last executing test programs: 7.885872129s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000e800850000004800000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e04305000f4000631177fbac141445e000030394029f034d2f87e589ca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20045040) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYRES8=r8], 0x3}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x204000, 0x1000}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) 2.844340411s ago: executing program 4: 2.419766403s ago: executing program 4: 1.712086157s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 1.659783044s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)="10", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, 0x51}, 0x0) 1.60386002s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x80, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "318bfe226f9b7517d304f7c919f33318eee474a5c18ec2aa29b5340b00daaebf"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x3, 0x0, @dev}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x80}}, 0x0) 1.53929409s ago: executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'caif0\x00', {}, 0x1}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)) write$cgroup_int(r2, &(0x7f0000000080), 0x12) socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)=@gcm_128={{}, "3b29d9648e80e905", "86a21e3e39368b237f0e3864667d0bd8", "1b598634", "6eaef0fc24de6e61"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x48000) splice(r5, 0x0, r8, 0x0, 0x7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc2}) close(r7) ioctl$int_in(r8, 0x541b, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}, {&(0x7f00000002c0)="68f541365c6e24f4b7d5c9aa2f9b2c4c52595b25d20630fd08f13268f411acb0c11d69ec1130bed0dd819226c2af8da6dbb3f755b9069c1e0c2cb4a0b2ad06ca0b253b8a72e00ef9944bc9580d631ea0189b570ce789ad89024b28ce02b77a283928600689df24d1ba7c9416b5fa2de38be3e22f5f5fbcd16d452622373bcc9990af422c2e6de6b1feefd1013a54b25b54818eed58480eb329add61bb10f5fa995ddc6d7f6dad5a2c3cbf08bb6ef83184b333e671556508fab9215c5cdf70523505f4d8fe481c95ae9474f0b56410c8b1d119adeaee914773690addd9bdb059fa8c7075b40715349e11c7fcd0830000000", 0xf1}, {&(0x7f00000003c0)="ff94c27bc1f1b6d3354c224bba1b7d981623361e264febad94e6dd45ab3802e4cd2fa54fbd6fa9c29f441969875b5b6dff52d252d3749b3a8645929eb47f0e8b4e8427eaadd73307a786aa36c167052f7d39fd70d3a3660a05502026f48ddc6b4a5e17bb9b2a2783052fbf9347b36d4b6410dfb7a44e3665d1fc020a91ff66b757178cafcd14b8a6a1fa9ece56c6d81b3948a31ab92262270638dec275f6da9689450b588511019848665657f6140bb0cffd61cdb296460e0500000000000000b1d0b1", 0xc3}], 0x3) 1.489978388s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.46712464s ago: executing program 1: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), 0x4) 1.263999024s ago: executing program 0: r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) 1.202330563s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x4a6c8e5cb048d5f, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) 1.179712267s ago: executing program 0: socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x20, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}}, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c", 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000010000000000001302000099a895d66052ffaadc3af1638994a1a3254526ed70e0c7db00"], 0x0, 0x29, 0x0, 0x0, 0x2}, 0x20) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000240)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$netlink(0x10, 0x3, 0x1) sendfile(r6, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) 1.076730408s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000080005000100070000000900020073797a3000000000140007800500150008000000080012400000000010000300686173683a69702c6d616300050005000a000000050004"], 0x5c}}, 0x0) 1.029641696s ago: executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000140)="8ae8ee8ec69b76", 0x7}], 0x1, &(0x7f0000001c00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 977.104059ms ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 739.44381ms ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)=@migrate={0xe8, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@empty}}, [@user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@mcast1}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@loopback}}, @migrate={0x50, 0x11, [{@in6=@private0, @in=@loopback, @in=@dev, @in6=@remote}]}]}, 0xe8}}, 0x0) 615.908139ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c000480aff483b7a18ff9580500030080ffffff05000300000000000500030080ffffff05000300030000000800020003"], 0x50}}, 0x0) 547.87526ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0xf49dffcb70a59bb7, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) 480.408994ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 411.559489ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 349.669362ms ago: executing program 4: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000080)={0x17c04}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="b7ca000000000000000001"], 0x68}}, 0x0) 308.460322ms ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000000010104000f"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 302.444167ms ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a}}]}, 0x14c}}, 0x0) 264.008211ms ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0xfffffffe, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000020"], 0x0, 0x3d}, 0x20) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 231.418762ms ago: executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$unix(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000140)="8ae8ee8ec69b76", 0x7}], 0x1, &(0x7f0000001c00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 190.020835ms ago: executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0) 130.779951ms ago: executing program 3: 86.59093ms ago: executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) 48.51425ms ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x0, 0x0) close(r1) kernel console output (not intermixed with test programs): Setting the MTU to 1560 would solve the problem. [ 126.956557][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.028368][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.035476][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.074919][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.165416][ T2834] bridge_slave_1: left allmulticast mode [ 127.186832][ T2834] bridge_slave_1: left promiscuous mode [ 127.202238][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.220760][ T2834] bridge_slave_0: left allmulticast mode [ 127.229925][ T2834] bridge_slave_0: left promiscuous mode [ 127.237562][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.496719][ T5116] Bluetooth: hci5: command tx timeout [ 127.811423][ T2834] batman_adv: batadv0: Removing interface: macvlan2 [ 127.826155][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.842996][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.859841][ T2834] bond0 (unregistering): Released all slaves [ 127.978503][ T7631] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 128.065166][ T2834] IPVS: stopping backup sync thread 6710 ... [ 128.176655][ T7552] hsr_slave_0: entered promiscuous mode [ 128.203243][ T7552] hsr_slave_1: entered promiscuous mode [ 128.226961][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.234578][ T7552] Cannot create hsr debugfs directory [ 128.626301][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.671254][ T2834] hsr_slave_0: left promiscuous mode [ 128.738585][ T2834] hsr_slave_1: left promiscuous mode [ 128.756196][ T2834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.763632][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.799956][ T2834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.812841][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.839882][ T2834] veth1_macvtap: left promiscuous mode [ 128.845434][ T2834] veth0_macvtap: left promiscuous mode [ 128.859205][ T2834] veth1_vlan: left promiscuous mode [ 128.864772][ T2834] veth0_vlan: left promiscuous mode [ 129.423112][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 129.462387][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 129.586591][ T5116] Bluetooth: hci5: command tx timeout [ 129.892324][ T7691] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 130.791811][ T7733] sch_fq: defrate 0 ignored. [ 130.978945][ T7552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 130.994566][ T7552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.013007][ T7552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.048161][ T7552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.259523][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.300052][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.322457][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.329678][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.397200][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.404356][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.517921][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.635297][ T7552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.656017][ T5116] Bluetooth: hci5: command tx timeout [ 132.018092][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.152880][ T7552] veth0_vlan: entered promiscuous mode [ 132.184823][ T7552] veth1_vlan: entered promiscuous mode [ 132.216358][ T7792] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 132.331333][ T7552] veth0_macvtap: entered promiscuous mode [ 132.354309][ T7552] veth1_macvtap: entered promiscuous mode [ 132.412859][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.437007][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.467311][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.489206][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.521020][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.549272][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.571781][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.592989][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.603765][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.613835][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.633328][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.655332][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.671819][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.681854][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.711333][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.723126][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.748623][ T7552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.761800][ T7552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.789648][ T7552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.807246][ T7552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.008627][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.018710][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.032065][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.041966][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.057673][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.065506][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.196865][ T7816] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.206613][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.347144][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.353502][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.541708][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.549700][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.645022][ T786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.671639][ T786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.735893][ T5116] Bluetooth: hci5: command tx timeout [ 133.766794][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.919653][ T2786] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.029325][ T7841] tap0: tun_chr_ioctl cmd 1074025672 [ 134.034677][ T7841] tap0: ignored: set checksum enabled [ 134.120549][ T2786] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.322312][ T2786] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.493026][ T2786] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.528763][ T7812] chnl_net:caif_netlink_parms(): no params data found [ 134.960614][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.972886][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.981378][ T7812] bridge_slave_0: entered allmulticast mode [ 134.989287][ T7812] bridge_slave_0: entered promiscuous mode [ 135.046735][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.053941][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.066394][ T7812] bridge_slave_1: entered allmulticast mode [ 135.074033][ T7812] bridge_slave_1: entered promiscuous mode [ 135.089831][ T2786] bridge_slave_1: left allmulticast mode [ 135.098988][ T2786] bridge_slave_1: left promiscuous mode [ 135.104798][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.122636][ T2786] bridge_slave_0: left allmulticast mode [ 135.130210][ T2786] bridge_slave_0: left promiscuous mode [ 135.136472][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.176502][ T5116] Bluetooth: hci0: command tx timeout [ 135.502109][ T2786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.515362][ T2786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.529354][ T2786] bond0 (unregistering): Released all slaves [ 135.564456][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.575550][ T7897] tap0: tun_chr_ioctl cmd 1074025672 [ 135.582601][ T7897] tap0: ignored: set checksum enabled [ 135.673309][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.699295][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.810177][ T7812] team0: Port device team_slave_0 added [ 135.843463][ T7812] team0: Port device team_slave_1 added [ 136.014585][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.025208][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.061670][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.133709][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.145430][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.187863][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.221039][ T2786] hsr_slave_0: left promiscuous mode [ 136.239620][ T2786] hsr_slave_1: left promiscuous mode [ 136.252213][ T2786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.261645][ T2786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.277630][ T2786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.285100][ T2786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.339139][ T2786] veth1_macvtap: left promiscuous mode [ 136.344752][ T2786] veth0_macvtap: left promiscuous mode [ 136.350963][ T2786] veth1_vlan: left promiscuous mode [ 136.356658][ T2786] veth0_vlan: left promiscuous mode [ 136.807890][ T2786] team0 (unregistering): Port device team_slave_1 removed [ 136.844129][ T2786] team0 (unregistering): Port device team_slave_0 removed [ 137.257574][ T5116] Bluetooth: hci0: command tx timeout [ 137.462225][ T7812] hsr_slave_0: entered promiscuous mode [ 137.497873][ T7812] hsr_slave_1: entered promiscuous mode [ 138.435354][ T7984] tipc: Started in network mode [ 138.442388][ T7984] tipc: Node identity ac1414aa, cluster identity 4711 [ 138.459787][ T7984] tipc: New replicast peer: 0.0.0.0 [ 138.479297][ T7984] tipc: Enabled bearer , priority 10 [ 138.714649][ T7812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.755007][ T7812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.799405][ T7812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.843362][ T7812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.114252][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.160128][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.224815][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.232042][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.264767][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.272831][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.336804][ T5116] Bluetooth: hci0: command tx timeout [ 139.511123][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.538640][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.586691][ T5158] tipc: Node number set to 2886997162 [ 139.763010][ T8036] tipc: Enabling of bearer rejected, already enabled [ 139.868545][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.942579][ T7812] veth0_vlan: entered promiscuous mode [ 139.971386][ T7812] veth1_vlan: entered promiscuous mode [ 140.029906][ T7812] veth0_macvtap: entered promiscuous mode [ 140.078684][ T7812] veth1_macvtap: entered promiscuous mode [ 140.109750][ T8050] xt_bpf: check failed: parse error [ 140.128770][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.152792][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.174938][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.195837][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.210398][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.235809][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.273232][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.309145][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.342974][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.369870][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.389765][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.405846][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.436067][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.444503][ T8068] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 140.457213][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.468172][ T8068] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.481461][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.486682][ T8068] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.519105][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.560666][ T7812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.584206][ T7812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.600469][ T7812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.620279][ T7812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.765200][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.791742][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.830515][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.838490][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.416178][ T5116] Bluetooth: hci0: command tx timeout [ 