last executing test programs:

33.474179136s ago: executing program 4:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900), 0x4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0)

33.047087992s ago: executing program 2:
syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)

32.897585078s ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendto$packet(r1, &(0x7f0000000100)="1edf0d50d5770ac0de6e0136413b9eca963f867c5e6917fd92021c1665c39c849c28f3a771", 0x25, 0x81, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x1b)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
sendto$inet6(r0, &(0x7f0000000440)="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", 0xfff4, 0x0, 0x0, 0x0)

32.871926677s ago: executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', '', [{0x20, 'byteorder\x00\x02\x12q\x81(~\xbb\xf7\xe0\x8c\x12\x1a\xd1pDd\"\xd3\xe8Q\xf2\xf5\xb9\xec\xe1]\xe5\xc3\x95\x9b\x82\xae:\xc9\xf7Iu\xad\xe2\xa8\x83\x13L\xcfT\x8cvK$\xd9\n\x01\xb7\xcf\r\xd1>\xbc\x986H{\x883\xcdY@\xa4\xa2\x91\xcaP\xd5S5\xa4Q\x16\xb1'}, {0x20, '\xbb\x88\x7f\t\x8d\xbda\xb5\x83\xfe\xb3\xf2\x83\x91\x1dw|!\xfdl\f\xb0\rX}\xe3H\x83\x81\x9b\xa7\xad\xb7\xeb\xf2\xe4\xa1\n\v\xd0\x15B\x1c`\x98\xb6\x98\xd4^/\xdd\xa0\x81\x7fiB\xb8\xc2&W\xaf\xb0\xc2R\x1b\xd5I\xe1\x98\x97\xb3|\xb4\xf8\xe3\xf8\'\x99c\x04y\xe8\xb0\x0f\x9cR\x13Lc\xf7\xacxIl\xf3\x10\xac\x9aPS\xaf\x10\ac\xed{i\xf5\xda:\xea\x1a\x9eT\x91\xf4h\xd1\x8c\xcdB$=\x00\x00\x82\x8fl\aT\x83\xee\x17\xc0\x8d\x18B7\x96\xd00\x18\xde>\x8ca{Rn \xbe\xa6K\xc4\x9f\xa5\x19\x14\xb4F\xb8\x1a\xfd\xf6\x0f\xf7\x93\"\xb9\xa0\xd9\xc0\x049\x88k\xe2\x82\xd1c\xb8\xe1o}\xd9\xf4\xee\x16\xa5N\"g\xf18\xaeg\xc5\x17\x9bAj\xfc)c\xf4\x92\xdd\xdc'}]}, 0x12f)
recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000300)=""/118, 0x76}], 0x2}}], 0x1, 0x0, 0x0)

32.76630432s ago: executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x32}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

32.709395893s ago: executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa)

32.69856121s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={0x0, 0x12000000, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

32.689763694s ago: executing program 2:
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/523], 0x290)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)

32.544090513s ago: executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r3, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLAGS={0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x4c}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}}], 0x1, 0x0)

31.802009685s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000a000850000004500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

30.924304477s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="2df24d8a", 0x7ffff000}, {&(0x7f0000000280)="edb31d7be648da153ddb1ac8a0dec7af29a2a59dc91e0a68f4465452b8c79cf645b833f12b35209a", 0x28}], 0x2)

30.888157738s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{0x0, 0x0, 0x9}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

30.861815882s ago: executing program 4:
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1800", 0x2}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc)

30.842921076s ago: executing program 0:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000), 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000800)="ff", &(0x7f0000000680)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20)

30.831157635s ago: executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000004980)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@generic={0x89, 0x2}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast}}}}}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@dev}, &(0x7f0000000140)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"])
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0xba01}, 0x0)

30.762700191s ago: executing program 3:
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x3, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}}, 0x0)

30.671081036s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}]}, 0x28}}, 0x0)

30.650930365s ago: executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000001900)=""/4119, 0x1017}, {&(0x7f00000005c0)=""/85, 0x55}], 0x4}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

30.606531574s ago: executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001500000070002b804c00038008000200feffffff06000300a1aa00000800020002000000060001000100000006000300a2aa000006000100020000000600010000000000080002000200000006000300a0aa00000800040009000000080001000200000008e3030001000000050002000000000005002900000000000c00060001"], 0x98}}, 0x0)

30.422598764s ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

30.35641456s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

30.332850853s ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={0x0, 0x12000000, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r2], 0x1c}}, 0x0)

30.325126907s ago: executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)={0x44, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2d2340b1febd3dad8fbf086cb9bd3319"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0)

30.194245277s ago: executing program 2:
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
getpeername$packet(0xffffffffffffffff, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002840)={'gretap0\x00', &(0x7f0000002740)={'erspan0\x00', 0x0, 0x1, 0x80, 0x7, 0x4f, {{0x21, 0x4, 0x0, 0x33, 0x84, 0x0, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x3, 0xa1}, @timestamp_prespec={0x44, 0x3c, 0xe, 0x3, 0x0, [{@local, 0x2}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x73}, {@loopback, 0x6}, {@broadcast, 0xffffcd7d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @rr={0x7, 0x3, 0x4c}, @rr={0x7, 0xf, 0x9c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x6, [{@multicast1, 0x7}]}, @ssrr={0x89, 0x13, 0x75, [@broadcast, @broadcast, @loopback, @multicast1]}]}}}}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000e00)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x10}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90)
r6 = socket$inet6(0xa, 0x2, 0x0)
r7 = socket$packet(0x11, 0x0, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r8=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r8, 0x2, 0x6}, 0xfffffffffffffdd9)
r9 = socket$kcm(0x2, 0xa, 0x2)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}})
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)

30.035048146s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000a000850000004500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

393.818344ms ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

306.19766ms ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0x4)
write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df)
sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0)

250.19619ms ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{0x0, 0x0, 0x9}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

129.643593ms ago: executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)

0s ago: executing program 3:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000003c0), &(0x7f0000000400)=0x4)

kernel console output (not intermixed with test programs):

