711908][ T7900] bridge0: entered allmulticast mode [ 133.876085][ T5117] Bluetooth: hci1: command tx timeout [ 134.193156][ T7925] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 135.024752][ T7961] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.464578][ T7972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.601429][ T7959] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.908590][ T7984] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.096707][ T7998] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.188326][ T8004] tipc: Failed to remove unknown binding: 66,1,1/0:296384575/296384577 [ 137.222017][ T8004] tipc: Failed to remove unknown binding: 66,1,1/0:296384575/296384577 [ 137.461039][ T8019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.592362][ T8022] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.168276][ T8042] tipc: Failed to remove unknown binding: 66,1,1/0:2707021183/2707021185 [ 138.190261][ T8042] tipc: Failed to remove unknown binding: 66,1,1/0:2707021183/2707021185 [ 138.401640][ T8050] ipvlan2: entered promiscuous mode [ 138.442549][ T8050] ipvlan2: entered allmulticast mode [ 138.468937][ T8050] bridge0: entered allmulticast mode [ 138.892705][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.923589][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.931856][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.941509][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.950709][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.958538][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.008797][ T8074] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.018402][ T8074] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.185081][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.322427][ T8085] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 139.404690][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.655500][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.696839][ T8094] ipvlan2: entered promiscuous mode [ 139.713497][ T8094] ipvlan2: entered allmulticast mode [ 139.729599][ T8094] ip6gretap0: entered allmulticast mode [ 139.901121][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.397871][ T12] bridge_slave_1: left allmulticast mode [ 140.407853][ T12] bridge_slave_1: left promiscuous mode [ 140.435534][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.472464][ T12] bridge_slave_0: left allmulticast mode [ 140.495634][ T12] bridge_slave_0: left promiscuous mode [ 140.514315][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.995087][ T5117] Bluetooth: hci1: command tx timeout [ 141.372176][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.400403][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.427679][ T12] bond0 (unregistering): Released all slaves [ 142.067073][ T8067] chnl_net:caif_netlink_parms(): no params data found [ 142.247813][ T12] hsr_slave_0: left promiscuous mode [ 142.288077][ T12] hsr_slave_1: left promiscuous mode [ 142.333135][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.354825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.376434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.403627][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.489111][ T12] veth1_macvtap: left promiscuous mode [ 142.506243][ T12] veth0_macvtap: left promiscuous mode [ 142.515985][ T12] veth1_vlan: left promiscuous mode [ 142.529072][ T12] veth0_vlan: left promiscuous mode [ 143.074436][ T53] Bluetooth: hci1: command tx timeout [ 143.551620][ T12] team0 (unregistering): Port device team_slave_1 removed [ 143.603773][ T12] team0 (unregistering): Port device team_slave_0 removed [ 144.060057][ T8176] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 144.214372][ T8067] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.223734][ T8195] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.233219][ T8067] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.233439][ T8067] bridge_slave_0: entered allmulticast mode [ 144.235434][ T8067] bridge_slave_0: entered promiscuous mode [ 144.278240][ T8067] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.304050][ T8067] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.327779][ T8067] bridge_slave_1: entered allmulticast mode [ 144.356157][ T8067] bridge_slave_1: entered promiscuous mode [ 144.502600][ T8067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.537322][ T8067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.807651][ T8067] team0: Port device team_slave_0 added [ 144.842301][ T8067] team0: Port device team_slave_1 added [ 144.978243][ T8229] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.064841][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.093998][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.131350][ T8235] x_tables: duplicate underflow at hook 3 [ 145.158991][ T53] Bluetooth: hci1: command 0x040f tx timeout [ 145.164103][ T8067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.215424][ T8067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.222439][ T8067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.268172][ T8067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.285709][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.352566][ T8244] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 145.412836][ T8067] hsr_slave_0: entered promiscuous mode [ 145.424683][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.444832][ T8067] hsr_slave_1: entered promiscuous mode [ 145.451876][ T8067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.504185][ T8067] Cannot create hsr debugfs directory [ 145.911270][ T8275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 146.021492][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.033518][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.499283][ T8067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.522470][ T8067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.549650][ T8067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.571601][ T8067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.592868][ T8305] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 146.687243][ T8309] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 146.734139][ T8309] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 146.938249][ T8319] x_tables: duplicate underflow at hook 3 [ 146.953481][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.056599][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.113162][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.120385][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.165795][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.172970][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.238646][ T53] Bluetooth: hci1: command 0x040f tx timeout [ 147.246889][ T8337] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 147.321107][ T8067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.406305][ T8343] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 147.424342][ T8343] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 147.472893][ T8348] batman_adv: batadv0: Adding interface: gretap1 [ 147.503985][ T8348] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 147.705348][ T8363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.751543][ T8363] ipvlan2: entered promiscuous mode [ 147.785770][ T8363] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.910057][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.956629][ T8067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.034989][ T8382] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 148.064776][ T8382] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 148.193495][ T8067] veth0_vlan: entered promiscuous mode [ 148.235890][ T8067] veth1_vlan: entered promiscuous mode [ 148.328061][ T8067] veth0_macvtap: entered promiscuous mode [ 148.358844][ T8067] veth1_macvtap: entered promiscuous mode [ 148.429202][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.440325][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.454971][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.465819][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.476092][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.487273][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.499521][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.527669][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.541796][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.552909][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.565671][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.593555][ T8405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.601917][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.642880][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.683998][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.703638][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.718991][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.750237][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.770514][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.786971][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.798660][ T8067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.809237][ T8067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.821778][ T8067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.855188][ T8405] ipvlan2: entered promiscuous mode [ 148.863341][ T8405] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.884124][ T8067] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.934035][ T8067] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.942786][ T8067] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.974056][ T8067] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.181814][ T8427] batman_adv: batadv0: Adding interface: gretap1 [ 149.214541][ T8427] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.254484][ T8427] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 149.283257][ T958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.305355][ T958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.314718][ T5117] Bluetooth: hci1: command 0x040f tx timeout [ 149.418782][ T2413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.444399][ T2413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.529263][ T8441] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 149.551968][ T8441] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 149.587883][ T8446] tipc: Failed to remove unknown binding: 66,1,1/0:3068111274/3068111276 [ 149.608041][ T8446] tipc: Failed to remove unknown binding: 66,1,1/0:3068111274/3068111276 [ 149.630893][ T8442] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.974449][ T8468] Bluetooth: hci3: unsupported parameter 64512 [ 149.981233][ T8468] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 150.093322][ T8479] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.114713][ T8479] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.130690][ T8482] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.568570][ T8509] Bluetooth: hci3: unsupported parameter 64512 [ 150.581274][ T8509] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 150.675151][ T8515] batman_adv: batadv0: Adding interface: gretap1 [ 150.697950][ T8515] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 150.758691][ T8518] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.787221][ T8520] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 150.944022][ T29] audit: type=1800 audit(1718791962.592:14): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 151.183626][ T8546] Bluetooth: hci3: unsupported parameter 64512 [ 151.210919][ T8548] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 151.224112][ T8546] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 151.274453][ T8547] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 151.301218][ T8547] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 151.364191][ T8554] netlink: 'syz-executor.1': attribute type 24 has an invalid length. [ 151.394373][ T5117] Bluetooth: hci1: command 0x040f tx timeout [ 151.431219][ T29] audit: type=1800 audit(1718791963.082:15): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1942 res=0 errno=0 [ 151.458662][ T8558] tipc: Failed to remove unknown binding: 66,1,1/0:3932170237/3932170239 [ 151.522936][ T8565] tipc: Failed to remove unknown binding: 66,1,1/0:3932170237/3932170239 [ 151.658609][ T8570] pim6reg: entered allmulticast mode [ 152.015234][ T8596] tipc: Failed to remove unknown binding: 66,1,1/0:151685887/151685889 [ 152.025028][ T8596] tipc: Failed to remove unknown binding: 66,1,1/0:151685887/151685889 [ 152.484244][ T8628] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FP]L3 index 0 [ 152.936604][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.792443][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.439001][ T8714] Bluetooth: MGMT ver 1.22 [ 155.023021][ T8732] syzkaller0: entered promiscuous mode [ 155.042304][ T8732] syzkaller0: entered allmulticast mode [ 155.390464][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.890907][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.417747][ T8753] pim6reg: entered allmulticast mode [ 157.423720][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.661905][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.937274][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.064558][ T8824] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 158.076253][ T8824] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 158.103037][ T8824] batman_adv: batadv1: Removing interface: netdevsim0 [ 158.130155][ T8824] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 158.223051][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.250367][ T8829] vlan3: entered promiscuous mode [ 158.256106][ T8829] bond0: entered promiscuous mode [ 158.261165][ T8829] bond_slave_0: entered promiscuous mode [ 158.281851][ T8829] bond_slave_1: entered promiscuous mode [ 158.312288][ T8829] bond0: left promiscuous mode [ 158.325823][ T8829] bond_slave_0: left promiscuous mode [ 158.345809][ T8829] bond_slave_1: left promiscuous mode [ 158.687312][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.065342][ T8869] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.240201][ T8880] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.321396][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.663316][ T8956] __nla_validate_parse: 4 callbacks suppressed [ 160.663336][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.844256][ T8962] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 161.422882][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.453465][ T8980] vlan2: entered promiscuous mode [ 161.460990][ T8980] bond0: entered promiscuous mode [ 161.469698][ T8980] bond_slave_0: entered promiscuous mode [ 161.483086][ T8985] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 161.495212][ T8980] bond_slave_1: entered promiscuous mode [ 161.522655][ T8980] bond0: left promiscuous mode [ 161.529951][ T8980] bond_slave_0: left promiscuous mode [ 161.535609][ T8980] bond_slave_1: left promiscuous mode [ 161.574275][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.585060][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.620498][ T8985] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 162.074576][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.437154][ T9037] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 162.461551][ T9037] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.477122][ T9037] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 162.607445][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.742743][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.809835][ T9060] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 162.818138][ T9063] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 162.943378][ T9069] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 163.136888][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.341769][ T9092] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 163.455227][ T9097] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 163.542306][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.578459][ T9103] vlan2: entered promiscuous mode [ 163.607459][ T9103] bond0: entered promiscuous mode [ 163.612549][ T9103] bond_slave_0: entered promiscuous mode [ 163.678065][ T9103] bond_slave_1: entered promiscuous mode [ 163.707924][ T9103] bond0: left promiscuous mode [ 163.729006][ T9103] bond_slave_0: left promiscuous mode [ 163.743777][ T9103] bond_slave_1: left promiscuous mode [ 163.757692][ T9113] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 163.805451][ T9113] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 163.985982][ T9128] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 