142.593351][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.789309][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.800089][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.810343][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.819567][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.828538][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.839803][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.961887][ T8148] macvlan0: entered allmulticast mode [ 142.973580][ T8148] veth1_vlan: entered allmulticast mode [ 143.072248][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.228582][ T8145] chnl_net:caif_netlink_parms(): no params data found [ 143.418867][ T8183] xt_bpf: check failed: parse error [ 143.442479][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.454414][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.465256][ T8145] bridge_slave_0: entered allmulticast mode [ 143.487657][ T8145] bridge_slave_0: entered promiscuous mode [ 143.496747][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.504297][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.513829][ T8145] bridge_slave_1: entered allmulticast mode [ 143.529655][ T8145] bridge_slave_1: entered promiscuous mode [ 143.590643][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.610818][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.679163][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.707603][ T8145] team0: Port device team_slave_0 added [ 143.717246][ T8145] team0: Port device team_slave_1 added [ 143.793447][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.800679][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.828697][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.834365][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.854572][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.871012][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.905808][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.990556][ T8145] hsr_slave_0: entered promiscuous mode [ 144.016957][ T8145] hsr_slave_1: entered promiscuous mode [ 144.023497][ T8145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.044163][ T8145] Cannot create hsr debugfs directory [ 144.386872][ T8145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.717285][ T8145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.827659][ T8145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.938219][ T5112] Bluetooth: hci0: command tx timeout [ 144.970897][ T8145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.120477][ T2786] bridge_slave_1: left allmulticast mode [ 145.129466][ T2786] bridge_slave_1: left promiscuous mode [ 145.135313][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.153196][ T2786] bridge_slave_0: left allmulticast mode [ 145.159566][ T2786] bridge_slave_0: left promiscuous mode [ 145.166692][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.504305][ T8246] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 145.762772][ T2786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.793888][ T2786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.811412][ T2786] bond0 (unregistering): Released all slaves [ 145.970738][ T8246] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 146.166964][ T8145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.213460][ T8145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.315599][ T8145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.343709][ T8145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.469157][ T2786] hsr_slave_0: left promiscuous mode [ 146.483349][ T2786] hsr_slave_1: left promiscuous mode [ 146.543332][ T2786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.552200][ T2786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.579436][ T2786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.593002][ T2786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.661203][ T2786] veth1_macvtap: left promiscuous mode [ 146.672139][ T2786] veth0_macvtap: left promiscuous mode [ 146.682147][ T2786] veth1_vlan: left promiscuous mode [ 146.692901][ T2786] veth0_vlan: left promiscuous mode [ 147.028589][ T5112] Bluetooth: hci0: command tx timeout [ 147.775405][ T2786] team0 (unregistering): Port device team_slave_1 removed [ 147.851616][ T2786] team0 (unregistering): Port device team_slave_0 removed [ 148.671222][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.705432][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.744343][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.751553][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.820411][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.827636][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.898318][ T8145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.096400][ T5112] Bluetooth: hci0: command tx timeout [ 149.207198][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.350361][ T8145] veth0_vlan: entered promiscuous mode [ 149.374479][ T8145] veth1_vlan: entered promiscuous mode [ 149.463497][ T8145] veth0_macvtap: entered promiscuous mode [ 149.489712][ T8145] veth1_macvtap: entered promiscuous mode [ 149.539729][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.558023][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.578573][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.601220][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.617837][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.632277][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.646219][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.669746][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.682874][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.696998][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.708062][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.721778][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.736724][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.748436][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.759565][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.771981][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.838756][ T8145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.859281][ T8145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.868618][ T8145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.879180][ T8145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.105168][ T786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.133083][ T786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.226578][ T2786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.244208][ T2786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.727924][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.746291][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.754521][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.763042][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.772692][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.780264][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.164149][ T8343] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 151.178213][ T5116] Bluetooth: hci0: command tx timeout [ 151.191498][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 151.369701][ T8344] syzkaller0: entered allmulticast mode [ 151.443668][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.462792][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.471926][ T8329] bridge_slave_0: entered allmulticast mode [ 151.483591][ T8329] bridge_slave_0: entered promiscuous mode [ 151.501943][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.522574][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.537847][ T8329] bridge_slave_1: entered allmulticast mode [ 151.558120][ T8329] bridge_slave_1: entered promiscuous mode [ 151.652822][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.679572][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.699600][ T8362] bridge0: port 3(macvlan2) entered blocking state [ 151.707754][ T8362] bridge0: port 3(macvlan2) entered disabled state [ 151.714757][ T8362] macvlan2: entered allmulticast mode [ 151.725591][ T8362] macvlan2: entered promiscuous mode [ 151.817246][ T8329] team0: Port device team_slave_0 added [ 151.871074][ T8329] team0: Port device team_slave_1 added [ 151.952619][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.983878][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.062214][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.083598][ T8] IPVS: starting estimator thread 0... [ 152.106073][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.150176][ T29] audit: type=1804 audit(1717173801.385:7): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir72585197/syzkaller.jTem1X/79/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 152.154879][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.216299][ T8371] IPVS: using max 21 ests per chain, 50400 per kthread [ 152.241743][ T29] audit: type=1804 audit(1717173801.475:8): pid=8368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir72585197/syzkaller.jTem1X/79/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 152.273738][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.297129][ T29] audit: type=1800 audit(1717173801.535:9): pid=8372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 152.558278][ T8329] hsr_slave_0: entered promiscuous mode [ 152.581222][ T8329] hsr_slave_1: entered promiscuous mode [ 152.858286][ T5116] Bluetooth: hci1: command tx timeout [ 153.237144][ T8329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.503735][ T8329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.717546][ T8329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.928495][ T8329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.975415][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.235479][ T8329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.269912][ T8329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.301240][ T8329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.343867][ T8329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.627418][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.673197][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.719185][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.726423][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.781088][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.788193][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.797652][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.835875][ T8431] net_ratelimit: 102 callbacks suppressed [ 154.835894][ T8431] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 154.935996][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 155.314840][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.470199][ T8329] veth0_vlan: entered promiscuous mode [ 155.519075][ T8329] veth1_vlan: entered promiscuous mode [ 155.612399][ T8329] veth0_macvtap: entered promiscuous mode [ 155.639330][ T8329] veth1_macvtap: entered promiscuous mode [ 155.681213][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.708189][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.746613][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.761772][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.785937][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.809266][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.837697][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.855922][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.884533][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.904921][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.954652][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.985846][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.006186][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.027154][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.065263][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.086168][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.105784][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.115651][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.148135][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.191022][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.217015][ T8329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.227912][ T8329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.257854][ T8329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.277652][ T8329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.791039][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.825808][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.934519][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.966553][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.019361][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 157.372914][ T8493] dccp_invalid_packet: P.Data Offset(97) too large [ 157.389320][ T8490] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.150807][ T8531] dccp_invalid_packet: P.Data Offset(97) too large [ 158.171399][ T8529] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.619251][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.901430][ T8563] dccp_invalid_packet: P.Data Offset(97) too large [ 159.002955][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.096160][ T5112] Bluetooth: hci1: command 0x041b tx timeout [ 159.292099][ T8587] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 159.620907][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.643605][ T8605] dccp_invalid_packet: P.Data Offset(97) too large [ 159.845465][ T8619] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 159.866054][ T8619] macvlan2: entered promiscuous mode [ 159.876280][ T8619] macvlan2: entered allmulticast mode [ 159.887143][ T8619] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 159.914521][ T8619] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 159.925279][ T8619] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 160.000521][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.106386][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.128820][ T8632] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.180352][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.242080][ T8642] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 160.257347][ T8642] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 160.301310][ T8641] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.792079][ T8661] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 160.808859][ T8661] macvlan3: entered promiscuous mode [ 160.814975][ T8661] macvlan3: entered allmulticast mode [ 160.827992][ T8661] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 160.853883][ T8661] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 160.876792][ T8661] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 160.994391][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.037448][ T8670] nbd: socks must be embedded in a SOCK_ITEM attr [ 161.125930][ T8676] Cannot find add_set index 0 as target [ 161.176557][ T5112] Bluetooth: hci1: command 0x041b tx timeout [ 161.200464][ T8672] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.223904][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.647549][ T8700] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 161.691541][ T8702] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 161.711388][ T8703] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 161.726630][ T8702] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 161.794552][ T8706] sit0: entered allmulticast mode [ 161.867221][ T8706] sit0: entered promiscuous mode [ 162.370470][ T8721] Cannot find add_set index 0 as target [ 162.860835][ T8754] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 162.886817][ T8755] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 162.908346][ T8755] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 163.257719][ T5112] Bluetooth: hci1: command 0x041b tx timeout [ 164.229051][ T8830] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 164.440111][ T8847] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 165.297091][ T8900] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 166.894064][ T9002] mac80211_hwsim hwsim22 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 167.034689][ T9010] xt_TCPMSS: Only works on TCP SYN packets [ 167.302930][ T9027] __nla_validate_parse: 3 callbacks suppressed [ 167.302949][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.448816][ T9039] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 167.618063][ T9051] Bluetooth: MGMT ver 1.22 [ 167.955996][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.314897][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.344857][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.497698][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.682486][ T9121] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.730566][ T9121] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 168.829783][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.183957][ T5163] IPVS: starting estimator thread 0... [ 169.194652][ T9158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.275847][ T9159] IPVS: using max 18 ests per chain, 43200 per kthread [ 169.294779][ T9163] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 169.407325][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.417622][ T9171] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 169.442689][ T9171] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.452090][ T9171] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.460910][ T9171] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.469683][ T9171] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.480699][ T9171] vxlan0: entered promiscuous mode [ 170.238936][ T9215] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 170.261801][ T9215] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.544818][ T9230] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 170.572837][ T9226] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 170.702337][ T9236] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 171.531571][ T9276] Bluetooth: MGMT ver 1.22 [ 171.998551][ T9298] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 172.119043][ T9308] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 172.317379][ T9319] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 172.325502][ T9319] __nla_validate_parse: 6 callbacks suppressed [ 172.325511][ T9319] netlink: 128636 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.683695][ T9340] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 172.810773][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.616384][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.791606][ T9379] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 173.941102][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.202549][ T9404] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 174.376607][ T9422] bridge0: entered promiscuous mode [ 174.400410][ T9422] bridge0: entered allmulticast mode [ 174.408619][ T9423] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 174.738644][ T9435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.068750][ T9451] bridge0: entered promiscuous mode [ 175.074044][ T9451] bridge0: entered allmulticast mode [ 175.111019][ T9453] bridge0: entered promiscuous mode [ 175.121042][ T9453] bridge0: entered allmulticast mode [ 175.197824][ T9458] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.226674][ T9461] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 176.316202][ T9531] x_tables: unsorted entry at hook 1 [ 176.893327][ T9562] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 176.973933][ T9564] x_tables: unsorted entry at hook 1 [ 177.411531][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.465391][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.691956][ T9601] x_tables: unsorted entry at hook 1 [ 177.949901][ T9614] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 178.083142][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.107788][ T9620] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 178.127343][ T9620] batadv_slave_0: entered promiscuous mode [ 178.224585][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.241403][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.864737][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.874915][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.186738][ T9671] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 179.196819][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.256385][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.386512][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.424565][ T9688] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 179.467348][ T9682] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 179.510508][ T9682] batadv_slave_0: entered promiscuous mode [ 179.545492][ T9682] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 179.570217][ T9682] Cannot create hsr debugfs directory [ 181.015370][ T9783] (unnamed net_device) (uninitialized): option ad_select: invalid value (21) [ 182.473610][ T9857] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 182.487849][ T9857] __nla_validate_parse: 2 callbacks suppressed [ 182.487869][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.914772][ T9889] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 182.923315][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.274586][ T9910] xt_recent: Unsupported userspace flags (00000076) [ 183.463987][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.723439][ T9941] xt_recent: Unsupported userspace flags (00000076) [ 184.179283][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.213049][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.451277][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.725513][T10006] bridge_slave_0: left allmulticast mode [ 184.733185][T10006] bridge_slave_0: left promiscuous mode [ 184.746480][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.770423][T10006] bridge_slave_1: left allmulticast mode [ 184.784348][T10006] bridge_slave_1: left promiscuous mode [ 184.791729][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.806397][T10006] bond0: (slave bond_slave_0): Releasing backup interface [ 184.833846][T10006] bond0: (slave bond_slave_1): Releasing backup interface [ 184.894351][T10006] team0: Port device team_slave_0 removed [ 184.922703][T10006] team0: Port device team_slave_1 removed [ 184.934377][T10006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.945369][T10006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.958605][T10006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.966425][T10006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.010716][T10009] bridge0: left promiscuous mode [ 185.017425][T10009] bridge0: left allmulticast mode [ 185.050810][T10009] team0: Port device bridge0 added [ 185.335312][T10030] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.510596][T10041] bridge_slave_0: left allmulticast mode [ 185.526682][T10041] bridge_slave_0: left promiscuous mode [ 185.532581][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.562031][T10041] bridge_slave_1: left allmulticast mode [ 185.583199][T10041] bridge_slave_1: left promiscuous mode [ 185.602404][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.383551][T10041] bond0: (slave bond_slave_0): Releasing backup interface [ 186.544741][T10041] bond0: (slave bond_slave_1): Releasing backup interface [ 186.625915][ T5112] Bluetooth: hci2: command 0x0406 tx timeout [ 186.626233][ T5123] Bluetooth: hci3: command 0x0406 tx timeout [ 186.631975][ T5112] Bluetooth: hci4: command 0x0406 tx timeout [ 187.181608][T10041] team0: Port device team_slave_0 removed [ 188.576404][T10041] team0: Port device team_slave_1 removed [ 188.584655][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.705845][T10041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.787764][T10041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.795245][T10041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.064667][T10046] bridge0: left promiscuous mode [ 189.109075][T10046] bridge0: left allmulticast mode [ 189.239322][T10046] team0: Port device bridge0 added [ 189.417406][T10058] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 189.425635][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.097718][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.229183][T10113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.558119][T10116] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 193.256210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.296133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.781206][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.810525][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.455058][T10158] IPv6: sit1: Disabled Multicast RS [ 195.730314][T10179] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.285372][T10212] IPv6: sit1: Disabled Multicast RS [ 196.310823][T10216] IPv6: sit1: Disabled Multicast RS [ 196.415578][T10223] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.465553][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058892000: rx timeout, send abort [ 196.594581][T10234] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.979986][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058892000: abort rx timeout. Force session deactivation [ 197.250391][T10250] IPv6: sit1: Disabled Multicast RS [ 197.782225][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801ea6ec00: rx timeout, send abort [ 197.790997][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801ea6ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.503066][T10294] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.661522][T10299] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 198.750899][T10299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 198.762455][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.274518][T10336] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.436965][T10345] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 199.893870][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.403225][T10401] openvswitch: netlink: Message has 4 unknown bytes. [ 200.498133][ T29] audit: type=1804 audit(1717173849.725:10): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir72585197/syzkaller.jTem1X/258/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 200.573978][T10399] syzkaller0: entered promiscuous mode [ 200.587722][T10399] syzkaller0: entered allmulticast mode [ 200.735289][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.278797][T10432] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.553541][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.877663][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.904514][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.927041][T10465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.517602][T10483] syzkaller0: entered promiscuous mode [ 203.523280][T10483] syzkaller0: entered allmulticast mode [ 203.629038][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.641599][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.650234][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.674098][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.684695][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 203.692306][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.434563][ T2834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.545216][T10520] batadv0: entered promiscuous mode [ 205.555125][T10520] macvlan2: entered allmulticast mode [ 205.561216][T10520] batadv0: entered allmulticast mode [ 205.569519][T10520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.581312][T10520] batadv0: left allmulticast mode [ 205.590406][T10520] batadv0: left promiscuous mode [ 205.663803][ T2834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.738243][ T5124] Bluetooth: hci5: command tx timeout [ 205.840169][ T2834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.957353][ T2834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.153910][T10495] chnl_net:caif_netlink_parms(): no params data found [ 206.165281][T10545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.227950][ T2834] macvlan2: left allmulticast mode [ 206.233134][ T2834] macvlan2: left promiscuous mode [ 206.239737][ T2834] bridge0: port 3(macvlan2) entered disabled state [ 206.257569][ T2834] bridge_slave_1: left allmulticast mode [ 206.263280][ T2834] bridge_slave_1: left promiscuous mode [ 206.269169][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.283719][ T2834] bridge_slave_0: left allmulticast mode [ 206.290308][ T2834] bridge_slave_0: left promiscuous mode [ 206.297503][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.205398][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.230267][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.259680][ T2834] bond0 (unregistering): Released all slaves [ 207.277821][ T2834] bond1 (unregistering): Released all slaves [ 207.353559][T10563] team0: Cannot enslave team device to itself [ 207.424958][T10570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.552598][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.576242][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.583492][T10495] bridge_slave_0: entered allmulticast mode [ 207.597271][T10495] bridge_slave_0: entered promiscuous mode [ 207.643589][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.651330][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.663262][T10495] bridge_slave_1: entered allmulticast mode [ 207.677979][T10495] bridge_slave_1: entered promiscuous mode [ 207.817728][ T5124] Bluetooth: hci5: command tx timeout [ 207.855396][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.884745][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.017774][T10586] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 208.088876][T10495] team0: Port device team_slave_0 added [ 208.108995][T10495] team0: Port device team_slave_1 added [ 208.150241][ T2834] hsr_slave_0: left promiscuous mode [ 208.163953][ T2834] hsr_slave_1: left promiscuous mode [ 208.184043][ T2834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.194142][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.203598][ T2834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.224571][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.263452][ T2834] veth1_macvtap: left promiscuous mode [ 208.269317][ T2834] veth0_macvtap: left promiscuous mode [ 208.278137][ T2834] veth1_vlan: left promiscuous mode [ 208.284118][ T2834] veth0_vlan: left promiscuous mode [ 208.735188][T10613] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.962244][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 209.020054][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 209.490506][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.776440][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.783445][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.824613][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.859585][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.879332][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.907576][ T5124] Bluetooth: hci5: command tx timeout [ 209.924518][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.025332][T10495] hsr_slave_0: entered promiscuous mode [ 210.047263][T10495] hsr_slave_1: entered promiscuous mode [ 210.069467][T10495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.083720][T10495] Cannot create hsr debugfs directory [ 210.618172][T10495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.628517][T10495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.638544][T10495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.652965][T10495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.839586][T10495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.913389][T10495] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.933127][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.940347][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.969053][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.976300][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.371016][T10495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.462963][T10495] veth0_vlan: entered promiscuous mode [ 211.503972][T10495] veth1_vlan: entered promiscuous mode [ 211.554815][T10495] veth0_macvtap: entered promiscuous mode [ 211.566762][T10495] veth1_macvtap: entered promiscuous mode [ 211.589083][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.607584][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.623330][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.635254][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.653603][T10495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.677781][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.693484][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.712313][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.723330][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.735364][T10495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.747467][T10495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.768699][T10495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.798485][T10495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.811261][T10495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.821520][T10495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.831827][T10495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.881505][T10701] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 211.976665][ T5124] Bluetooth: hci5: command tx timeout [ 212.114983][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.144078][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.200426][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.233775][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.699984][T10741] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 213.362220][T10776] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 213.914585][T10801] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 213.950105][T10801] veth0_macvtap: left promiscuous mode [ 213.978183][T10807] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.980320][T10801] macvtap0: entered promiscuous mode [ 214.006543][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.063179][T10801] macvtap0: refused to change device tx_queue_len [ 214.788858][T10851] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.825368][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.860975][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.878496][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.889439][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.908923][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.924492][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.932802][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.452574][T10889] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.472016][T10857] chnl_net:caif_netlink_parms(): no params data found [ 215.474280][T10889] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.728510][T10857] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.737545][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.744839][T10857] bridge_slave_0: entered allmulticast mode [ 215.772531][T10857] bridge_slave_0: entered promiscuous mode [ 215.787840][T10903] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 215.842251][T10857] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.859589][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.873720][T10857] bridge_slave_1: entered allmulticast mode [ 215.898530][T10857] bridge_slave_1: entered promiscuous mode [ 215.984989][T10857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.010837][T10857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.074003][T10921] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.115200][T10857] team0: Port device team_slave_0 added [ 216.126121][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.141612][T10857] team0: Port device team_slave_1 added [ 216.241470][T10857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.262558][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.302076][T10857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.330806][T10857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.345186][T10857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.422874][T10857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.612070][T10942] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 216.664626][T10944] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 216.675844][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.690555][T10857] hsr_slave_0: entered promiscuous mode [ 216.714056][T10857] hsr_slave_1: entered promiscuous mode [ 216.730485][T10857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.747421][T10857] Cannot create hsr debugfs directory [ 217.017151][ T5124] Bluetooth: hci3: command tx timeout [ 