last executing test programs: 44.732614091s ago: executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000002600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r0, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xd6, @media='eth\x00'}}}}, 0x68}}, 0x0) 44.598756582s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2}, 0x10) 44.440141786s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 31.933319513s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 19.124086833s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 6.769418956s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 2.562215609s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000ac0)='rpm_return_int\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 2.025692193s ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) 2.023959782s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) 1.926899532s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 1.679961502s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, r0, 0x2f, 0x0, 0x0, @link_id=0xffffffffffffffff}, 0x20) 1.613454597s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{}, {}, @device_a, @broadcast, @random="ce85c5d93e51"}, 0x0, @void}}]}, 0x3c}}, 0x0) 1.565491213s ago: executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.530956053s ago: executing program 2: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf4, 0x2, 0x0, 0x5, 0x1ff, 0x7f}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@loopback}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10]) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x4, &(0x7f00000016c0)=""/4096, &(0x7f0000000140)=0x1000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003100000005003500000000000500330000040000050036000000000008000200", @ANYRES32=r7], 0x34}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) 1.372781751s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="180200000000000100000000000000008500000020000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4a, 0x0, &(0x7f0000001480)="e0b9547ed387dbc391e4e4cd8b77585260683b812389adfb63f361521d68e2618f5a94ff8b9c64d631617a173bab63b44f8f44d4c3263ada455d4111ad219f2af11e3660ac70c1504300", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/39, 0x27}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2}}], 0x1, 0x1, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000110029080d8ddd8dd8d6fa0007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000500)=""/60, &(0x7f0000000540)=0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007112450000000000950000074a7f934ae2e43f9ecb46dce4838bbc00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x80) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, &(0x7f0000001400)={0xffffffffffffffff, 0x1, 0x80, r5, 0x3}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r8) 1.215494228s ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 1.037728194s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x4c}}, 0x0) 963.968139ms ago: executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="dd", 0x1}], 0x1, &(0x7f0000000b40)=ANY=[], 0x1b8}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000200)="f9", 0x7fd8}, {0x0, 0x54}], 0x2}, 0x0) 958.353803ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 945.664556ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5452, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, &(0x7f0000000800), 0x0, 0x0, 0x1, 0x2}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x5}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000a80)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x2, &(0x7f00000002c0)=@raw=[@ldst={0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, @generic={0x80, 0x9, 0xc, 0x0, 0x7}], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000b00)=[r1, r1, r1, r1, r3, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x4, 0x3}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r7, 0x0, 0xfffffffffffffffc}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 849.059299ms ago: executing program 0: r0 = socket$kcm(0x2, 0x0, 0x2) r1 = socket(0x15, 0x5, 0x0) bind$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4], 0x48}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r8, 0x601, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0', [{0x20, 'mode\x00'}], 0xa, "7529177d0dbb629a97b09df8fc6ed9acb23a04d70f89cb5c7f57258cebb3fb0b254109189326fe4b52fa933de120096e122dec7acdf0d82712f069b8ad4e924f38029ca69ae460e54ba3cee73ae8fb1f8d30fb5937415145b39bd272a21ca33d25d87db2e7316f1b1f7d85e506a53973c60c2517a7f5259b97e10967"}, 0x8d) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000180)=0x4011, 0x4) sendmsg$inet(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)}], 0x1}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80001) 801.430253ms ago: executing program 1: bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) 715.371084ms ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000740)="fb", 0x1}], 0x5) 645.26165ms ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 568.078058ms ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) bind$alg(r6, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg(r7, &(0x7f00000001c0), 0x0, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000300)=""/251, 0xfb}], 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={0x0, 0x80000001, 0x7}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000cc0)={0x0, 0xfffffffffffffff7, 0x2ef1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000010c0)={0x0, 0x4, {0x3, @usage=0x3d7, 0x0, 0xd859, 0xfff, 0x5, 0x3, 0x4, 0x40, @struct={0x7, 0xffffa87e}, 0x27, 0x2, [0x0, 0x9, 0xdb, 0x3, 0x401, 0x8]}, {0x94a, @usage=0x100000001, 0x0, 0x7, 0xffffffffffffffff, 0x6, 0xffffffff, 0xf837, 0x449, @struct={0x0, 0x3}, 0x6, 0x8, [0x5, 0x0, 0x2, 0xffff, 0x8d, 0x7f]}, {0x4, @struct={0x1, 0x1f}, 0x0, 0x2, 0x7, 0xfffffffffffff001, 0xffffffffffffffff, 0xffffffff, 0x424, @usage=0x915b, 0x9, 0x7, [0x8000, 0x9, 0x400000000000000, 0x2, 0x2, 0xffffffffffffffff]}, {0xfffffffffffff5ea, 0x7, 0x10000}}) 307.602648ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28179f09943b1b0452d1b72183aacf4a84f9130b701b81675dd4e9e3070756f97ad791fa99dac06c37479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fd80f553876acb45821d0c48fb657c29b309c73f0977e7cde65a89d9458aac2795b2b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d2665016ac59dd20fde0745db06753a7ac7fe13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2084bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a3894696082417304fff0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bdb539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572ac45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af00200f900cd1d0000002000000001c800000000000000000048cea769470424d28804c024ab81921f01280b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee78ebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408816eae08cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb7819441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005391577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e710d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd129db069364c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d4ac534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f0300000000000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321e10b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fde46ad265983eb1b1c6adb1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f617396c18cc7130000fc000000210000006e00002000000000000027c9a46157a3ffff6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4472b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd000000000072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2b3a113e47edf76f7d116d2b0976cf2ec447c0309316d1dd315003b7a6a543340715f99e99ec4b227eda2e63a1c31a2c2bd48a80500e92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949c68b7a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273061fc5c0e0a33db7f2d43ea8086cf059f40fa2645944cd9e7f2e6ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858e13e8f0ba9d1dec469dc71e998d99ebf7cfda638d7ce859acfec3f14ec2aa98b53cd68a0d99d62a5620b7c0f61dc386c449664a94bca09859a35760b7b818087347697c239990daec8384a12d973d5470efe5dae887be689c6b1551f4c5a649d9dc563d7049c91453facecbee789a1d5a4896b2b7bec3ec5e60c4916e5561888502a12f4985f9c7dab41cbf31c26cd12d5116de95b521a57408adbbac278be82fef3f9d8a51385b376b57810be83e7b27460729a626250ccd8d82eba588f86195e15119eca569bebba8514e5bfcbe51f1a628793b4ed4424c95a731628fa38e167b79affcd50b561d3a9cb4bea872d9e5a06a4201fd09eecfe283854837a65ecf8cd6cdaad4bf223db323de9d4854d66d324a0d125e3ebe2ed3c78e47392962860de6bb86759406e74335443407d9ee7d4a4430b60b6ef369604e127391dcd8b6fe95d882b0c1aa8d4b18e8db32a0eeaaabc7f7b5c49bd88cfe860f69f5510179d867970f975169591908282cd4367f82e62e3fa37876f30934c23dc2d02a0c25839f008ec099503c8d1b3169aa9c5a7db7f0116d203ac6503596c3a5b063c28f84c9eb42"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 250.565872ms ago: executing program 4: ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x200000}, 0x5}}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={r3, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 179.171856ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x0, 0x13ff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x6c}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002700)={&(0x7f00000026c0)={0x14, 0x0, 0x325}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r2) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x31b, 0x7}, 0x14}}, 0x0) 113.421794ms ago: executing program 4: syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf4, 0x2, 0x0, 0x5, 0x1ff, 0x7f}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@loopback}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10]) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x4, &(0x7f00000016c0)=""/4096, &(0x7f0000000140)=0x1000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003100000005003500000000000500330000040000050036000000000008000200", @ANYRES32=r7], 0x34}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) 0s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. 