stent configuration, please check.
[  276.732346][T12392] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'.
[  276.765846][T12392] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  277.305193][T12424] netlink: 658 bytes leftover after parsing attributes in process `syz-executor.0'.
[  277.332082][T12426] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  277.448031][ T5122] Bluetooth: hci3: command tx timeout
[  277.473757][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  277.609895][T12433] netlink: 'syz-executor.0': attribute type 64 has an invalid length.
[  277.641778][T12433] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  277.803646][T12444] netlink: 'syz-executor.2': attribute type 30 has an invalid length.
[  277.952813][T12454] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  278.125284][T12462] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  278.178049][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  278.193120][T12462] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  278.212516][T12462] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  278.277102][T12462] team0: Port device wlan1 removed
[  278.294308][T12462] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  278.311361][T12462] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  278.592926][T12484] netlink: 'syz-executor.0': attribute type 30 has an invalid length.
[  278.614039][T12486] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  278.703325][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  278.921452][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.077704][T12516] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  279.503129][T12539] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  279.517344][T12543] __nla_validate_parse: 3 callbacks suppressed
[  279.517367][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  279.523614][ T5122] Bluetooth: hci3: command 0x0405 tx timeout
[  279.564713][T12539] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.992671][T12561] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  280.500909][T12597] openvswitch: netlink: Unknown nsh attribute 0
[  280.835057][T12619] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  280.844641][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  281.841843][T12658] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  281.863421][T12658] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  281.880828][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  282.201501][T12690] xt_HMARK: spi-set and port-set can't be combined
[  282.321756][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.388003][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  282.711106][T12723] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  283.056089][T12744] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  283.074994][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  283.213642][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.289467][T12758] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  283.361159][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.494034][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  283.512183][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  283.652510][T12780] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  284.034159][T12801] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  284.154960][T12810] nbd: nbd0 already in use
[  284.398327][ T5170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.449110][T12823] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  284.476596][T12830] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  284.686737][T12838] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  284.738137][T12838] __nla_validate_parse: 4 callbacks suppressed
[  284.738162][T12838] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'.
[  284.858820][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  284.900212][T12842] nbd: nbd0 already in use
[  285.358320][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.440713][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.518542][ T5129] Bluetooth: hci3: command 0x0405 tx timeout
[  285.527309][T12883] xt_TPROXY: Can be used only with -p tcp or -p udp
[  286.251117][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.480678][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.731878][    T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.841580][T12962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.034486][T12970] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  287.333079][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  287.359718][ T5168] net_ratelimit: 1 callbacks suppressed
[  287.359739][ T5168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.378033][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  287.476964][T12993] netlink: 'syz-executor.2': attribute type 32 has an invalid length.
[  287.500548][T12993] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.2'.
[  287.518282][  T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.792033][T13014] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  287.809434][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  287.918771][T13020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.999319][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.120370][T13031] netlink: 'syz-executor.0': attribute type 32 has an invalid length.
[  288.131539][T13031] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'.
[  288.233830][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  288.252489][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  288.368550][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.377615][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.387529][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.404998][T13045] pimreg12: entered allmulticast mode
[  288.445715][T13044] pimreg12: left allmulticast mode
[  288.558822][  T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.641168][ T5124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.944241][T13026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.654032][T13140] __nla_validate_parse: 2 callbacks suppressed
[  290.654053][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  290.735707][T13147] bridge: RTM_NEWNEIGH bridge2 with NTF_USE is not supported
[  290.791507][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  290.827519][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  290.842372][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  290.899083][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.916592][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.927124][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.937310][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.953179][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  290.963711][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  291.118588][T13165] sctp: [Deprecated]: syz-executor.4 (pid 13165) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.118588][T13165] Use struct sctp_sack_info instead
[  291.432233][T13153] chnl_net:caif_netlink_parms(): no params data found
[  291.448591][T13185] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  291.467742][T13185] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[  291.484612][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  291.714045][T13153] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.729292][T13153] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.737197][T13153] bridge_slave_0: entered allmulticast mode
[  291.745530][T13153] bridge_slave_0: entered promiscuous mode
[  291.767296][T13153] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.778633][T13153] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.786443][T13153] bridge_slave_1: entered allmulticast mode
[  291.794149][T13153] bridge_slave_1: entered promiscuous mode
[  291.853489][T13153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.867161][T13153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.924497][T13153] team0: Port device team_slave_0 added
[  291.936702][T13153] team0: Port device team_slave_1 added
[  291.968717][T13153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.975700][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.004100][T13153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.019777][T13153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.026760][T13153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.054448][T13153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.104231][T13153] hsr_slave_0: entered promiscuous mode
[  292.112933][T13153] hsr_slave_1: entered promiscuous mode
[  292.119760][T13153] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.127346][T13153] Cannot create hsr debugfs directory
[  292.290166][T13153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.301159][T13153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.411808][T13153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.426516][T13153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.523279][T13153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  292.533778][T13153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.713098][T13153] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  292.722441][ T5202] net_ratelimit: 12 callbacks suppressed
[  292.722461][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.734686][T13153] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  292.757119][T13153] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  292.775925][T13153] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  292.872280][T13153] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.900267][T13153] 8021q: adding VLAN 0 to HW filter on device team0
[  292.922710][  T931] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.929913][  T931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.945321][  T931] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.952646][  T931] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.043150][ T5129] Bluetooth: hci2: command tx timeout
[  293.156910][T13153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.206174][T13153] veth0_vlan: entered promiscuous mode
[  293.227155][T13153] veth1_vlan: entered promiscuous mode
[  293.266972][T13153] veth0_macvtap: entered promiscuous mode
[  293.280701][T13153] veth1_macvtap: entered promiscuous mode
[  293.302801][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.313934][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.324559][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.335378][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.346134][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.357094][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.369287][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.379845][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.390230][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.400856][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.410818][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.421349][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.434428][T13153] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.456621][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.468075][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.480031][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.490747][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.501163][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.512350][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.522589][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.534833][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.545576][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.556061][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.565939][T13153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.577274][T13153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.589190][T13153] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.603383][T13153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.613044][T13153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.625466][T13153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.634738][T13153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.763925][ T6905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.776346][ T5202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.803158][ T6905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.825950][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.864136][T13212] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.879248][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.887608][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.930225][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.946789][T13215] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  293.959038][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.983492][T13215] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'.
[  293.992471][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.011792][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.021623][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  294.027533][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.040078][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.051322][T13207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.362323][T13229] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  294.614146][T13244] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.763844][T13252] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  294.899362][T13255] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  295.118995][ T5129] Bluetooth: hci2: command tx timeout
[  295.412991][T13283] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  295.898207][T13305] __nla_validate_parse: 4 callbacks suppressed
[  295.898232][T13305] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'.
[  295.947418][T13305] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  295.978230][T13305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  296.146937][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  296.448929][T13333] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  296.466290][T13333] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'.
[  296.481978][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  296.586877][T13336] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  296.645309][T13336] ��: entered promiscuous mode
[  296.722738][T13341] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  296.738386][T13341] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  296.834473][T13349] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it!
[  297.198110][ T5129] Bluetooth: hci2: command tx timeout
