last executing test programs: 43.688062103s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000440)) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000180)={0x8001, 0x400, 0xffff, 0x49, 0x0, 0x1, 0xd, "800b80b3c8373a7628c6c626185ec112235b6d05", "136c04a2430371c1f2e7e2eb4045c1d57a082e78"}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) 35.097508681s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) write$binfmt_elf64(r3, &(0x7f00000007c0)=ANY=[], 0x2a8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000000), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800003d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r9}, 0x10) write$cgroup_type(r7, &(0x7f0000000140), 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x6}, 0x48) 34.624690668s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x0) 34.468171423s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 34.442518369s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 34.292061198s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=@getqdisc={0x24, 0x26, 0x707}, 0x24}}, 0x0) 34.228779779s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 34.227636485s ago: executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0xbf, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x4}, 0x1c) close(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}, 0x10) socket$inet6(0x10, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000000140)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) close(r0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000066c0)=ANY=[@ANYBLOB="200000000e1401000000000000000900080001000000000008003c"], 0x20}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x11e, 0x0, 0x0, 0x0) 34.046294504s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x13, 0x19, 0x1}, 0x14}}, 0x0) 34.00583228s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2707, 0x0, &(0x7f0000000080)=0x39) 33.917213169s ago: executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 33.876055049s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="3ba3", 0x2}], 0x1}, 0x20000001) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/237, 0xed}, 0x2021) 32.973908687s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.882126381s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="37040000000000000000010000009400088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c0000800400098024000100000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r3], 0xb0}}, 0x0) 31.835784213s ago: executing program 4: r0 = socket(0x1d, 0x2, 0x6) sendmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 31.8234343s ago: executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000), 0x4) 31.728021554s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.723768729s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000040)) 31.67546445s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010002004e"], 0x20}}, 0x0) 31.615629301s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002100)=[@dstopts_2292={{0x18}}, @hoplimit_2292={{0x14}}], 0x30}}], 0x1, 0x0) 31.5441553s ago: executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x4048800) close(0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) sendfile(r0, r1, 0x0, 0x80000030) 31.520748469s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}}, 0x0) 30.457858518s ago: executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0xbf, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x4}, 0x1c) close(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000240)}, 0x10) socket$inet6(0x10, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000000140)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) close(r0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000066c0)=ANY=[@ANYBLOB="200000000e1401000000000000000900080001000000000008003c"], 0x20}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x11e, 0x0, 0x0, 0x0) 30.141352728s ago: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000240)="784e8532bc51d9778e4bbb81e255693d2832f3802728ed763aacf318e80e1b19cf30c5f4214185052aab22dea830553c6db324352d6edce6927f9e747f08a659c1365f8b318c734936b24ccb80c8b9892cf2d5f5e6f9bd14951b8dac37e3c51873f21eb6a3d5b0f6852ef05a094926bd00f74ab5d68f2dbec3a6471ec5517ea7973b0eadd203e9d651881048bf4102cc30729aae5c8a1b3a4223a29d92aa550723d99f6596f26bfc66e02de540c397a62d50bb060246300520caddf20ae6701bac03fe94aec0bb32b8ee92dd974bb54ea2ccc2959f4f07e91cb2f22e8e16b11cee681e1f909bc6edfd7d05f7c914a76c9c99879bc728e358d8fcd7e3767117482364ed76b0bd26fca5cc821dfcc0320e2da567cf8e266adcfa020bdc376bb0e3a3cc9725682a957265884a6705f12b04414779837b8fe1ac5457fc005d8609efe3a00007d08ac5a9c7442bbd775f9d7ff490b3fb820e2f4e64c31cfa2101de770ad8d0903c2cf7f907fccfadad58b54d3e76d855ccc9e69fa067578ef929d153e148f0e611a40fe480ee02c2c6880a3ebf78f949e53ffef9aab25fb2816e2933f480d6d60a91c045b70211934ace2695a867eb88d29b2253174baaa56ce64db43e4f5cc822d371c92fd49dec3ac483d904343b3549e529cac2b8be9532f073d7e7c742cf7fa09b030b36671b397e03b9aca2dea714e57b7b429bd064b3c5406b960dfceba3b624c67490309875a87a93250a9113c7e051c506ecb935ed7beef8b644e7725c473250b4b88c78a33c7329ae801e09fed0a408a4e7af19c2fe674b1a56da16c8aad062b00dc84ea79442cfca1645ee35e9bc22ce3199862506cb15cd79c2704c5b86bd992045fe4f8b3e07a9fe59f7b829a232a5fa15b8bcc971857e036afa9651cf114ac34600be4f663f07067e1e55ed8aa1641f6381cb6ce2cb751f032bd6588835acf67ddf7a3af75526ca75bdcfc7a5566044af497610e79987c61d8e5d8292a88107a5b4ee93a34eac880433585092356f76f2633db86b1a1412e10d3932bb7a52d3007dd635bda34a82769e5a9bdade27aed4f9c68f8527924b07749980e1e15c708010274a6c6ebc5213fe31d3bc459051823b7ee6c32797239e40d4821209b498c95080a2ca90c479da86c164304e02a7e71b8f55586292cc9fafa4c5bda285a9de792d6a6a03e5a1f2a13eac02a95f87f13fbfbedc6533b78cf5ac5ce562ef504f95465814f9bb35495196b73780c0a5fc7c6a006ee2d34123c1224d9c08baf0611ba9e7ceb3ccf887e58a78fe236947c4a486c83e49e0070d4fa81a9652e690dcdae169ebd65c281a863905a7ecf9c8f19fe059b2022ef75ab1e9c7c1ad532ff25da12c5e250f601ce95844223310d9959fddc0e684979c6f15d7673512237239b9eb48f72a930e5cc64c382c662db18581eb0069b2242058812f1ae092e139411fc8ec242e8f7dd4da10bcd3f92c0715edf775ffaabd181a36d2a39ceb192e3ebdff02c0c75bd259e725fd4cd5c2722efc41f37ab25706485a265d683c8569c3209a930e05047074b3941f41003d550d923e6dd50110e18d965763727739902067e73a520270c5cb53d6fd22ec4ea8853d113451cb3da2a7a698c807ec394c1da0b9de2a1d62f24a2292c65640ef6a0924191133e80aa60e4f8f5adbae3131956b38c997085f25f54338653d65847f1602e1ad7eb9501f9867e1bfc2410c3fc6402a1f605c0088ef13db8cf967a868e7ae2713b1dc297a5ab33b27566df656d954ee44ffed8a15bac40262099a3287f40425cd146c4a9639321fd46dd85dab9000bce3558f7c99de2849d57041d79082b82faf85abf5ac0c325ca3645500d2bb04809ac3ab33c24b738765d80c610c917b756a1cd4da3ce0921ae1789ea8c3f00532fe97c435cda5a2f5013b90ea596389af1fbba1510ce50d3476019d70be6634ddabdc925324e0bf6914a803c9bccb9f4daa61e9250e05a0d6e906d68418f906dfdcc416441828680bc9160a932168adf51240bce901a1eee84f69dce9cee3378f8414188afc484cfb92043b352271552a152ecac0ec1ba19f1dc72db5d4155d5bf6a63aee9a702f1e194082e609bb30419901349d244a11617795b4580a849196f5c67ed4b060e42b394bbfb4bbfa601d2c8ddff5986563df99b5f02a0f61d56d11a47095651d7337c7c167a04e4a71596fe58486d74bc8ef0a82c370c9ed24e58ed5950b119664767fd6742e967199c4671f5b48a2d723dabc77fc7f9ac57cc36d95b0e336032ccb4647a5502e44db059bb0bce58e4ed4bdd6931cc92c782c75d44d4a1f25e6f6ca076f2ea586ac5daadc5599aa6e5bb26206ffc1310779cba10d72bdbb7ef62b9d22bec948b2153afa5a8e1c1d8d724fc673069c74564102400417452c5eb5350e2a50a732f76122a5648525fa1793a0af6e0a3dcb568a598f7c179e908b40f19fc10a16d53b112692adc1e4dc954009f726057acf04a9740f6bb66327e746dcd7b8b8851e622f9da2c9ddd124e300f03f07e77cf04a263329b435ed04eadb9dc91cfe396f41114283eccbf58f2dccfe32f908cea6678f7490bacbe60c75eb2754e9722b2c58771537966bfe1066c4d28bcceccdca07eb60ddc355aa710266da85e456aa83739fea4ad7dadf461c682201391fa550e12e01be5a2a2c55c3b697aa2e176aad4be5a8dbfb8043f72c5743992e5c7000608a2cf86d88885bf6e1e2173b1361cec282ef35bde24cf99c11110c16c1678c38b74738911ec3eac23067500103f0f5d7dff122fca66852126ce9ac10c7c065992b3fcd81f7d94adad6fcb45872d3fa97f5d704f1653dad962c16daa6978e2fcf41f10257c306fc05fe4cd20e30989b37b19e874f27a065c8d62f2b4194a1540199be22b7e267ce6d2ffc8243421d9f629f5048587ff5d91f8c7bbb9049b40d859e6d382926ba8f005deb18727cefd76198d00d92ef680b56864c9eea9dca35b0e90d0afe1440af704bf00bd68ca088c568088d6aa34a42d66645743ad481b9e5490cfcee486f456490a0e9c3a0bff49b528871a4dfb104a18ba6a22df288349b6fca36b1908c548e90cec26fa28a0772fa4e9418c8d02a3319bc9e8f3892fc933f465ccb6ec683fdc9dd5854bb1295d114bde2e84d04513897ed3ee41ecc1d6d0354c57046c58e390836f11b3e6d4712f7d61b221aa147a58c3903b319a3da746296e576ae21bca4c1c939986fe04145093c4b9173e1936e54c4bfd9aaa4efdd39f2a39e9554fe1bfee4597ce8c798b6233e22a8dcdc7e610ddf6a8c810e7429bb2fcd60f7108119112b3cc5a71fef1fac311afa0d034fd00954111ded4cf381d6a73cc4f6165052325e04566fbb2c644e8bd7e7cf3923af608af8f3537deaaef891bdc258a8341e742f62727444c2cb28ccf8c7e3d79d1162c29af2914627830fe3433c8beb27efc8e08f14581ee0acb0a761a2b0a1f219601c9bae3c6d92f2d3d712e9c239d2910e9ea0f539bc069b7e8a1e36abb4e3ec20ca1677fa0cf3c4d2d3180d15a3c808d0421b564fcb180316df4f46b33df1e57ca2644d8b3fcdd13fef43a3ab76982887a4751615e7665d639854c8c3a8bdceb6cee0fb00fb19f98c42cd6a555da3c4d6a5c6c3ca9f7ccece5bee4907e8676a05aaf4213d4e60c4f5f0bf1a8126b6555ec137dc5f7ca56901bf21329da5a6ad30ebd1d454d7ee3110ae88de0109084e1cdc6342b68883a5205ef763645cdf26815e9f99f8c4bcc5227142ba4e9da752abe3ce3a11f2df8aff40ea3db731c8c1992fc0ab2681c9613861f61f8173d7fafd7a3516e169a8c0541d7632a59641ad3c67ca2cde8dcfcababaa676e25f113d0a6bf3274fc532fafb6042b633051039d682d87477f3a14fa77a7966a6f019738c0a8eb737eea7464d4477f7be1a4553ae736f0dde836688cd4d90e0d207cb82b33f1207d893b1c720d3070c73d6a9b1e52634aea9117ba6a3c063c28e46a687ab0e239b0d95cc2eb76f2b1b6fa6963bb11489e490e70d7f2394cb350f952170a0f6c6338e8460579a1013d9bbc9cc438f617551803af00700e636d0545a4a6877698441b5961cf86d5c40fbbf95775d13dbb50de6a565bd98c3fc8db86278de0bdada8860917ae00345191f96cdffb43216705048851b9bb9cca1e14d394bd9ecd6f567cb16a17592535b0322d143e14f0f982262d5ea7f6790e16c49f6e8740c40be3ae70bf21e5691a175b0060e72c8025f46a439732b8cb8239a5e6823846838f54cb939beca1ca0425c3e43027b3526fc1ffe5e71b72a908002e2e5090e343e87c82cbf2f162f2fef4081c4212b9e4eed4f746a85859f33bcca464667b850851c6e6aafacf930c2f70e777133c651c1851ea8015a9f01cf7c41bf37af677dcd6ad9b0a8eb235f73db7f72007b9d12044451725c559f47deb4bf5054f154e805788a39e69754a054aff979122800365765843cce90a93a3bc6955963594e02da9f7fad62743419870c04751fcd7d8800fc17d6c1566fd1c35f9b464d235d7569f2d0cceeee1c5adbff3e87f3e67bc4beaa4a3fb948b2241b315d0d2a2060bdb2514eaae67a0add5ff446c8291c69d3acd9b7ffa4d01490994bf0135759ba56973d703883c4736c76f5dacb2629bdb429e41bce829bf72b13c0c3d0163efff66b3cde89a61ec6d4a0c3269924934575ff6a6656fc89e9d0d5a5d2a093022b9791763c14a76581e5e1e9f0cf56803e3a29fa93610cff5473a9299dff90e5bfd0e078bc0c4f48a7e379c63b5b048a5ddaeddb495c1631b871f053ad863e832fdc250c1de5242375734feb2895f905d77a1cb3219bb48c3a1403173e401f99d30e5af3731a08fc47186657353cef9e0a628cbf2f67bbe297c9e5bc1b99968f6d744e338a9b3618f180e49d1b641290b2beeaba720abdf6ef0391ab5499d15b5ee5480060e05bb1b50e6516f1f28588343c73c037f410a413cddaecaca940072844ad343a497984d45aa9b8e2be120b8bd0c6e786f5541e7d400d58431417001694a990af3270f82e4a8717e29514f78d0f8e8d9fb373268656b60c0c1c81999f86343a5271481bdf7b724b55d8ae05cb2ef6d81a7688d2f13a087b4759f3dae8762f76b4cd1fd61cf5b50667e1010c1ae5cd00761b7e077238647ba9206513bf9c62b507088c2d60e76030d572a86a217eca7480886aa9c3a93019316ffcb1555d978a1ed048adbdfd0b128eb073e5eb9593789b7474a8fe1695a7176deb561cd8cd656fd852df410aa4642f1c1534a272b9a0a6e6f1d660d035a4ed6f566678b83775f359a1119643b28b2466c1d192b54bcd3c2e7104ecf1d5fa70544bd38a0edbf26e9a6844bd9adade62cc76be8f2840c50afb9fe95698b945fe2fe17080f4c296b474e47179583f4cdf36fb93c4d53ff4d0697a221d497ce4240db574b53f60dd38862e7e04e64bfdd53639ea6c4b60ec39f7425dab78c7635fac31685b626b67119e3afb3e682fe3476e82b18f115b4b45366816012fb579d67e1f01028622ab891d3a44db13fb8b15ceb4aa88be06c80b049176fd368d32d06975d402b3f4078828edeb8ea49220e888ef3aec7f572aec2ad09c216626a9121f9533b6cb0e5084ebbc1c8b77ddd0021cf749310ab316c285090b50315e51eb6ea04411c77ed685ca0a674aafbb5d39e7752de1956b5811a8e6dc259a5bf1cc43ff94e0eca9bee7452bb81d52480b3760f3563617cd0a5a297cff0da357f678f95ce433de5cca614114916a3b35d4a911c0", 0x1000}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000064c0)=0x40) 30.0367868s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x13, 0x19, 0x1}, 0x14}}, 0x0) 2.956622224s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=@getqdisc={0x24, 0x26, 0x707}, 0x24}}, 0x0) 1.855412903s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.64957395s ago: executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 1.501768696s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffff", @ANYRES32], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 0s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000072c0)={0x420, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x32c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x325, 0x5, "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"}]}]}, 0x420}}, 0x0) kernel console output (not intermixed with test programs): 81 - 0 [ 104.898851][ T5388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.927799][ T5388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191080][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.269583][ T5782] vlan2: entered promiscuous mode [ 105.288003][ T5782] dummy0: entered promiscuous mode [ 105.336932][ T5782] team0: Port device vlan2 added [ 105.476683][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.502284][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.653981][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.674042][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.905592][ T5797] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 105.925528][ T5797] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 106.118175][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.482163][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.100548][ T5847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.142443][ T5847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.418013][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.721401][ T5876] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 108.113289][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.136257][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.412097][ T5901] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.606282][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.004478][ T5934] tipc: Started in network