2024/06/20 11:02:36 fuzzer started 2024/06/20 11:02:36 dialing manager at 10.128.0.169:30016 [ 69.827639][ T5089] cgroup: Unknown subsys name 'net' [ 70.035697][ T5089] cgroup: Unknown subsys name 'rlimit' 2024/06/20 11:02:38 starting 5 executor processes [ 71.449039][ T5096] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.463113][ T5096] syz-executor (5096) used greatest stack depth: 18872 bytes left [ 71.801307][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.807920][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.223100][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.244666][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.253242][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.261259][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.269281][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.277801][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.287119][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.294900][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.295488][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.303428][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.311056][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.316476][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.324341][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.331046][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.338061][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.355183][ T4487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.363283][ T4487] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.371075][ T4487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.385737][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.403448][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.420692][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.440205][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.448011][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.451598][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.457169][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.470079][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.470924][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.479932][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.494555][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.502578][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.043708][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 73.084107][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 73.184785][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 73.257919][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 73.357429][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.365327][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.372787][ T5118] bridge_slave_0: entered allmulticast mode [ 73.379953][ T5118] bridge_slave_0: entered promiscuous mode [ 73.425280][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.438328][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.445777][ T5118] bridge_slave_1: entered allmulticast mode [ 73.453434][ T5118] bridge_slave_1: entered promiscuous mode [ 73.496891][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.504268][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.511710][ T5110] bridge_slave_0: entered allmulticast mode [ 73.518867][ T5110] bridge_slave_0: entered promiscuous mode [ 73.578239][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.585815][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.593552][ T5110] bridge_slave_1: entered allmulticast mode [ 73.600924][ T5110] bridge_slave_1: entered promiscuous mode [ 73.610845][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.633376][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 73.644941][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.653656][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.660855][ T5113] bridge_slave_0: entered allmulticast mode [ 73.668673][ T5113] bridge_slave_0: entered promiscuous mode [ 73.707323][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.747462][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.757916][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.766852][ T5113] bridge_slave_1: entered allmulticast mode [ 73.775121][ T5113] bridge_slave_1: entered promiscuous mode [ 73.805984][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.813380][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.820969][ T5123] bridge_slave_0: entered allmulticast mode [ 73.828025][ T5123] bridge_slave_0: entered promiscuous mode [ 73.858732][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.873038][ T5118] team0: Port device team_slave_0 added [ 73.896415][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.905842][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.913870][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.921217][ T5123] bridge_slave_1: entered allmulticast mode [ 73.928277][ T5123] bridge_slave_1: entered promiscuous mode [ 73.953470][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.977791][ T5118] team0: Port device team_slave_1 added [ 73.998135][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.045572][ T5110] team0: Port device team_slave_0 added [ 74.096763][ T5110] team0: Port device team_slave_1 added [ 74.117480][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.125040][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.151960][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.179819][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.193305][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.222049][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.229061][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.255835][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.272581][ T5113] team0: Port device team_slave_0 added [ 74.314279][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.321624][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.347916][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.371107][ T5113] team0: Port device team_slave_1 added [ 74.395179][ T5123] team0: Port device team_slave_0 added [ 74.401710][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.408939][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.416809][ T5121] bridge_slave_0: entered allmulticast mode [ 74.423412][ T5114] Bluetooth: hci0: command tx timeout [ 74.423433][ T5116] Bluetooth: hci2: command tx timeout [ 74.429190][ T5114] Bluetooth: hci1: command tx timeout [ 74.441661][ T5121] bridge_slave_0: entered promiscuous mode [ 74.449550][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.457093][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.483438][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.528361][ T5123] team0: Port device team_slave_1 added [ 74.547872][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.555582][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.563579][ T5121] bridge_slave_1: entered allmulticast mode [ 74.572074][ T5121] bridge_slave_1: entered promiscuous mode [ 74.580776][ T5114] Bluetooth: hci4: command tx timeout [ 74.580870][ T5116] Bluetooth: hci3: command tx timeout [ 74.617156][ T5118] hsr_slave_0: entered promiscuous mode [ 74.624203][ T5118] hsr_slave_1: entered promiscuous mode [ 74.701350][ T5110] hsr_slave_0: entered promiscuous mode [ 74.707850][ T5110] hsr_slave_1: entered promiscuous mode [ 74.715064][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.723101][ T5110] Cannot create hsr debugfs directory [ 74.729352][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.737205][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.765195][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.777906][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.785235][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.811370][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.825203][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.832369][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.858420][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.872681][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.886113][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.909215][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.916406][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.942843][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.989757][ T5121] team0: Port device team_slave_0 added [ 75.028668][ T5121] team0: Port device team_slave_1 added [ 75.193049][ T5113] hsr_slave_0: entered promiscuous mode [ 75.199504][ T5113] hsr_slave_1: entered promiscuous mode [ 75.206500][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.214570][ T5113] Cannot create hsr debugfs directory [ 75.238567][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.245637][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.271793][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.288931][ T5123] hsr_slave_0: entered promiscuous mode [ 75.296231][ T5123] hsr_slave_1: entered promiscuous mode [ 75.303749][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.311769][ T5123] Cannot create hsr debugfs directory [ 75.348672][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.355773][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.382646][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.614298][ T5121] hsr_slave_0: entered promiscuous mode [ 75.623052][ T5121] hsr_slave_1: entered promiscuous mode [ 75.629230][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.636926][ T5121] Cannot create hsr debugfs directory [ 75.823858][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.869308][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.884300][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.913037][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.990483][ T5118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.009364][ T5118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.019598][ T5118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.066225][ T5118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.121712][ T5123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.134293][ T5123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.145542][ T5123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.163766][ T5123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.277056][ T5113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.289230][ T5113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.301856][ T5113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.313954][ T5113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.447446][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.461843][ T5121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.476076][ T5121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.488744][ T5121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.501744][ T5116] Bluetooth: hci2: command tx timeout [ 76.501783][ T5114] Bluetooth: hci0: command tx timeout [ 76.507154][ T4487] Bluetooth: hci1: command tx timeout [ 76.520659][ T5121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.575563][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.597052][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.643974][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.660955][ T5116] Bluetooth: hci3: command tx timeout [ 76.670732][ T5116] Bluetooth: hci4: command tx timeout [ 76.696498][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.703938][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.715809][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.722987][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.749935][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.757180][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.812555][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.819710][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.847962][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.902292][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.963551][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.970743][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.029778][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.037002][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.106145][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.187646][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.259925][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.281920][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.289126][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.359140][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.366505][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.474065][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.515331][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.522600][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.548909][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.570835][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.578030][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.679435][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.739902][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.878341][ T5123] veth0_vlan: entered promiscuous mode [ 