[  297.265426][T13374] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  297.763724][   T45] net_ratelimit: 154 callbacks suppressed
[  297.763748][   T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.919611][  T931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.947676][T13475] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'.
[  298.987500][T13475] ��: entered promiscuous mode
[  299.278998][ T5129] Bluetooth: hci2: command tx timeout
[  299.436577][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  299.622368][T13510] openvswitch: ��: Dropping previously announced user features
[  300.167920][   T29] audit: type=1804 audit(1718789059.924:12): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/97/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[  300.492243][T13561] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  300.655775][T13558] bond0: entered promiscuous mode
[  300.666477][T13558] bond_slave_0: entered promiscuous mode
[  300.688298][T13558] bond_slave_1: entered promiscuous mode
[  300.713193][T13558] team0: entered promiscuous mode
[  300.725051][T13558] team_slave_0: entered promiscuous mode
[  300.733520][T13558] team_slave_1: entered promiscuous mode
[  300.750941][T13558] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  300.765435][T13558] Cannot create hsr debugfs directory
[  300.959783][T13586] __nla_validate_parse: 2 callbacks suppressed
[  300.959808][T13586] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'.
[  301.067692][T13594] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  301.576076][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.742971][T13628] wg1: entered promiscuous mode
[  301.813111][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  303.115736][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  303.852723][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  304.919168][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  304.943890][T13762] nbd: couldn't find a device at index 1073741824
[  305.169759][T13771] tap0: tun_chr_ioctl cmd 1074025677
[  305.198523][T13771] tap0: linktype set to 780
[  306.409890][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  306.787441][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  310.502283][T13936] tun0: tun_chr_ioctl cmd 1074025675
[  310.514179][T13936] tun0: persist enabled
[  310.521093][T13936] tun0: tun_chr_ioctl cmd 1074025675
[  310.526529][T13936] tun0: persist enabled
[  310.626353][T13941] nbd: couldn't find a device at index 1073741824
[  311.610945][T14000] Cannot find add_set index 0 as target
[  311.965248][T14020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  311.994172][T14022] netlink: del zone limit has 8 unknown bytes
[  312.304224][T14039] sch_fq: defrate 0 ignored.
[  312.566522][T14052] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  312.618974][T14052] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'.
[  313.819726][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  313.838181][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  313.850240][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  313.871257][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  313.886515][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  313.895281][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.532474][T14090] chnl_net:caif_netlink_parms(): no params data found
[  314.588112][T14124] netlink: 'syz-executor.4': attribute type 32 has an invalid length.
[  314.610192][T14124] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  314.656962][T14127] netlink: 'syz-executor.1': attribute type 9 has an invalid length.
[  314.683582][T14127] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  314.715145][T14127] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  314.791147][T14140] sctp: [Deprecated]: syz-executor.0 (pid 14140) Use of int in max_burst socket option.
[  314.791147][T14140] Use struct sctp_assoc_value instead
[  314.872041][T14090] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.902204][T14090] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.920807][T14090] bridge_slave_0: entered allmulticast mode
[  314.929907][T14090] bridge_slave_0: entered promiscuous mode
[  314.951942][   T29] audit: type=1804 audit(1718789074.714:13): pid=14145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/91/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  314.976530][T14090] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.986322][T14090] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.003566][T14090] bridge_slave_1: entered allmulticast mode
[  315.011667][T14090] bridge_slave_1: entered promiscuous mode
[  315.467659][T14090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.604032][T14090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.995336][T14090] team0: Port device team_slave_0 added
[  316.008984][ T5129] Bluetooth: hci4: command tx timeout
[  316.068293][T14090] team0: Port device team_slave_1 added
[  316.205344][T14090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.222274][T14090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.255130][T14175] sctp: [Deprecated]: syz-executor.2 (pid 14175) Use of int in max_burst socket option.
[  316.255130][T14175] Use struct sctp_assoc_value instead
[  316.277889][T14090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.322258][T14090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.337926][T14090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.375396][T14090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.522435][T14179] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64)
[  316.549749][T14090] hsr_slave_0: entered promiscuous mode
[  316.571434][T14090] hsr_slave_1: entered promiscuous mode
[  316.592304][T14090] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.617353][T14090] Cannot create hsr debugfs directory
[  316.683174][   T29] audit: type=1804 audit(1718789076.444:14): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/479/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0
[  316.735500][T14183] netlink: 'syz-executor.1': attribute type 21 has an invalid length.
[  316.761639][T14183] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'.
[  317.317037][T14090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.335082][T14090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0
[  317.346085][T14090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.447719][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  317.500698][T14090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.548106][T14090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0
[  317.578647][T14090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.725912][T14090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.753940][T14090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0
[  317.777928][T14090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.080643][ T5129] Bluetooth: hci4: command tx timeout
[  318.311304][T14090] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  318.343577][T14090] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  318.447657][T14090] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  318.481951][T14090] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  318.805806][T14090] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.852784][T14235] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  318.870527][T14235] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  318.901755][T14090] 8021q: adding VLAN 0 to HW filter on device team0
[  318.952108][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.959430][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.989892][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.997111][ T5202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.117045][T14240] ip6t_rpfilter: unknown options
[  319.640900][T14090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.869508][T14090] veth0_vlan: entered promiscuous mode
[  319.911421][   T29] audit: type=1804 audit(1718789079.674:15): pid=14237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir493822305/syzkaller.eOxh9G/732/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0
[  320.023951][T14090] veth1_vlan: entered promiscuous mode
[  320.163860][T14090] veth0_macvtap: entered promiscuous mode
[  320.170713][ T5129] Bluetooth: hci4: command tx timeout
[  320.206103][T14090] veth1_macvtap: entered promiscuous mode
[  320.228550][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.242462][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.252391][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.264325][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.274254][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.299526][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.347795][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.370366][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.382547][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.393921][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.406288][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.416995][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.427722][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.449997][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.476426][T14268] xt_HMARK: proto mask must be zero with L3 mode
[  320.482159][T14090] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.507257][T14265] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  320.516813][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  320.574149][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.606417][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.657904][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.685769][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.701365][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.727891][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.737750][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.746177][T14277] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'.
[  320.778131][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.797097][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.818974][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.838400][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.858042][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.878615][T14090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.901555][T14090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.925385][T14090] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.979626][T14280] sctp: [Deprecated]: syz-executor.0 (pid 14280) Use of int in max_burst socket option deprecated.
[  320.979626][T14280] Use struct sctp_assoc_value instead
[  321.032672][T14090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.067928][T14090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.076705][T14090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.107916][T14090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.371732][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.381988][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.495948][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.527922][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.059718][T14312] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  322.104421][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  322.238646][ T5129] Bluetooth: hci4: command tx timeout
[  323.196245][T14344] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'.
[  323.356704][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  323.386708][T14361] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  323.407375][T14363] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  323.428597][T14363] netlink: 'syz-executor.3': attribute type 20 has an invalid length.
[  323.470748][T14363] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  323.486632][T14363] IPv6: NLM_F_CREATE should be specified when creating new route
[  324.145461][T14386] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'.
[  324.806488][T14433] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[  324.838481][T14433] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  325.277735][T14451] Bluetooth: MGMT ver 1.22
[  325.632838][T14463] Bluetooth: MGMT ver 1.22
[  325.890779][T14468] netlink: 'syz-executor.1': attribute type 30 has an invalid length.
[  325.919030][T14468] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  325.939817][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  326.083934][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  326.096036][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  326.104970][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  326.114379][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  326.122681][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  326.131827][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  326.194878][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.352719][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.546024][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.607599][   T29] audit: type=1804 audit(1718789086.364:16): pid=14487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/134/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0
[  326.727572][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.796832][T14496] netlink: 'syz-executor.1': attribute type 30 has an invalid length.
[  326.810488][T14496] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  326.965550][T14502] Unknown options in mask 1f4
[  327.349030][   T11] bridge_slave_1: left allmulticast mode
[  327.354751][   T11] bridge_slave_1: left promiscuous mode
[  327.387394][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.448892][   T11] bridge_slave_0: left allmulticast mode
[  327.454622][   T11] bridge_slave_0: left promiscuous mode
[  327.479298][T14519] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  327.498366][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.565897][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  327.701552][T14526] Unknown options in mask 1f4
[  328.238086][ T5119] Bluetooth: hci4: command tx timeout
[  328.664192][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.707667][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.750504][   T11] bond0 (unregistering): Released all slaves
[  328.923353][T14472] chnl_net:caif_netlink_parms(): no params data found
[  329.710587][T14472] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.748478][T14472] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.755842][T14472] bridge_slave_0: entered allmulticast mode
[  329.759684][T14560] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  329.789562][T14472] bridge_slave_0: entered promiscuous mode