mode [ 109.014929][ T5934] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 109.025067][ T5934] tipc: Enabled bearer , priority 0 [ 109.051524][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.086900][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.101630][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.139333][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.147047][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.236134][ T5934] tipc: Resetting bearer [ 109.325864][ T5944] xt_socket: unknown flags 0x2 [ 109.334387][ T5934] tipc: Disabling bearer [ 109.349820][ T5944] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 109.836208][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.853895][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.062582][ T5978] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.077999][ T5978] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 110.090913][ T5978] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.106244][ T5978] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.128974][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.273811][ T5988] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 110.435815][ T29] audit: type=1804 audit(1717776708.934:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1985075805/syzkaller.pN6A4v/63/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 112.919790][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.040574][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.044946][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.353813][ T6025] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.710358][ T6045] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 113.734286][ T6045] __nla_validate_parse: 1 callbacks suppressed [ 113.734314][ T6045] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.811462][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.874218][ T6053] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 114.192815][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.135999][ T6103] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.677971][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.891748][ T6139] Zero length message leads to an empty skb [ 116.098180][ T6147] ip6tnl1: entered promiscuous mode [ 116.117739][ T6147] ip6tnl1: entered allmulticast mode [ 116.143345][ T6151] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.159147][ T6150] tipc: Started in network mode [ 116.167948][ T6150] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 116.188110][ T6150] tipc: Enabled bearer , priority 0 [ 116.199675][ T6154] tipc: Enabled bearer , priority 0 [ 116.206901][ T1108] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 116.281764][ T6156] Bluetooth: MGMT ver 1.22 [ 116.364178][ T6158] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.377872][ T6158] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 116.450525][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.673844][ T6172] syz-executor.3[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.674882][ T6172] syz-executor.3[6172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.141257][ T6192] tipc: Enabled bearer , priority 10 [ 117.205688][ T6196] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.216621][ T6196] openvswitch: netlink: Key type 29 is not supported [ 117.347251][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.476729][ T6204] syz-executor.4[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.477667][ T6204] syz-executor.4[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.743288][ T6221] tipc: Started in network mode [ 117.767294][ T6221] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 117.775175][ T6221] tipc: Enabled bearer , priority 0 [ 117.790790][ T6225] tipc: Enabled bearer , priority 10 [ 117.829861][ T6221] tipc: Enabled bearer , priority 0 [ 117.918594][ T6231] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.937453][ T6231] openvswitch: netlink: Key type 29 is not supported [ 118.083565][ T6240] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 118.093946][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.169268][ T785] tipc: Node number set to 10136234 [ 118.293902][ T6250] syz-executor.3[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.294285][ T6250] syz-executor.3[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.306640][ T6251] ip6tnl1: entered promiscuous mode [ 118.351143][ T6251] ip6tnl1: entered allmulticast mode [ 118.363657][ T6252] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.394185][ T2418] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.534123][ T6262] tipc: Started in network mode [ 118.551817][ T6262] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 118.566367][ T6262] tipc: Enabled bearer , priority 10 [ 118.579513][ T6264] tipc: Started in network mode [ 118.588321][ T6264] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 118.607394][ T6264] tipc: Enabled bearer , priority 0 [ 118.638969][ T6269] tipc: Enabled bearer , priority 0 [ 118.888780][ T45] tipc: Node number set to 10136234 [ 118.899769][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.921063][ T785] tipc: Node number set to 8432298 [ 118.990760][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.206807][ T6291] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.255614][ T6291] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.345594][ T6299] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 119.414968][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.677830][ T45] tipc: Node number set to 9480874 [ 119.721637][ T45] tipc: Node number set to 10136234 [ 119.920117][ T6320] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.954520][ T6320] openvswitch: netlink: Key type 29 is not supported [ 120.171586][ T6328] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 120.334294][ T6340] siw: device registration error -23 [ 120.347772][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 120.450003][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.852766][ T6363] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 121.003663][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.174878][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.463229][ T6391] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 121.495309][ T6391] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 121.629319][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.587831][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 122.754845][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.930066][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.319136][ T6451] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 123.355506][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.438945][ T6451] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.621841][ T6463] vxcan3: entered promiscuous mode [ 123.939392][ T6481] __nla_validate_parse: 2 callbacks suppressed [ 123.939417][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.951920][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.995894][ T6481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.004121][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.189775][ T6481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.197058][ T6481] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 124.221425][ T6481] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 124.253955][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.714161][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.806247][ T6507] vxcan3: entered promiscuous mode [ 124.868679][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.939452][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.041679][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.200433][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.284388][ T6529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.367197][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.375268][ T6535] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 125.390693][ T6535] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 125.430065][ T6537] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.860200][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.894032][ T6554] gretap0: entered promiscuous mode [ 125.941693][ T6554] vlan2: entered promiscuous mode [ 126.013999][ T6554] gretap0: left promiscuous mode [ 126.222664][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.246731][ T6565] vxcan1: entered promiscuous mode [ 126.296773][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.801280][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.015509][ T6595] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 127.190500][ T6601] vxcan1: entered promiscuous mode [ 127.686276][ T6614] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.780138][ T6617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.787360][ T6617] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 127.846591][ T6617] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 128.172085][ T6629] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 128.491744][ T6643] vxcan1: entered promiscuous mode [ 128.864023][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.907771][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.989273][ T6663] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 129.238373][ T6676] __nla_validate_parse: 8 callbacks suppressed [ 129.238397][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.454102][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.590775][ T6688] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 129.692206][ T6688] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.741464][ T6688] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.860053][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.930202][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.733528][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.799963][ T6730] vlan3: entered promiscuous mode [ 130.805148][ T6730] veth1: entered promiscuous mode [ 130.853302][ T6730] veth1: left promiscuous mode [ 130.937367][ T6735] IPVS: Unknown mcast interface: nr0 [ 131.023531][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.130532][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 131.261439][ T6747] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.467785][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 131.594498][ T6763] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 131.849985][ T6776] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 131.878186][ T6776] tipc: Resetting bearer [ 131.966992][ T6782] dccp_v4_rcv: dropped packet with invalid checksum [ 131.979768][ T6776] tipc: Resetting bearer [ 132.009489][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.028180][ T6776] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.064981][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.119760][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.145591][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.157221][ T29] audit: type=1804 audit(1717776731.654:3): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3421496711/syzkaller.pEyThr/91/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 133.257801][ T6824] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 133.275062][ T6824] macvlan2: entered promiscuous mode [ 133.330875][ T6824] macvlan2: entered allmulticast mode [ 133.339992][ T6824] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 133.368819][ T6824] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 133.381065][ T6824] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 133.395452][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.402556][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.263788][ T6867] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 134.287429][ T6867] macvlan2: entered promiscuous mode [ 134.301104][ T6867] macvlan2: entered allmulticast mode [ 134.315752][ T6867] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 134.332931][ T6867] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 134.340605][ T6867] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 134.409898][ T6873] IPv6: sit1: Disabled Multicast RS [ 134.851506][ T29] audit: type=1804 audit(1717776733.354:4): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1985075805/syzkaller.pN6A4v/136/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 135.058485][ T6899] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 135.086686][ T6899] tipc: Resetting bearer [ 135.137211][ T6899] tipc: Resetting bearer [ 135.179300][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.227427][ T6899] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.839623][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.279949][ T6986] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 137.303781][ T6986] macvlan3: entered promiscuous mode [ 137.319045][ T6986] macvlan3: entered allmulticast mode [ 137.332123][ T6986] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 137.373389][ T6986] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 137.417989][ T6986] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 137.763470][ T5122] bond0: (slave syz_tun): Releasing backup interface [ 138.024592][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.048870][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.064521][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.079079][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.087338][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.097633][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.213728][ T1108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.662946][ T1108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.970873][ T1108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.090903][ T1108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.447889][ T1108] bridge_slave_1: left allmulticast mode [ 139.490532][ T1108] bridge_slave_1: left promiscuous mode [ 139.498991][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.541195][ T1108] bridge_slave_0: left allmulticast mode [ 139.561892][ T1108] bridge_slave_0: left promiscuous mode [ 139.600525][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.769467][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.780747][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.789831][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.804697][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.819929][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.838063][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.441776][ T29] audit: type=1804 audit(1717776738.944:5): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2285056544/syzkaller.bTD5vb/138/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 140.665275][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.708627][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.735520][ T1108] bond0 (unregistering): Released all slaves [ 140.903366][ T1108] tipc: Disabling bearer [ 140.939402][ T1108] tipc: Left network mode [ 141.626571][ T1108] hsr_slave_0: left promiscuous mode [ 141.680657][ T1108] hsr_slave_1: left promiscuous mode [ 141.704347][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.741912][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.765905][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.787692][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.876337][ T1108] veth1_macvtap: left promiscuous mode [ 141.895587][ T1108] veth0_macvtap: left promiscuous mode [ 141.907916][ T1108] veth1_vlan: left promiscuous mode [ 141.921827][ T1108] veth0_vlan: left promiscuous mode [ 141.947796][ T5125] Bluetooth: hci3: command tx timeout [ 142.072386][ T7071] sctp: [Deprecated]: syz-executor.4 (pid 7071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.072386][ T7071] Use struct sctp_sack_info instead [ 142.892068][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 142.943439][ T7082] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.964433][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 143.992868][ T7106] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.029619][ T5125] Bluetooth: hci3: command tx timeout [ 144.171126][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 144.465062][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.497110][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.512139][ T7033] bridge_slave_0: entered allmulticast mode [ 144.531238][ T7033] bridge_slave_0: entered promiscuous mode [ 144.552796][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.562878][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.574693][ T7033] bridge_slave_1: entered allmulticast mode [ 144.593697][ T7033] bridge_slave_1: entered promiscuous mode [ 144.669777][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.701931][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.783235][ T7033] team0: Port device team_slave_0 added [ 144.804263][ T7033] team0: Port device team_slave_1 added [ 144.903056][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.927124][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.003651][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.056228][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.068273][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.089876][ T7147] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.103847][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.206458][ T7149] ipvlan2: entered promiscuous mode [ 145.216640][ T7149] ipvlan2: entered allmulticast mode [ 145.223622][ T7149] dummy0: entered allmulticast mode [ 145.338151][ T7033] hsr_slave_0: entered promiscuous mode [ 145.366375][ T7033] hsr_slave_1: entered promiscuous mode [ 145.380468][ T7033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.397823][ T7033] Cannot create hsr debugfs directory [ 145.474889][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.497210][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 145.570329][ T7155] batman_adv: batadv1: Adding interface: netdevsim0 [ 145.577892][ T7155] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.616616][ T7155] batman_adv: batadv1: Interface activated: netdevsim0 [ 145.982053][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.108000][ T5125] Bluetooth: hci3: command tx timeout [ 146.445598][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.464748][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.473310][ T7033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.485510][ T7033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.503734][ T7193] batman_adv: batadv0: Adding interface: netdevsim0 [ 146.511190][ T7193] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.537239][ T7193] batman_adv: batadv0: Interface activated: netdevsim0 [ 146.550027][ T7033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.574496][ T7033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.801660][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.836814][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.862427][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.869753][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.890248][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.898329][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.083104][ T7208] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.330985][ T7215] tipc: Failed to remove unknown binding: 66,1,1/8432298:105322393/105322395 [ 147.365028][ T7215] tipc: Failed to remove unknown binding: 66,1,1/8432298:105322393/105322395 [ 147.409534][ T7215] tipc: Failed to remove unknown binding: 66,1,1/8432298:105322393/105322395 [ 147.467787][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 147.623805][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.706979][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 147.746172][ T7232] batman_adv: batadv2: Adding interface: netdevsim0 [ 147.767779][ T7232] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.815745][ T7232] batman_adv: batadv2: Interface activated: netdevsim0 [ 147.866694][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.019122][ T7033] veth0_vlan: entered promiscuous mode [ 148.063263][ T7033] veth1_vlan: entered promiscuous mode [ 148.136025][ T7033] veth0_macvtap: entered promiscuous mode [ 148.148882][ T7033] veth1_macvtap: entered promiscuous mode [ 148.181639][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.194144][ T5125] Bluetooth: hci3: command tx timeout [ 148.201204][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.211143][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.221725][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.234057][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.266669][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.294699][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.316361][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.334164][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.347577][ T7033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.358679][ T7033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.373401][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.406656][ T7033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.419172][ T7033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.437729][ T7033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.446615][ T7033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.730453][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.747806][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.760360][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.835729][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.856757][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.397280][ T7283] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.449838][ T7256] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 150.150300][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.160955][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.191150][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.201322][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.210159][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.217894][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.371489][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.399076][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.408242][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.434656][ T7309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.453492][ T7309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.500342][ T7290] dccp_close: ABORT with 136 bytes unread [ 151.169731][ T7302] chnl_net:caif_netlink_parms(): no params data found [ 151.493402][ T7302] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.518015][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.527026][ T7302] bridge_slave_0: entered allmulticast mode [ 151.548620][ T7302] bridge_slave_0: entered promiscuous mode [ 151.573549][ T7302] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.589035][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.604375][ T7302] bridge_slave_1: entered allmulticast mode [ 151.618388][ T7302] bridge_slave_1: entered promiscuous mode [ 151.736413][ T7302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.769764][ T7302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.893783][ T7302] team0: Port device team_slave_0 added [ 151.934582][ T7302] team0: Port device team_slave_1 added [ 152.165717][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.253370][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.267968][ T5125] Bluetooth: hci3: command tx timeout [ 152.302850][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.345139][ T7302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.408475][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.420910][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.464951][ T7302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.650447][ T7302] hsr_slave_0: entered promiscuous mode [ 152.908650][ T7302] hsr_slave_1: entered promiscuous mode [ 152.923642][ T7302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.936932][ T7302] Cannot create hsr debugfs directory [ 152.968987][ T7343] dccp_close: ABORT with 136 bytes unread [ 153.021495][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.234388][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.455318][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.936583][ T51] bridge_slave_1: left allmulticast mode [ 153.967857][ T51] bridge_slave_1: left promiscuous mode [ 153.973754][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.048730][ T51] bridge_slave_0: left allmulticast mode [ 154.054517][ T51] bridge_slave_0: left promiscuous mode [ 154.077501][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.348963][ T5125] Bluetooth: hci3: command tx timeout [ 154.599460][ T7390] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [.] L3 index 0 [ 155.233797][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.273886][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.320659][ T51] bond0 (unregistering): Released all slaves [ 156.022366][ T51] hsr_slave_0: left promiscuous mode [ 156.039718][ T51] hsr_slave_1: left promiscuous mode [ 156.056358][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.082616][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.114742][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.138011][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.248855][ T51] veth1_macvtap: left promiscuous mode [ 156.257878][ T51] veth0_macvtap: left promiscuous mode [ 156.263719][ T51] veth1_vlan: left promiscuous mode [ 156.290208][ T51] veth0_vlan: left promiscuous mode [ 156.427818][ T5125] Bluetooth: hci3: command tx timeout [ 156.562680][ T7437] syz-executor.0 uses old SIOCAX25GETINFO [ 157.692198][ T51] team0 (unregistering): Port device team_slave_1 removed [ 157.746230][ T51] team0 (unregistering): Port device team_slave_0 removed [ 158.450904][ T7460] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.493551][ T7462] mac80211_hwsim hwsim7 syzkaller1: entered promiscuous mode [ 158.513609][ T5125] Bluetooth: hci3: command tx timeout [ 158.545182][ T7462] mac80211_hwsim hwsim7 syzkaller1: entered allmulticast mode [ 158.771428][ T7302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.825328][ T7302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.885480][ T7302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.933403][ T7302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.993677][ T7479] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 159.194572][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.246995][ T7302] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.291910][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.324800][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.332074][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.380793][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.388084][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.522822][ T7302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.000648][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.294261][ T7302] veth0_vlan: entered promiscuous mode [ 160.357198][ T7302] veth1_vlan: entered promiscuous mode [ 160.522200][ T7302] veth0_macvtap: entered promiscuous mode [ 160.559771][ T7302] veth1_macvtap: entered promiscuous mode [ 160.569600][ T7535] Bluetooth: MGMT ver 1.22 [ 160.646040][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.674680][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.688501][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.696411][ T7540] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.707054][ T7540] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.719580][ T7540] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 160.804516][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.828993][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.858165][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.878496][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.902859][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.991267][ T7302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.009835][ T7302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.032161][ T7302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.047096][ T7302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.265087][ T2402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.290597][ T2402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.315877][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.362776][ T7551] ipvlan2: entered promiscuous mode [ 161.368429][ T7551] ipvlan2: entered allmulticast mode [ 161.374695][ T7551] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 161.463936][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.497721][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.636049][ T7563] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.682948][ T7566] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.090128][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.132459][ T7585] ipvlan2: entered promiscuous mode [ 162.159016][ T7585] ipvlan2: entered allmulticast mode [ 162.186815][ T7585] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 163.073764][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.107858][ T7626] ipvlan2: entered promiscuous mode [ 163.119054][ T7626] ipvlan2: entered allmulticast mode [ 163.138170][ T7626] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 163.569865][ T7644] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.579991][ T7644] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 163.595647][ T7644] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.880461][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.907967][ T7658] ipvlan2: entered promiscuous mode [ 163.920990][ T7658] ipvlan2: entered allmulticast mode [ 163.942748][ T7658] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 164.180723][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.207813][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.595771][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.710746][ T7681] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.720531][ T7681] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.729519][ T7681] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.738538][ T7681] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.813875][ T7681] vxlan0: entered promiscuous mode [ 165.020876][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.066767][ T7697] ipvlan3: entered promiscuous mode [ 165.082689][ T7697] ipvlan3: entered allmulticast mode [ 166.017082][ T7737] dccp_invalid_packet: P.Data Offset(0) too small [ 166.791490][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.813258][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.822096][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.831997][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.840120][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.851063][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.862362][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.893793][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.903569][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.360196][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.643640][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.889253][ T11] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 167.998183][ T11] batman_adv: batadv1: Removing interface: netdevsim0 [ 168.036888][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.330047][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 168.413422][ T11] bridge_slave_1: left allmulticast mode [ 168.425454][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.437820][ T11] bridge_slave_1: left promiscuous mode [ 168.454421][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.719688][ T11] bridge_slave_0: left allmulticast mode [ 168.725932][ T11] bridge_slave_0: left promiscuous mode [ 168.733277][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.837930][ T7814] __nla_validate_parse: 1 callbacks suppressed [ 168.837954][ T7814] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.857800][ T7814] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 168.865963][ T7814] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.908808][ T5119] Bluetooth: hci0: command tx timeout [ 169.476095][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.503871][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.533895][ T11] bond0 (unregistering): Released all slaves [ 169.712292][ T7806] syzkaller0: entered promiscuous mode [ 169.727431][ T7806] syzkaller0: entered allmulticast mode [ 169.746567][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.002399][ T5119] Bluetooth: hci0: command tx timeout [ 172.036950][ T11] tipc: Disabling bearer [ 172.046319][ T11] tipc: Disabling bearer [ 172.056773][ T11] tipc: Left network mode [ 172.228382][ T7850] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.251226][ T7850] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 172.281406][ T7850] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.416991][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.457800][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.466300][ T7753] bridge_slave_0: entered allmulticast mode [ 172.489319][ T7753] bridge_slave_0: entered promiscuous mode [ 172.638977][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.653790][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.680475][ T7753] bridge_slave_1: entered allmulticast mode [ 172.710424][ T7753] bridge_slave_1: entered promiscuous mode [ 172.929721][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.978059][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.071227][ T5125] Bluetooth: hci0: command tx timeout [ 173.132275][ T11] hsr_slave_0: left promiscuous mode [ 173.154398][ T11] hsr_slave_1: left promiscuous mode [ 173.173994][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.201418][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.223329][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.236153][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.323166][ T11] veth1_macvtap: left promiscuous mode [ 173.338101][ T11] veth0_macvtap: left promiscuous mode [ 173.349604][ T11] veth1_vlan: left promiscuous mode [ 173.361839][ T11] veth0_vlan: left promiscuous mode [ 174.193530][ T11] team0 (unregistering): Port device team_slave_1 removed [ 174.244849][ T11] team0 (unregistering): Port device team_slave_0 removed [ 174.855103][ T7886] syzkaller0: entered promiscuous mode [ 174.875482][ T7886] syzkaller0: entered allmulticast mode [ 175.150328][ T5119] Bluetooth: hci0: command tx timeout [ 177.062653][ T7753] team0: Port device team_slave_0 added [ 177.093860][ T7753] team0: Port device team_slave_1 added [ 177.255319][ T7927] vlan3: entered promiscuous mode [ 177.269812][ T7927] vlan3: entered allmulticast mode [ 177.334795][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.359010][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.403123][ T7937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 177.412037][ T7937] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.421873][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.436095][ T7937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 177.501686][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.519907][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.553450][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.660933][ T7943] Bluetooth: MGMT ver 1.22 [ 177.750012][ T7753] hsr_slave_0: entered promiscuous mode [ 177.772973][ T7753] hsr_slave_1: entered promiscuous mode [ 177.816566][ T7753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.830008][ T7753] Cannot create hsr debugfs directory [ 178.046263][ T7949] syzkaller0: entered promiscuous mode [ 178.052106][ T7949] syzkaller0: entered allmulticast mode [ 178.662651][ T7963] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 178.671254][ T7963] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.681252][ T7963] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 180.265981][ T7964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 180.307125][ T7965] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 180.434642][ T7979] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.459796][ T7980] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.090346][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 181.263935][ T8003] syzkaller0: entered promiscuous mode [ 181.273231][ T8003] syzkaller0: entered allmulticast mode [ 181.302789][ T7753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.322861][ T7753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.387949][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.628573][ T8046] syz-executor.3[8046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.629254][ T8046] syz-executor.3[8046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.051326][ T7753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.149558][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 184.180237][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.203627][ T8048] syz_tun: entered promiscuous mode [ 184.215503][ T8048] macsec1: entered allmulticast mode [ 184.225881][ T8048] syz_tun: entered allmulticast mode [ 184.257114][ T8048] syz_tun: left allmulticast mode [ 184.266571][ T8048] syz_tun: left promiscuous mode [ 184.272116][ T8054] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.286916][ T8054] openvswitch: netlink: Multiple metadata blocks provided [ 184.398820][ T7753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.587927][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.665213][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.744813][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.768934][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.776232][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.814653][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.822583][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.143003][ T8078] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.420770][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.472058][ T8092] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 185.821809][ T8099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 185.864813][ T8099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.890155][ T8099] syz_tun: entered promiscuous mode [ 185.895552][ T8099] macsec1: entered allmulticast mode [ 185.917781][ T8099] syz_tun: entered allmulticast mode [ 185.939009][ T8099] syz_tun: left allmulticast mode [ 185.944897][ T8099] syz_tun: left promiscuous mode [ 186.054408][ T8112] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.401123][ T8123] sctp: [Deprecated]: syz-executor.3 (pid 8123) Use of int in max_burst socket option deprecated. [ 186.401123][ T8123] Use struct sctp_assoc_value instead [ 186.423950][ T8128] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 186.426720][ T7753] veth0_vlan: entered promiscuous mode [ 186.480650][ T7753] veth1_vlan: entered promiscuous mode [ 186.607367][ T7753] veth0_macvtap: entered promiscuous mode [ 186.638372][ T7753] veth1_macvtap: entered promiscuous mode [ 186.711352][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.738466][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.770666][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.802273][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.828222][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.859155][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.890497][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.931027][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.971060][ T7753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.986747][ T7753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.005641][ T7753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.015231][ T7753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.265379][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.285018][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.325632][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.357582][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.974907][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.234984][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.310569][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 188.350708][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.376201][ T8193] syz_tun: entered promiscuous mode [ 188.389276][ T8193] macsec1: entered allmulticast mode [ 188.396773][ T8193] syz_tun: entered allmulticast mode [ 188.431090][ T8193] syz_tun: left allmulticast mode [ 188.446580][ T8193] syz_tun: left promiscuous mode [ 188.664255][ T8213] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.966843][ T8266] syzkaller0: entered promiscuous mode [ 189.983400][ T8266] syzkaller0: entered allmulticast mode [ 190.400688][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.734874][ T8271] dccp_close: ABORT with 32 bytes unread [ 192.199762][ T8296] mac80211_hwsim hwsim7 syzkaller1: left promiscuous mode [ 192.207747][ T8296] mac80211_hwsim hwsim7 syzkaller1: left allmulticast mode [ 192.482935][ T8311] Bluetooth: MGMT ver 1.22 [ 192.730093][ T8321] vlan2: entered promiscuous mode [ 192.749691][ T8321] bridge0: entered promiscuous mode [ 192.755690][ T8321] vlan2: entered allmulticast mode [ 192.761476][ T8321] bridge0: entered allmulticast mode [ 192.790180][ T8321] bridge0: left allmulticast mode [ 192.795432][ T8321] bridge0: left promiscuous mode [ 193.396388][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.424476][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.543030][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.848270][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.854657][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.037491][ T8447] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 196.057799][ T8447] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.724372][ T8485] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 197.740226][ T8485] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.855537][ T8491] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.164592][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.509191][ T8521] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 198.528511][ T8521] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.824043][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.296433][ T8552] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 199.333699][ T8552] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.454565][ T5388] bond0: (slave syz_tun): Releasing backup interface [ 199.712319][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.723987][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.732964][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.743327][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.777990][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.785773][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.935924][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.261228][ T8580] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 200.281840][ T8580] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.631778][ T8566] chnl_net:caif_netlink_parms(): no params data found [ 201.128268][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.136464][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.162005][ T8566] bridge_slave_0: entered allmulticast mode [ 201.192617][ T8566] bridge_slave_0: entered promiscuous mode [ 201.218805][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.226184][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.258098][ T8566] bridge_slave_1: entered allmulticast mode [ 201.265502][ T8566] bridge_slave_1: entered promiscuous mode [ 201.405573][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.456415][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.782975][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.801366][ T8566] team0: Port device team_slave_0 added [ 201.835814][ T8566] team0: Port device team_slave_1 added [ 201.868843][ T5125] Bluetooth: hci1: command tx timeout [ 202.008018][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.030582][ T5125] Bluetooth: hci2: command 0x0406 tx timeout [ 202.032816][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.092839][ T8566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.168493][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.175516][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.235210][ T8566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.448101][ T8566] hsr_slave_0: entered promiscuous mode [ 202.488993][ T8566] hsr_slave_1: entered promiscuous mode [ 202.508487][ T8566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.516127][ T8566] Cannot create hsr debugfs directory [ 203.098531][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.114493][ T8566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.147166][ T8566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.313550][ T8566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.330482][ T8566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.441494][ T8566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.466098][ T8566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.606824][ T8566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.628300][ T8566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.634339][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.948048][ T5119] Bluetooth: hci1: command tx timeout [ 204.097778][ T8566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.155275][ T8566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.187350][ T8566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.245098][ T8566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.005111][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.093707][ T8566] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.151736][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.159036][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.207230][ T8663] ip_tunnel: non-ECT from 172.30.0.5 with TOS=0x2 [ 205.221054][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.228495][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.518442][ T8672] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.026807][ T8566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.039004][ T5119] Bluetooth: hci1: command tx timeout [ 206.319012][ T8566] veth0_vlan: entered promiscuous mode [ 206.363200][ T8566] veth1_vlan: entered promiscuous mode [ 206.482830][ T8566] veth0_macvtap: entered promiscuous mode [ 206.527397][ T8566] veth1_macvtap: entered promiscuous mode [ 206.626252][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.697845][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.734754][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.777700][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.812990][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.843337][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.869995][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.901895][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.917756][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.945456][ T8566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.966568][ T8566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.983154][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.000283][ T8707] ip_tunnel: non-ECT from 172.30.0.4 with TOS=0x2 [ 207.013882][ T8566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.036636][ T8566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.046536][ T8566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.058619][ T8566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.584808][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.605561][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.706583][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.736676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.107842][ T5119] Bluetooth: hci1: command tx timeout [ 208.702034][ T8730] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 208.738287][ T8730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.379620][ T8763] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.403801][ T8762] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 209.673865][ T8772] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.334082][ T8791] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.550755][ T8799] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.174674][ T8808] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.190740][ T8813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.676903][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.703649][ T8827] team0: Device veth0 is up. Set it down before adding it as a team port [ 211.854972][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.119858][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.535692][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.898405][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.092811][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.891894][ T8897] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 214.412317][ T8916] __nla_validate_parse: 5 callbacks suppressed [ 214.412344][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.539261][ T8916] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.910530][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.055563][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.373280][ T8940] bond0: option ad_select: unable to set because the bond device is up [ 215.382615][ T1108] bond0: (slave bond_slave_0): interface is now down [ 215.394719][ T1108] bond0: (slave bond_slave_1): interface is now down [ 215.438747][ T1108] bond0: now running without any active interface! [ 215.604288][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.625738][ T8949] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.836880][ T8958] pim6reg9: entered allmulticast mode [ 216.118383][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.322680][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.357779][ T8981] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.902372][ T9005] bond0: option ad_select: unable to set because the bond device is up [ 216.903763][ T11] bond0: (slave bond_slave_0): interface is now down [ 216.973932][ T11] bond0: (slave bond_slave_1): interface is now down [ 216.998092][ T11] bond0: (slave team0): interface is now down [ 217.043399][ T11] bond0: now running without any active interface! [ 217.164640][ T9017] vlan2: entered promiscuous mode [ 217.180436][ T9017] batman_adv: batadv0: Adding interface: vlan2 [ 217.199855][ T9017] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.239627][ T9017] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 217.256833][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.391554][ T5125] Bluetooth: hci4: command 0x0406 tx timeout [ 217.951225][ T9055] vlan2: entered promiscuous mode [ 217.970016][ T9055] batman_adv: batadv0: Adding interface: vlan2 [ 217.983623][ T9055] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.021354][ T9055] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 218.526788][ T9080] pim6reg1: entered allmulticast mode [ 218.582125][ T9080] pim6reg1: entered promiscuous mode [ 218.761576][ T9093] vlan2: entered promiscuous mode [ 218.784529][ T9093] batman_adv: batadv0: Adding interface: vlan2 [ 218.807695][ T9093] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.845910][ T9093] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 219.081471][ T9103] pim6reg9: entered allmulticast mode [ 219.456299][ T9120] __nla_validate_parse: 4 callbacks suppressed [ 219.456324][ T9120] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.622571][ T9127] syzkaller0: entered promiscuous mode [ 219.647973][ T9127] syzkaller0: entered allmulticast mode [ 219.765612][ T9133] bridge0: port 3(hsr0) entered blocking state [ 219.793047][ T9135] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.793306][ T9133] bridge0: port 3(hsr0) entered disabled state [ 219.835696][ T9133] hsr0: entered allmulticast mode [ 219.883300][ T9133] hsr_slave_0: entered allmulticast mode [ 219.926138][ T9133] hsr_slave_1: entered allmulticast mode [ 220.008089][ T9133] hsr0: entered promiscuous mode [ 220.064302][ T9133] bridge0: port 3(hsr0) entered blocking state [ 220.072610][ T9133] bridge0: port 3(hsr0) entered forwarding state [ 220.134023][ T9140] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.459103][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.801518][ T9162] macvtap0: entered promiscuous mode [ 220.838232][ T9162] macvtap0: entered allmulticast mode [ 220.861423][ T9162] veth0_macvtap: entered allmulticast mode [ 221.024282][ T9166] syzkaller0: entered promiscuous mode [ 221.038199][ T9166] syzkaller0: entered allmulticast mode [ 221.235663][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.349189][ T9174] syzkaller0: entered promiscuous mode [ 221.367907][ T9174] syzkaller0: entered allmulticast mode [ 221.390094][ T9183] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.614106][ T9249] macvtap0: entered promiscuous mode [ 225.621123][ T9249] macvtap0: entered allmulticast mode [ 225.638808][ T9249] veth0_macvtap: entered allmulticast mode [ 225.733713][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.782253][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.792882][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.806066][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.816420][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.824829][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.992701][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.138756][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.175168][ T9272] bridge_slave_1: left allmulticast mode [ 226.196294][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.300159][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.358891][ T9280] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.391721][ T9280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.485091][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.565248][ T9288] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.652666][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.696557][ T9288] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.060745][ T61] bridge_slave_1: left allmulticast mode [ 227.066523][ T61] bridge_slave_1: left promiscuous mode [ 227.080898][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.208299][ T61] bridge_slave_0: left allmulticast mode [ 227.214050][ T61] bridge_slave_0: left promiscuous mode [ 227.240004][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.586182][ T9322] openvswitch: netlink: Unknown nsh attribute 0 [ 227.681107][ T61] batman_adv: batadv0: Removing interface: vlan2 [ 227.868132][ T5119] Bluetooth: hci3: command tx timeout [ 228.103858][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.128337][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.155237][ T61] bond0 (unregistering): Released all slaves [ 228.184819][ T61] bond1 (unregistering): Released all slaves [ 228.206043][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.568289][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.867282][ T9358] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 228.903924][ T9358] macvlan3: entered promiscuous mode [ 228.944957][ T9358] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 229.114422][ T61] hsr_slave_0: left promiscuous mode [ 229.128128][ T61] hsr_slave_1: left promiscuous mode [ 229.143051][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.163710][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.178635][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.186227][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.263206][ T61] veth1_macvtap: left promiscuous mode [ 229.269775][ T61] veth0_macvtap: left promiscuous mode [ 229.275605][ T61] veth1_vlan: left promiscuous mode [ 229.283171][ T61] veth0_vlan: left promiscuous mode [ 229.569470][ T61] pim6reg9 (unregistering): left allmulticast mode [ 229.947771][ T5119] Bluetooth: hci3: command tx timeout [ 230.146155][ T61] team0 (unregistering): Port device team_slave_1 removed [ 230.209651][ T61] team0 (unregistering): Port device team_slave_0 removed [ 230.754167][ T9253] chnl_net:caif_netlink_parms(): no params data found [ 230.805125][ T9381] tap0: tun_chr_ioctl cmd 1074025694 [ 230.952407][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.188041][ T9253] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.195311][ T9253] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.229048][ T9253] bridge_slave_0: entered allmulticast mode [ 231.258033][ T9253] bridge_slave_0: entered promiscuous mode [ 231.280265][ T9253] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.288009][ T9253] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.302450][ T9253] bridge_slave_1: entered allmulticast mode [ 231.332274][ T9253] bridge_slave_1: entered promiscuous mode [ 231.432408][ T9401] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 231.486269][ T9401] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 231.648758][ T9253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.683103][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.753493][ T9253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.897748][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.966656][ T9426] bond0: (slave team0): Releasing backup interface [ 231.977030][ T9426] tipc: Resetting bearer [ 232.027007][ T9426] tipc: Resetting bearer [ 232.033060][ T5119] Bluetooth: hci3: command tx timeout [ 232.051322][ T9426] bridge_slave_0: left allmulticast mode [ 232.062357][ T9426] bridge_slave_0: left promiscuous mode [ 232.068615][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.081383][ T9426] bond0: (slave bond_slave_0): Releasing backup interface [ 232.111386][ T9426] bond0: (slave bond_slave_1): Releasing backup interface [ 232.167296][ T9426] team0: Port device team_slave_0 removed [ 232.191578][ T9426] team0: Port device team_slave_1 removed [ 232.211575][ T9426] hsr0: left allmulticast mode [ 232.216430][ T9426] hsr_slave_0: left allmulticast mode [ 232.234832][ T9426] hsr_slave_1: left allmulticast mode [ 232.243224][ T9426] hsr0: left promiscuous mode [ 232.248439][ T9426] bridge0: port 3(hsr0) entered disabled state [ 232.265808][ T9426] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 232.285564][ T9426] batman_adv: batadv2: Removing interface: netdevsim0 [ 232.305493][ T9426] dummy0: left promiscuous mode [ 232.330237][ T9426] team0: Port device vlan2 removed [ 232.374287][ T9253] team0: Port device team_slave_0 added [ 232.442526][ T9253] team0: Port device team_slave_1 added [ 232.555390][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.579598][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.608253][ T9253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.671134][ T9440] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 232.683285][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.696210][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.703822][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.736484][ T9440] bridge0: entered promiscuous mode [ 232.774275][ T9253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.782416][ T9253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.811922][ T9253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.025273][ T9253] hsr_slave_0: entered promiscuous mode [ 233.038949][ T9253] hsr_slave_1: entered promiscuous mode [ 233.046779][ T9253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.055083][ T9253] Cannot create hsr debugfs directory [ 233.070101][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.682199][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.707745][ T9474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.877106][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.975250][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.119649][ T5119] Bluetooth: hci3: command tx timeout [ 234.148581][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.383129][ T9499] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 234.394518][ T9495] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 234.407993][ T9495] macvlan3: entered promiscuous mode [ 234.451064][ T9495] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 234.624567][ T9253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.661708][ T9501] tap0: tun_chr_ioctl cmd 1074025694 [ 234.670771][ T9253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.707276][ T9253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.725646][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.738083][ T9253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.999341][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.057252][ T9253] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.089341][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.096753][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.159559][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.166798][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.242502][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.340038][ T9526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.424158][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 235.984145][ T9253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.185616][ T9253] veth0_vlan: entered promiscuous mode [ 236.226752][ T9253] veth1_vlan: entered promiscuous mode [ 236.360005][ T9253] veth0_macvtap: entered promiscuous mode [ 236.468372][ T9253] veth1_macvtap: entered promiscuous mode [ 236.496327][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.507632][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.518267][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.540640][ T9567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.549063][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.571140][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.652483][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.667921][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.678271][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.693147][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.703405][ T9253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.779801][ T9253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.826707][ T9253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.975353][ T9253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.985270][ T9253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.995365][ T9253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.004644][ T9253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.347723][ T9577] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709550493) [ 237.358919][ T9577] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 237.545320][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.570369][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.647840][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.668937][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.843791][ T9588] __nla_validate_parse: 5 callbacks suppressed [ 237.843814][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.111813][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.198703][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.534168][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.585144][ T9643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.924515][ T9665] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 240.199295][ T9678] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.239148][ T9678] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.250538][ T9678] 0ª: renamed from bond_slave_0 (while UP) [ 240.264449][ T9678] 0ª: entered allmulticast mode [ 240.292449][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.596679][ T9692] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 240.650992][ T9692] netlink: 46 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.990777][ T9714] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709550493) [ 241.033477][ T9714] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 241.124870][ T9715] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.278892][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.338199][ T9725] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.339394][ T9727] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 241.426457][ T9723] team1: Mode changed to "activebackup" [ 241.541173][ T9729] dccp_close: ABORT with 72 bytes unread [ 242.191431][ T9762] syz-executor.0[9762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.191732][ T9762] syz-executor.0[9762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.111305][ T9797] syz-executor.4[9797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.136301][ T9797] syz-executor.4[9797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.381646][ T9767] __nla_validate_parse: 3 callbacks suppressed [ 243.381675][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.808000][ T9816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.830812][ T9815] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 244.029468][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.240050][ T9836] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 244.457187][ T9844] bridge0: entered allmulticast mode [ 244.504991][ T9844] pim6reg: entered allmulticast mode [ 244.566072][ T9847] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 244.694405][ T9847] team0: Device veth1_macvtap failed to register rx_handler [ 244.810331][ T9844] pim6reg: left allmulticast mode [ 244.821461][ T9844] bridge0: left allmulticast mode [ 245.009964][ T9852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.018025][ T9852] IPv6: NLM_F_CREATE should be set when creating new route [ 245.025348][ T9852] IPv6: NLM_F_CREATE should be set when creating new route [ 245.432992][ T9873] syz-executor.2[9873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.433276][ T9873] syz-executor.2[9873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.552750][ T9882] ªªªªªª: renamed from vlan0 (while UP) [ 245.885686][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.190110][ T9907] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 246.279250][ T9911] syz-executor.2[9911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.279542][ T9911] syz-executor.2[9911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.507379][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.550455][ T9918] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 246.568978][ T9918] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.577962][ T9918] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.586746][ T9918] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.596213][ T9918] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.623120][ T9918] vxlan0: entered promiscuous mode [ 246.640651][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.785769][ T9926] xt_bpf: check failed: parse error [ 247.059177][ T9930] team0: Port device team_slave_0 removed [ 247.161572][ T9933] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 247.242988][ T9935] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 247.605397][ T9956] bridge0: entered allmulticast mode [ 247.624747][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.682839][ T9956] pim6reg: entered allmulticast mode [ 247.721192][ T9964] pim6reg: left allmulticast mode [ 247.738237][ T9964] bridge0: left allmulticast mode [ 247.808965][ T9963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.816307][ T9963] IPv6: NLM_F_CREATE should be set when creating new route [ 247.823717][ T9963] IPv6: NLM_F_CREATE should be set when creating new route [ 248.309980][ T9985] team0: Port device team_slave_0 removed [ 248.397727][ T9990] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 248.689101][ T9995] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 248.711294][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.735719][ T9996] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 248.757879][ T9996] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 248.829386][ T9996] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.838930][ T9996] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.847922][ T9996] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.857956][ T9996] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.892162][ T9996] vxlan0: entered promiscuous mode [ 249.013555][T10015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.564042][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.587926][T10037] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 249.612502][T10037] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.621778][T10037] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.630887][T10037] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.639929][T10037] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.653798][T10037] vxlan0: entered promiscuous mode [ 249.780493][T10046] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 250.608328][T10077] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 250.725344][T10080] batman_adv: batadv0: Adding interface: gretap1 [ 250.743427][T10080] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.785192][T10080] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 250.939199][T10087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.157803][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.649483][T10116] batman_adv: batadv0: Adding interface: gretap2 [ 251.655917][T10116] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.697953][T10116] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 251.885173][T10127] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 251.958095][T10127] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 252.068043][T10133] macvlan3: entered promiscuous mode [ 252.085267][T10133] vlan1: entered promiscuous mode [ 252.103444][T10137] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.124481][T10133] team0: Port device macvlan3 added [ 252.152429][T10137] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 252.184018][T10137] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.221310][T10137] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.569339][T10159] batman_adv: batadv0: Adding interface: gretap1 [ 252.575940][T10159] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.649400][T10159] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 252.812478][T10172] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.832570][T10172] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 252.855966][T10172] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.867419][T10172] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.226203][T10183] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 253.378807][T10186] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 253.442439][T10194] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 255.255212][T10261] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 255.299849][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.310789][T10265] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 255.350742][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.374675][T10266] block nbd0: Unsupported socket: shutdown callout must be supported. [ 255.876125][ T5119] Bluetooth: hci0: command tx timeout [ 256.272001][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.278881][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.271431][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.310730][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.357876][ T29] audit: type=1804 audit(1717776855.854:6): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2427861103/syzkaller.UjlJS1/53/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 257.359360][T10347] block nbd0: Unsupported socket: shutdown callout must be supported. [ 258.174949][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.310581][T10384] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.002686][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.160665][T10416] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 259.754133][T10437] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 259.814267][T10437] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.855537][T10437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.440868][ T29] audit: type=1804 audit(1717776858.934:7): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir638874373/syzkaller.04FO2Z/158/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 260.725537][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.038131][T10478] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.398631][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.659845][T10502] syz-executor.3[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.660137][T10502] syz-executor.3[10502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.689847][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.982811][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.535046][ T29] audit: type=1800 audit(1717776862.034:8): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 263.599030][ T29] audit: type=1804 audit(1717776862.034:9): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir638874373/syzkaller.04FO2Z/170/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 264.458187][ T29] audit: type=1800 audit(1717776862.964:10): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 264.551900][ T29] audit: type=1804 audit(1717776862.994:11): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir638874373/syzkaller.04FO2Z/173/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 265.219736][T10628] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 265.322521][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.879679][T10656] syzkaller0: entered promiscuous mode [ 265.907683][T10656] syzkaller0: entered allmulticast mode [ 265.915130][T10658] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 265.930657][T10660] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 266.114103][T10666] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 267.052057][T10701] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 267.118994][T10701] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 267.129441][T10701] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 267.143894][T10701] bond2: (slave vcan1): making interface the new active one [ 267.158953][T10701] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 268.180301][T10749] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.419782][T10762] bridge0: port 3(geneve1) entered blocking state [ 268.472709][T10762] bridge0: port 3(geneve1) entered disabled state [ 268.495718][T10762] geneve1: entered allmulticast mode [ 268.519339][T10762] geneve1: entered promiscuous mode [ 268.526262][T10762] bridge0: port 3(geneve1) entered blocking state [ 268.532997][T10762] bridge0: port 3(geneve1) entered forwarding state [ 269.396204][T10785] xt_CT: No such helper "syz0" [ 269.980211][T10804] batman_adv: batadv0: Adding interface: macvtap1 [ 270.011040][T10804] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.068418][T10804] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 270.123757][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 270.757104][T10830] bridge0: port 3(geneve1) entered blocking state [ 270.772933][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.799849][T10830] bridge0: port 3(geneve1) entered disabled state [ 270.843844][T10830] geneve1: entered allmulticast mode [ 270.892281][T10830] geneve1: left allmulticast mode [ 272.032192][ T1108] bridge_slave_1: left allmulticast mode [ 272.072162][ T1108] bridge_slave_1: left promiscuous mode [ 272.114662][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.251049][ T1108] bridge_slave_0: left allmulticast mode [ 272.256792][ T1108] bridge_slave_0: left promiscuous mode [ 272.294966][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.621881][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.656775][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.685666][ T1108] bond0 (unregistering): (slave team0): Releasing backup interface [ 273.698505][ T1108] tipc: Resetting bearer [ 273.720929][ T1108] tipc: Resetting bearer [ 273.726696][ T1108] bond0 (unregistering): Released all slaves [ 273.953191][ T1108] bond1 (unregistering): Released all slaves [ 273.975030][ T1108] bond2 (unregistering): Released all slaves [ 274.025573][T10884] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 274.058381][T10884] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 274.073197][T10886] bond0: (slave bond_slave_0): Releasing backup interface [ 274.278480][ T1108] tipc: Disabling bearer [ 274.286892][ T1108] tipc: Disabling bearer [ 274.310913][ T1108] tipc: Disabling bearer [ 274.347739][ T1108] tipc: Left network mode [ 275.073123][ T1108] hsr_slave_0: left promiscuous mode [ 275.092570][ T1108] hsr_slave_1: left promiscuous mode [ 275.110019][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.130060][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.161887][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.182357][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.205913][T10929] tipc: Failed to remove unknown binding: 66,1,1/0:1654710376/1654710378 [ 275.238767][T10929] tipc: Failed to remove unknown binding: 66,1,1/0:1654710376/1654710378 [ 275.328337][ T1108] veth1_macvtap: left promiscuous mode [ 275.333989][ T1108] veth0_macvtap: left promiscuous mode [ 275.357782][ T1108] veth1_vlan: left promiscuous mode [ 275.363222][ T1108] veth0_vlan: left promiscuous mode [ 276.291035][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 276.344241][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 278.144052][T11005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.809390][T11035] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 278.843498][T11035] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 278.861421][T11038] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 278.868159][T11035] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 278.900393][T11035] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 278.933828][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.411552][T11056] ipvlan3: entered promiscuous mode [ 279.416877][T11056] ipvlan3: entered allmulticast mode [ 279.427708][T11056] bond0: entered allmulticast mode [ 279.820716][T11087] xt_cluster: you have exceeded the maximum number of cluster nodes (256 > 32) [ 279.913937][T11090] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 279.945610][T11090] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 280.032039][T11090] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 280.053960][T11090] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 280.090035][T11090] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.413264][T11118] xt_cluster: you have exceeded the maximum number of cluster nodes (256 > 32) [ 280.444799][T11115] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 280.472534][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.707311][T11138] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 281.158026][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.214997][T11164] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 281.885377][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.943968][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.991670][T11196] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 282.043968][T11196] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 282.066414][T11196] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 282.091523][T11196] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 282.136921][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.189234][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.216591][T11213] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 282.458120][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.912799][T11236] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 283.248899][T11262] tun0: tun_chr_ioctl cmd 1074812118 [ 283.285292][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.969219][T11287] x_tables: duplicate underflow at hook 3 [ 284.068998][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.245289][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.316922][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.330197][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.338951][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.348763][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.356811][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.374908][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.391486][T11300] chnl_net:caif_netlink_parms(): no params data found [ 285.935187][T11300] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.957727][T11300] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.965163][T11300] bridge_slave_0: entered allmulticast mode [ 285.990534][T11300] bridge_slave_0: entered promiscuous mode [ 286.049909][T11300] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.071989][T11300] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.085715][T11300] bridge_slave_1: entered allmulticast mode [ 286.110687][T11300] bridge_slave_1: entered promiscuous mode [ 286.272469][T11300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.313059][T11300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.429095][ T5125] Bluetooth: hci4: command tx timeout [ 286.523734][T11300] team0: Port device team_slave_0 added [ 286.676535][T11300] team0: Port device team_slave_1 added [ 286.702773][T11381] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.730350][T11381] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.928680][T11300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.935702][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.976240][T11300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.028570][T11300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.057803][T11300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.092115][T11300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.140036][T11405] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 287.200582][T11405] dummy0: left promiscuous mode [ 287.280032][T11411] tun0: tun_chr_ioctl cmd 1074812118 [ 287.425798][T11300] hsr_slave_0: entered promiscuous mode [ 287.475591][T11300] hsr_slave_1: entered promiscuous mode [ 287.510348][T11421] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 287.595534][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.724202][T11424] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.743569][T11424] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.753290][T11424] bridge0: port 2(bridge_slave_1) entered listening state [ 288.013321][T11437] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.074755][T11300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.086314][T11300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.262022][T11300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.275826][T11300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.508005][ T5119] Bluetooth: hci4: command tx timeout [ 289.076084][ T5119] Bluetooth: hci0: command 0x0406 tx timeout [ 290.380499][T11300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.395495][T11300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.562826][T11300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.584681][T11300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.604013][ T5125] Bluetooth: hci4: command tx timeout [ 290.615546][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.630718][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.657503][T11458] bridge0: port 2(bridge_slave_1) entered listening state [ 290.857859][T11300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.876306][T11300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.894472][T11300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.930007][T11300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.115365][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.216654][T11480] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 291.406723][T11492] syz-executor.1[11492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.416978][T11492] syz-executor.1[11492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.670690][ T5125] Bluetooth: hci4: command tx timeout [ 293.756052][T11501] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 293.805343][T11300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.892413][T11300] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.941843][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.950442][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.026313][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.033628][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.163475][T11300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.265161][T11534] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 294.308572][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.526815][T11548] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 294.567878][T11547] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [.]L3 index 0 [ 294.705671][T11300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.900424][T11300] veth0_vlan: entered promiscuous mode [ 294.983142][T11300] veth1_vlan: entered promiscuous mode [ 295.181714][T11300] veth0_macvtap: entered promiscuous mode [ 295.200553][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.262158][T11300] veth1_macvtap: entered promiscuous mode [ 