77.916602][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.937761][ T5123] veth1_vlan: entered promiscuous mode [ 78.011695][ T5110] veth0_vlan: entered promiscuous mode [ 78.137611][ T5110] veth1_vlan: entered promiscuous mode [ 78.213306][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.233938][ T5123] veth0_macvtap: entered promiscuous mode [ 78.279590][ T5123] veth1_macvtap: entered promiscuous mode [ 78.383466][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.394941][ T5110] veth0_macvtap: entered promiscuous mode [ 78.415660][ T5113] veth0_vlan: entered promiscuous mode [ 78.428598][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.448057][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.457652][ T5110] veth1_macvtap: entered promiscuous mode [ 78.476384][ T5123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.486707][ T5123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.497461][ T5123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.507032][ T5123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.552425][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.563980][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.576561][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.584914][ T4487] Bluetooth: hci1: command tx timeout [ 78.590559][ T4487] Bluetooth: hci0: command tx timeout [ 78.596044][ T5116] Bluetooth: hci2: command tx timeout [ 78.603132][ T5113] veth1_vlan: entered promiscuous mode [ 78.643960][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.655040][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.669945][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.742320][ T5116] Bluetooth: hci4: command tx timeout [ 78.747790][ T5116] Bluetooth: hci3: command tx timeout [ 78.758965][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.768603][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.778202][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.787282][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.833467][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.843875][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.944827][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.958108][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.984528][ T5118] veth0_vlan: entered promiscuous mode [ 79.003165][ T5121] veth0_vlan: entered promiscuous mode [ 79.017946][ T5113] veth0_macvtap: entered promiscuous mode [ 79.029215][ T5113] veth1_macvtap: entered promiscuous mode [ 79.038904][ T5118] veth1_vlan: entered promiscuous mode [ 79.075205][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.098941][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.130085][ T5121] veth1_vlan: entered promiscuous mode [ 79.233235][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.248082][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.258794][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.271052][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.283742][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.296385][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.310638][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.320676][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.332194][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.343961][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.386023][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.403496][ T5118] veth0_macvtap: entered promiscuous mode [ 79.417741][ T5118] veth1_macvtap: entered promiscuous mode [ 79.425328][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.508637][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.524759][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.535109][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.546976][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.562340][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.573068][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.585198][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.602474][ T5113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.612469][ T5113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.620495][ T5195] xt_TCPMSS: Only works on TCP SYN packets [ 79.627317][ T5113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.639946][ T5113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.684585][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.707780][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.719805][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.737649][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.756329][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.767378][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.786717][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.797422][ T5121] veth0_macvtap: entered promiscuous mode [ 79.859003][ T5121] veth1_macvtap: entered promiscuous mode [ 79.881392][ T5118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.917323][ T5118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.960291][ T5118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.969075][ T5118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.089718][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.104874][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.121291][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.145266][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.161114][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.172218][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.185292][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.197306][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.221582][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.267806][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.288059][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.306682][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.353575][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.376334][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.390167][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.406129][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.419550][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.462193][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.498330][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.532139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.555038][ T5121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.573917][ T5121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.585731][ T5121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.605153][ T5121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.660666][ T4487] Bluetooth: hci0: command tx timeout [ 80.666226][ T4487] Bluetooth: hci1: command tx timeout [ 80.672000][ T5116] Bluetooth: hci2: command tx timeout [ 80.711532][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.719464][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.820576][ T4487] Bluetooth: hci3: command tx timeout [ 80.827017][ T5116] Bluetooth: hci4: command tx timeout [ 80.961005][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.968880][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.153355][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.176540][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.240639][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.288464][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.309764][ T5216] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 81.325977][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.407039][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.436784][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.123952][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.320627][ T29] audit: type=1804 audit(1718881369.023:2): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2646603268/syzkaller.7oq7YJ/10/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 82.432577][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.469377][ T29] audit: type=1800 audit(1718881369.063:3): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 82.679357][ T5263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.809342][ T5270] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.024753][ T5275] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 83.122355][ T5278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.255309][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.389030][ T5283] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 83.692871][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.953429][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.048776][ T5307] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 84.171171][ T5307] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 84.435817][ T5316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.836425][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.020876][ T5332] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 85.075774][ T5316] bridge_slave_1 (unregistering): left allmulticast mode [ 85.130509][ T5316] bridge_slave_1 (unregistering): left promiscuous mode [ 85.175570][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.198976][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.375397][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.761245][ T5364] syz-executor.4[5364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.761415][ T5364] syz-executor.4[5364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.134841][ T5378] pimreg: entered allmulticast mode [ 86.242777][ T5378] pimreg: left allmulticast mode [ 86.733172][ T5397] Cannot find add_set index 0 as target [ 86.835202][ T5403] syz-executor.3[5403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.835468][ T5403] syz-executor.3[5403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.100809][ T5413] __nla_validate_parse: 2 callbacks suppressed [ 87.100831][ T5413] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.154549][ T785] cfg80211: failed to load regulatory.db [ 87.445785][ T5423] pimreg: entered allmulticast mode [ 87.495188][ T5423] pimreg: left allmulticast mode [ 87.632511][ T5435] xt_TCPMSS: Only works on TCP SYN packets [ 88.552998][ T5466] pimreg: entered allmulticast mode [ 88.575269][ T5469] syz-executor.0[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.575553][ T5469] syz-executor.0[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.609161][ T5466] pimreg: left allmulticast mode [ 89.058613][ T5468] syz-executor.4 (5468) used greatest stack depth: 18768 bytes left [ 89.095354][ T5476] syzkaller1: entered promiscuous mode [ 89.100941][ T5476] syzkaller1: entered allmulticast mode [ 89.847522][ T5502] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.117732][ T5508] pimreg: entered allmulticast mode [ 90.144691][ T5110] syz-executor.1 (5110) used greatest stack depth: 18352 bytes left [ 90.294374][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.443447][ T5512] pimreg: left allmulticast mode [ 90.576357][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.865475][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.151114][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.183273][ T5538] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 91.213657][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.579970][ T12] bridge_slave_1: left allmulticast mode [ 91.604384][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.615079][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.627845][ T12] bridge_slave_1: left promiscuous mode [ 