[  329.820011][T14472] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.827195][T14472] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.846804][T14472] bridge_slave_1: entered allmulticast mode
[  329.860245][T14472] bridge_slave_1: entered promiscuous mode
[  329.882121][   T11] hsr_slave_0: left promiscuous mode
[  329.888764][   T11] hsr_slave_1: left promiscuous mode
[  329.895372][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.903525][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.916346][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.935447][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.994131][   T11] veth1_macvtap: left promiscuous mode
[  330.008554][   T11] veth0_macvtap: left promiscuous mode
[  330.014517][   T11] veth1_vlan: left promiscuous mode
[  330.023092][   T11] veth0_vlan: left promiscuous mode
[  330.328016][ T5119] Bluetooth: hci4: command tx timeout
[  330.955675][   T11] team0 (unregistering): Port device team_slave_1 removed
[  331.003238][   T11] team0 (unregistering): Port device team_slave_0 removed
[  331.493065][T14562] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[  331.514523][T14562] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  331.649717][T14573] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  331.674521][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.709665][T14577] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.4'.
[  331.730365][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.782530][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  331.832407][T14583] xt_recent: hitcount (4294967295) is larger than allowed maximum (255)
[  331.862425][T14472] team0: Port device team_slave_0 added
[  331.919767][T14472] team0: Port device team_slave_1 added
[  332.108103][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  332.115112][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.176248][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.206953][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.212109][T14599] xt_hashlimit: size too large, truncated to 1048576
[  332.237972][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.240803][T14599] xt_hashlimit: overflow, try lower: 0/0
[  332.286889][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.408093][ T5119] Bluetooth: hci4: command tx timeout
[  332.512420][T14472] hsr_slave_0: entered promiscuous mode
[  332.540518][T14472] hsr_slave_1: entered promiscuous mode
[  332.573720][T14472] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  332.605935][T14472] Cannot create hsr debugfs directory
[  332.734275][T14609] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  332.753536][T14609] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'.
[  333.333573][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  333.444249][T14635] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  333.465895][T14635] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'.
[  333.552024][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  333.647048][T14643] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  333.752840][T14641] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  333.854439][T14655] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'.
[  333.866636][T14655] unsupported nlmsg_type 40
[  333.959064][T14472] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  333.990940][T14472] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  334.017666][T14472] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  334.059566][T14472] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  334.102113][T14667] xt_TCPMSS: Only works on TCP SYN packets
[  334.478013][ T5119] Bluetooth: hci4: command tx timeout
[  334.501610][T14472] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.546018][T14472] 8021q: adding VLAN 0 to HW filter on device team0
[  334.575477][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.582713][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.626883][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.634145][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.829634][T14696] xt_TCPMSS: Only works on TCP SYN packets
[  335.188372][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.377726][T14472] veth0_vlan: entered promiscuous mode
[  335.474155][T14472] veth1_vlan: entered promiscuous mode
[  335.599839][T14472] veth0_macvtap: entered promiscuous mode
[  335.649768][T14472] veth1_macvtap: entered promiscuous mode
[  335.722897][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.768818][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.790135][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.812307][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.844672][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.893343][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.929233][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.951460][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.980100][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.011487][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.033378][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.051543][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.062542][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.075345][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.094197][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.108252][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  336.152697][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  336.240003][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.278338][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.303163][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.338865][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.360594][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.387838][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.398255][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.409735][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.430422][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.449276][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.467470][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.472067][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  336.494694][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.513837][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.536343][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.564142][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.601714][T14472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.620345][T14472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.640783][T14472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.657890][T14472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.942665][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.965845][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.034157][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.054850][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.509616][T14792] __nla_validate_parse: 1 callbacks suppressed
[  337.509637][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  337.610085][T14798] netlink: 'syz-executor.0': attribute type 3 has an invalid length.
[  337.635849][T14798] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'.
[  337.688240][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  337.884062][T14813] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'.
[  338.655563][T14819] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  338.880077][T14837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  340.198372][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  340.273718][T14907] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  340.642924][T14932] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  341.210516][T14954] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'.
[  341.478809][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  341.838683][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  342.111080][   T29] audit: type=1800 audit(1718789101.874:17): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0
[  342.155119][   T29] audit: type=1804 audit(1718789101.914:18): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/182/memory.events" dev="sda1" ino=1964 res=1 errno=0
[  342.221520][   T29] audit: type=1804 audit(1718789101.914:19): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/182/memory.events" dev="sda1" ino=1964 res=1 errno=0
[  342.382461][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  342.471440][T15025] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3)
[  342.676967][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  342.899907][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  343.175167][   T29] audit: type=1800 audit(1718789102.924:20): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0
[  343.245451][   T29] audit: type=1804 audit(1718789102.974:21): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/185/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  343.275233][   T29] audit: type=1804 audit(1718789102.984:22): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/185/memory.events" dev="sda1" ino=1957 res=1 errno=0
[  343.483602][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  344.173281][T15112] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  344.186095][T15112] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.2'.
[  344.709456][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  344.906687][T15149] bridge_slave_0: left allmulticast mode
[  344.938004][T15149] bridge_slave_0: left promiscuous mode
[  344.959356][T15149] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.997000][T15149] bridge_slave_1: left allmulticast mode
[  345.014178][T15149] bridge_slave_1: left promiscuous mode
[  345.026700][T15149] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.080856][T15149] bond0: (slave bond_slave_0): Releasing backup interface
[  345.136909][T15149] bond0: (slave bond_slave_1): Releasing backup interface
[  345.255610][T15149] team0: Port device team_slave_0 removed
[  345.307506][T15149] team0: Port device team_slave_1 removed
[  345.328490][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.336014][T15149] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.349494][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.357635][T15149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.437742][T15162] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28
[  345.461295][T15152] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.486152][T15152] team0: Port device bond0 added
[  345.743515][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  345.952008][T15181] ieee802154 phy1 wpan1: encryption failed: -22
[  346.531380][T15217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  347.038998][T15251] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28
[  347.827659][T15296] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[  348.129759][T15314] veth0_vlan: entered allmulticast mode
[  348.445373][T15331] bond0: (slave bond_slave_0): Releasing backup interface
[  348.548936][T15331] bond0: (slave bond_slave_1): Releasing backup interface
[  348.641881][T15331] team0: Port device team_slave_0 removed
[  348.704817][T15331] team0: Port device team_slave_1 removed
[  348.724236][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.732734][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.742410][T15331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.757509][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.893849][T15334] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.910353][T15334] team0: Device bond0 failed to register rx_handler
[  349.036426][T15357] veth0_vlan: entered allmulticast mode
[  349.409420][T15375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  349.623338][T15389] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  349.653180][T15389] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.4'.
[  349.768551][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  350.047686][T15398] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  350.300448][T15423] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  350.328179][T15423] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.2'.
[  350.462951][ T5202] IPVS: starting estimator thread 0...
[  350.480493][T15427] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[  350.578366][T15429] IPVS: using max 17 ests per chain, 40800 per kthread
[  350.944081][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  350.955869][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  350.965885][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  350.977180][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  350.986652][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  350.996763][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  351.408315][T15470] bond0: entered promiscuous mode
[  351.689715][T15449] chnl_net:caif_netlink_parms(): no params data found
[  351.773926][T15449] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.781882][T15449] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.789685][T15449] bridge_slave_0: entered allmulticast mode
[  351.796892][T15449] bridge_slave_0: entered promiscuous mode
[  351.806592][T15449] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.815298][T15449] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.822753][T15449] bridge_slave_1: entered allmulticast mode
[  351.830718][T15449] bridge_slave_1: entered promiscuous mode
[  351.874666][T15449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.889275][T15449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.939386][T15449] team0: Port device team_slave_0 added
[  351.948031][T15449] team0: Port device team_slave_1 added
[  351.983644][T15449] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.990746][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.017610][T15449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.044843][T15449] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.052932][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.079973][T15449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.133070][T15449] hsr_slave_0: entered promiscuous mode
[  352.143617][T15449] hsr_slave_1: entered promiscuous mode
[  352.150472][T15449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.159285][T15449] Cannot create hsr debugfs directory
[  352.331268][T15449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.419960][T15449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.515177][T15449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.611415][T15449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.739493][T15449] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  352.750307][T15449] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  352.763210][T15449] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  352.773990][T15449] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  352.882126][T15449] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.914008][T15449] 8021q: adding VLAN 0 to HW filter on device team0
