last executing test programs: 1m37.312895667s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000280)) 1m23.583451341s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000280)) 1m9.267191237s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000280)) 40.97066686s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000280)) 28.61811707s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000280)) 13.274411418s ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000280)) 8.067079193s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/105, 0x69}], 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000007c0), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ac214e9722e47b", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000075647000"/98], 0x68}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xbf, "0ff3560198cd62d0a4f1a6db44faa0d8dd76e86e9733fbd1891de6c10e7bbe48e65152ead6bc3bd548c8d8335a2840e742dff421fe89879d285b4fa8141b6ffdada4104426d19e429cfb7904c5cf45016133abfc47f552bab267f71aa636a7b65afb4f643ec735639eb367bc315ea57bd0ff4b5fe5e537859638fbd8f00e843ef9c771bdd693af78d87a541ce08136a088c3be8a838647de4e3020b183356cf3e3f36d5583c7a618e26899ebe18d9a1b64358de463f8e26dd5928e4eb616b5"}, &(0x7f0000000080)=0xc7) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000480)={r6, 0x7, 0x40, 0x3a9, 0x6fc, 0x1, 0x0, 0x0, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xd7c7, 0x200, 0x101, 0x5, 0x7f}}, &(0x7f0000000380)=0xb0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x290002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @dev, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {@local}, {@empty}, {@empty}]}, @ssrr={0x89, 0xf, 0x0, [@local, @loopback, @loopback]}, @ssrr={0x89, 0x1b, 0x0, [@empty, @loopback, @rand_addr, @loopback, @multicast1, @dev]}, @rr={0x7, 0x1f, 0x0, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @dev, @broadcast, @empty, @local]}, @timestamp={0x44, 0x4}]}}}}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) 7.840009734s ago: executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xec, &(0x7f0000000000), &(0x7f0000000080)=0x4) 7.747243978s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 7.66411564s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003500010700000000000000f910"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 7.530737161s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) 7.462502088s ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180), 0x4) 1.000158531s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 993.063873ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) 954.643017ms ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40000cf, 0x0) 850.839312ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000500)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000005c0)="19", 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000a40)="1b", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x75, &(0x7f0000000140), &(0x7f0000000100)=0x10) 772.945081ms ago: executing program 0: socket$rds(0x15, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x2b8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x2a4, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xffffffd1}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_bpf={0x16c, 0x1b, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffff001, 0x9, 0x0, 0x7fff, 0x75}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x7, 0x0, 0xf6e6}, {0x7fff, 0x7, 0x20, 0x7f}, {0x1, 0x8, 0xcd, 0x2}, {0x8, 0x1, 0x8, 0x2}, {0x20, 0x9, 0x0, 0xbc52}, {0x6, 0x4, 0x81, 0xffff8760}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xdd, 0x6, "dc7349ab6782f3044133d16071f0ad5f17e35b3240d24eaa9714ad808c891f422f25ee0b0d5ac521e0241a25ef670b5fc8614f5adc8ddca98c0708e576e86163add4cbbab8232829bb826743713211558b6f3cb42fa6b787c26186338665dc8c678cc3360bd56936dd8648034601cacc8e6fd0809f07c47b515f76a2308b4a8362223971dee82fd8227bfd08bbfea113034d72df5a8e11542ba24005c933cbb920f60f52763c32f4c9965e3e26c5bc0f11613d5a45971e2b73fc4c3d6fe40401ec9d58e9a8de555dac24638bf94a6c413714ad066a3c6b90df"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xec, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x2, 0x7ff}, 0x5}}]}, {0x9f, 0x6, "77f66bdafd379ffab7794744d0c545ae2b1a2622e08a4929dc379bb87f60178256d20b018794e3063cdf2ff6b39c657225e4976b3fb0bf9e9aa8467b7f3f49db5e3e33d28a7107d92bf7020db13c52c8a3ff610daa499febe7cab96ae07b8e5b33ba10423a15a3c6296ed005d088e283b161d14e87bf19b029a9a82b6a1616ac83e81617a02b507a03a968648aecb9b3beba41525fd90e7cbd91c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2b8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x20000001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x100}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r7}, 0x18) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="d60c33671a6902b18d", 0x9}], 0x1}}], 0x1, 0x0) close(r4) 772.278441ms ago: executing program 3: unshare(0x4000400) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 719.242874ms ago: executing program 4: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @dev}}, 0x5c) 657.631627ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308"], 0xffdd) 552.497893ms ago: executing program 0: unshare(0xc040480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 542.922456ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r8) 465.170916ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000024000d00000000000000000006"], 0x14}}, 0x0) 356.037851ms ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x0, 0x0, {0x80, 0x0, 0x20}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) 269.932696ms ago: executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x13, &(0x7f0000000280), 0x8) 179.628133ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x92}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 146.295484ms ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @empty, @empty}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), 0x0}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000080)) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 132.006993ms ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40000cf, 0x0) 64.060335ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 0s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000e800850000004800000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20045040) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYRES8=r8], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x204000, 0x1000}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) kernel console output (not intermixed with test programs): 607][ T9638] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.948335][ T9638] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.144941][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.650495][ T9715] syz-executor.2 uses old SIOCAX25GETINFO [ 203.665941][ T9715] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.482546][ T9761] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.533819][ T9761] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.571191][ T9757] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.964783][ T9785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.173262][ T9794] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.590105][ T9813] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 205.598344][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.761446][ T9820] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 205.978301][ T9830] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.102176][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.114384][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.123233][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.134101][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.142103][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.149855][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.427273][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.640782][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.795110][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.961939][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.458223][ T9864] chnl_net:caif_netlink_parms(): no params data found [ 208.535610][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.590037][ T9918] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 208.636604][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.661436][ T9921] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 208.685056][ T51] bridge_slave_1: left allmulticast mode [ 208.695610][ T51] bridge_slave_1: left promiscuous mode [ 208.701939][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.745706][ T51] bridge_slave_0: left promiscuous mode [ 208.759820][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.010850][ T9937] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 209.033530][ T9937] netlink: 128636 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.229514][ T5118] Bluetooth: hci0: command tx timeout [ 209.564056][ T51] bond0 (unregistering): (slave ): Releasing backup interface [ 209.576864][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.590777][ T51] bond0 (unregistering): (slave team1): Releasing backup interface [ 209.610910][ T51] bond0 (unregistering): Released all slaves [ 209.641214][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.668766][ T9922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 210.154251][ T9967] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 210.185403][ T9967] netlink: 128636 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.280884][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.296913][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.322975][ T9864] bridge_slave_0: entered allmulticast mode [ 210.342964][ T9864] bridge_slave_0: entered promiscuous mode [ 210.381285][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.395417][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.430104][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.437421][ T9864] bridge_slave_1: entered allmulticast mode [ 210.467880][ T9864] bridge_slave_1: entered promiscuous mode [ 210.482828][ T51] hsr_slave_0: left promiscuous mode [ 210.489549][ T51] hsr_slave_1: left promiscuous mode [ 210.495999][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.504043][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.515769][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.523735][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.550812][ T51] veth1_macvtap: left promiscuous mode [ 210.558424][ T51] veth0_macvtap: left promiscuous mode [ 210.566145][ T51] veth1_vlan: left promiscuous mode [ 210.573246][ T51] veth0_vlan: left promiscuous mode [ 210.760548][ T51] team0 (unregistering): Port device batadv1 removed [ 211.118742][ T9986] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 211.319195][ T5118] Bluetooth: hci0: command tx timeout [ 211.414732][ T51] team0 (unregistering): Port device team_slave_1 removed [ 211.466189][ T51] team0 (unregistering): Port device team_slave_0 removed [ 211.617132][ T51] bridge_slave_0 (unregistering): left allmulticast mode [ 212.145221][ T9864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.212151][ T9864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.314383][T10002] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 212.332775][T10002] netlink: 128636 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.364345][ T9864] team0: Port device team_slave_0 added [ 212.387395][ T9864] team0: Port device team_slave_1 added [ 212.399689][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.524940][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.543256][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.593114][ T9864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.661782][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.668795][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.705382][ T9864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.789817][ T9864] hsr_slave_0: entered promiscuous mode [ 212.804139][ T9864] hsr_slave_1: entered promiscuous mode [ 213.389426][ T5118] Bluetooth: hci0: command tx timeout [ 213.668303][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.783094][ T9864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.816149][ T9864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.847039][ T9864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.880725][ T9864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.961475][T10059] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.989951][T10059] net_ratelimit: 50 callbacks suppressed [ 213.989973][T10059] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 214.142659][ T9864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.223611][ T9864] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.253220][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.260688][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.316626][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.324131][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.092808][ T9864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.370999][ T9864] veth0_vlan: entered promiscuous mode [ 215.388870][ T9864] veth1_vlan: entered promiscuous mode [ 215.469835][ T5118] Bluetooth: hci0: command tx timeout [ 215.505534][ T9864] veth0_macvtap: entered promiscuous mode [ 215.525541][ T9864] veth1_macvtap: entered promiscuous mode [ 215.549761][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.562434][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.599220][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.628163][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.654197][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.666282][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.689236][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.711012][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.741723][ T9864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.793035][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.810485][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.828203][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.851489][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.863371][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.876437][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.897278][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.932537][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.964694][ T9864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.008756][ T9864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.033649][ T9864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.043005][ T9864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.054087][ T9864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.307947][ T5204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.332759][ T5204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.434954][T10157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.515995][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.548060][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.891221][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.911608][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.038160][T10186] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.085892][T10191] Cannot find add_set index 0 as target [ 217.146382][T10194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.668087][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.703604][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.453576][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.470834][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.945994][T10332] netlink: 'syz-executor.4': attribute type 309 has an invalid length. [ 219.990112][T10332] macsec0: entered promiscuous mode [ 219.996737][T10332] macsec1: entered promiscuous mode [ 222.057921][T10399] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.190808][T10407] netlink: 'syz-executor.2': attribute type 309 has an invalid length. [ 222.249485][T10407] macsec0: entered promiscuous mode [ 222.275028][T10407] macsec1: entered promiscuous mode [ 222.886050][T10436] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.087527][T10444] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.514066][T10460] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.367424][T10476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.328311][T10512] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.334690][T10584] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 229.225031][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.853737][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.388230][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.490332][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.139795][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.313680][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.488428][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.514498][T10706] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.662278][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.990320][ T81] bridge_slave_1: left allmulticast mode [ 232.016797][ T81] bridge_slave_1: left promiscuous mode [ 232.042934][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.083730][ T81] bridge_slave_0: left promiscuous mode [ 232.099448][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.214136][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.367488][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.379847][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.389654][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.398086][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.407628][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.429991][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.590557][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 233.074554][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.098216][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.112704][ T81] bond0 (unregistering): (slave team1): Releasing backup interface [ 233.128002][ T81] bond0 (unregistering): Released all slaves [ 233.146515][ T81] bond1 (unregistering): Released all slaves [ 233.167450][ T81] bond2 (unregistering): Released all slaves [ 233.186571][ T81] bond3 (unregistering): Released all slaves [ 233.906909][T10783] ip6tnl1: entered promiscuous mode [ 233.913634][T10783] ip6tnl1: entered allmulticast mode [ 234.070255][ T81] hsr_slave_0: left promiscuous mode [ 234.085917][ T81] hsr_slave_1: left promiscuous mode [ 234.102245][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.120526][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.150032][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.163091][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.230290][ T81] veth1_macvtap: left promiscuous mode [ 234.235921][ T81] veth0_macvtap: left promiscuous mode [ 234.250986][ T81] veth1_vlan: left promiscuous mode [ 234.265533][ T81] veth0_vlan: left promiscuous mode [ 234.509238][ T5127] Bluetooth: hci3: command tx timeout [ 234.728190][ T81] team0 (unregistering): Port device batadv1 removed [ 235.495981][ T81] team0 (unregistering): Port device team_slave_1 removed [ 235.547332][ T81] team0 (unregistering): Port device team_slave_0 removed [ 235.736491][ T81] bridge_slave_0 (unregistering): left allmulticast mode [ 236.107079][T10791] ip6tnl1: entered promiscuous mode [ 236.117190][T10791] ip6tnl1: entered allmulticast mode [ 236.287286][T10745] chnl_net:caif_netlink_parms(): no params data found [ 236.589176][ T5127] Bluetooth: hci3: command tx timeout [ 237.092884][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.116141][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.127836][T10745] bridge_slave_0: entered allmulticast mode [ 237.144515][T10745] bridge_slave_0: entered promiscuous mode [ 237.181598][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.188810][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.223246][T10745] bridge_slave_1: entered allmulticast mode [ 237.254949][T10745] bridge_slave_1: entered promiscuous mode [ 237.266709][T10856] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 237.315738][T10859] dummy0: entered promiscuous mode [ 237.352325][T10859] batman_adv: batadv0: Adding interface: macsec1 [ 237.358739][T10859] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.389674][T10859] batman_adv: batadv0: Interface activated: macsec1 [ 237.406146][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.431017][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.446234][T10863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.474143][T10863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.492131][T10863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.508374][T10863] batman_adv: batadv0: Interface deactivated: macsec1 [ 237.515682][T10863] batman_adv: batadv0: Removing interface: macsec1 [ 237.675845][T10745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.680065][ T81] IPVS: stop unused estimator thread 0... [ 237.697496][T10745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.848192][T10745] team0: Port device team_slave_0 added [ 237.872270][T10879] À: renamed from syztnl0 [ 237.898937][T10745] team0: Port device team_slave_1 added [ 238.038650][T10745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.052670][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.109891][T10745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.140535][T10887] ip6tnl1: entered promiscuous mode [ 238.151806][T10887] ip6tnl1: entered allmulticast mode [ 238.161772][T10745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.174935][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.277376][T10745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.491128][T10745] hsr_slave_0: entered promiscuous mode [ 238.532288][T10745] hsr_slave_1: entered promiscuous mode [ 238.568016][T10745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.599552][T10745] Cannot create hsr debugfs directory [ 238.669478][ T5127] Bluetooth: hci3: command tx timeout [ 239.268440][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 239.694902][T10745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.772108][T10745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.795548][T10745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.824237][T10958] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.845206][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.860706][T10745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.148847][T10745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.170648][T10975] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.213887][T10745] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.258468][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.265748][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.313644][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.320926][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.522413][T10987] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.575598][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.666638][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.764574][ T5127] Bluetooth: hci3: command tx timeout [ 241.011744][T11011] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.042168][T10745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.203623][T10745] veth0_vlan: entered promiscuous mode [ 241.258759][T10745] veth1_vlan: entered promiscuous mode [ 241.452429][T10745] veth0_macvtap: entered promiscuous mode [ 241.488525][T10745] veth1_macvtap: entered promiscuous mode [ 241.591126][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.620527][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.649100][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.675273][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.697369][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.705207][T11041] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.708733][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.743568][T10745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.797593][T11043] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 241.830997][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.848264][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.860068][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.871285][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.881937][T10745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.905304][T10745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.945053][T10745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.973527][T10745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.995236][T10745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.009590][T10745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.023626][T10745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.398215][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.435552][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.481088][T11070] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 242.486798][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.497943][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.580687][T11071] delete_channel: no stack [ 242.596241][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.608167][T11076] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 242.618060][T11075] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.737508][ T1112] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.742556][T11070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.891920][ T1063] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.112271][T11095] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.139943][T11095] 0ªX¹¦À: renamed from caif0 [ 243.156971][T11095] 0ªX¹¦À: entered allmulticast mode [ 243.165935][T11095] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 243.206949][T11099] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.372482][T11108] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.075350][T11145] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 244.163469][T11147] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 244.442837][T11157] syz-executor.3[11157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.443047][T11157] syz-executor.3[11157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.855764][ T1063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.010117][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.113095][T11183] x_tables: duplicate underflow at hook 4 [ 245.725839][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.736151][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.747370][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.756263][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.765005][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.772795][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.103161][ T1063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.268993][ T1063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.270420][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802caac800: rx timeout, send abort [ 246.291448][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802caad000: rx timeout, send abort [ 246.300432][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802caac800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.316510][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802caad000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.353110][T11217] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 246.375723][T11212] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.398768][T11212] 0ªX¹¦À: renamed from caif0 [ 246.407181][T11212] 0ªX¹¦À: entered allmulticast mode [ 246.413379][T11212] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 246.433903][T11215] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 246.554274][ T1063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.581858][T11219] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65534) [ 246.617167][T11219] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 246.675462][T11225] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 246.818823][T11230] batadv0: entered promiscuous mode [ 246.829064][T11230] batadv0: left promiscuous mode [ 246.884950][T11231] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 246.896397][T11231] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 