91.630315][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.668411][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.678812][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.690775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.701961][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.764261][ T12] bridge_slave_0: left allmulticast mode [ 91.769990][ T12] bridge_slave_0: left promiscuous mode [ 91.779660][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.439564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.466645][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.501408][ T12] bond0 (unregistering): Released all slaves [ 93.187223][ T5582] Bluetooth: MGMT ver 1.22 [ 93.314864][ T5580] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 93.341252][ T5590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.736510][ T12] hsr_slave_0: left promiscuous mode [ 93.744683][ T12] hsr_slave_1: left promiscuous mode [ 93.780396][ T4487] Bluetooth: hci0: command tx timeout [ 93.805194][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.820593][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.822197][ T5608] tipc: Can't bind to reserved service type 1 [ 93.849371][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.862575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.911295][ T12] veth1_macvtap: left promiscuous mode [ 93.917289][ T12] veth0_macvtap: left promiscuous mode [ 93.937308][ T12] veth1_vlan: left promiscuous mode [ 93.948123][ T12] veth0_vlan: left promiscuous mode [ 94.401149][ T5617] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.617442][ T12] team0 (unregistering): Port device team_slave_1 removed [ 94.656652][ T12] team0 (unregistering): Port device team_slave_0 removed [ 95.042525][ T5547] chnl_net:caif_netlink_parms(): no params data found [ 95.615159][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.644829][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.664276][ T5547] bridge_slave_0: entered allmulticast mode [ 95.684713][ T5547] bridge_slave_0: entered promiscuous mode [ 95.759897][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.835090][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.862560][ T4487] Bluetooth: hci0: command tx timeout [ 95.897309][ T5547] bridge_slave_1: entered allmulticast mode [ 95.961665][ T5547] bridge_slave_1: entered promiscuous mode [ 96.298231][ T5547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.336782][ T5547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.475713][ T5547] team0: Port device team_slave_0 added [ 96.511600][ T5547] team0: Port device team_slave_1 added [ 96.608621][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.628662][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.674173][ T5547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.709259][ T5547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.733434][ T5547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.800687][ T5547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.914514][ T5670] ipvlan2: entered promiscuous mode [ 96.919799][ T5670] ipvlan2: entered allmulticast mode [ 96.934426][ T5670] bridge0: entered allmulticast mode [ 96.979193][ T5547] hsr_slave_0: entered promiscuous mode [ 96.989345][ T5547] hsr_slave_1: entered promiscuous mode [ 96.997744][ T5547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.007437][ T5547] Cannot create hsr debugfs directory [ 97.063122][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.082352][ T5681] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 97.166292][ T5681] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.175619][ T5681] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.184740][ T5681] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.193684][ T5681] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.940264][ T4487] Bluetooth: hci0: command tx timeout [ 98.011926][ T5708] syzkaller1: entered promiscuous mode [ 98.017792][ T5708] syzkaller1: entered allmulticast mode [ 98.257485][ T5547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.295967][ T5547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.315400][ T5547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.339920][ T5547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.556475][ T5724] pim6reg1: entered promiscuous mode [ 98.568356][ T5724] pim6reg1: entered allmulticast mode [ 98.652579][ T5730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.659992][ T5547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.709391][ T5547] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.749083][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.756356][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.791177][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.798361][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.964554][ T5738] syzkaller1: entered promiscuous mode [ 98.972341][ T5738] syzkaller1: entered allmulticast mode [ 99.240551][ T5748] Zero length message leads to an empty skb [ 99.423281][ T5547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.625254][ T5547] veth0_vlan: entered promiscuous mode [ 99.637092][ T5762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.674654][ T5547] veth1_vlan: entered promiscuous mode [ 99.717495][ T5764] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.832205][ T5547] veth0_macvtap: entered promiscuous mode [ 99.874157][ T5547] veth1_macvtap: entered promiscuous mode [ 99.952566][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.991334][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.020384][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.021930][ T4487] Bluetooth: hci0: command tx timeout [ 100.040760][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.061346][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.072607][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.084155][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.095457][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.109502][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.134126][ T5782] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.170228][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.196798][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.238035][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.252435][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.271052][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.285797][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.296190][ T5547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.325375][ T5547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.343019][ T5547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.367917][ T5547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.400436][ T5547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.418145][ T5547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.428765][ T5547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.579296][ T29] audit: type=1800 audit(1718881387.293:4): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=4001 dev="sda1" ino=1960 res=0 errno=0 [ 100.609413][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.640387][ T5802] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 100.669171][ T5802] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.678241][ T5802] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.687187][ T5802] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.697072][ T5802] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.749490][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.776031][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.838943][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.847499][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.942387][ T5813] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.189083][ T5827] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 101.202580][ T5827] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 101.236736][ T29] audit: type=1800 audit(1718881387.953:5): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=4001 dev="sda1" ino=1961 res=0 errno=0 [ 101.266493][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.431653][ T5838] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.512334][ T5838] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 101.530099][ T5838] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 101.594382][ T5845] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.792737][ T29] audit: type=1800 audit(1718881388.513:6): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name=4001 dev="sda1" ino=1961 res=0 errno=0 [ 101.924553][ T5866] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.096557][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.106411][ T5879] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.125037][ T5879] bond0: option resend_igmp: invalid value (49152) [ 102.144570][ T5879] bond0: option resend_igmp: allowed values 0 - 255 [ 102.609545][ T5911] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.630968][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.656298][ T5912] bond0: option resend_igmp: invalid value (49152) [ 102.686593][ T5912] bond0: option resend_igmp: allowed values 0 - 255 [ 102.814360][ T5922] bridge0: mtu less than device minimum [ 103.223239][ T5949] Bluetooth: MGMT ver 1.22 [ 103.482854][ T5964] bridge0: mtu less than device minimum [ 103.605728][ T5954] vxcan0: entered promiscuous mode [ 103.643490][ T5954] vlan2: entered allmulticast mode [ 103.657431][ T5954] vxcan0: entered allmulticast mode [ 103.727692][ T5950] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.762958][ T5950] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 103.780204][ T5980] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 104.833997][ T6018] vxcan0: entered promiscuous mode [ 104.839421][ T6018] vlan2: entered allmulticast mode [ 104.852319][ T6018] vxcan0: entered allmulticast mode [ 104.933960][ T6018] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 105.614835][ T6063] vxcan0: entered promiscuous mode [ 105.630431][ T6063] vlan2: entered allmulticast mode [ 105.636849][ T6063] vxcan0: entered allmulticast mode [ 105.661418][ T6063] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 105.770707][ T6078] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 105.791434][ T6080] bridge0: mtu less than device minimum [ 105.945151][ T6090] __nla_validate_parse: 1 callbacks suppressed [ 105.945174][ T6090] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.032986][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.381134][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.430694][ T6121] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 106.633994][ T6120] vxcan0: entered promiscuous mode [ 106.639264][ T6120] vlan2: entered allmulticast mode [ 106.664059][ T6120] vxcan0: entered allmulticast mode [ 106.699227][ T6120] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 107.386705][ T6176] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.446111][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.769068][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.196696][ T6214] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 109.084077][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.733076][ T6278] syzkaller1: entered promiscuous mode [ 109.738616][ T6278] syzkaller1: entered allmulticast mode [ 109.956026][ T6290] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 109.964604][ T6290] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 109.990916][ T6290] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.397654][ T6314] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 110.480689][ T6314] team0: Port device netdevsim0 added [ 110.876648][ T6343] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 