[  352.927316][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.934501][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.964484][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.971718][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.038536][ T5119] Bluetooth: hci1: command tx timeout
[  353.185230][T15449] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.244288][T15449] veth0_vlan: entered promiscuous mode
[  353.265260][T15449] veth1_vlan: entered promiscuous mode
[  353.315652][T15449] veth0_macvtap: entered promiscuous mode
[  353.327288][T15449] veth1_macvtap: entered promiscuous mode
[  353.350564][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.362844][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.374898][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.385435][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.395552][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.406076][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.416131][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.427280][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.437443][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.451431][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.462240][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.474617][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.487684][T15449] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.505182][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.516409][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.527260][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.538491][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.548676][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.560415][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.571175][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.583959][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.593954][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.606832][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.617049][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  353.628015][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.640521][T15449] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.658548][T15449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.667291][T15449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.678828][T15449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.687569][T15449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.858317][T15502] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'.
[  353.886171][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.911943][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.958775][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.966669][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.125455][   T29] audit: type=1800 audit(1718789113.884:23): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0
[  354.168525][   T29] audit: type=1804 audit(1718789113.924:24): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/228/memory.events" dev="sda1" ino=1959 res=1 errno=0
[  354.500722][T15528] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'.
[  354.822875][   T29] audit: type=1800 audit(1718789114.584:25): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0
[  354.862784][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  354.918080][   T29] audit: type=1804 audit(1718789114.614:26): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1505925704/syzkaller.7ITs0E/3/memory.events" dev="sda1" ino=1964 res=1 errno=0
[  355.124172][ T5119] Bluetooth: hci1: command tx timeout
[  355.579085][T15580] team_slave_0: entered promiscuous mode
[  355.585344][T15580] team_slave_1: entered promiscuous mode
[  355.627097][T15580] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  355.648551][T15580] team_slave_0: left promiscuous mode
[  355.654111][T15580] team_slave_1: left promiscuous mode
[  356.190760][   T29] audit: type=1804 audit(1718789115.954:27): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3261271336/syzkaller.AxxjJE/77/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0
[  357.114372][T15654] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  357.200036][ T5119] Bluetooth: hci1: command tx timeout
[  357.564860][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  357.746000][T15691] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  357.765988][T15696] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  357.778867][T15691] nbd: nbd0 already in use
[  357.787037][T15696] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  357.923113][T15704] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'.
[  357.986394][T15707] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'.
[  358.006814][T15707] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  358.191011][   T29] audit: type=1804 audit(1718789117.954:28): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3650260526/syzkaller.CMDnon/244/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0
[  358.900183][T15738] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'.
[  358.951610][T15738] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  359.004443][T15742] tipc: Started in network mode
[  359.031128][T15742] tipc: Node identity 8278e5d4332d, cluster identity 4711
[  359.091398][T15742] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  359.279670][ T5119] Bluetooth: hci1: command tx timeout
[  359.636390][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  359.645975][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88802dbd9800: rx timeout, send abort
[  359.654968][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802dbd9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  360.083114][T15766] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'.
[  360.208149][    T8] tipc: Node number set to 2975196628
[  360.825600][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  360.839870][T15771] infiniband syz2: set active
[  360.859086][T15771] infiniband syz2: added bond_slave_1
[  360.935974][T15771] RDS/IB: syz2: added
[  360.940597][T15771] smc: adding ib device syz2 with port count 1
[  360.949117][T15771] smc:    ib device syz2 port 1 has pnetid 
[  361.056264][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  361.098191][   T29] audit: type=1804 audit(1718789120.854:29): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/301/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  361.180450][   T29] audit: type=1804 audit(1718789120.884:30): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/301/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  361.260983][   T29] audit: type=1804 audit(1718789120.894:31): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1639952466/syzkaller.f0icsd/301/memory.events" dev="sda1" ino=1939 res=1 errno=0
[  361.777610][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  361.860065][T15826] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  362.070100][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  362.581109][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  363.419310][T15887] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001
[  363.437202][T15889] tun0: tun_chr_ioctl cmd 1074025680
[  363.827526][T15902] syz-executor.4[15902] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  363.828023][T15902] syz-executor.4[15902] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  364.059777][T15912] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  364.118075][T15912] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  364.236795][T15919] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  364.266654][T15919] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'.
[  364.294058][T15919] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  364.943666][T15940] syz-executor.2[15940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  364.943945][T15940] syz-executor.2[15940] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  365.479157][T15955] __nla_validate_parse: 2 callbacks suppressed
[  365.479183][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  365.581504][T15961] netlink: 'syz-executor.4': attribute type 21 has an invalid length.
[  365.618108][T15961] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'.
[  365.648493][T15961] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  365.682119][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  365.834921][T15971] netlink: 'syz-executor.1': attribute type 8 has an invalid length.
[  366.103701][T15988] dccp_close: ABORT with 1964 bytes unread
[  366.285675][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  366.318787][T16000] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma?
[  366.588980][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  367.261774][T16056] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  367.271391][T16053] macvlan0: entered allmulticast mode
[  367.294600][T16053] veth1_vlan: entered allmulticast mode
[  369.304041][T16167] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  369.630655][T16181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  369.973410][T16202] macvlan2: entered promiscuous mode
[  370.008073][T16202] macvlan2: entered allmulticast mode
[  370.045696][T16202] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  370.064491][T16202] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  370.078177][ T5119] Bluetooth: hci1: command tx timeout
[  370.132229][T16202] team0: Port device macvlan2 added
[  370.205600][T16214] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  370.656945][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  370.679350][T16236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  370.808876][T16246] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'.
[  371.311876][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  371.333520][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  371.441900][T16276] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'.
[  371.714058][T16291] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  372.904880][T16351] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[  372.915713][T16351] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  373.525029][T16381] vcan0: tx drop: invalid da for name 0x0000000000000002
[  373.540761][T16378] batadv1: entered allmulticast mode
[  373.959937][T16398] Bluetooth: hci3: unsupported parameter 64512
[  373.976301][T16398] Bluetooth: hci3: invalid length 0, exp 2 for type 16
[  374.227305][T16411] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  374.252139][T16411] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'.
[  374.679093][T16431] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  374.814039][T16437] netlink: zone id is out of range
[  374.828409][T16437] netlink: zone id is out of range
[  374.837958][T16435] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  374.869863][T16437] netlink: zone id is out of range
[  374.892624][T16437] netlink: zone id is out of range
[  374.912632][T16437] netlink: zone id is out of range
[  374.937634][T16442] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  374.951919][T16437] netlink: zone id is out of range
[  374.968600][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  374.981697][T16437] netlink: zone id is out of range
[  374.986975][T16437] netlink: zone id is out of range
[  375.152498][T16450] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  375.631756][T16469] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  376.175868][T16486] tun0: tun_chr_ioctl cmd 1074025677
[  376.192799][T16486] tun0: linktype set to 6
[  376.449067][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  376.748875][T16505] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  376.758580][T16505] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.767569][T16505] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.776701][T16505] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.860703][T16505] vxlan0: entered promiscuous mode
[  376.865906][T16505] vxlan0: entered allmulticast mode
[  376.918196][T16505] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.928807][T16505] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.940251][T16505] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  376.949248][T16505] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.468961][T16534] tun0: tun_chr_ioctl cmd 1074025677
[  377.474447][T16534] tun0: linktype set to 6
[  377.798762][T16550] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  378.060903][T16553] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  378.673104][T16574] tun0: tun_chr_ioctl cmd 1074025677
[  378.687620][T16574] tun0: linktype set to 6
[  378.884509][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  379.329034][T16601] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  380.295838][T16638] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  380.380644][T16638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  380.493787][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  380.856618][T16665] bridge0: entered promiscuous mode
[  380.889088][T16665] bridge0: left promiscuous mode
[  381.097365][T16679] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'.
[  381.149750][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  381.346823][T16687] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  381.396046][T16695] xt_CT: You must specify a L4 protocol and not use inversions on it
[  381.852553][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  381.866148][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  382.039327][T16720] tls_set_device_offload_rx: netdev not found
[  382.308632][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  382.419550][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  382.441816][T16744] nbd: socks must be embedded in a SOCK_ITEM attr
[  382.489856][T16751] tls_set_device_offload_rx: netdev not found
[  382.558891][T16749] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'.
[  382.606900][T16757] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  382.652235][T16757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  382.950005][T16773] xt_CT: You must specify a L4 protocol and not use inversions on it
[  383.593020][T16795] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  383.744021][T16797] bridge0: entered promiscuous mode
[  383.784917][T16797] bridge0: left promiscuous mode