164.058574][ T9131] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 164.416345][ T9150] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 165.101634][ T9179] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 165.104186][ T9177] vlan2: entered promiscuous mode [ 165.122696][ T9179] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 165.163903][ T9177] bond0: entered promiscuous mode [ 165.169059][ T9177] bond_slave_0: entered promiscuous mode [ 165.231729][ T9184] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 165.245818][ T9177] bond_slave_1: entered promiscuous mode [ 165.282943][ T9177] bond0: left promiscuous mode [ 165.344684][ T9177] bond_slave_0: left promiscuous mode [ 165.364593][ T9177] bond_slave_1: left promiscuous mode [ 166.291964][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.304212][ T9285] validate_nla: 5 callbacks suppressed [ 173.304232][ T9285] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 173.634845][ T9301] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 174.614883][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.628437][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.636359][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.651000][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.659494][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 174.669109][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.748412][ T9345] __nla_validate_parse: 3 callbacks suppressed [ 174.748432][ T9345] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.764408][ T9345] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 174.878789][ T958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.075294][ T958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.209683][ T9370] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 175.271928][ T958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.348821][ T9372] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 175.375033][ T9372] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 175.413812][ T9372] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 175.425798][ T9376] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.429843][ T9372] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 175.453187][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.458719][ T9376] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 175.530648][ T958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.851713][ T9334] chnl_net:caif_netlink_parms(): no params data found [ 176.038683][ T958] bridge_slave_1: left allmulticast mode [ 176.081123][ T958] bridge_slave_1: left promiscuous mode [ 176.086212][ T9405] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 176.107241][ T958] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.143080][ T958] bridge_slave_0: left promiscuous mode [ 176.167862][ T958] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.237001][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.430847][ T958] batman_adv: batadv0: Removing interface: gretap1 [ 176.754679][ T5117] Bluetooth: hci4: command tx timeout [ 176.825493][ T958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.840182][ T958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.852098][ T958] bond0 (unregistering): Released all slaves [ 177.025375][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.035204][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.042477][ T9334] bridge_slave_0: entered allmulticast mode [ 177.054751][ T9334] bridge_slave_0: entered promiscuous mode [ 177.067422][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.076017][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.098380][ T9334] bridge_slave_1: entered allmulticast mode [ 177.108969][ T9334] bridge_slave_1: entered promiscuous mode [ 177.231942][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.294209][ T9435] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 177.390308][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.396544][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.425295][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.439881][ T9446] ipvlan2: entered promiscuous mode [ 177.458931][ T9446] ipvlan2: entered allmulticast mode [ 177.475728][ T9446] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 177.740101][ T958] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode [ 177.814790][ T958] team0: Port device macvlan2 removed [ 177.894841][ T9334] team0: Port device team_slave_0 added [ 177.918790][ T9334] team0: Port device team_slave_1 added [ 178.092357][ T958] hsr_slave_0: left promiscuous mode [ 178.108720][ T958] hsr_slave_1: left promiscuous mode [ 178.125262][ T958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.142940][ T958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.164385][ T958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.174634][ T958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.201420][ T958] veth1_macvtap: left promiscuous mode [ 178.208900][ T958] veth0_macvtap: left promiscuous mode [ 178.215318][ T958] veth1_vlan: left promiscuous mode [ 178.220855][ T958] veth0_vlan: left promiscuous mode [ 178.387761][ T958] pim6reg (unregistering): left allmulticast mode [ 178.746573][ T958] team0 (unregistering): Port device team_slave_1 removed [ 178.798860][ T958] team0 (unregistering): Port device team_slave_0 removed [ 178.844203][ T5117] Bluetooth: hci4: command tx timeout [ 179.196825][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.205406][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.232478][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.282800][ T9482] ipvlan3: entered promiscuous mode [ 179.304301][ T9482] ipvlan3: entered allmulticast mode [ 179.319946][ T9482] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 179.414266][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.443936][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.492709][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.521853][ T9493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.769704][ T9334] hsr_slave_0: entered promiscuous mode [ 179.792087][ T9334] hsr_slave_1: entered promiscuous mode [ 179.806221][ T9334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.825326][ T9334] Cannot create hsr debugfs directory [ 180.062752][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.079425][ T9520] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.692575][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.922527][ T5117] Bluetooth: hci4: command tx timeout [ 181.210134][ T9575] xt_NFQUEUE: number of total queues is 0 [ 182.994162][ T5117] Bluetooth: hci4: command tx timeout [ 185.074473][ T5117] Bluetooth: hci4: command tx timeout [ 194.442305][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448794][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.518711][ T5126] Bluetooth: hci0: command 0x0406 tx timeout [ 196.526645][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 196.533645][ T5131] Bluetooth: hci2: command 0x0406 tx timeout [ 211.428521][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.437699][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.445562][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.454417][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.462492][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.473602][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.655234][ T5131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.674366][ T5131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.682119][ T5126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.691606][ T5126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.700857][ T5126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.709791][ T5131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.718759][ T5126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.726637][ T5126] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.727785][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.741842][ T5131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.749467][ T5131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.754442][ T5126] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.075306][ T5131] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 212.086527][ T5131] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 212.094608][ T5131] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 212.103732][ T5131] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 212.111997][ T5131] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 212.119656][ T5131] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 213.555104][ T5131] Bluetooth: hci5: command tx timeout [ 213.794244][ T5131] Bluetooth: hci7: command tx timeout [ 213.794274][ T53] Bluetooth: hci6: command tx timeout [ 214.194232][ T5131] Bluetooth: hci8: command tx timeout [ 215.633940][ T5131] Bluetooth: hci5: command tx timeout [ 215.874289][ T5131] Bluetooth: hci6: command tx timeout [ 215.884030][ T5131] Bluetooth: hci7: command tx timeout [ 216.274039][ T5131] Bluetooth: hci8: command tx timeout [ 217.724151][ T5131] Bluetooth: hci5: command tx timeout [ 217.954118][ T53] Bluetooth: hci6: command tx timeout [ 217.959679][ T5131] Bluetooth: hci7: command tx timeout [ 218.354087][ T5131] Bluetooth: hci8: command tx timeout [ 219.794023][ T5131] Bluetooth: hci5: command tx timeout [ 220.037505][ T53] Bluetooth: hci7: command tx timeout [ 220.037516][ T5124] Bluetooth: hci6: command tx timeout [ 220.435184][ T53] Bluetooth: hci8: command tx timeout [ 239.270623][ T5131] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 239.286087][ T5131] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 239.294163][ T5131] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 239.302629][ T5131] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 239.312690][ T5131] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 239.320638][ T5131] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 241.394414][ T53] Bluetooth: hci9: command tx timeout [ 243.474252][ T53] Bluetooth: hci9: command tx timeout [ 245.554051][ T53] Bluetooth: hci9: command tx timeout [ 247.634137][ T53] Bluetooth: hci9: command tx timeout [ 255.887232][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893631][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.408824][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 276.418692][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 276.427060][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 276.443310][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 276.465280][ T5131] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 276.472780][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 276.709454][ T5131] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 276.724712][ T5131] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 276.732970][ T5131] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 276.745648][ T5131] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 276.753468][ T5131] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 276.761737][ T5131] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 276.815506][ T5131] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 276.825200][ T5131] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 276.834315][ T5131] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 276.845629][ T5131] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 276.856774][ T5131] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 276.874219][ T5131] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 277.193493][ T5131] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 277.203402][ T5131] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 277.214516][ T5131] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 277.225729][ T5131] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 277.233509][ T5131] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 277.242445][ T5131] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 278.514350][ T53] Bluetooth: hci10: command tx timeout [ 278.844628][ T53] Bluetooth: hci11: command tx timeout [ 278.914357][ T53] Bluetooth: hci12: command tx timeout [ 279.324212][ T53] Bluetooth: hci13: command tx timeout [ 280.594066][ T53] Bluetooth: hci10: command tx timeout [ 280.914047][ T53] Bluetooth: hci11: command tx timeout [ 280.994388][ T53] Bluetooth: hci12: command tx timeout [ 281.394119][ T53] Bluetooth: hci13: command tx timeout [ 282.676560][ T53] Bluetooth: hci10: command tx timeout [ 282.995103][ T53] Bluetooth: hci11: command tx timeout [ 283.074227][ T53] Bluetooth: hci12: command tx timeout [ 283.474133][ T53] Bluetooth: hci13: command tx timeout [ 284.757374][ T53] Bluetooth: hci10: command tx timeout [ 285.084109][ T53] Bluetooth: hci11: command tx timeout [ 285.154000][ T53] Bluetooth: hci12: command tx timeout [ 285.554265][ T53] Bluetooth: hci13: command tx timeout [ 298.913921][ T5131] Bluetooth: hci1: command 0x040f tx timeout [ 304.037702][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 304.314246][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 304.324178][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 304.332317][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 304.340933][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 304.350095][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 304.357786][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 306.434356][ T53] Bluetooth: hci14: command tx timeout [ 308.519231][ T53] Bluetooth: hci14: command tx timeout [ 310.594145][ T53] Bluetooth: hci14: command tx timeout [ 312.673941][ T53] Bluetooth: hci14: command tx timeout [ 317.321586][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.328304][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.964614][ T30] INFO: task syz-executor.2:9334 blocked for more than 143 seconds. [ 333.972637][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 333.993910][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.002654][ T30] task:syz-executor.2 state:D stack:21024 pid:9334 tgid:9334 ppid:1 flags:0x00004006 2024/06/19 10:15:45 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 334.013983][ T30] Call Trace: [ 334.034118][ T30] [ 334.037102][ T30] __schedule+0x17e8/0x4a20 [ 334.041701][ T30] ? __pfx___schedule+0x10/0x10 [ 334.054278][ T30] ? __pfx_lock_release+0x10/0x10 [ 334.060154][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 334.067347][ T30] ? schedule+0x90/0x320 [ 334.071639][ T30] schedule+0x14b/0x320 [ 334.084336][ T30] schedule_preempt_disabled+0x13/0x30 [ 334.089854][ T30] __mutex_lock+0x6a4/0xd70 [ 334.104241][ T30] ? __mutex_lock+0x527/0xd70 [ 334.108981][ T30] ? nsim_create+0x408/0x890 [ 334.113604][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 334.134899][ T30] ? kmemdup_noprof+0x45/0x60 [ 334.139643][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 334.153930][ T30] nsim_create+0x408/0x890 [ 334.159088][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 334.194237][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 334.199453][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 334.214017][ T30] ? queue_delayed_work_on+0x267/0x390 [ 334.219563][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 334.245012][ T30] ? init_timer_key+0x197/0x310 [ 334.249940][ T30] nsim_dev_port_add_all+0x33/0xf0 [ 334.262555][ T30] nsim_drv_probe+0x85f/0xb80 [ 334.273832][ T30] ? __pfx_nsim_drv_probe+0x10/0x10 [ 334.279077][ T30] ? kernfs_create_link+0x187/0x1f0 [ 334.293847][ T30] ? sysfs_do_create_link_sd+0xdd/0x110 [ 334.299465][ T30] ? driver_sysfs_add+0x1de/0x1f0 [ 334.313894][ T30] ? really_probe+0x147/0xad0 [ 334.318614][ T30] ? __pfx_nsim_bus_probe+0x10/0x10 [ 334.333833][ T30] really_probe+0x2b8/0xad0 [ 334.338390][ T30] __driver_probe_device+0x1a2/0x390 [ 334.343707][ T30] driver_probe_device+0x50/0x430 [ 334.366047][ T30] __device_attach_driver+0x2d6/0x530 [ 334.371503][ T30] bus_for_each_drv+0x24e/0x2e0 [ 334.394002][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 334.400003][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 334.413865][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 334.418972][ T30] __device_attach+0x333/0x520 [ 334.433900][ T30] ? __pfx___device_attach+0x10/0x10 [ 334.439277][ T30] bus_probe_device+0x189/0x260 [ 334.453857][ T30] device_add+0x856/0xbf0 [ 334.458269][ T30] new_device_store+0x3f3/0x890 [ 334.463161][ T30] ? kernfs_fop_write_iter+0x1eb/0x500 [ 334.494008][ T30] ? __pfx_new_device_store+0x10/0x10 [ 334.499469][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 334.513839][ T30] ? bus_attr_store+0x4f/0xa0 [ 334.518585][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 334.534968][ T30] kernfs_fop_write_iter+0x3a1/0x500 [ 334.540328][ T30] vfs_write+0xa72/0xc90