246.917763][T11225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.920816][ T81] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.011811][T11240] x_tables: duplicate entry at hook 2 [ 247.050946][ T81] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.220916][T11198] chnl_net:caif_netlink_parms(): no params data found [ 247.250644][ T1063] bridge_slave_1: left allmulticast mode [ 247.256583][ T1063] bridge_slave_1: left promiscuous mode [ 247.263156][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.273581][ T1063] bridge_slave_0: left allmulticast mode [ 247.279822][ T1063] bridge_slave_0: left promiscuous mode [ 247.285707][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.782833][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.805782][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.844440][ T1063] bond0 (unregistering): Released all slaves [ 247.869432][ T5118] Bluetooth: hci3: command tx timeout [ 247.879350][T11251] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.925606][T11251] 0ªX¹¦À: renamed from caif0 [ 247.955338][T11251] 0ªX¹¦À: entered allmulticast mode [ 247.986134][T11251] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 248.146888][T11261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.468373][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.504916][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.525290][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.554961][T11198] bridge_slave_0: entered allmulticast mode [ 248.588541][T11198] bridge_slave_0: entered promiscuous mode [ 248.632673][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.648188][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.676119][T11198] bridge_slave_1: entered allmulticast mode [ 248.688488][T11198] bridge_slave_1: entered promiscuous mode [ 248.739308][ T1063] hsr_slave_0: left promiscuous mode [ 248.755222][ T1063] hsr_slave_1: left promiscuous mode [ 248.778464][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.800265][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.817555][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.825353][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.892464][ T1063] veth1_macvtap: left promiscuous mode [ 248.914025][ T1063] veth0_macvtap: left promiscuous mode [ 248.921264][ T1063] veth1_vlan: left promiscuous mode [ 248.930426][ T1063] veth0_vlan: left promiscuous mode [ 248.934892][T11293] x_tables: duplicate entry at hook 2 [ 249.705149][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 249.757492][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 249.949466][ T5118] Bluetooth: hci3: command tx timeout [ 250.422644][T11307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.449849][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.493189][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.728260][T11198] team0: Port device team_slave_0 added [ 250.765061][T11198] team0: Port device team_slave_1 added [ 250.943742][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.968816][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.082177][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.121798][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.128841][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.166987][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.447704][T11198] hsr_slave_0: entered promiscuous mode [ 251.471505][T11198] hsr_slave_1: entered promiscuous mode [ 251.487275][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.502511][T11198] Cannot create hsr debugfs directory [ 251.521505][T11347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.029390][ T5118] Bluetooth: hci3: command tx timeout [ 252.098050][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.451754][T11390] x_tables: duplicate underflow at hook 1 [ 252.788555][T11198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.813003][T11198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.833489][T11198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.857205][T11198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.924624][T11407] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 252.945268][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.109563][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.180363][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.213006][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.220237][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.253109][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.260484][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.406835][T11198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.434585][T11198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.637104][T11434] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 253.824306][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.006229][T11198] veth0_vlan: entered promiscuous mode [ 254.102555][T11198] veth1_vlan: entered promiscuous mode [ 254.111948][ T5118] Bluetooth: hci3: command tx timeout [ 254.205595][T11198] veth0_macvtap: entered promiscuous mode [ 254.237268][T11198] veth1_macvtap: entered promiscuous mode [ 254.306244][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.326777][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.337949][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.361842][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.384311][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.407693][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.421767][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.438521][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.453154][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.466551][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.519833][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.540560][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.588177][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.618838][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.664827][T11198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.691688][T11198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.710097][T11198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.733164][T11198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.896052][T11473] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.954240][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.976587][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.977155][T11478] x_tables: duplicate underflow at hook 1 [ 255.133685][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.156148][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.692109][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.708153][T11503] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 255.729180][T11503] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 256.113781][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.120518][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.665779][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.690877][T11535] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 256.714802][T11535] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 257.647084][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.682133][T11569] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 257.719518][T11569] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 257.886485][ T1112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.822138][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.838966][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.848543][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.860994][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.879568][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.890970][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.953420][ T1112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.116947][ T1112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.151742][T11620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.238984][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.349747][ T1112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.759282][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.768755][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.789374][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.812549][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.871229][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.919418][ T1112] bridge_slave_1: left allmulticast mode [ 259.926490][ T1112] bridge_slave_1: left promiscuous mode [ 259.939403][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.962846][ T1112] bridge_slave_0: left allmulticast mode [ 259.975478][ T1112] bridge_slave_0: left promiscuous mode [ 259.987641][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.717056][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.734304][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.758697][ T1112] bond0 (unregistering): Released all slaves [ 260.793244][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.848558][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.918669][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.990958][ T5118] Bluetooth: hci3: command tx timeout [ 261.229699][T11607] chnl_net:caif_netlink_parms(): no params data found [ 261.664006][ T1112] hsr_slave_0: left promiscuous mode [ 261.689229][ T1112] hsr_slave_1: left promiscuous mode [ 261.707521][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.725536][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.747806][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.765167][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.846886][ T1112] veth1_macvtap: left promiscuous mode [ 261.860488][ T1112] veth0_macvtap: left promiscuous mode [ 261.875277][ T1112] veth1_vlan: left promiscuous mode [ 261.886701][ T1112] veth0_vlan: left promiscuous mode [ 262.561956][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 262.630860][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 263.070976][ T5118] Bluetooth: hci3: command tx timeout [ 263.548766][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.568527][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.582738][T11607] bridge_slave_0: entered allmulticast mode [ 263.594641][T11607] bridge_slave_0: entered promiscuous mode [ 263.605950][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.619259][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.631015][T11607] bridge_slave_1: entered allmulticast mode [ 263.644442][T11607] bridge_slave_1: entered promiscuous mode [ 263.753297][T11607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.804635][T11607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.951794][T11607] team0: Port device team_slave_0 added [ 263.982763][T11607] team0: Port device team_slave_1 added [ 264.106396][T11607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.131777][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.168611][T11607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.182422][T11758] __nla_validate_parse: 6 callbacks suppressed [ 264.182444][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.203108][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.250410][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.261579][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.271769][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.283275][T11607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.313797][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.363257][T11607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.586024][T11607] hsr_slave_0: entered promiscuous mode [ 264.606904][T11607] hsr_slave_1: entered promiscuous mode [ 264.694108][T11607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.740236][T11607] Cannot create hsr debugfs directory [ 264.780547][T11788] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.150493][ T5118] Bluetooth: hci3: command tx timeout [ 265.508108][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.553425][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.787795][T11607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.818840][T11607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.846609][T11607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.883745][T11607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.064000][T11847] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 266.113065][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.250445][T11607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.333642][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.390476][T11607] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.452746][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.460159][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.493228][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.500816][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.848610][T11873] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 267.162829][T11888] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 267.229179][ T5118] Bluetooth: hci3: command tx timeout [ 267.315477][T11607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.507391][T11607] veth0_vlan: entered promiscuous mode [ 267.565057][T11607] veth1_vlan: entered promiscuous mode [ 267.678366][T11607] veth0_macvtap: entered promiscuous mode [ 267.724118][T11607] veth1_macvtap: entered promiscuous mode [ 267.827660][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.858668][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.890130][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.935936][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.990281][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.007742][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.052694][T11607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.138414][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.167160][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.206518][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.246138][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.271373][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.289113][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.317218][T11607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.387027][T11607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.406960][T11607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.428175][T11607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.438689][T11607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.708775][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.729868][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.778778][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.806102][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.895700][T11992] __nla_validate_parse: 