[  383.960064][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  384.411579][T16825] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  384.780469][T16836] bridge0: entered promiscuous mode
[  384.856583][T16836] bridge0: left promiscuous mode
[  384.905622][T16846] tipc: Failed to remove unknown binding: 66,1,1/0:1158678359/1158678361
[  384.953220][T16846] tipc: Failed to remove unknown binding: 66,1,1/0:1158678359/1158678361
[  385.048296][T16850] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  385.100189][T16854] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  385.833602][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  386.040011][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  386.049994][T16884] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  386.050254][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  386.067560][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  386.076070][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  386.084228][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  386.091886][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  386.101250][T16879] sch_tbf: burst 3 is lower than device lo mtu (11337746) !
[  386.317363][T16892] tipc: Failed to remove unknown binding: 66,1,1/0:324872454/324872456
[  386.345238][T16892] tipc: Failed to remove unknown binding: 66,1,1/0:324872454/324872456
[  386.346232][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.545802][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.741924][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.906860][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.140489][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  387.255318][   T11] bridge_slave_1: left allmulticast mode
[  387.268621][   T11] bridge_slave_1: left promiscuous mode
[  387.280573][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.290769][   T11] bridge_slave_0: left allmulticast mode
[  387.296467][   T11] bridge_slave_0: left promiscuous mode
[  387.303195][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.338415][   T11] tipc: Resetting bearer <eth:xfrm0>
[  387.361222][T16931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.777803][   T11] tipc: Disabling bearer <eth:xfrm0>
[  388.130988][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.146993][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.158778][ T5119] Bluetooth: hci1: command tx timeout
[  388.177134][   T11] bond0 (unregistering): Released all slaves
[  388.343918][   T11] tipc: Left network mode
[  388.542587][T16880] chnl_net:caif_netlink_parms(): no params data found
[  388.645107][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  388.928899][T16979] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  388.965181][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  389.115688][T16986] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'.
[  389.302836][   T11] hsr_slave_0: left promiscuous mode
[  389.317520][   T11] hsr_slave_1: left promiscuous mode
[  389.337548][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  389.359041][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.377395][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.395857][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.484318][   T11] veth1_macvtap: left promiscuous mode
[  389.498112][   T11] veth0_macvtap: left promiscuous mode
[  389.507252][   T11] veth1_vlan: left promiscuous mode
[  389.517504][   T11] veth0_vlan: left promiscuous mode
[  390.238563][ T5119] Bluetooth: hci1: command tx timeout
[  390.606527][   T11] team0 (unregistering): Port device team_slave_1 removed
[  390.665728][   T11] team0 (unregistering): Port device team_slave_0 removed
[  391.276172][T16880] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.283907][T16880] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.291488][T16880] bridge_slave_0: entered allmulticast mode
[  391.320496][T16880] bridge_slave_0: entered promiscuous mode
[  391.337501][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  391.388164][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  391.434357][T16880] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.467372][T16880] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.484648][T16880] bridge_slave_1: entered allmulticast mode
[  391.508039][T16880] bridge_slave_1: entered promiscuous mode
[  391.662991][T16880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.741964][T16880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.924477][T16880] team0: Port device team_slave_0 added
[  391.966555][T16880] team0: Port device team_slave_1 added
[  392.126721][T16880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.135641][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.164108][T16880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.208946][T16880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.216669][T16880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.273794][T16880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.318722][ T5119] Bluetooth: hci1: command tx timeout
[  392.445773][T16880] hsr_slave_0: entered promiscuous mode
[  392.466299][T16880] hsr_slave_1: entered promiscuous mode
[  392.484047][T16880] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.503890][T16880] Cannot create hsr debugfs directory
[  393.090687][T17085] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  393.101948][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  393.283222][T17089] xt_socket: unknown flags 0x8
[  393.296858][T17091] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  393.375645][T16880] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  393.418735][T16880] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  393.461657][T16880] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  393.498464][T16880] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  393.751996][T16880] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.794737][T16880] 8021q: adding VLAN 0 to HW filter on device team0
[  393.809840][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.817139][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.907564][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.914848][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.319146][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  394.347916][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  394.398481][ T5129] Bluetooth: hci1: command tx timeout
[  394.443890][T16880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.585387][T16880] veth0_vlan: entered promiscuous mode
[  394.632285][T16880] veth1_vlan: entered promiscuous mode
[  394.662195][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  394.794098][T16880] veth0_macvtap: entered promiscuous mode
[  394.831355][T16880] veth1_macvtap: entered promiscuous mode
[  394.852571][T17153] xt_socket: unknown flags 0x8
[  394.894838][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.919244][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.940874][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.956107][T17157] net_ratelimit: 146 callbacks suppressed
[  394.956129][T17157] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  394.970023][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.009416][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  395.020213][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.030676][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  395.041654][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.055877][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  395.068082][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.078024][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  395.088973][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.130515][T16880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.187225][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.206945][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.265366][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.300552][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.322374][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.360992][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.383668][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.419659][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.452713][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.513160][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.551252][T16880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.577101][T16880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.600790][T16880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.658866][T16880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.681557][T16880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.697100][T16880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.706414][T16880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.880934][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.908655][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.028680][ T1034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  396.045672][ T1034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.142043][T17201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  396.314173][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  396.321044][ T5129] Bluetooth: hci3: command 0x0405 tx timeout
[  396.622947][T17224] ebtables: ebtables: counters copy to user failed while replacing table
[  397.693717][T17280] xt_TPROXY: Can be used only with -p tcp or -p udp
[  397.985954][T17293] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  398.235151][T17309] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  398.249326][T17309] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'.
[  398.259672][T17309] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  398.269880][T17309] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  398.288832][T17309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'.
[  398.460029][T17320] xt_TPROXY: Can be used only with -p tcp or -p udp
[  398.542368][T17325] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'.
[  398.927157][T17339] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  399.502447][T17361] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  399.923978][T17376] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.950320][T17376] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.127499][T17378] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.134734][T17378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.189916][T17378] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.197093][T17378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.311807][T17383] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  400.329040][T17383] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'.
[  400.373356][T17383] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  400.382191][T17383] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  400.413519][T17383] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[  404.024051][T17414] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.060947][T17414] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.082292][T17414] infiniband syz2: set active
[  404.098380][T17414] infiniband syz2: set active
[  404.272756][T17415] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.280027][T17415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.309089][T17415] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.316305][T17415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.337712][T17415] infiniband syz2: set active
[  404.346726][T17415] infiniband syz2: set active
[  404.403496][T17417] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  404.526081][T17436] openvswitch: netlink: nsh attr 2048 is out of range max 3
[  404.954911][T17455] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.971442][T17455] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.172404][T17464] openvswitch: netlink: nsh attr 2048 is out of range max 3
[  405.235313][T17458] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.242605][T17458] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.329995][T17458] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.337226][T17458] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.915027][T17488] openvswitch: netlink: nsh attr 2048 is out of range max 3
[  408.569867][T17568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  408.722131][T17580] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  408.742083][T17580] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'.
[  409.398595][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  409.416344][T17605] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  409.448030][T17605] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'.
[  409.481180][T17610] netlink: 'syz-executor.2': attribute type 63 has an invalid length.
[  412.654850][T17648] tipc: Started in network mode
[  412.666958][T17648] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  412.676898][T17648] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  412.844929][T17661] Bluetooth: MGMT ver 1.22
[  414.370973][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  414.382650][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  414.395146][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  414.406443][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  414.430113][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  414.440535][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  414.443988][ T1034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.519955][T17730] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  414.738526][ T1034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.971041][ T1034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.101380][ T1034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.427556][ T1034] bridge_slave_1: left allmulticast mode
[  415.436116][ T1034] bridge_slave_1: left promiscuous mode
[  415.448361][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.470404][ T1034] bridge_slave_0: left allmulticast mode
[  415.479627][ T1034] bridge_slave_0: left promiscuous mode
[  415.491130][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.222609][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.236587][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.251759][ T1034] bond0 (unregistering): Released all slaves
[  416.280101][T17768] tap0: tun_chr_ioctl cmd 1074025678
[  416.285555][T17768] tap0: group set to 0
[  416.313416][T17776] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  416.558383][ T5119] Bluetooth: hci2: command tx timeout
[  416.755573][ T1034] mac80211_hwsim hwsim28 wlan0 (unregistering): left allmulticast mode
[  416.839347][ T1034] team0: Port device macvlan2 removed