110.887673][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.972208][ T6353] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 111.100819][ T6363] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 111.115785][ T6364] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.651108][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.710390][ T6399] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 111.736017][ T6400] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.793047][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.950256][ T6411] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 111.974055][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.010239][ T6411] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.113955][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.557606][ T6444] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.800780][ T6458] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 112.822963][ T6459] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 112.956273][ T6463] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.141601][ T6475] macsec0: entered promiscuous mode [ 113.171791][ T6476] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.194246][ T6475] veth1_macvtap: left promiscuous mode [ 113.245659][ T6475] macsec0 (unregistering): left promiscuous mode [ 113.278800][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.453057][ T6490] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 113.781068][ T6510] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 113.989482][ T6522] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 115.574615][ T6593] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 115.621158][ T6593] team0: Device veth1_macvtap failed to register rx_handler [ 115.654421][ T6614] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 115.715348][ T6614] tipc: Started in network mode [ 115.749031][ T6614] tipc: Node identity fa05ca836ed8, cluster identity 4711 [ 115.803689][ T6614] tipc: Enabled bearer , priority 0 [ 116.433017][ T6640] __nla_validate_parse: 9 callbacks suppressed [ 116.433038][ T6640] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.476512][ T6640] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.626348][ T6644] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.677928][ T6644] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.722335][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.730121][ T6644] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.740525][ T6644] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.748639][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.903743][ T8] tipc: Node number set to 2497563267 [ 116.956760][ T6656] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 117.399361][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.712839][ T6688] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.846349][ T6693] bond0: option arp_interval: invalid value (18446744073366943235) [ 117.857937][ T6693] bond0: option arp_interval: allowed values 0 - 2147483647 [ 118.155938][ T6710] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 118.200808][ T6710] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 118.257812][ T6716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.522790][ T6734] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.596141][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.015476][ T6737] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 119.061070][ T6737] team0: Device veth1_macvtap failed to register rx_handler [ 119.104650][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.393253][ T6755] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 120.267861][ T6780] team0: Device veth1_macvtap failed to register rx_handler [ 121.675806][ T6848] __nla_validate_parse: 2 callbacks suppressed [ 121.675830][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.882060][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.694944][ T6876] validate_nla: 2 callbacks suppressed [ 122.694968][ T6876] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 122.814979][ T6876] team0: Port device veth1_macvtap added [ 122.938752][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.356365][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.856895][ T6950] veth0_to_hsr: entered promiscuous mode [ 123.881290][ T6949] veth0_to_hsr: left promiscuous mode [ 124.090263][ T6968] bridge0: entered allmulticast mode [ 124.610519][ T6993] veth0_to_hsr: entered promiscuous mode [ 124.627622][ T6991] veth0_to_hsr: left promiscuous mode [ 124.951444][ T7011] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.049036][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.075936][ T7015] vlan4: entered promiscuous mode [ 125.086355][ T7015] bridge0: entered promiscuous mode [ 125.095566][ T7015] bridge0: left promiscuous mode [ 125.869088][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.424279][ T7079] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.465145][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.155094][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.177655][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.299064][ T7114] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 127.318710][ T7114] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.342137][ T7114] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 127.353382][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.360379][ T7114] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 127.390242][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.499210][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.541361][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.554137][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.751701][ T61] team0: Port device netdevsim0 removed [ 127.778158][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.802015][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.821261][ T7134] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.964523][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.974294][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.983068][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.993040][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.004580][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.018972][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.142362][ T61] bridge_slave_1: left allmulticast mode [ 128.161708][ T61] bridge_slave_1: left promiscuous mode [ 128.175059][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.186281][ T61] bridge_slave_0: left allmulticast mode [ 128.194234][ T61] bridge_slave_0: left promiscuous mode [ 128.200287][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.378688][ T7157] IPv4: Oversized IP packet from 127.202.26.0 [ 128.634209][ T7165] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.779259][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.798816][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.810582][ T61] bond0 (unregistering): Released all slaves [ 128.953820][ T7169] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.559904][ T7137] chnl_net:caif_netlink_parms(): no params data found [ 129.634852][ T7203] IPv4: Oversized IP packet from 127.202.26.0 [ 129.775317][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.981790][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.014198][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.038283][ T7137] bridge_slave_0: entered allmulticast mode [ 130.061797][ T7137] bridge_slave_0: entered promiscuous mode [ 130.100696][ T4487] Bluetooth: hci3: command tx timeout [ 130.177999][ T61] hsr_slave_0: left promiscuous mode [ 130.210552][ T61] hsr_slave_1: left promiscuous mode [ 130.261031][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.268510][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.301436][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.327026][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.402421][ T61] vxcan0: left allmulticast mode [ 130.429088][ T61] vxcan0: left promiscuous mode [ 130.434563][ T61] veth1_macvtap: left promiscuous mode [ 130.451250][ T61] veth0_macvtap: left promiscuous mode [ 130.458148][ T61] veth1_vlan: left promiscuous mode [ 130.472594][ T61] veth0_vlan: left promiscuous mode [ 131.316487][ T61] team0 (unregistering): Port device team_slave_1 removed [ 131.377373][ T61] team0 (unregistering): Port device team_slave_0 removed [ 131.784190][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.792222][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.799644][ T7137] bridge_slave_1: entered allmulticast mode [ 131.811199][ T7137] bridge_slave_1: entered promiscuous mode [ 131.840644][ T7235] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.983413][ T7137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.046543][ T7137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.181045][ T4487] Bluetooth: hci3: command tx timeout [ 132.254876][ T7137] team0: Port device team_slave_0 added [ 132.297781][ T7137] team0: Port device team_slave_1 added [ 132.421008][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.437573][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.472249][ T7137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.502321][ T7137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.514848][ T7137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.555945][ T7137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.681698][ T7276] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.722960][ T7137] hsr_slave_0: entered promiscuous mode [ 132.749267][ T7137] hsr_slave_1: entered promiscuous mode [ 132.774029][ T7137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.784198][ T7137] Cannot create hsr debugfs directory [ 133.225678][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.234562][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.248043][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.478067][ T7294] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 133.720520][ T7137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.744197][ T7137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.777188][ T7137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.817409][ T7137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.027430][ T7137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.126728][ T7137] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.157941][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.165246][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.228150][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.235409][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.260890][ T4487] Bluetooth: hci3: command tx timeout [ 134.710960][ T7344] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 134.734435][ T7344] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.903003][ T7137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.036726][ T7137] veth0_vlan: entered promiscuous mode [ 135.077695][ T7137] veth1_vlan: entered promiscuous mode [ 135.196941][ T7137] veth0_macvtap: entered promiscuous mode [ 135.239434][ T7137] veth1_macvtap: entered promiscuous mode [ 135.292000][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.322516][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.348954][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.370400][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.386567][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.398796][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.416069][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.436025][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.477848][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.548635][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.567200][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.578021][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.588602][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.598627][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.626592][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.648122][ T7137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.674082][ T7137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.689997][ T7137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.726173][ T7137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.747255][ T7137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.768656][ T7137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.785922][ T7137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.889990][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.049099][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.077167][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.096227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.192505][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.224001][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.251512][ T7389] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 136.284412][ T7389] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.341437][ T4487] Bluetooth: hci3: command tx timeout [ 137.422340][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.013305][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.738949][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.918626][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.088503][ T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.183800][ T7487] team_slave_0: entered promiscuous mode [ 139.189797][ T7487] team_slave_1: entered promiscuous mode [ 139.203402][ T7487] vlan3: entered promiscuous mode [ 139.220359][ T7487] team0: entered promiscuous mode [ 139.231679][ T7487] vlan3: entered allmulticast mode [ 139.248360][ T7487] team0: entered allmulticast mode [ 139.256969][ T7487] team_slave_0: entered allmulticast mode [ 139.290374][ T7487] team_slave_1: entered allmulticast mode [ 139.354342][ T7487] team0: left allmulticast mode [ 139.367468][ T7487] team_slave_0: left allmulticast mode [ 139.379627][ T7487] team_slave_1: left allmulticast mode [ 139.418737][ T7487] team0: left promiscuous mode [ 139.442491][ T7487] team_slave_0: left promiscuous mode [ 139.448091][ T7487] team_slave_1: left promiscuous mode [ 139.562267][ T7504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.649959][ T7494] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 139.834294][ T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.961554][ T29] audit: type=1804 audit(1718881426.683:7): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3137154976/syzkaller.GvwrVG/216/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 139.963236][ T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.095575][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.120644][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.130202][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.140327][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.157225][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.166869][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.335952][ T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.417188][ T7523] MD5 Hash not found for [fe80::aa].0->[fe80::aa].20002 [S]L3 index 0 [ 140.663008][ T145] bridge_slave_1: left allmulticast mode [ 140.668844][ T145] bridge_slave_1: left promiscuous mode [ 140.677774][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.697345][ T145] bridge_slave_0: left allmulticast mode [ 140.703423][ T145] bridge_slave_0: left promiscuous mode [ 140.709348][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.117122][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.129475][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.148080][ T145] bond0 (unregistering): Released all slaves [ 141.172652][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.197129][ T7535] geneve0: entered promiscuous mode [ 141.206465][ T7535] geneve0: entered allmulticast mode [ 141.754343][ T7564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.872808][ T145] hsr_slave_0: left promiscuous mode [ 141.879712][ T145] hsr_slave_1: left promiscuous mode [ 141.898596][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.909632][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.930580][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.952133][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.003602][ T145] veth1_macvtap: left promiscuous mode [ 142.024684][ T145] veth0_macvtap: left promiscuous mode [ 142.034042][ T145] veth1_vlan: left promiscuous mode [ 142.041582][ T145] veth0_vlan: left promiscuous mode [ 142.270599][ T4487] Bluetooth: hci3: command tx timeout [ 142.726126][ T145] team0 (unregistering): Port device team_slave_1 removed [ 142.770643][ T145] team0 (unregistering): Port device team_slave_0 removed [ 143.224959][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 143.247196][ T7568] bridge0: port 3(team0) entered blocking state [ 143.254669][ T7568] bridge0: port 3(team0) entered disabled state [ 143.263038][ T7568] team0: entered allmulticast mode [ 143.275128][ T7568] team_slave_0: entered allmulticast mode [ 143.283168][ T7568] team_slave_1: entered allmulticast mode [ 143.293627][ T7568] team0: entered promiscuous mode [ 143.298672][ T7568] team_slave_0: entered promiscuous mode [ 143.305164][ T7568] team_slave_1: entered promiscuous mode [ 143.316163][ T7568] bridge0: port 3(team0) entered blocking state [ 143.322936][ T7568] bridge0: port 3(team0) entered forwarding state [ 143.331822][ T7580] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.343713][ T7580] geneve0: entered promiscuous mode [ 143.348932][ T7580] geneve0: entered allmulticast mode [ 143.553865][ T7602] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 143.621964][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.661765][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.831444][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.935371][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.973493][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.992685][ T7515] bridge_slave_0: entered allmulticast mode [ 144.002647][ T7515] bridge_slave_0: entered promiscuous mode [ 144.120340][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.140629][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.147933][ T7515] bridge_slave_1: entered allmulticast mode [ 144.177361][ T7515] bridge_slave_1: entered promiscuous mode [ 144.246926][ T7629] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.350157][ T4487] Bluetooth: hci3: command tx timeout [ 144.404492][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.494135][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.541822][ T7640] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20000 [ 144.649805][ T7515] team0: Port device team_slave_0 added [ 144.724013][ T7515] team0: Port device team_slave_1 added [ 144.818760][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.834358][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.866454][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.894187][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.913504][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.951918][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.095753][ T7515] hsr_slave_0: entered promiscuous mode [ 145.105962][ T7515] hsr_slave_1: entered promiscuous mode [ 145.128429][ T7515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.159204][ T7515] Cannot create hsr debugfs directory [ 145.894002][ T7692] bridge0: port 3(hsr0) entered blocking state [ 145.907914][ T7692] bridge0: port 3(hsr0) entered disabled state [ 145.926483][ T7692] hsr0: entered allmulticast mode [ 145.941661][ T7692] hsr_slave_0: entered allmulticast mode [ 145.953260][ T7692] hsr_slave_1: entered allmulticast mode [ 145.967419][ T7692] hsr0: entered promiscuous mode [ 145.973740][ T7692] bridge0: port 3(hsr0) entered blocking state [ 145.980991][ T7692] bridge0: port 3(hsr0) entered forwarding state [ 145.989556][ T7684] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 146.420238][ T4487] Bluetooth: hci3: command tx timeout [ 146.519553][ T7515] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.620485][ T7515] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.649278][ T7515] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.720679][ T7515] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.847260][ T7727] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 146.869069][ T7727] team0: Device veth1_macvtap failed to register rx_handler [ 147.017176][ T7743] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.077600][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.094321][ T7736] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 147.162337][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.819355][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.885630][ T7766] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 147.890105][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.911407][ T7766] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.981278][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.988532][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.050345][ T7767] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 148.062828][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.070001][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.087783][ T7767] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.346787][ T7778] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 148.511335][ T4487] Bluetooth: hci3: command tx timeout [ 148.941250][ T7794] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 148.984825][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.004987][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.081736][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.135288][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.350533][ T7515] veth0_vlan: entered promiscuous mode [ 149.405118][ T7515] veth1_vlan: entered promiscuous mode [ 149.509288][ T7819] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.530742][ T7819] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.593933][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.614219][ T7823] geneve0: entered promiscuous mode [ 149.619491][ T7823] geneve0: entered allmulticast mode [ 149.669967][ T7515] veth0_macvtap: entered promiscuous mode [ 149.695682][ T7515] veth1_macvtap: entered promiscuous mode [ 149.747197][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.757928][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.769513][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.781365][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.791607][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.817110][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.837237][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.852215][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.879126][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.899167][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.910317][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.921358][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.933061][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.952310][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.967080][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.979741][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.996693][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.013509][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.033870][ T7515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.057484][ T7515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.074288][ T7515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.085875][ T7515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.158151][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.256028][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.278316][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.366116][ T2475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.388530][ T2475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.695608][ T7862] bridge0: port 4(team0) entered blocking state [ 150.705810][ T7862] bridge0: port 4(team0) entered disabled state [ 150.716129][ T7862] team0: entered allmulticast mode [ 150.723274][ T7862] team_slave_0: entered allmulticast mode [ 150.735699][ T7862] team_slave_1: entered allmulticast mode [ 150.758076][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.776746][ T7862] team0: entered promiscuous mode [ 150.783290][ T7862] team_slave_0: entered promiscuous mode [ 150.789124][ T7862] team_slave_1: entered promiscuous mode [ 150.796514][ T7862] bridge0: port 4(team0) entered blocking state [ 150.802942][ T7862] bridge0: port 4(team0) entered forwarding state [ 150.958018][ T7880] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 150.971900][ T7880] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.598236][ T7898] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 151.867377][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.173402][ T7913] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 152.195920][ T7913] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.721769][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.731178][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.742559][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.757471][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.766575][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.776310][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.859373][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.993505][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.168036][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.216315][ T7961] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 153.661155][ T35] bridge_slave_1: left allmulticast mode [ 153.674436][ T35] bridge_slave_1: left promiscuous mode [ 153.684944][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.700323][ T35] bridge_slave_0: left allmulticast mode [ 153.709562][ T35] bridge_slave_0: left promiscuous mode [ 153.739022][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.507447][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.546746][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.571170][ T35] bond0 (unregistering): Released all slaves [ 154.586951][ T7992] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 154.601315][ T7992] __nla_validate_parse: 3 callbacks suppressed [ 154.601335][ T7992] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.628725][ T7973] bridge0: port 3(hsr0) entered blocking state [ 154.636873][ T7973] bridge0: port 3(hsr0) entered disabled state [ 154.648502][ T7973] hsr0: entered allmulticast mode [ 154.672672][ T7973] hsr_slave_0: entered allmulticast mode [ 154.678551][ T7973] hsr_slave_1: entered allmulticast mode [ 154.694728][ T7973] hsr0: entered promiscuous mode [ 154.702022][ T7973] bridge0: port 3(hsr0) entered blocking state [ 154.708430][ T7973] bridge0: port 3(hsr0) entered forwarding state [ 154.723445][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.739804][ T7980] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.761670][ T7931] chnl_net:caif_netlink_parms(): no params data found [ 154.823590][ T5116] Bluetooth: hci3: command tx timeout [ 155.139839][ T8009] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.281783][ T35] hsr_slave_0: left promiscuous mode [ 155.312797][ T35] hsr_slave_1: left promiscuous mode [ 155.343319][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.376246][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.411783][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.419270][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.471878][ T35] veth1_macvtap: left promiscuous mode [ 155.479916][ T35] veth0_macvtap: left promiscuous mode [ 155.489638][ T35] veth1_vlan: left promiscuous mode [ 155.499225][ T35] veth0_vlan: left promiscuous mode [ 156.639239][ T35] team0 (unregistering): Port device team_slave_1 removed [ 156.727841][ T35] team0 (unregistering): Port device team_slave_0 removed [ 156.828970][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.839805][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.904321][ T5116] Bluetooth: hci3: command tx timeout [ 157.297494][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.458786][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.497339][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.529569][ T7931] bridge_slave_0: entered allmulticast mode [ 157.553994][ T7931] bridge_slave_0: entered promiscuous mode [ 157.590759][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.613512][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.643915][ T7931] bridge_slave_1: entered allmulticast mode [ 157.658574][ T7931] bridge_slave_1: entered promiscuous mode [ 157.780701][ T8099] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 157.796156][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.812446][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.886158][ T8102] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.972858][ T7931] team0: Port device team_slave_0 added [ 157.993537][ T7931] team0: Port device team_slave_1 added [ 158.076654][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.084880][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.112731][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.127959][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.140210][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.166979][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.293496][ T7931] hsr_slave_0: entered promiscuous mode [ 158.307245][ T7931] hsr_slave_1: entered promiscuous mode [ 158.314548][ T7931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.322556][ T7931] Cannot create hsr debugfs directory [ 158.816295][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.838755][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.980397][ T5116] Bluetooth: hci3: command tx timeout [ 159.033254][ T7931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.061874][ T7931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.084883][ T7931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.137959][ T7931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.475935][ T7931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.516894][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.606977][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.614263][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.644615][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.651927][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.736321][ T7931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.957871][ T8194] __nla_validate_parse: 1 callbacks suppressed [ 159.957895][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.247036][ T7931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.268779][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.287380][ T8210] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 160.296309][ T8210] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 160.337362][ T8210] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.346539][ T8210] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.355499][ T8210] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.364376][ T8210] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.471354][ T8210] vxlan0: entered promiscuous mode [ 160.625358][ T7931] veth0_vlan: entered promiscuous mode [ 160.653563][ T7931] veth1_vlan: entered promiscuous mode [ 160.751695][ T7931] veth0_macvtap: entered promiscuous mode [ 160.776114][ T7931] veth1_macvtap: entered promiscuous mode [ 160.818135][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.838673][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.869044][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.888808][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.910085][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.935236][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.956988][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.983726][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.999636][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.013445][ T8229] veth0_vlan: entered allmulticast mode [ 161.070973][ T5116] Bluetooth: hci3: command tx timeout [ 161.125027][ T8233] veth0_vlan: left promiscuous mode [ 161.140945][ T8233] veth0_vlan: entered promiscuous mode [ 161.208895][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.243347][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.254684][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.266285][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.282807][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.296825][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.316959][ T7931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.332150][ T7931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.348886][ T7931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.384821][ T7931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.431356][ T7931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.449599][ T7931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.479166][ T7931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.726801][ T2475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.749171][ T2475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.836979][ T2475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.856046][ T2475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.378322][ T8330] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 163.398486][ T8330] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 163.414154][ T8330] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 163.916894][ T8357] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 164.245645][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.740735][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.783611][ T8394] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 164.817235][ T8394] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 164.845511][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.884734][ T8389] syz_tun: entered promiscuous mode [ 164.903701][ T8389] macvtap1: entered promiscuous mode [ 164.910384][ T8389] macvtap1: entered allmulticast mode [ 164.928201][ T8389] syz_tun: entered allmulticast mode [ 164.957128][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.003120][ T8396] syz_tun: left allmulticast mode [ 165.010369][ T8396] syz_tun: left promiscuous mode [ 165.018151][ T8396] macvtap1: left promiscuous mode [ 165.037124][ T4487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.044961][ T8396] macvtap1: left allmulticast mode [ 165.052170][ T4487] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.063489][ T4487] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.081879][ T4487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.091765][ T4487] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.102143][ T4487] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.439187][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.536265][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.635463][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.795280][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.805061][ T8433] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 165.813658][ T8433] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 165.831200][ T8433] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.840220][ T8433] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.849185][ T8433] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.858003][ T8433] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.869867][ T8433] vxlan0: entered promiscuous mode [ 165.886180][ T8403] chnl_net:caif_netlink_parms(): no params data found [ 165.949310][ T12] bridge_slave_1: left allmulticast mode [ 165.955469][ T12] bridge_slave_1: left promiscuous mode [ 165.961463][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.974420][ T12] bridge_slave_0: left allmulticast mode [ 165.980341][ T12] bridge_slave_0: left promiscuous mode [ 165.986237][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.513552][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.564156][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.586508][ T12] bond0 (unregistering): Released all slaves [ 166.627519][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.662688][ T8437] syz_tun: entered promiscuous mode [ 166.668191][ T8437] macvtap1: entered promiscuous mode [ 166.682715][ T8437] macvtap1: entered allmulticast mode [ 166.688166][ T8437] syz_tun: entered allmulticast mode [ 166.696209][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.719831][ T8438] syz_tun: left allmulticast mode [ 166.729431][ T8438] syz_tun: left promiscuous mode [ 166.744183][ T8438] macvtap1: left promiscuous mode [ 166.749423][ T8438] macvtap1: left allmulticast mode [ 167.027567][ T8468] Bluetooth: MGMT ver 1.22 [ 167.035575][ T8468] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 167.141513][ T4487] Bluetooth: hci3: command tx timeout [ 167.154572][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.164114][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.171577][ T8403] bridge_slave_0: entered allmulticast mode [ 167.183220][ T8403] bridge_slave_0: entered promiscuous mode [ 167.202772][ T12] hsr_slave_0: left promiscuous mode [ 167.208845][ T12] hsr_slave_1: left promiscuous mode [ 167.215251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.223297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.233111][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.242398][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.269877][ T12] veth1_macvtap: left promiscuous mode [ 167.277330][ T12] veth0_macvtap: left promiscuous mode [ 167.283299][ T12] veth1_vlan: left promiscuous mode [ 167.289130][ T12] veth0_vlan: left promiscuous mode [ 168.164284][ T12] team0 (unregistering): Port device team_slave_1 removed [ 168.283570][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.732278][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.739885][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.747413][ T8403] bridge_slave_1: entered allmulticast mode [ 168.760522][ T8403] bridge_slave_1: entered promiscuous mode [ 168.936474][ T8515] netlink: 'syz-executor.4': attribute type 28 has an invalid length. [ 168.942421][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.968058][ T8515] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 168.994758][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.000258][ T8515] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.157038][ T8403] team0: Port device team_slave_0 added [ 169.171463][ T8403] team0: Port device team_slave_1 added [ 169.220631][ T4487] Bluetooth: hci3: command tx timeout [ 169.371002][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.397590][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.446453][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.473084][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.496604][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.591588][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.763078][ T8403] hsr_slave_0: entered promiscuous mode [ 169.781778][ T8403] hsr_slave_1: entered promiscuous mode [ 169.810120][ T8403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.817836][ T8403] Cannot create hsr debugfs directory [ 169.842317][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.170161][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.393832][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.521533][ T8570] team1: Mode changed to "loadbalance" [ 170.828315][ T8596] ------------[ cut here ]------------ [ 170.835013][ T8596] refcount_t: decrement hit 0; leaking memory. [ 170.847782][ T8596] WARNING: CPU: 1 PID: 8596 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 170.857270][ T8596] Modules linked in: [ 170.861873][ T8596] CPU: 1 PID: 8596 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00163-g8851346912a1 #0 [ 170.872584][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 170.882757][ T8596] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 170.888869][ T8596] Code: b2 00 00 00 e8 57 65 e7 fc 5b 5d c3 cc cc cc cc e8 4b 65 e7 fc c6 05 fb fd e8 0a 01 90 48 c7 c7 60 93 1f 8c e8 97 95 a9 fc 90 <0f> 0b 90 90 eb d9 e8 2b 65 e7 fc c6 05 d8 fd e8 0a 01 90 48 c7 c7 [ 170.908868][ T8596] RSP: 0018:ffffc900048a7b68 EFLAGS: 00010246 [ 170.915043][ T8596] RAX: 7af97a14457c7f00 RBX: ffff88802c5e6664 RCX: ffff888028128000 2024/06/20 11:04:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 170.923135][ T8596] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 170.931178][ T8596] RBP: 0000000000000004 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 170.939978][ T8596] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802c5e6620 [ 170.948564][ T8596] R13: 0000000000000000 R14: ffff88802c5e6664 R15: dffffc0000000000 [ 170.956647][ T8596] FS: 000055555f3c9480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 170.965787][ T8596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.972518][ T8596] CR2: 0000000020000000 CR3: 00000000647a6000 CR4: 00000000003506f0 [ 170.980877][ T8596] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.988879][ T8596] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.996942][ T8596] Call Trace: [ 171.000303][ T8596] [ 171.003264][ T8596] ? __warn+0x163/0x4e0 [ 171.007462][ T8596] ? refcount_warn_saturate+0xfa/0x1d0 [ 171.013046][ T8596] ? report_bug+0x2b3/0x500 [ 171.017612][ T8596] ? refcount_warn_saturate+0xfa/0x1d0 [ 171.023163][ T8596] ? handle_bug+0x3e/0x70 [ 171.027547][ T8596] ? exc_invalid_op+0x1a/0x50 [ 171.032424][ T8596] ? asm_exc_invalid_op+0x1a/0x20 [ 171.037539][ T8596] ? __warn_printk+0x292/0x360 [ 171.043579][ T8596] ? refcount_warn_saturate+0xfa/0x1d0 [ 171.049082][ T8596] ? refcount_warn_saturate+0xf9/0x1d0 [ 171.054687][ T8596] ref_tracker_free+0x6af/0x7e0 [ 171.059586][ T8596] ? __pfx_ref_tracker_free+0x10/0x10 [ 171.065104][ T8596] ax25_release+0x368/0x950 [ 171.069660][ T8596] sock_close+0xbc/0x240 [ 171.074003][ T8596] ? __pfx_sock_close+0x10/0x10 [ 171.078897][ T8596] __fput+0x406/0x8b0 [ 171.083004][ T8596] task_work_run+0x24f/0x310 [ 171.087658][ T8596] ? __pfx_task_work_run+0x10/0x10 [ 171.092865][ T8596] ? syscall_exit_to_user_mode+0xa3/0x370 [ 171.098638][ T8596] syscall_exit_to_user_mode+0x168/0x370 [ 171.104388][ T8596] do_syscall_64+0x100/0x230 [ 171.109024][ T8596] ? clear_bhb_loop+0x35/0x90 [ 171.113867][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.119816][ T8596] RIP: 0033:0x7f929987cf29 [ 171.124310][ T8596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 171.145405][ T8596] RSP: 002b:00007ffe5ddf24f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 171.154537][ T8596] RAX: 0000000000000000 RBX: 0000000000029b03 RCX: 00007f929987cf29 [ 171.162601][ T8596] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 171.170659][ T8596] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001100000000 [ 171.178676][ T8596] R10: 00007f9299800000 R11: 0000000000000246 R12: 00007f92999b3f80 [ 171.186750][ T8596] R13: 00007f92999b3f8c R14: 0000000000000032 R15: 00007f92999b5980 [ 171.194871][ T8596] [ 171.197913][ T8596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.205206][ T8596] CPU: 1 PID: 8596 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00163-g8851346912a1 #0 [ 171.215637][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.225721][ T8596] Call Trace: [ 171.229110][ T8596] [ 171.232068][ T8596] dump_stack_lvl+0x241/0x360 [ 171.236792][ T8596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.242032][ T8596] ? __pfx__printk+0x10/0x10 [ 171.246672][ T8596] ? vscnprintf+0x5d/0x90 [ 171.251055][ T8596] panic+0x349/0x860 [ 171.254983][ T8596] ? __warn+0x172/0x4e0 [ 171.259185][ T8596] ? __pfx_panic+0x10/0x10 [ 171.263663][ T8596] __warn+0x346/0x4e0 [ 171.267667][ T8596] ? refcount_warn_saturate+0xfa/0x1d0 [ 171.273147][ T8596] report_bug+0x2b3/0x500 [ 171.277496][ T8596] ? refcount_warn_saturate+0xfa/0x1d0 [ 171.282975][ T8596] handle_bug+0x3e/0x70 [ 171.287174][ T8596] exc_invalid_op+0x1a/0x50 [ 171.291702][ T8596] asm_exc_invalid_op+0x1a/0x20 [ 171.296568][ T8596] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 171.302648][ T8596] Code: b2 00 00 00 e8 57 65 e7 fc 5b 5d c3 cc cc cc cc e8 4b 65 e7 fc c6 05 fb fd e8 0a 01 90 48 c7 c7 60 93 1f 8c e8 97 95 a9 fc 90 <0f> 0b 90 90 eb d9 e8 2b 65 e7 fc c6 05 d8 fd e8 0a 01 90 48 c7 c7 [ 171.322369][ T8596] RSP: 0018:ffffc900048a7b68 EFLAGS: 00010246 [ 171.328464][ T8596] RAX: 7af97a14457c7f00 RBX: ffff88802c5e6664 RCX: ffff888028128000 [ 171.336464][ T8596] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 171.344496][ T8596] RBP: 0000000000000004 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 171.352487][ T8596] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802c5e6620 [ 171.360495][ T8596] R13: 0000000000000000 R14: ffff88802c5e6664 R15: dffffc0000000000 [ 171.368482][ T8596] ? __warn_printk+0x292/0x360 [ 171.373281][ T8596] ? refcount_warn_saturate+0xf9/0x1d0 [ 171.378766][ T8596] ref_tracker_free+0x6af/0x7e0 [ 171.383643][ T8596] ? __pfx_ref_tracker_free+0x10/0x10 [ 171.389056][ T8596] ax25_release+0x368/0x950 [ 171.393593][ T8596] sock_close+0xbc/0x240 [ 171.397853][ T8596] ? __pfx_sock_close+0x10/0x10 [ 171.402720][ T8596] __fput+0x406/0x8b0 [ 171.406722][ T8596] task_work_run+0x24f/0x310 [ 171.411341][ T8596] ? __pfx_task_work_run+0x10/0x10 [ 171.416472][ T8596] ? syscall_exit_to_user_mode+0xa3/0x370 [ 171.422212][ T8596] syscall_exit_to_user_mode+0x168/0x370 [ 171.427895][ T8596] do_syscall_64+0x100/0x230 [ 171.432502][ T8596] ? clear_bhb_loop+0x35/0x90 [ 171.437201][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.443132][ T8596] RIP: 0033:0x7f929987cf29 [ 171.447558][ T8596] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 171.467176][ T8596] RSP: 002b:00007ffe5ddf24f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 171.475600][ T8596] RAX: 0000000000000000 RBX: 0000000000029b03 RCX: 00007f929987cf29 [ 171.483582][ T8596] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 171.491575][ T8596] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001100000000 [ 171.499578][ T8596] R10: 00007f9299800000 R11: 0000000000000246 R12: 00007f92999b3f80 [ 171.507653][ T8596] R13: 00007f92999b3f8c R14: 0000000000000032 R15: 00007f92999b5980 [ 171.515655][ T8596] [ 171.518965][ T8596] Kernel Offset: disabled [ 171.523361][ T8596] Rebooting in 86400 seconds..