295.497239][T11300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.534660][T11300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.565462][T11300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.609836][T11300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.627824][T11300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.678109][T11300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.705859][T11300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.765774][T11300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.789802][T11300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.805819][T11300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.831024][T11300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.841351][T11300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.853068][T11300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.889704][T11300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.160162][T11300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.174686][T11300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.197781][T11300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.215273][T11300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.605537][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.637826][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.727306][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.737134][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.032210][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.617190][T11621] syzkaller1: entered promiscuous mode [ 297.643123][T11621] syzkaller1: entered allmulticast mode [ 299.017282][T11663] syzkaller1: entered promiscuous mode [ 299.039220][T11663] syzkaller1: entered allmulticast mode [ 299.762217][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.233567][T11738] mac80211_hwsim hwsim7 syzkaller1: entered promiscuous mode [ 301.276051][T11738] mac80211_hwsim hwsim7 syzkaller1: entered allmulticast mode [ 302.058646][T11771] syzkaller1: entered promiscuous mode [ 302.064464][T11771] syzkaller1: entered allmulticast mode [ 302.406905][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.886403][T11805] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.178335][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.544460][ T29] audit: type=1804 audit(1717776902.044:12): pid=11826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir772216901/syzkaller.fA3UIX/557/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 304.122727][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.724302][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.734288][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.907703][ T5119] Bluetooth: hci1: command 0x0406 tx timeout [ 336.305232][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.315022][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.323969][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.334617][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.342642][ T5119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.351613][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.313257][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.327217][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.340344][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.368297][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.376310][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.398191][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.672384][ T5125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.682575][ T5125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.691192][ T5125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.700842][ T5125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.714660][ T5125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.724286][ T5125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.788178][ T5119] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.797884][ T5119] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.806380][ T5119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.822610][ T5119] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.830558][ T5119] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 337.846527][ T5119] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 338.428035][ T5119] Bluetooth: hci5: command tx timeout [ 339.110952][ T5125] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 339.121302][ T5125] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 339.142115][ T5125] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 339.152299][ T5125] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 339.163646][ T5125] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 339.172074][ T5125] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 339.467929][ T5125] Bluetooth: hci6: command tx timeout [ 339.788156][ T5125] Bluetooth: hci7: command tx timeout [ 339.947794][ T5125] Bluetooth: hci8: command tx timeout [ 340.516121][ T5125] Bluetooth: hci5: command tx timeout [ 341.229022][ T5125] Bluetooth: hci9: command tx timeout [ 341.547927][ T5125] Bluetooth: hci6: command tx timeout [ 341.868449][ T5125] Bluetooth: hci7: command tx timeout [ 342.037782][ T5119] Bluetooth: hci8: command tx timeout [ 342.587655][ T5119] Bluetooth: hci5: command tx timeout [ 343.311059][ T5119] Bluetooth: hci9: command tx timeout [ 343.627605][ T5119] Bluetooth: hci6: command tx timeout [ 343.957497][ T5119] Bluetooth: hci7: command tx timeout [ 344.107796][ T5119] Bluetooth: hci8: command tx timeout [ 344.676203][ T5119] Bluetooth: hci5: command tx timeout [ 345.387929][ T5119] Bluetooth: hci9: command tx timeout [ 345.707675][ T5119] Bluetooth: hci6: command tx timeout [ 346.037703][ T5119] Bluetooth: hci7: command tx timeout [ 346.187817][ T5119] Bluetooth: hci8: command tx timeout [ 347.468978][ T5119] Bluetooth: hci9: command tx timeout [ 376.107952][ T5125] Bluetooth: hci3: command 0x0405 tx timeout [ 379.151284][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.158314][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.118526][T11926] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 402.129559][T11926] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 402.138313][T11926] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 402.154457][T11926] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 402.162652][T11926] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 402.170459][T11926] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 402.717595][T11926] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 402.727841][T11926] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 402.737293][T11926] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 402.746725][T11926] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 402.755750][T11926] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 402.767834][T11926] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 402.997464][ T5119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 403.009737][ T5119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 403.027120][ T5119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 403.038795][ T5119] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 403.056644][ T5119] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 403.070646][ T5119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 403.146459][ T5119] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 403.157300][ T5119] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 403.177038][ T5119] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 403.220133][ T5119] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 403.229881][ T5119] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 403.237654][ T5119] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 404.157359][T11926] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 404.172737][T11926] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 404.181991][T11926] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 404.198272][T11926] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 404.206444][T11926] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 404.216407][T11926] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 404.267884][ T5119] Bluetooth: hci10: command tx timeout [ 404.830226][ T5119] Bluetooth: hci11: command tx timeout [ 405.157996][ T5119] Bluetooth: hci12: command tx timeout [ 405.317649][ T5119] Bluetooth: hci13: command tx timeout [ 406.277979][ T5119] Bluetooth: hci14: command tx timeout [ 406.357551][ T5119] Bluetooth: hci10: command tx timeout [ 406.908002][ T5119] Bluetooth: hci11: command tx timeout [ 407.227937][ T5119] Bluetooth: hci12: command tx timeout [ 407.388135][ T5119] Bluetooth: hci13: command tx timeout [ 408.347785][ T5119] Bluetooth: hci14: command tx timeout [ 408.433389][ T5119] Bluetooth: hci10: command tx timeout [ 408.988011][ T5119] Bluetooth: hci11: command tx timeout [ 409.307902][ T5119] Bluetooth: hci12: command tx timeout [ 409.470623][ T5119] Bluetooth: hci13: command tx timeout [ 410.427862][T11926] Bluetooth: hci14: command tx timeout [ 410.508462][T11926] Bluetooth: hci10: command tx timeout [ 411.068144][T11926] Bluetooth: hci11: command tx timeout [ 411.387959][T11926] Bluetooth: hci12: command tx timeout [ 411.547746][T11926] Bluetooth: hci13: command tx timeout [ 411.957840][T11926] Bluetooth: hci4: command 0x0406 tx timeout [ 412.513874][ T5119] Bluetooth: hci14: command tx timeout [ 414.999002][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.598507][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.604903][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.997825][ T30] INFO: task kworker/u8:6:1108 blocked for more than 143 seconds. [ 463.005746][ T30] Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 463.013500][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.022256][ T30] task:kworker/u8:6 state:D stack:22056 pid:1108 tgid:1108 ppid:2 flags:0x00004000 [ 463.032540][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 463.039629][ T30] Call Trace: [ 463.042934][ T30] 2024/06/07 16:17:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 463.045913][ T30] __schedule+0x17e8/0x4a20 [ 463.050570][ T30] ? __pfx___schedule+0x10/0x10 [ 463.055476][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.077532][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.083119][ T30] ? kthread_data+0x52/0xd0 [ 463.101849][ T30] ? schedule+0x90/0x320 [ 463.106184][ T30] ? wq_worker_sleeping+0x66/0x240 [ 463.127475][ T30] ? schedule+0x90/0x320 [ 463.131807][ T30] schedule+0x14b/0x320 [ 463.136007][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.147424][ T30] __mutex_lock+0x6a4/0xd70 [ 463.152001][ T30] ? __mutex_lock+0x527/0xd70 [ 463.167478][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 463.174625][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.215871][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 463.222308][ T30] ? preempt_schedule+0xe1/0xf0 [ 463.227210][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 463.265926][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.272072][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 463.295743][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 463.307433][ T30] ? process_scheduled_works+0x945/0x1830 [ 463.313325][T11939] Bluetooth: hci8: command 0x0406 tx timeout [ 463.320194][T11939] Bluetooth: hci9: command 0x0406 tx timeout [ 463.328659][ T30] process_scheduled_works+0xa2c/0x1830 [ 463.334312][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.365870][ T30] ? assign_work+0x364/0x3d0 [ 463.378289][ T30] worker_thread+0x86d/0xd70 [ 463.382982][ T30] ? __kthread_parkme+0x169/0x1d0 [ 463.397547][T11942] Bluetooth: hci7: command 0x0406 tx timeout [ 463.397567][T11941] Bluetooth: hci5: command 0x0406 tx timeout [ 463.403596][T11942] Bluetooth: hci6: command 0x0406 tx timeout [ 463.427172][ T30] ? __pfx_worker_thread+0x10/0x10 [ 463.432525][ T30] kthread+0x2f0/0x390 [ 463.436648][ T30] ? __pfx_worker_thread+0x10/0x10 [ 463.443055][ T30] ? __pfx_kthread+0x10/0x10 [ 463.447944][ T30] ret_from_fork+0x4b/0x80 [ 463.452469][ T30] ? __pfx_kthread+0x10/0x10 [ 463.457105][ T30] ret_from_fork_asm+0x1a/0x30 [ 463.462102][ T30] [ 463.465311][ T30] INFO: task syz-executor.3:11884 blocked for more than 143 seconds. [ 463.477003][ T30] Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 463.485633][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.496715][ T30] task:syz-executor.3 state:D stack:26112 pid:11884 tgid:11880 ppid:9253 flags:0x00000006 [ 463.507254][ T30] Call Trace: [ 463.511567][ T30] [ 463.514544][ T30] __schedule+0x17e8/0x4a20 [ 463.521402][ T30] ? __pfx___schedule+0x10/0x10 [ 463.526315][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.531438][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.536954][ T30] ? schedule+0x90/0x320 [ 463.541456][ T30] schedule+0x14b/0x320 [ 463.545665][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.552561][ T30] __mutex_lock+0x6a4/0xd70 [ 463.557126][ T30] ? __mutex_lock+0x527/0xd70 [ 463.562113][ T30] ? wg_set_device+0x102/0x2160 [ 463.567037][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.572243][ T30] ? dev_get_by_index+0x23/0x2d0 [ 463.577264][ T30] ? dev_get_by_index+0x29c/0x2d0 [ 463.583244][ T30] ? lookup_interface+0x292/0x2d0 [ 463.588409][ T30] wg_set_device+0x102/0x2160 [ 463.593152][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 463.601116][ T30] ? __pfx_wg_set_device+0x10/0x10 [ 463.606308][ T30] ? __nla_parse+0x40/0x60 [ 463.610886][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 463.617273][ T30] genl_rcv_msg+0xb14/0xec0 [ 463.622223][ T30] ? mark_lock+0x9a/0x350 [ 463.626694][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.635918][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 463.641531][ T30] ? __pfx_wg_set_device+0x10/0x10 [ 463.646697][ T30] ? __pfx___might_resched+0x10/0x10 [ 463.652216][ T30] netlink_rcv_skb+0x1e3/0x430 [ 463.657027][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.672305][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.682838][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 463.692297][ T30] genl_rcv+0x28/0x40 [ 463.696533][ T30] netlink_unicast+0x7ea/0x980 [ 463.706414][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 463.725069][ T30] ? __virt_addr_valid+0x183/0x520 [ 463.732827][ T30] ? __check_object_size+0x49c/0x900 [ 463.740670][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 463.745848][ T30] netlink_sendmsg+0x8db/0xcb0 [ 463.759110][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.764475][ T30] ? __import_iovec+0x536/0x820 [ 463.775634][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 463.781040][ T30] ? bp