[  417.517985][T17816] 8021q: adding VLAN 0 to HW filter on device bond1
[  417.575257][ T1034] hsr_slave_0: left promiscuous mode
[  417.608332][ T1034] hsr_slave_1: left promiscuous mode
[  417.620409][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.639560][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.655997][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.668431][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.725002][ T1034] veth1_macvtap: left promiscuous mode
[  417.738004][ T1034] veth0_macvtap: left promiscuous mode
[  417.743686][ T1034] veth1_vlan: left promiscuous mode
[  417.757802][ T1034] veth0_vlan: left promiscuous mode
[  418.456699][ T1034] team0 (unregistering): Port device team_slave_1 removed
[  418.520939][ T1034] team0 (unregistering): Port device team_slave_0 removed
[  418.649484][ T5119] Bluetooth: hci2: command tx timeout
[  419.052781][T17819] tap0: tun_chr_ioctl cmd 1074025678
[  419.058678][T17819] tap0: group set to 0
[  419.082470][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  419.094870][T17827] tun0: tun_chr_ioctl cmd 2147767507
[  419.137231][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  419.146885][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  419.156666][T17829] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'.
[  419.213215][T17731] chnl_net:caif_netlink_parms(): no params data found
[  419.543225][T17851] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  419.702542][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  419.719782][T17731] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.732949][T17731] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.741392][T17731] bridge_slave_0: entered allmulticast mode
[  419.760248][T17731] bridge_slave_0: entered promiscuous mode
[  419.785260][T17855] tap0: tun_chr_ioctl cmd 1074025678
[  419.805286][T17855] tap0: group set to 0
[  419.820232][T17858] tun0: tun_chr_ioctl cmd 2147767507
[  419.844024][T17731] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.854752][T17731] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.863780][T17731] bridge_slave_1: entered allmulticast mode
[  419.874558][T17731] bridge_slave_1: entered promiscuous mode
[  420.030493][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  420.061128][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  420.168834][T17731] team0: Port device team_slave_0 added
[  420.189665][T17731] team0: Port device team_slave_1 added
[  420.286715][T17873] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  420.311014][T17731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  420.331972][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.371976][T17731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  420.394287][T17731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  420.409971][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  420.502260][T17731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.637620][T17731] hsr_slave_0: entered promiscuous mode
[  420.654204][T17731] hsr_slave_1: entered promiscuous mode
[  420.668479][T17731] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  420.679370][T17731] Cannot create hsr debugfs directory
[  420.718485][ T5119] Bluetooth: hci2: command tx timeout
[  420.914201][T17897] No such timeout policy "syz0"
[  421.888688][T17731] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  421.917324][T17731] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  421.946996][T17731] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  421.970144][T17731] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  422.236791][T17731] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.311633][T17731] 8021q: adding VLAN 0 to HW filter on device team0
[  422.368429][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.375638][ T5203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.446792][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.454069][ T5203] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.599500][T17949] netlink: 'syz-executor.3': attribute type 21 has an invalid length.
[  422.628644][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  422.797989][ T5119] Bluetooth: hci2: command tx timeout
[  423.095043][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.271901][T17731] veth0_vlan: entered promiscuous mode
[  423.356433][T17731] veth1_vlan: entered promiscuous mode
[  423.508029][T17731] veth0_macvtap: entered promiscuous mode
[  423.578111][T17731] veth1_macvtap: entered promiscuous mode
[  423.641067][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.673003][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.697311][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.708664][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.721344][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.732545][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.742557][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.753481][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.770047][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.780690][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.790822][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  423.793409][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  423.801457][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.804126][T17731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.860269][T17987] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  423.916544][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.945797][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  423.966190][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  423.990132][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.025412][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.045890][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.082243][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.120050][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.166281][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.199262][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.210162][T17731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  424.222557][T17731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  424.237160][T17731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.299800][T17731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.333530][T17731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.348142][T17731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.363695][T17731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  424.456596][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  424.565569][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.587909][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.634048][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.654958][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.759193][T18024] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  424.999283][   T35] bond0: left allmulticast mode
[  425.004217][   T35] bond_slave_0: left allmulticast mode
[  425.017964][   T35] bond_slave_1: left allmulticast mode
[  425.031388][   T35] dummy0: left allmulticast mode
[  425.045481][   T35] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  425.074069][   T35] bond0: left promiscuous mode
[  425.091544][   T35] bond_slave_0: left promiscuous mode
[  425.097175][   T35] bond_slave_1: left promiscuous mode
[  425.116724][   T35] dummy0: left promiscuous mode
[  425.123944][   T35] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  425.131593][   T35] bridge0: port 3(bond0) entered disabled state
[  425.140603][   T35] bridge_slave_1: left allmulticast mode
[  425.146380][   T35] bridge_slave_1: left promiscuous mode
[  425.154149][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.163643][   T35] bridge_slave_0: left allmulticast mode
[  425.169709][   T35] bridge_slave_0: left promiscuous mode
[  425.175629][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.851154][T18045] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  425.948182][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.962215][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.979145][   T35] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  425.992153][   T35] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  426.010833][   T35] bond0 (unregistering): Released all slaves
[  426.028648][   T35] bond1 (unregistering): Released all slaves
[  426.203586][   T35] ���^q: left promiscuous mode
[  426.762812][T18072] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  426.771578][T18072] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.0'.
[  427.000381][T18080] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
[  427.224465][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  427.413161][T18095] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.439617][   T35] hsr_slave_0: left promiscuous mode
[  427.447051][   T35] hsr_slave_1: left promiscuous mode
[  427.467052][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.486623][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.512572][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.532858][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.595581][   T35] veth1_macvtap: left promiscuous mode
[  427.603006][   T35] veth0_macvtap: left promiscuous mode
[  427.613375][   T35] veth1_vlan: left promiscuous mode
[  427.620501][   T35] veth0_vlan: left promiscuous mode
[  428.501926][   T35] team0 (unregistering): Port device team_slave_1 removed
[  428.578837][   T35] team0 (unregistering): Port device team_slave_0 removed
[  429.143724][T18098] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.151062][T18098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.196145][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  429.268505][T18109] vlan0: entered promiscuous mode
[  429.275919][T18109] vlan0: entered allmulticast mode
[  429.744002][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  430.611187][T18189] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8
[  430.658341][T18189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  430.684292][T18192] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  430.724610][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  431.071817][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  431.425637][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  431.539031][T18239] Bluetooth: MGMT ver 1.22
[  431.956897][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  432.000148][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  432.116091][T18260] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  432.586599][T18292] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.593857][T18292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.430766][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  433.629850][T18347] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20000
[  433.690428][T18347] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  433.995095][   T29] audit: type=1804 audit(1718789193.754:32): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/812/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  434.077593][   T29] audit: type=1804 audit(1718789193.764:33): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/812/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  434.080423][T18380] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  434.104252][   T29] audit: type=1804 audit(1718789193.764:34): pid=18376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir941056494/syzkaller.ir66M0/812/memory.events" dev="sda1" ino=1960 res=1 errno=0
[  434.150274][T18381] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  434.252214][T18381] bond1: entered promiscuous mode
[  434.353992][T18382] 8021q: adding VLAN 0 to HW filter on device bond2
[  434.391650][T18382] bond1: (slave bond2): Enslaving as an active interface with a down link
[  434.443910][T18381] bond1 (unregistering): (slave bond2): Releasing active interface
[  434.478596][T18381] bond1 (unregistering): Released all slaves
[  434.848374][T18414] __nla_validate_parse: 4 callbacks suppressed
[  434.848397][T18414] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  435.037067][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  435.218957][T18436] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  435.401290][T18444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  435.573049][T18453] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  435.602562][T18453] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  435.668565][T18456] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  436.002632][T18471] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  436.103293][T18474] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  436.131895][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  436.159402][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  436.457111][T18494] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'.
[  436.844273][T18514] netlink: set zone limit has 4 unknown bytes
[  437.455824][T18549] xt_CT: You must specify a L4 protocol and not use inversions on it
[  437.770042][T18562] netlink: set zone limit has 4 unknown bytes
[  438.010628][T18578] xt_CT: You must specify a L4 protocol and not use inversions on it
[  438.477156][T18602] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  438.728130][T18615] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  438.736848][T18615] netlink: 'syz-executor.2': attribute type 29 has an invalid length.
[  439.096604][T18630] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  439.338289][T18645] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  439.358546][T18645] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  439.598312][ T5119] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  439.599817][ T5129] Bluetooth: hci3: command 0x0405 tx timeout
[  439.855218][T18675] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  439.869923][T18675] __nla_validate_parse: 9 callbacks suppressed
[  439.869946][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  439.885989][T18675] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  439.895920][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  440.336647][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  440.361886][   T11] geneve1: left allmulticast mode
[  440.373595][   T11] geneve1: left promiscuous mode
[  440.385005][   T11] bridge0: port 4(geneve1) entered disabled state
[  440.396421][   T11] team0: left allmulticast mode
[  440.402018][   T11] team_slave_0: left allmulticast mode
[  440.411299][   T11] team_slave_1: left allmulticast mode
[  440.418281][   T11] bridge0: port 3(team0) entered disabled state
[  440.431167][   T11] bridge_slave_1: left allmulticast mode