4 callbacks suppressed [ 269.895723][T11992] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.914918][T11992] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 271.041208][ T1063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.143222][T12047] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 271.191378][T12047] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 271.236654][T12045] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.278761][T12045] tipc: Started in network mode [ 271.292696][T12045] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 271.315030][T12045] tipc: Enabled bearer , priority 16 [ 271.841007][ T1063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.918544][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.930441][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.955532][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.978641][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.991480][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.007302][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.074669][ T1063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.238421][T12093] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 272.327656][T12097] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.336702][ T1063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.347458][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.430378][ T5164] tipc: Node number set to 10922666 [ 272.499946][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.524068][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.009974][ T1063] bridge_slave_1: left allmulticast mode [ 273.015705][ T1063] bridge_slave_1: left promiscuous mode [ 273.071469][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.103399][ T1063] bridge_slave_0: left allmulticast mode [ 273.143525][ T1063] bridge_slave_0: left promiscuous mode [ 273.155043][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.217918][T12128] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.243032][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.790563][ T5118] Bluetooth: hci0: command tx timeout [ 274.109476][ T5118] Bluetooth: hci3: command tx timeout [ 274.158169][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.172653][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.192728][ T1063] bond0 (unregistering): Released all slaves [ 274.241037][T12079] chnl_net:caif_netlink_parms(): no params data found [ 274.256238][T12134] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 274.265563][T12134] netlink: 14557 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.600389][ T29] audit: type=1804 audit(1717335850.842:21): pid=12172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4004000310/syzkaller.Iyzb99/220/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 274.855283][T12189] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.019662][T12079] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.034021][T12079] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.053850][T12079] bridge_slave_0: entered allmulticast mode [ 275.071169][T12079] bridge_slave_0: entered promiscuous mode [ 275.170663][ T1063] hsr_slave_0: left promiscuous mode [ 275.194166][ T1063] hsr_slave_1: left promiscuous mode [ 275.260265][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.268355][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.314705][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.326555][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.450625][ T1063] veth1_macvtap: left promiscuous mode [ 275.456334][ T1063] veth0_macvtap: left promiscuous mode [ 275.514720][ T1063] veth1_vlan: left promiscuous mode [ 275.525728][ T1063] veth0_vlan: left promiscuous mode [ 276.189314][ T5118] Bluetooth: hci3: command tx timeout [ 276.306175][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 276.369629][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 276.902044][T12079] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.917747][T12079] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.925126][T12079] bridge_slave_1: entered allmulticast mode [ 276.935492][T12079] bridge_slave_1: entered promiscuous mode [ 277.071948][T12079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.108830][T12079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.218608][T12245] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 277.240656][T12245] netem: change failed [ 277.284128][T12079] team0: Port device team_slave_0 added [ 277.353269][T12079] team0: Port device team_slave_1 added [ 277.456628][T12079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.499155][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.542479][T12079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.599898][T12079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.606998][T12079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.648955][T12079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.808495][T12079] hsr_slave_0: entered promiscuous mode [ 277.829638][T12079] hsr_slave_1: entered promiscuous mode [ 277.838644][T12079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.857764][T12079] Cannot create hsr debugfs directory [ 277.950901][T12282] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 277.963784][T12282] netem: change failed [ 278.270792][ T5118] Bluetooth: hci3: command tx timeout [ 278.301444][T12296] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 278.869596][T12315] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 279.486276][T12079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.519859][T12079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.545814][T12079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.576761][T12079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.858569][T12079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.898059][T12079] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.931012][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.938271][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.972003][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.979262][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.349768][ T5118] Bluetooth: hci3: command tx timeout [ 280.668638][T12079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.842675][T12079] veth0_vlan: entered promiscuous mode [ 280.893058][T12079] veth1_vlan: entered promiscuous mode [ 281.001534][T12079] veth0_macvtap: entered promiscuous mode [ 281.027784][T12079] veth1_macvtap: entered promiscuous mode [ 281.090738][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.101727][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.113702][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.124335][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.140128][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.162323][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.182603][T12079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.211482][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.269703][T12410] bond4: entered promiscuous mode [ 281.392305][T12414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.403171][T12414] bond5: entered promiscuous mode [ 281.410491][T12414] bond4: (slave bond5): Enslaving as an active interface with an up link [ 281.437146][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.467612][T12410] bond4 (unregistering): (slave bond5): Releasing backup interface [ 281.489222][T12410] bond5: left promiscuous mode [ 281.511392][T12410] bond4 (unregistering): Released all slaves [ 281.537668][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.548512][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.559322][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.569920][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.580305][T12079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.593576][T12079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.605410][T12079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.778568][T12079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.816440][T12079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.839214][T12079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.855849][T12079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.130381][ T5163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.153185][ T5163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.215217][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.226338][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.243479][ T5204] IPVS: starting estimator thread 0... [ 282.349631][T12444] IPVS: using max 17 ests per chain, 40800 per kthread [ 282.444049][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.482382][T12450] bond1: entered promiscuous mode [ 282.508369][T12453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.532225][T12453] bond2: entered promiscuous mode [ 282.538254][T12453] bond1: (slave bond2): Enslaving as an active interface with an up link [ 282.562301][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.619648][T12450] bond1 (unregistering): (slave bond2): Releasing backup interface [ 282.629911][T12450] bond2: left promiscuous mode [ 282.652891][T12450] bond1 (unregistering): Released all slaves [ 283.185813][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.280037][T12482] : entered promiscuous mode [ 284.672493][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.822203][T12555] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 284.894312][T12558] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 285.650860][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.661939][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.680170][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.702365][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.717714][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.725400][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.805914][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.839888][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.068353][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.545537][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.776897][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.946913][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.991914][ T81] bridge_slave_1: left allmulticast mode [ 287.021531][ T81] bridge_slave_1: left promiscuous mode [ 287.039288][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.058156][ T81] bridge_slave_0: left allmulticast mode [ 287.064144][ T81] bridge_slave_0: left promiscuous mode [ 287.074219][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.315882][T12638] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 287.375920][T12638] netlink: 9364 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.409237][T12638] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 287.789937][ T5127] Bluetooth: hci3: command tx timeout [ 288.276254][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.306215][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.335180][ T81] bond0 (unregistering): Released all slaves [ 288.504362][T12581] chnl_net:caif_netlink_parms(): no params data found [ 288.885661][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.922429][ T5127] Bluetooth: hci1: command 0x0406 tx timeout [ 289.158776][T12670] team0: Port device bridge2 added [ 289.218286][T12685] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 289.236877][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.266458][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.286706][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.295348][T12581] bridge_slave_0: entered allmulticast mode [ 289.321120][T12581] bridge_slave_0: entered promiscuous mode [ 289.350317][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.357594][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.383443][T12581] bridge_slave_1: entered allmulticast mode [ 289.393822][T12581] bridge_slave_1: entered promiscuous mode [ 289.441980][ T81] hsr_slave_0: left promiscuous mode [ 289.466736][ T81] hsr_slave_1: left promiscuous mode [ 289.491769][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.509372][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.518695][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.541752][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.626194][ T81] veth1_macvtap: left promiscuous mode [ 289.649486][ T81] veth0_macvtap: left promiscuous mode [ 289.659325][ T81] veth1_vlan: left promiscuous mode [ 289.671689][ T81] veth0_vlan: left promiscuous mode [ 289.879674][ T5118] Bluetooth: hci3: command tx timeout [ 290.664135][ T81] team0 (unregistering): Port device team_slave_1 removed [ 290.755697][ T81] team0 (unregistering): Port device team_slave_0 removed [ 291.325138][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.368509][T12700] team0: Port device bridge3 added [ 291.511003][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.540736][T12722] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 291.586482][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.707344][T12581] team0: Port device team_slave_0 added [ 291.787464][T12581] team0: Port device team_slave_1 added [ 291.897676][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.919125][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.951747][ T5118] Bluetooth: hci3: command tx timeout [ 292.002795][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.041064][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.056962][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.143861][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.326580][T12749] vlan2: entered allmulticast mode [ 292.346468][T12749] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 292.385136][T12749] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 292.490655][T12581] hsr_slave_0: entered promiscuous mode [ 292.530099][T12581] hsr_slave_1: entered promiscuous mode [ 292.553702][T12581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.566632][T12581] Cannot create hsr debugfs directory [ 292.771996][T12768] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 293.413770][T12799] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 293.437747][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.490537][T12799] tipc: Failed to remove unknown binding: 66,1,1/0:2249245894/2249245896 [ 293.502421][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.518231][T12799] tipc: Failed to remove unknown binding: 66,1,1/0:2249245894/2249245896 [ 293.590486][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.735394][T12581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.772674][T12581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.795146][T12581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.861222][T12581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.039276][ T5118] Bluetooth: hci3: command tx timeout [ 294.267673][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.320907][T12832] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 294.349807][T12832] tipc: Failed to remove unknown binding: 66,1,1/0:2452674539/2452674541 [ 294.358622][T12832] tipc: Failed to remove unknown binding: 66,1,1/0:2452674539/2452674541 [ 294.388887][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.413742][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.421003][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.479056][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.486856][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.583696][T12842] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 294.656154][T12842] tipc: Failed to remove unknown binding: 66,1,1/0:857034129/857034131 [ 294.687002][T12842] tipc: Failed to remove unknown binding: 66,1,1/0:857034129/857034131 [ 294.806506][T12848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.066521][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.190595][T12581] veth0_vlan: entered promiscuous mode [ 295.206881][T12581] veth1_vlan: entered promiscuous mode [ 295.405035][T12581] veth0_macvtap: entered promiscuous mode [ 295.432709][T12581] veth1_macvtap: entered promiscuous mode [ 295.507708][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.549570][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.580298][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.596098][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.606196][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.616784][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.656079][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.670933][T12881] tipc: Failed to remove unknown binding: 66,1,1/0:2252578843/2252578845 [ 295.688426][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.719177][T12881] tipc: Failed to remove unknown binding: 66,1,1/0:2252578843/2252578845 [ 295.719237][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.748332][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.763465][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.774473][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.786205][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.802196][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.827859][T12876] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 295.855734][T12581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.879213][T12581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.887999][T12581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.927188][T12581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.176743][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.209169][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.280488][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.321414][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.700265][T12927] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 296.887390][T12936] No such timeout policy "syz1" [ 296.995442][T12938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.288327][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.314756][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.527682][T12965] No such timeout policy "syz1" [ 297.641529][T12967] No such timeout policy "syz1" [ 298.107736][T12991] No such timeout policy "syz1" [ 298.356634][T12996] No such timeout policy "syz1" [ 299.114851][ T1063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.188397][T13027] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 300.118164][ T1063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.200748][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.290512][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.301065][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.310885][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.319346][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.327202][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.334871][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.505285][ T1063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.646510][T13071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 300.676099][T13071] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.705199][T13071] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 300.727486][ T1063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.482811][T13103] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 301.503610][T13103] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.518843][T13103] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 302.440858][ T5127] Bluetooth: hci3: command tx timeout [ 303.919322][ T1063] bridge_slave_1: left allmulticast mode [ 303.929126][ T1063] bridge_slave_1: left promiscuous mode [ 303.934973][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.003192][ T1063] bridge_slave_0: left allmulticast mode [ 304.008919][ T1063] bridge_slave_0: left promiscuous mode [ 304.042500][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.383281][T13144] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.399942][T13144] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 304.512994][ T5127] Bluetooth: hci3: command tx timeout [ 304.561636][T13149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.769615][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.795111][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.807875][ T1063] bond0 (unregistering): Released all slaves [ 304.827725][T13141] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.993826][T13139] syzkaller0: entered promiscuous mode [ 305.002324][T13139] syzkaller0: entered allmulticast mode [ 305.132703][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.160612][T13157] bond_slave_0: entered promiscuous mode [ 305.166397][T13157] bond_slave_1: entered promiscuous mode [ 305.178052][T13157] macvlan3: entered allmulticast mode [ 305.183695][T13157] bond0: entered allmulticast mode [ 305.188850][T13157] bond_slave_0: entered allmulticast mode [ 305.194926][T13157] bond_slave_1: entered allmulticast mode [ 305.202526][T13157] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 306.600710][ T5127] Bluetooth: hci3: command tx timeout [ 307.414290][T13181] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.545985][ T1063] hsr_slave_0: left promiscuous mode [ 307.567431][ T1063] hsr_slave_1: left promiscuous mode [ 307.583450][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.599878][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.619481][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.641450][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.661343][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.741033][ T1063] veth1_macvtap: left promiscuous mode [ 307.757853][ T1063] veth0_macvtap: left promiscuous mode [ 307.773169][ T1063] veth1_vlan: left promiscuous mode [ 307.778709][ T1063] veth0_vlan: left promiscuous mode [ 308.161490][T13210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.165049][T13207] xt_CT: No such helper "pptp" [ 308.669781][ T5127] Bluetooth: hci3: command tx timeout [ 308.678469][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 308.732472][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 309.238058][T13053] chnl_net:caif_netlink_parms(): no params data found [ 309.274928][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.291650][T13188] macvlan4: entered allmulticast mode [ 309.303951][T13188] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 309.318616][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.341411][T13207] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 309.380513][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.490742][T13219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.536501][T13207] 0ªX¹¦D: left allmulticast mode [ 309.559233][T13213] xt_CT: No such helper "pptp" [ 309.633348][T13218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.681703][T13220] xt_CT: No such helper "pptp" [ 310.154278][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.164492][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.337095][T13207] 0ªX¹¦À: left allmulticast mode [ 311.097187][T13207] veth0_vlan: left allmulticast mode [ 311.141320][T13207] vlan0: left allmulticast mode [ 311.319738][T13207] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.328782][T13207] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.349111][T13207] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.358153][T13207] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.718102][T13218] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 311.731221][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.409948][T13218] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.417609][T13218] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.595185][T13218] 0ªX¹¦À: left allmulticast mode [ 313.014684][T13218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.073528][T13218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.340160][T13218] veth0_vlan: left allmulticast mode [ 313.407227][T13218] vlan0: left allmulticast mode [ 313.600337][T13218] tipc: Resetting bearer [ 313.613959][T13218] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.623449][T13218] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.633352][T13218] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.642561][T13218] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.806352][T13218] ip6tnl1: left promiscuous mode [ 313.829271][T13218] ip6tnl1: left allmulticast mode [ 313.837788][T13213] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 313.849033][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.359754][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.367412][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.414313][T13213] bond_slave_0: left promiscuous mode [ 314.426434][T13213] bond_slave_1: left promiscuous mode [ 314.938069][T13213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.990601][T13213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.529149][T13213] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.538189][T13213] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.559114][T13213] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.568079][T13213] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.732774][T13213] macsec1: left promiscuous mode [ 315.749686][T13213] ip6tnl1: left promiscuous mode [ 315.754688][T13213] ip6tnl1: left allmulticast mode [ 315.848881][T13213] macvlan3: left allmulticast mode [ 315.864618][T13213] bond0: left allmulticast mode [ 315.879076][T13213] bond_slave_0: left allmulticast mode [ 315.885538][T13213] bond_slave_1: left allmulticast mode [ 315.896408][T13213] macvlan4: left allmulticast mode [ 315.933585][T13213] syz-executor.4 (13213) used greatest stack depth: 18384 bytes left [ 315.991038][T13240] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.013485][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 316.261178][T13258] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.270791][T13053] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.270903][T13053] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.271108][T13053] bridge_slave_0: entered allmulticast mode [ 316.272669][T13053] bridge_slave_0: entered promiscuous mode [ 316.329686][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.363525][T13053] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.383186][T13053] bridge_slave_1: entered allmulticast mode [ 316.391947][T13053] bridge_slave_1: entered promiscuous mode [ 316.531838][T13270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.552503][T13053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.587415][T13266] xt_CT: No such helper "pptp" [ 316.625794][T13053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.670017][T13273] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 316.715125][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.553213][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.559954][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.734012][T13273] tipc: Resetting bearer [ 317.761570][T13273] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.769734][T13273] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.941820][T13273] 0ªX¹¦À: left allmulticast mode [ 318.389837][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.458617][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.973941][T13273] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.997668][T13273] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.007119][T13273] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.017060][T13273] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.199911][T13273] bond1: left promiscuous mode [ 319.204745][T13273] bridge1: left promiscuous mode [ 319.229984][T13273] macsec1: left promiscuous mode [ 319.247312][T13273] ip6tnl1: left promiscuous mode [ 319.259077][T13273] ip6tnl1: left allmulticast mode [ 319.393029][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.411482][T13276] macvlan3: entered allmulticast mode [ 319.417147][T13276] bond0: entered allmulticast mode [ 319.422889][T13276] bond_slave_0: entered allmulticast mode [ 319.428771][T13276] bond_slave_1: entered allmulticast mode [ 319.435326][T13276] team1: entered allmulticast mode [ 319.443199][T13276] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 319.497784][T13284] veth0_vlan: entered allmulticast mode [ 319.526987][T13053] team0: Port device team_slave_0 added [ 319.560440][T13053] team0: Port device team_slave_1 added [ 319.680124][T13053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.708385][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.797567][T13053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.834545][T13053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.847408][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.874008][T13053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.979707][T13313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.016970][T13309] xt_CT: No such helper "pptp" [ 320.353062][T13313] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 320.369556][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.389041][T13313] veth0_vlan: left allmulticast mode [ 320.419810][T13053] hsr_slave_0: entered promiscuous mode [ 320.469684][T13053] hsr_slave_1: entered promiscuous mode [ 320.479837][T13053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.487763][T13053] Cannot create hsr debugfs directory [ 320.714901][T13322] veth0_vlan: entered allmulticast mode [ 320.943326][T13332] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.557535][T13335] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.727262][T13053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.780948][T13053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.811349][T13053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.843036][T13053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.805910][T13053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.905990][T13053] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.973377][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.980636][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.051678][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.058901][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.780883][T13053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.135254][T13053] veth0_vlan: entered promiscuous mode [ 324.158686][T13053] veth1_vlan: entered promiscuous mode [ 324.285351][T13053] veth0_macvtap: entered promiscuous mode [ 324.381053][T13053] veth1_macvtap: entered promiscuous mode [ 324.638912][T13053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.707317][T13436] xt_l2tp: v2 doesn't support IP mode [ 324.726491][T13053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.788733][T13053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.832690][T13053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.871507][T13053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.908271][T13053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.015329][T13446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.072012][T13448] xt_l2tp: v2 doesn't support IP mode [ 325.307579][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.317858][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.403271][T13456] syz-executor.0[13456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.403557][T13456] syz-executor.0[13456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.418153][T13456] syz-executor.0[13456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.446409][T13456] syz-executor.0[13456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.456609][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.493817][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.664485][T13467] xt_cgroup: invalid path, errno=-2 [ 325.673647][T13465] xt_l2tp: v2 doesn't support IP mode [ 325.804709][T13474] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.349436][T13496] xt_cgroup: invalid path, errno=-2 [ 326.353031][T13497] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 326.366912][T13497] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 326.917851][T13525] syz-executor.4[13525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.919579][T13525] syz-executor.4[13525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.944559][T13525] syz-executor.4[13525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.965865][T13525] syz-executor.4[13525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.482140][ T1053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.288352][ T1053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.426384][ T1053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.467875][T13587] Bluetooth: MGMT ver 1.22 [ 328.511264][T13587] wg2: entered promiscuous mode [ 328.516381][T13587] wg2: entered allmulticast mode [ 328.572360][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.584179][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.593299][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.606551][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.614807][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 328.623031][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.682009][ T1053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.262625][T13588] chnl_net:caif_netlink_parms(): no params data found [ 329.278882][ T1053] bridge_slave_1: left allmulticast mode [ 329.285131][ T1053] bridge_slave_1: left promiscuous mode [ 329.307551][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.356586][ T1053] bridge_slave_0: left allmulticast mode [ 329.377230][ T1053] bridge_slave_0: left promiscuous mode [ 329.402278][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.869643][ T5118] Bluetooth: hci4: command 0x0406 tx timeout [ 329.987531][T13634] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 330.107361][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.123658][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.135792][ T1053] bond0 (unregistering): Released all slaves [ 330.381302][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.407780][T13645] wg2: entered promiscuous mode [ 330.420905][T13645] wg2: entered allmulticast mode [ 330.672459][ T5127] Bluetooth: hci3: command tx timeout [ 330.812331][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.854899][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.871283][T13588] bridge_slave_0: entered allmulticast mode [ 330.878917][T13588] bridge_slave_0: entered promiscuous mode [ 330.956390][T13676] sctp: [Deprecated]: syz-executor.2 (pid 13676) Use of int in maxseg socket option. [ 330.956390][T13676] Use struct sctp_assoc_value instead [ 330.978173][ T1053] hsr_slave_0: left promiscuous mode [ 330.987163][ T1053] hsr_slave_1: left promiscuous mode [ 330.998023][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.015852][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.024970][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.032943][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.070100][ T1053] veth1_macvtap: left promiscuous mode [ 331.075803][ T1053] veth0_macvtap: left promiscuous mode [ 331.081766][ T1053] veth1_vlan: left promiscuous mode [ 331.087518][ T1053] veth0_vlan: left promiscuous mode [ 331.789392][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 331.852752][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 332.444924][T13668] wg2: entered promiscuous mode [ 332.458206][T13668] wg2: entered allmulticast mode [ 332.467532][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.481133][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.495103][T13588] bridge_slave_1: entered allmulticast mode [ 332.513551][T13588] bridge_slave_1: entered promiscuous mode [ 332.643559][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.702903][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.750211][T13695] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.760106][ T5118] Bluetooth: hci3: command tx timeout [ 332.897728][T13701] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.927593][T13588] team0: Port device team_slave_0 added [ 332.954489][T13588] team0: Port device team_slave_1 added [ 333.096909][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.118456][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.218930][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.251021][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.258460][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.285577][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.301690][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.370414][T13718] wg2: entered promiscuous mode [ 333.375337][T13718] wg2: entered allmulticast mode [ 333.520176][T13588] hsr_slave_0: entered promiscuous mode [ 333.558808][T13588] hsr_slave_1: entered promiscuous mode [ 333.573576][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.606984][T13588] Cannot create hsr debugfs directory [ 334.014153][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.606629][T13768] sctp: [Deprecated]: syz-executor.2 (pid 13768) Use of int in maxseg socket option. [ 334.606629][T13768] Use struct sctp_assoc_value instead [ 334.628858][T13769] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.741652][T13588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.773895][T13588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.814867][T13588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.829167][ T5118] Bluetooth: hci3: command 0x040f tx timeout [ 334.894601][T13588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.106126][T13785] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 335.145207][T13785] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 335.185544][T13785] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 335.368450][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.430145][T13792] sctp: [Deprecated]: syz-executor.2 (pid 13792) Use of int in maxseg socket option. [ 335.430145][T13792] Use struct sctp_assoc_value instead [ 335.473410][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.523912][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.531147][ T5204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.573882][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.581155][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.866366][T13808] bridge0: port 3(team0) entered blocking state [ 335.897864][T13808] bridge0: port 3(team0) entered disabled state [ 335.927129][T13808] team0: entered allmulticast mode [ 335.940316][T13808] team_slave_0: entered allmulticast mode [ 335.959468][T13808] team_slave_1: entered allmulticast mode [ 335.977701][T13808] team0: entered promiscuous mode [ 335.983146][T13808] team_slave_0: entered promiscuous mode [ 335.997891][T13808] team_slave_1: entered promiscuous mode [ 336.283464][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.487333][T13588] veth0_vlan: entered promiscuous mode [ 336.556833][T13588] veth1_vlan: entered promiscuous mode [ 336.708645][T13588] veth0_macvtap: entered promiscuous mode [ 336.742982][T13588] veth1_macvtap: entered promiscuous mode [ 336.828087][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.856245][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.893754][T13588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.909220][ T5118] Bluetooth: hci3: command 0x040f tx timeout [ 336.926097][T13588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.927118][T13839] sctp: [Deprecated]: syz-executor.3 (pid 13839) Use of int in maxseg socket option. [ 336.927118][T13839] Use struct sctp_assoc_value instead [ 336.935114][T13588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.959229][T13588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.102478][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.141521][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.247313][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.264156][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.937926][T13871] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 337.955154][T13871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.963779][T13871] team0: Device bond0 failed to register rx_handler [ 337.979382][T13871] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 338.042070][T13876] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 338.060782][T13876] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.077082][T13871] team0: Port device team_slave_0 removed [ 338.083922][T13871] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 338.113273][T13871] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.470886][T13895] bridge0: port 3(team0) entered blocking state [ 338.483721][T13895] bridge0: port 3(team0) entered disabled state [ 338.491824][T13895] team0: entered allmulticast mode [ 338.497012][T13895] team_slave_0: entered allmulticast mode [ 338.503079][T13895] team_slave_1: entered allmulticast mode [ 338.509736][T13895] batadv1: entered allmulticast mode [ 338.518803][T13895] team0: entered promiscuous mode [ 338.524069][T13895] team_slave_0: entered promiscuous mode [ 338.535527][T13895] team_slave_1: entered promiscuous mode [ 338.542296][T13895] batadv1: entered promiscuous mode [ 338.664527][T13900] Bluetooth: MGMT ver 1.22 [ 338.761003][T13906] tun0: tun_chr_ioctl cmd 1074812118 [ 338.771416][ T1105] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 338.781585][ T1105] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 338.791942][T13909] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 338.793858][T13906] pimreg: entered allmulticast mode [ 338.801021][T13909] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.867919][T13906] dvmrp5: entered allmulticast mode [ 338.896136][T13906] pimreg: left allmulticast mode [ 338.908782][T13906] dvmrp5: left allmulticast mode [ 339.180976][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.247443][T13921] batman_adv: batadv2: Adding interface: netdevsim0 [ 339.276381][T13921] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.305338][T13921] batman_adv: batadv2: Not using interface netdevsim0 (retrying later): interface