[  440.437287][   T11] bridge_slave_1: left promiscuous mode
[  440.443399][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.454013][   T11] bridge_slave_0: left allmulticast mode
[  440.460096][   T11] bridge_slave_0: left promiscuous mode
[  440.479817][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.677102][   T11] ip6gretap0 (unregistering): left promiscuous mode
[  440.949595][   T11] tipc: Disabling bearer <eth:bridge0>
[  441.394034][   T11] bond0 (unregistering): left promiscuous mode
[  441.400919][   T11] bond_slave_0: left promiscuous mode
[  441.406543][   T11] bond_slave_1: left promiscuous mode
[  441.412596][   T11] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  441.444916][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.459768][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.475502][   T11] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  441.490301][   T11] bond0 (unregistering): Released all slaves
[  441.506408][   T11] bond1 (unregistering): Released all slaves
[  441.525027][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  441.546850][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  441.587248][   T11] ���^q: left promiscuous mode
[  441.716932][   T11] tipc: Disabling bearer <udp:s>
[  441.727175][   T11] tipc: Left network mode
[  441.837900][ T5119] Bluetooth: hci3: command 0x0405 tx timeout
[  441.838197][ T5129] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  442.302589][T18748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  442.619484][   T11] hsr_slave_0: left promiscuous mode
[  442.635819][   T11] hsr_slave_1: left promiscuous mode
[  442.646032][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  442.663750][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.674687][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  442.689173][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  442.724778][   T11] veth1_macvtap: left promiscuous mode
[  442.731895][   T11] veth0_macvtap: left promiscuous mode
[  442.737569][   T11] veth1_vlan: left promiscuous mode
[  442.743219][   T11] veth0_vlan: left promiscuous mode
[  443.549617][   T11] team_slave_1 (unregistering): left promiscuous mode
[  443.562244][   T11] team0 (unregistering): Port device team_slave_1 removed
[  443.620027][   T11] team_slave_0 (unregistering): left promiscuous mode
[  443.632774][   T11] team0 (unregistering): Port device team_slave_0 removed
[  444.431143][T18777] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  444.611397][T18785] vlan2: entered promiscuous mode
[  444.620021][T18785] gretap0: entered promiscuous mode
[  444.625511][T18785] vlan2: entered allmulticast mode
[  444.638495][T18785] gretap0: entered allmulticast mode
[  444.658140][T18785] gretap0: left allmulticast mode
[  444.663408][T18785] gretap0: left promiscuous mode
[  444.751538][T18790] bridge0: port 3(vlan2) entered blocking state
[  444.758649][T18790] bridge0: port 3(vlan2) entered disabled state
[  444.772673][T18790] vlan2: entered allmulticast mode
[  444.786327][T18790] vlan2: left allmulticast mode
[  473.141928][ T5119] Bluetooth: hci4: command 0x0406 tx timeout
[  476.070951][ T5129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  476.107970][ T5129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  476.116606][ T5129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  476.131490][ T5129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  476.150581][ T5129] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  476.159436][ T5129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  476.176980][T18822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  476.193024][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  476.202288][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  476.210706][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  476.219940][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  476.227338][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  476.271646][T16881] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  476.281637][T16881] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  476.292651][T16881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  476.293962][T18826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  476.314220][T18826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  476.321717][T16881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  476.332378][T16881] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  476.339510][T18828] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  476.339869][T16881] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  476.353245][T18828] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  476.361621][T16881] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  476.364095][T18828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  476.376907][T18828] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  476.384645][T18828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  476.408005][ T5129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  476.438419][ T5129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  476.458104][ T5129] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  476.465648][ T5129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  478.318239][T18826] Bluetooth: hci6: command tx timeout
[  478.326927][ T5129] Bluetooth: hci5: command tx timeout
[  478.478182][T18826] Bluetooth: hci8: command tx timeout
[  478.486862][ T5129] Bluetooth: hci7: command tx timeout
[  478.558378][ T5129] Bluetooth: hci9: command tx timeout
[  480.398204][ T5129] Bluetooth: hci5: command tx timeout
[  480.403692][ T5129] Bluetooth: hci6: command tx timeout
[  480.558167][T18826] Bluetooth: hci8: command tx timeout
[  480.564027][ T5129] Bluetooth: hci7: command tx timeout
[  480.638666][ T5129] Bluetooth: hci9: command tx timeout
[  482.479196][ T5129] Bluetooth: hci6: command tx timeout
[  482.484672][ T5129] Bluetooth: hci5: command tx timeout
[  482.638027][T18826] Bluetooth: hci8: command tx timeout
[  482.645684][ T5129] Bluetooth: hci7: command tx timeout
[  482.718231][ T5129] Bluetooth: hci9: command tx timeout
[  484.557894][ T5129] Bluetooth: hci5: command tx timeout
[  484.558077][T18826] Bluetooth: hci6: command tx timeout
[  484.718144][ T5129] Bluetooth: hci8: command tx timeout
[  484.723679][T18826] Bluetooth: hci7: command tx timeout
[  484.797954][T18826] Bluetooth: hci9: command tx timeout
[  501.775108][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  508.958085][ T5129] Bluetooth: hci1: command 0x0406 tx timeout
[  539.684506][ T5129] Bluetooth: hci2: command 0x0406 tx timeout
[  541.481266][T18828] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  541.489499][T16881] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  541.504088][T18828] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  541.513269][T18828] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  541.519074][T18830] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  541.522481][T18828] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  541.530828][T18830] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  541.541005][T18828] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  541.544063][T18830] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  541.551554][T18828] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  541.579071][T18830] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  541.583413][T18828] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  541.589572][T18830] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  541.598896][T18828] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  541.608459][T18830] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  541.610705][T18828] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  541.617483][T18830] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  541.624697][T18828] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  541.631338][T18830] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  541.645460][T18830] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  541.652531][T18844] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  541.654713][T18844] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  541.660511][T18830] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  541.671188][T18844] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  541.677072][T18830] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  541.688292][T18844] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  541.690728][T18830] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  541.700668][T18844] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  541.728946][T18844] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  541.736767][T18822] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  543.758297][T18844] Bluetooth: hci10: command tx timeout
[  543.767945][T18844] Bluetooth: hci12: command tx timeout
[  543.854042][T18844] Bluetooth: hci14: command tx timeout
[  543.854086][T18828] Bluetooth: hci13: command tx timeout
[  543.861401][T18844] Bluetooth: hci11: command tx timeout
[  545.838215][ T5129] Bluetooth: hci10: command tx timeout
[  545.844903][T18844] Bluetooth: hci12: command tx timeout
[  545.918754][T18844] Bluetooth: hci11: command tx timeout
[  545.924322][T18844] Bluetooth: hci14: command tx timeout
[  545.930166][ T5129] Bluetooth: hci13: command tx timeout
[  547.920342][T18844] Bluetooth: hci12: command tx timeout
[  547.926882][ T5129] Bluetooth: hci10: command tx timeout
[  547.998463][T18844] Bluetooth: hci13: command tx timeout
[  548.004108][T18844] Bluetooth: hci11: command tx timeout
[  548.011145][ T5129] Bluetooth: hci14: command tx timeout
[  550.005366][ T5129] Bluetooth: hci12: command tx timeout
[  550.011454][T18844] Bluetooth: hci10: command tx timeout
[  550.080780][ T5129] Bluetooth: hci11: command tx timeout
[  550.086331][ T5129] Bluetooth: hci14: command tx timeout
[  550.092166][T18844] Bluetooth: hci13: command tx timeout
[  563.205982][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  601.152627][ T5129] Bluetooth: hci9: command 0x0406 tx timeout
[  601.152657][T18844] Bluetooth: hci5: command 0x0406 tx timeout
[  601.152711][T16881] Bluetooth: hci6: command 0x0406 tx timeout
[  601.166783][T18828] Bluetooth: hci7: command 0x0406 tx timeout
[  601.180656][T18844] Bluetooth: hci8: command 0x0406 tx timeout
[  602.878386][   T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds.
[  602.886216][   T30]       Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  602.896415][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  602.905227][   T30] task:kworker/u8:0    state:D stack:22056 pid:11    tgid:11    ppid:2      flags:0x00004000
[  602.915643][   T30] Workqueue: netns cleanup_net
[  602.921889][   T30] Call Trace:
[  602.925209][   T30]  <TASK>
2024/06/19 09:29:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  602.928407][   T30]  __schedule+0x17e8/0x4a20
[  602.933758][   T30]  ? __pfx___schedule+0x10/0x10
[  602.938801][   T30]  ? __pfx_lock_release+0x10/0x10
[  602.943868][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  602.949737][   T30]  ? kthread_data+0x52/0xd0
[  602.954300][   T30]  ? schedule+0x90/0x320
[  602.961817][   T30]  ? wq_worker_sleeping+0x66/0x240
[  602.967069][   T30]  ? schedule+0x90/0x320
[  602.971549][   T30]  schedule+0x14b/0x320
[  602.975750][   T30]  schedule_preempt_disabled+0x13/0x30
[  602.981368][   T30]  __mutex_lock+0x6a4/0xd70
[  602.985925][   T30]  ? __mutex_lock+0x527/0xd70
[  602.990866][   T30]  ? cangw_pernet_exit_batch+0x20/0x90
[  602.996375][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  603.003814][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  603.009293][   T30]  ? __pfx_cangw_pernet_exit_batch+0x10/0x10
[  603.015320][   T30]  cangw_pernet_exit_batch+0x20/0x90
[  603.022001][   T30]  ? __pfx_cangw_pernet_exit_batch+0x10/0x10
[  603.028417][   T30]  cleanup_net+0x89d/0xcc0
[  603.032888][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  603.038146][   T30]  ? process_scheduled_works+0x945/0x1830
[  603.043905][   T30]  process_scheduled_works+0xa2c/0x1830
[  603.049957][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  603.055991][   T30]  ? assign_work+0x364/0x3d0
[  603.071110][   T30]  worker_thread+0x86d/0xd70
[  603.075774][   T30]  ? __kthread_parkme+0x169/0x1d0
[  603.097782][   T30]  ? __pfx_worker_thread+0x10/0x10
[  603.102965][   T30]  kthread+0x2f0/0x390
[  603.107074][   T30]  ? __pfx_worker_thread+0x10/0x10
[  603.127754][   T30]  ? __pfx_kthread+0x10/0x10
[  603.132420][   T30]  ret_from_fork+0x4b/0x80
[  603.136881][   T30]  ? __pfx_kthread+0x10/0x10
[  603.157773][   T30]  ret_from_fork_asm+0x1a/0x30
[  603.162637][   T30]  </TASK>
[  603.167886][   T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds.
[  603.175576][   T30]       Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0
[  603.207745][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  603.216475][   T30] task:kworker/u8:4    state:D stack:18392 pid:62    tgid:62    ppid:2      flags:0x00004000
[  603.247919][   T30] Workqueue: ipv6_addrconf addrconf_dad_work
[  603.254003][   T30] Call Trace:
[  603.257334][   T30]  <TASK>
[  603.277898][   T30]  __schedule+0x17e8/0x4a20
[  603.282545][   T30]  ? __pfx___schedule+0x10/0x10
[  603.297778][   T30]  ? __pfx_lock_release+0x10/0x10
[  603.302946][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  603.317867][   T30]  ? kthread_data+0x52/0xd0
[  603.322457][   T30]  ? schedule+0x90/0x320
[  603.337929][   T30]  ? wq_worker_sleeping+0x66/0x240
[  603.343145][   T30]  ? schedule+0x90/0x320
[  603.347441][   T30]  schedule+0x14b/0x320
[  603.377795][   T30]  schedule_preempt_disabled+0x13/0x30
[  603.383468][   T30]  __mutex_lock+0x6a4/0xd70
[  603.401139][   T30]  ? mark_lock+0x9a/0x350
[  603.405567][   T30]  ? __mutex_lock+0x527/0xd70
[  603.417746][   T30]  ? addrconf_dad_work+0xd0/0x16f0
[  603.423114][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  603.438156][   T30]  addrconf_dad_work+0xd0/0x16f0
[  603.443557][   T30]  ? __pfx_addrconf_dad_work+0x10/0x10
[  603.460119][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  603.466544][   T30]  ? process_scheduled_works+0x945/0x1830
[  603.487784][   T30]  process_scheduled_works+0xa2c/0x1830
[  603.494054][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  603.511080][   T30]  ? assign_work+0x364/0x3d0
[  603.515907][   T30]  worker_thread+0x86d/0xd70
[  603.527864][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  603.535157][   T30]  ? __kthread_parkme+0x169/0x1d0
[  603.557767][   T30]  ? __pfx_worker_thread+0x10/0x10
[  603.562973][   T30]  kthread+0x2f0/0x390
[  603.567111][   T30]  ? __pfx_worker_thread+0x10/0x10
[  603.587