not active [ 339.885240][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.073770][T13925] bond0: (slave netdevsim0): Releasing backup interface [ 340.086012][T13925] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 340.149273][T13952] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 340.763835][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.775421][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.796298][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.807879][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.828205][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.838919][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 341.445374][T13977] chnl_net:caif_netlink_parms(): no params data found [ 341.563197][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.942107][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.150471][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.325437][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.430286][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.454163][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.477005][T13977] bridge_slave_0: entered allmulticast mode [ 342.494713][T13977] bridge_slave_0: entered promiscuous mode [ 342.517284][T14053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.547847][T14053] team0: Device bond0 failed to register rx_handler [ 342.584590][T14060] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 342.622776][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.638102][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.652131][T13977] bridge_slave_1: entered allmulticast mode [ 342.671214][T13977] bridge_slave_1: entered promiscuous mode [ 342.774310][T13977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.911531][ T5127] Bluetooth: hci3: command tx timeout [ 343.002851][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.019285][T14056] tun0: tun_chr_ioctl cmd 1074812118 [ 343.034943][T14058] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.069622][T14062] dvmrp5: entered allmulticast mode [ 343.081682][T13977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.146551][T14065] dvmrp5: left allmulticast mode [ 343.300462][T13977] team0: Port device team_slave_0 added [ 343.350939][T13977] team0: Port device team_slave_1 added [ 343.533293][T13977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.548757][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.596784][T13977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.671652][T13977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.691364][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.730730][T13977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.816047][ T1105] bridge_slave_1: left allmulticast mode [ 343.858635][ T1105] bridge_slave_1: left promiscuous mode [ 343.885652][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.027316][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.160798][ T1105] bridge_slave_0: left allmulticast mode [ 344.166526][ T1105] bridge_slave_0: left promiscuous mode [ 344.209649][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.989258][ T5127] Bluetooth: hci3: command tx timeout [ 345.133205][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 345.468914][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.483734][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.498929][ T1105] bond0 (unregistering): Released all slaves [ 345.519517][T14129] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 345.767649][T13977] hsr_slave_0: entered promiscuous mode [ 345.809487][T13977] hsr_slave_1: entered promiscuous mode [ 345.829927][T13977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.846199][T13977] Cannot create hsr debugfs directory [ 346.053042][T14161] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 346.153083][T14160] tun0: tun_chr_ioctl cmd 1074812118 [ 346.301604][T14160] pimreg: entered allmulticast mode [ 346.355782][T14163] dvmrp5: entered allmulticast mode [ 346.504788][ T1105] hsr_slave_0: left promiscuous mode [ 346.539298][ T1105] hsr_slave_1: left promiscuous mode [ 346.559416][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.571878][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.589550][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.603114][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.711182][ T1105] veth1_macvtap: left promiscuous mode [ 346.717012][ T1105] veth0_macvtap: left promiscuous mode [ 346.730346][ T1105] veth1_vlan: left promiscuous mode [ 346.735795][ T1105] veth0_vlan: left promiscuous mode [ 347.071967][ T5127] Bluetooth: hci3: command tx timeout [ 347.136501][T14185] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.971528][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 348.069812][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 348.992386][T14160] pimreg: left allmulticast mode [ 348.997781][T14160] dvmrp5: left allmulticast mode [ 349.159281][ T5127] Bluetooth: hci3: command tx timeout [ 349.497334][T14211] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 349.522016][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.582819][T14217] wireguard1: entered promiscuous mode [ 349.588723][T14217] wireguard1: entered allmulticast mode [ 350.177475][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.231198][T13977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 350.266767][T13977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 350.307504][T13977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 350.355446][T13977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.465298][T14254] ebtables: ebtables: counters copy to user failed while replacing table [ 350.646734][T13977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.703367][T13977] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.721135][T13232] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.728358][T13232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.788706][T13232] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.796254][T13232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.874561][T13977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.976564][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.001193][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.017888][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.379465][T13977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.532896][T13977] veth0_vlan: entered promiscuous mode [ 351.582387][T13977] veth1_vlan: entered promiscuous mode [ 351.690441][T13977] veth0_macvtap: entered promiscuous mode [ 351.731358][T13977] veth1_macvtap: entered promiscuous mode [ 351.812006][T13977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.866279][T13977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.904344][T13977] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.920253][T13977] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.944514][T13977] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.954716][T13977] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.201119][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.224634][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.348801][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.362773][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.573724][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.618097][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.641322][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.746844][T14338] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 352.765613][T14340] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 352.861654][T14340] bond4: entered promiscuous mode [ 352.870788][T14338] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 352.899883][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.018038][T14346] bond4 (unregistering): Released all slaves [ 353.119220][T14356] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.850146][T14387] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 353.939879][T14387] bond4: entered promiscuous mode [ 353.954010][T14393] bond4 (unregistering): Released all slaves [ 354.757431][T14428] __nla_validate_parse: 3 callbacks suppressed [ 354.757456][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.911473][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.233651][ T1053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.379615][T14444] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 355.418694][T14444] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.535469][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.946268][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.957563][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.981539][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.999602][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.019493][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.031634][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.289038][ T29] audit: type=1804 audit(1717335932.522:22): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4004000310/syzkaller.Iyzb99/439/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 356.475035][ T1053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.529931][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.552680][T14476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.663504][ T1053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.821877][ T1053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.124927][T14498] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 357.162368][ T1053] bridge_slave_1: left allmulticast mode [ 357.168276][T14498] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.181066][ T1053] bridge_slave_1: left promiscuous mode [ 357.190986][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.205394][ T1053] bridge_slave_0: left allmulticast mode [ 357.211348][ T1053] bridge_slave_0: left promiscuous mode [ 357.217924][ T29] audit: type=1804 audit(1717335933.452:23): pid=14502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir669658792/syzkaller.LRFKXX/644/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 357.248858][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.262858][T14504] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.969738][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.982122][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.994568][ T1053] bond0 (unregistering): Released all slaves [ 358.051348][T14452] chnl_net:caif_netlink_parms(): no params data found [ 358.119243][ T5127] Bluetooth: hci3: command tx timeout [ 358.425126][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.439451][T14525] tipc: Started in network mode [ 358.449263][T14525] tipc: Node identity 6, cluster identity 4711 [ 358.469307][T14525] tipc: Node number set to 6 [ 358.812010][ T29] audit: type=1804 audit(1717335935.052:24): pid=14558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2408194612/syzkaller.Nq5YjC/754/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 358.846205][T14559] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 358.855839][T14559] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.916368][ T1053] hsr_slave_0: left promiscuous mode [ 358.932212][ T1053] hsr_slave_1: left promiscuous mode [ 358.945690][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.959402][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.976335][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.993781][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.086782][ T1053] veth1_macvtap: left promiscuous mode [ 359.098501][ T1053] veth0_macvtap: left promiscuous mode [ 359.112444][ T1053] veth1_vlan: left promiscuous mode [ 359.140011][ T1053] veth0_vlan: left promiscuous mode [ 360.199655][ T5127] Bluetooth: hci3: command tx timeout [ 360.345994][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 360.461997][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 361.073911][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.084255][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.091708][T14452] bridge_slave_0: entered allmulticast mode [ 361.102198][T14452] bridge_slave_0: entered promiscuous mode [ 361.138602][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.146491][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.153874][T14452] bridge_slave_1: entered allmulticast mode [ 361.170775][T14452] bridge_slave_1: entered promiscuous mode [ 361.187554][T14592] syzkaller0: entered promiscuous mode [ 361.194140][T14592] syzkaller0: entered allmulticast mode [ 361.454060][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.500089][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.685373][T14452] team0: Port device team_slave_0 added [ 361.720484][T14452] team0: Port device team_slave_1 added [ 361.830496][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.847809][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.919236][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.944322][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.953574][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.980930][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.128474][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.154278][T14452] hsr_slave_0: entered promiscuous mode [ 362.178262][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.188370][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.188911][T14452] hsr_slave_1: entered promiscuous mode [ 362.209467][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.232080][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.239254][T14452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.247237][T14452] Cannot create hsr debugfs directory [ 362.254806][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.270818][ T5118] Bluetooth: hci3: command tx timeout [ 362.276370][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.833284][ T1053] batman_adv: batadv2: Removing interface: netdevsim0 [ 363.159921][ T1053] team0: left allmulticast mode [ 363.165209][ T1053] team_slave_0: left allmulticast mode [ 363.175043][ T1053] team_slave_1: left allmulticast mode [ 363.182855][ T1053] batadv1: left allmulticast mode [ 363.188149][ T1053] team0: left promiscuous mode [ 363.193339][ T1053] team_slave_0: left promiscuous mode [ 363.199655][ T1053] team_slave_1: left promiscuous mode [ 363.205539][ T1053] batadv1: left promiscuous mode [ 363.217116][ T1053] bridge0: port 3(team0) entered disabled state [ 363.235817][ T1053] bridge_slave_1: left allmulticast mode [ 363.246021][ T1053] bridge_slave_1: left promiscuous mode [ 363.261100][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.300403][ T1053] bridge_slave_0: left allmulticast mode [ 363.309569][ T1053] bridge_slave_0: left promiscuous mode [ 363.315409][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.792741][ T1053] tipc: Disabling bearer [ 363.864413][ T1053] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 364.097835][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.108313][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.120136][ T1053] bond0 (unregistering): Released all slaves [ 364.137480][ T1053] bond1 (unregistering): Released all slaves [ 364.154393][ T1053] bond2 (unregistering): Released all slaves [ 364.176912][ T1053] bond3 (unregistering): Released all slaves [ 364.326967][ T1053] bond5 (unregistering): Released all slaves [ 364.349497][ T5118] Bluetooth: hci3: command tx timeout [ 364.349540][ T5127] Bluetooth: hci4: command tx timeout [ 364.564290][ T1053] : left promiscuous mode [ 364.694812][ T1053] tipc: Left network mode [ 364.934343][T14636] chnl_net:caif_netlink_parms(): no params data found [ 365.099258][ T5204] IPVS: starting estimator thread 0... [ 365.130322][T14452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.200448][T14727] IPVS: using max 16 ests per chain, 38400 per kthread [ 365.208852][T14729] --map-set only usable from mangle table [ 365.241846][T14452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.422100][ T1053] hsr_slave_0: left promiscuous mode [ 365.449965][ T1053] hsr_slave_1: left promiscuous mode [ 365.479153][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.490483][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.583988][ T1053] team0 (unregistering): Port device batadv1 removed [ 366.139450][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 366.190973][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 366.429466][ T5127] Bluetooth: hci4: command tx timeout [ 366.783351][T14452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.826764][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.838802][T14452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.987724][T14636] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.995984][T14636] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.008824][T14636] bridge_slave_0: entered allmulticast mode [ 367.038595][T14636] bridge_slave_0: entered promiscuous mode [ 367.067347][T14636] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.079639][T14768] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 367.096048][T14636] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.099700][T14768] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.109688][T14636] bridge_slave_1: entered allmulticast mode [ 367.130949][T14636] bridge_slave_1: entered promiscuous mode [ 367.282502][T14636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.333434][T14636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.493811][T14636] team0: Port device team_slave_0 added [ 367.521957][T14783] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.553489][T14636] team0: Port device team_slave_1 added [ 367.662505][T14636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.673661][T14636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.704284][T14636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.796912][T14636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.809951][T14636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.838224][T14636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.924060][T14796] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 367.959894][T14796] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.114410][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.160641][T14636] hsr_slave_0: entered promiscuous mode [ 368.170974][T14636] hsr_slave_1: entered promiscuous mode [ 368.189539][T14636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.200707][T14636] Cannot create hsr debugfs directory [ 368.216935][T14807] ------------[ cut here ]------------ [ 368.222957][T14807] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 368.240776][T14807] WARNING: CPU: 0 PID: 14807 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 368.252627][T14807] Modules linked in: [ 368.256681][T14807] CPU: 0 PID: 14807 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 2024/06/02 13:45:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 368.267528][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 368.278046][T14807] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 368.285539][T14807] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 3e 82 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 368.305348][T14807] RSP: 0018:ffffc90004367318 EFLAGS: 00010246 [ 368.311567][T14807] RAX: e61a18738147f100 RBX: 1ffff1100d1a329e RCX: 0000000000040000 [ 368.319960][T14807] RDX: ffffc9001325c000 RSI: 00000000000037b5 RDI: 00000000000037b6 [ 368.327997][T14807] RBP: ffff888068d18130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 368.336457][T14807] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 368.344776][T14807] R13: 0000000002000000 R14: ffff888068d18ca0 R15: ffff888068d194f0 [ 368.352946][T14807] FS: 00007fdfcb2d96c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 368.362021][T14807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.368662][T14807] CR2: 00007f5e6a1b59a8 CR3: 0000000067f78000 CR4: 00000000003506f0 [ 368.376858][T14807] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.384978][T14807] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.393102][T14807] Call Trace: [ 368.396493][T14807] [ 368.399571][T14807] ? __warn+0x163/0x4e0 [ 368.404132][T14807] ? ieee80211_link_info_change_notify+0x273/0x330 [ 368.410768][T14807] ? report_bug+0x2b3/0x500 [ 368.415427][T14807] ? ieee80211_link_info_change_notify+0x273/0x330 [ 368.422164][T14807] ? handle_bug+0x3e/0x70 [ 368.426555][T14807] ? exc_invalid_op+0x1a/0x50 [ 368.431476][T14807] ? asm_exc_invalid_op+0x1a/0x20 [ 368.436657][T14807] ? __warn_printk+0x292/0x360 [ 368.441696][T14807] ? ieee80211_link_info_change_notify+0x273/0x330 [ 368.448260][T14807] ? ieee80211_link_info_change_notify+0x272/0x330 [ 368.454879][T14807] ieee80211_set_mcast_rate+0x46/0x60 [ 368.460381][T14807] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 368.466510][T14807] nl80211_set_mcast_rate+0xaff/0xeb0 [ 368.472016][T14807] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 368.477999][T14807] genl_rcv_msg+0xb14/0xec0 [ 368.482740][T14807] ? mark_lock+0x9a/0x350 [ 368.487146][T14807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.492916][T14807] ? __pfx_lock_acquire+0x10/0x10 [ 368.498003][T14807] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 368.503626][T14807] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 368.509938][T14807] ? __pfx_nl80211_post_doit+0x10/0x10 [ 368.515714][T14807] ? __pfx___might_resched+0x10/0x10 [ 368.521403][T14807] netlink_rcv_skb+0x1e3/0x430 [ 368.526226][T14807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.529289][ T5127] Bluetooth: hci4: command tx timeout [ 368.531435][T14807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.542164][T14807] genl_rcv+0x28/0x40 [ 368.546194][T14807] netlink_unicast+0x7ea/0x980 [ 368.551182][T14807] ? __pfx_netlink_unicast+0x10/0x10 [ 368.556523][T14807] ? __virt_addr_valid+0x183/0x520 [ 368.561773][T14807] ? __check_object_size+0x49c/0x900 [ 368.567141][T14807] ? bpf_lsm_netlink_send+0x9/0x10 [ 368.572398][T14807] netlink_sendmsg+0x8db/0xcb0 [ 368.579807][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.585177][T14807] ? __import_iovec+0x536/0x820 [ 368.590233][T14807] ? aa_sock_msg_perm+0x91/0x160 [ 368.595233][T14807] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 368.600721][T14807] ? security_socket_sendmsg+0x87/0xb0 [ 368.606243][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.611677][T14807] __sock_sendmsg+0x221/0x270 [ 368.616422][T14807] ____sys_sendmsg+0x525/0x7d0 [ 368.621374][T14807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.626741][T14807] __sys_sendmsg+0x2b0/0x3a0 [ 368.631506][T14807] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.636738][T14807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.643300][T14807] ? do_syscall_64+0x100/0x230 [ 368.648123][T14807] ? do_syscall_64+0xb6/0x230 [ 368.652941][T14807] do_syscall_64+0xf3/0x230 [ 368.657502][T14807] ? clear_bhb_loop+0x35/0x90 [ 368.662323][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.668279][T14807] RIP: 0033:0x7fdfca47cee9 [ 368.672990][T14807] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 368.692755][T14807] RSP: 002b:00007fdfcb2d90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.701282][T14807] RAX: ffffffffffffffda RBX: 00007fdfca5b3fa0 RCX: 00007fdfca47cee9 [ 368.709402][T14807] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 368.717470][T14807] RBP: 00007fdfca4c947f R08: 0000000000000000 R09: 0000000000000000 [ 368.725610][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.733833][T14807] R13: 000000000000000b R14: 00007fdfca5b3fa0 R15: 00007ffcf0e2d0b8 [ 368.741924][T14807] [ 368.744984][T14807] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.752317][T14807] CPU: 0 PID: 14807 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 [ 368.762861][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 368.772955][T14807] Call Trace: [ 368.776266][T14807] [ 368.779270][T14807] dump_stack_lvl+0x241/0x360 [ 368.784007][T14807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.789246][T14807] ? __pfx__printk+0x10/0x10 [ 368.793879][T14807] ? _printk+0xd5/0x120 [ 368.798084][T14807] ? vscnprintf+0x5d/0x90 [ 368.802464][T14807] panic+0x349/0x860 [ 368.806424][T14807] ? __warn+0x172/0x4e0 [ 368.810642][T14807] ? __pfx_panic+0x10/0x10 [ 368.815083][T14807] ? show_trace_log_lvl+0x4e6/0x520 [ 368.820338][T14807] __warn+0x346/0x4e0 [ 368.824350][T14807] ? ieee80211_link_info_change_notify+0x273/0x330 [ 368.830957][T14807] report_bug+0x2b3/0x500 [ 368.835575][T14807] ? ieee80211_link_info_change_notify+0x273/0x330 [ 368.842094][T14807] handle_bug+0x3e/0x70 [ 368.846263][T14807] exc_invalid_op+0x1a/0x50 [ 368.850835][T14807] asm_exc_invalid_op+0x1a/0x20 [ 368.855701][T14807] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 368.862827][T14807] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 3e 82 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 368.882619][T14807] RSP: 0018:ffffc90004367318 EFLAGS: 00010246 [ 368.888700][T14807] RAX: e61a18738147f100 RBX: 1ffff1100d1a329e RCX: 0000000000040000 [ 368.896684][T14807] RDX: ffffc9001325c000 RSI: 00000000000037b5 RDI: 00000000000037b6 [ 368.904680][T14807] RBP: ffff888068d18130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 368.912681][T14807] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 368.920667][T14807] R13: 0000000002000000 R14: ffff888068d18ca0 R15: ffff888068d194f0 [ 368.928657][T14807] ? __warn_printk+0x292/0x360 [ 368.933482][T14807] ? ieee80211_link_info_change_notify+0x272/0x330 [ 368.940001][T14807] ieee80211_set_mcast_rate+0x46/0x60 [ 368.945389][T14807] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 368.951496][T14807] nl80211_set_mcast_rate+0xaff/0xeb0 [ 368.956896][T14807] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 368.962846][T14807] genl_rcv_msg+0xb14/0xec0 [ 368.967368][T14807] ? mark_lock+0x9a/0x350 [ 368.971719][T14807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.976787][T14807] ? __pfx_lock_acquire+0x10/0x10 [ 368.981833][T14807] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 368.987234][T14807] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 368.993316][T14807] ? __pfx_nl80211_post_doit+0x10/0x10 [ 368.998813][T14807] ? __pfx___might_resched+0x10/0x10 [ 369.004140][T14807] netlink_rcv_skb+0x1e3/0x430 [ 369.008919][T14807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.014138][T14807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.019467][T14807] genl_rcv+0x28/0x40 [ 369.023463][T14807] netlink_unicast+0x7ea/0x980 [ 369.028252][T14807] ? __pfx_netlink_unicast+0x10/0x10 [ 369.033556][T14807] ? __virt_addr_valid+0x183/0x520 [ 369.038774][T14807] ? __check_object_size+0x49c/0x900 [ 369.044086][T14807] ? bpf_lsm_netlink_send+0x9/0x10 [ 369.049219][T14807] netlink_sendmsg+0x8db/0xcb0 [ 369.054008][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.059395][T14807] ? __import_iovec+0x536/0x820 [ 369.064350][T14807] ? aa_sock_msg_perm+0x91/0x160 [ 369.069304][T14807] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 369.074629][T14807] ? security_socket_sendmsg+0x87/0xb0 [ 369.080166][T14807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.085465][T14807] __sock_sendmsg+0x221/0x270 [ 369.090201][T14807] ____sys_sendmsg+0x525/0x7d0 [ 369.095038][T14807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.100367][T14807] __sys_sendmsg+0x2b0/0x3a0 [ 369.105008][T14807] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.110214][T14807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 369.116664][T14807] ? do_syscall_64+0x100/0x230 [ 369.121474][T14807] ? do_syscall_64+0xb6/0x230 [ 369.126170][T14807] do_syscall_64+0xf3/0x230 [ 369.130694][T14807] ? clear_bhb_loop+0x35/0x90 [ 369.135391][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.141312][T14807] RIP: 0033:0x7fdfca47cee9 [ 369.145757][T14807] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 369.165572][T14807] RSP: 002b:00007fdfcb2d90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.174000][T14807] RAX: ffffffffffffffda RBX: 00007fdfca5b3fa0 RCX: 00007fdfca47cee9 [ 369.182067][T14807] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 369.190061][T14807] RBP: 00007fdfca4c947f R08: 0000000000000000 R09: 0000000000000000 [ 369.198213][T14807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.206288][T14807] R13: 000000000000000b R14: 00007fdfca5b3fa0 R15: 00007ffcf0e2d0b8 [ 369.214375][T14807] [ 369.217707][T14807] Kernel Offset: disabled [ 369.222130][T14807] Rebooting in 86400 seconds..