217.189967][T10857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.208572][T10857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.255007][T10977] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 217.276798][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.388555][T10857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.397525][T10979] Bluetooth: MGMT ver 1.22 [ 217.399349][T10857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.460829][T10982] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 217.540473][T10857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.551854][T10857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.717035][T10857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.787529][T10857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.180314][T10857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.220759][T10857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.294639][T10857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.332264][T10857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.665019][T11018] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 218.748141][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.777537][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.787195][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.800656][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.811859][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.819921][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.828038][T10857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.880694][T10857] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.913903][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.921159][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.973707][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.980949][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.098249][ T5116] Bluetooth: hci3: command tx timeout [ 219.375172][T11021] chnl_net:caif_netlink_parms(): no params data found [ 219.583805][T11056] xt_cgroup: invalid path, errno=-2 [ 219.718274][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.725445][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.747889][T11021] bridge_slave_0: entered allmulticast mode [ 219.755354][T11021] bridge_slave_0: entered promiscuous mode [ 219.787138][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.797726][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.805008][T11021] bridge_slave_1: entered allmulticast mode [ 219.826519][T11021] bridge_slave_1: entered promiscuous mode [ 219.945440][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.960436][T10857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.992675][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.151887][T11021] team0: Port device team_slave_0 added [ 220.207913][T11021] team0: Port device team_slave_1 added [ 220.248813][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.307379][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.332631][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.379152][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.430796][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.446905][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.545518][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.644775][ T29] audit: type=1800 audit(1717173869.875:11): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 220.685031][ T29] audit: type=1804 audit(1717173869.905:12): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir14987907/syzkaller.5RzSoN/51/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 220.787545][T11021] hsr_slave_0: entered promiscuous mode [ 220.808272][T11117] netlink: zone id is out of range [ 220.813696][T11117] netlink: set zone limit has 4 unknown bytes [ 220.815598][T11021] hsr_slave_1: entered promiscuous mode [ 220.831551][T11021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.855482][T11021] Cannot create hsr debugfs directory [ 220.935932][ T5116] Bluetooth: hci0: command tx timeout [ 221.030889][T11123] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.083963][T11130] IPv6: Can't replace route, no match found [ 221.189045][ T5116] Bluetooth: hci3: command tx timeout [ 221.218656][T10857] veth0_vlan: entered promiscuous mode [ 221.366023][T10857] veth1_vlan: entered promiscuous mode [ 221.498641][T11021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.543839][T11154] IPv6: Can't replace route, no match found [ 221.595340][T10857] veth0_macvtap: entered promiscuous mode [ 221.661159][T11021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.690729][T10857] veth1_macvtap: entered promiscuous mode [ 221.784869][T11021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.829344][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.865885][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.889832][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.911306][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.921434][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.942532][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.954476][T10857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.021131][T11021] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 222.035809][T11021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.064101][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.078895][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.098208][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.118262][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.129672][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.140976][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.152093][T10857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.163211][T10857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.174977][T10857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.237042][T10857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.252357][T10857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.272995][T10857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.284197][T10857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.534305][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.555849][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.636864][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.648969][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.653525][T11021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.692538][T11021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.718213][T11021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.756340][T11021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.027142][ T5116] Bluetooth: hci0: command tx timeout [ 223.068589][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.152735][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.182899][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.190121][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.220325][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.227542][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.256672][ T5116] Bluetooth: hci3: command tx timeout [ 223.341601][T11225] xt_HMARK: spi-set and port-set can't be combined [ 224.022364][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.227860][T11021] veth0_vlan: entered promiscuous mode [ 224.286069][T11021] veth1_vlan: entered promiscuous mode [ 224.365547][T11021] veth0_macvtap: entered promiscuous mode [ 224.411285][T11021] veth1_macvtap: entered promiscuous mode [ 224.533202][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.550161][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.585801][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.604613][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.625896][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.637552][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.649598][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.660417][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.682067][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.723379][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.736830][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.749959][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.761092][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.771343][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.782480][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.793511][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.804655][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.814663][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.825375][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.838813][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.899877][T11021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.925870][T11021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.948836][T11021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.972915][T11021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.098271][ T5116] Bluetooth: hci0: command tx timeout [ 225.202766][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.226188][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.329519][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.359282][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.420361][T11277] xt_HMARK: spi-set and port-set can't be combined [ 225.885362][T11305] xt_HMARK: spi-set and port-set can't be combined [ 226.054896][T11315] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 226.072546][T11315] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.091279][T11313] batadv_slave_0: entered allmulticast mode [ 226.112551][T11313] pim6reg: entered allmulticast mode [ 226.133966][T11313] batadv_slave_0: left allmulticast mode [ 226.154261][T11312] pim6reg: left allmulticast mode [ 226.710881][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.175935][ T5116] Bluetooth: hci0: command tx timeout [ 227.324102][T11362] batadv_slave_0: entered promiscuous mode [ 227.874532][T11347] batadv_slave_0: left promiscuous mode [ 228.375034][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.412428][T11402] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.422817][T11410] Bluetooth: MGMT ver 1.22 [ 229.149164][T11446] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.390812][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.486380][T11452] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.754816][T11481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.848061][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.914106][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.245121][T11504] xt_policy: too many policy elements [ 230.700543][ T5124] Bluetooth: hci0: command 0x0405 tx timeout [ 230.886762][T11531] batadv_slave_0: entered promiscuous mode [ 231.035257][T11530] batadv_slave_0: left promiscuous mode [ 231.345375][T11548] batadv_slave_0: entered allmulticast mode [ 231.363176][T11548] pim6reg: entered allmulticast mode [ 231.404750][T11548] batadv_slave_0: left allmulticast mode [ 231.434745][T11547] pim6reg: left allmulticast mode [ 232.460891][T11605] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 232.788070][T11626] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 232.926362][T11638] ipt_ECN: cannot use operation on non-tcp rule [ 233.203510][T11648] netlink: 'syz-executor.1': attribute type 309 has an invalid length. [ 233.284899][T11648] macsec0: entered promiscuous mode [ 233.294379][T11648] macsec1: entered promiscuous mode [ 233.308289][T11654] __nla_validate_parse: 4 callbacks suppressed [ 233.308311][T11654] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.874514][T11681] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.002102][ T29] audit: type=1800 audit(1717173883.235:13): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 234.048954][ T29] audit: type=1804 audit(1717173883.275:14): pid=11684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir14987907/syzkaller.5RzSoN/113/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 234.521439][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.557389][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.680805][ T29] audit: type=1800 audit(1717173883.905:15): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 234.721817][ T29] audit: type=1804 audit(1717173883.915:16): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir14987907/syzkaller.5RzSoN/117/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 234.834214][T11731] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 235.358443][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.383752][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.394461][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.413115][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.424990][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.436350][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.764320][T11770] tipc: Enabling of bearer rejected, failed to enable media [ 235.922945][T11778] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 235.935909][T11778] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.964134][T11755] chnl_net:caif_netlink_parms(): no params data found [ 236.021543][T11782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.156698][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.288673][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.414053][T11755] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.422663][T11755] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.438785][T11755] bridge_slave_0: entered allmulticast mode [ 236.447252][T11755] bridge_slave_0: entered promiscuous mode [ 236.458081][T11755] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.465532][T11755] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.473106][T11755] bridge_slave_1: entered allmulticast mode [ 236.502594][T11755] bridge_slave_1: entered promiscuous mode [ 236.618044][T11755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.655427][T11755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.681736][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.777833][T11755] team0: Port device team_slave_0 added [ 236.797911][T11755] team0: Port device team_slave_1 added [ 236.889532][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.905108][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.917673][T11755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.924655][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.954862][T11755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.970519][T11755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.001333][T11755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.051192][T11755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.154528][T11831] delete_channel: no stack [ 237.174726][T11755] hsr_slave_0: entered promiscuous mode [ 237.203594][T11755] hsr_slave_1: entered promiscuous mode [ 237.236137][T11755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.243756][T11755] Cannot create hsr debugfs directory [ 237.497347][ T5116] Bluetooth: hci6: command tx timeout [ 237.683613][T11857] delete_channel: no stack [ 237.809509][T11755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.952025][T11755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.111875][T11755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.294460][T11755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.317598][T11880] delete_channel: no stack [ 238.390278][ T2786] bridge_slave_1: left allmulticast mode [ 238.408973][ T2786] bridge_slave_1: left promiscuous mode [ 238.426112][ T2786] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.438366][T11883] __nla_validate_parse: 2 callbacks suppressed [ 238.438388][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.460801][ T2786] bridge_slave_0: left allmulticast mode [ 238.473663][ T2786] bridge_slave_0: left promiscuous mode [ 238.483699][ T2786] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.194956][ T2786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.212100][ T2786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.223348][ T2786] bond0 (unregistering): Released all slaves [ 239.236403][T11891] netlink: 'syz-executor.2': attribute type 309 has an invalid length. [ 239.335525][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 239.389457][T11896] macsec0: entered promiscuous mode [ 239.394996][T11896] macsec1: entered promiscuous mode [ 239.578755][ T5116] Bluetooth: hci6: command tx timeout [ 239.650798][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.653288][T11920] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.678582][T11920] IPv6: Can't replace route, no match found [ 239.760101][T11755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.886709][T11755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.927063][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.935526][T11755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.962915][T11755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.046099][ T2786] hsr_slave_0: left promiscuous mode [ 240.062884][ T2786] hsr_slave_1: left promiscuous mode [ 240.090404][ T2786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.102769][ T2786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.121106][ T2786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.138225][ T2786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.213654][ T2786] veth1_macvtap: left promiscuous mode [ 240.225192][ T2786] veth0_macvtap: left promiscuous mode [ 240.240755][ T2786] veth1_vlan: left promiscuous mode [ 240.247792][ T2786] veth0_vlan: left promiscuous mode [ 240.282142][T11957] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.103856][ T2786] team0 (unregistering): Port device team_slave_1 removed [ 241.149883][ T2786] team0 (unregistering): Port device team_slave_0 removed [ 241.615580][T11948] netlink: 'syz-executor.3': attribute type 309 has an invalid length. [ 241.655904][ T5116] Bluetooth: hci6: command tx timeout [ 241.659951][T11958] macsec0: entered promiscuous mode [ 241.667820][T11958] macsec1: entered promiscuous mode [ 241.701293][T11957] IPv6: Can't replace route, no match found [ 241.754863][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.765821][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.802433][T11970] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.954474][T11977] syz-executor.3[11977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.954651][T11977] syz-executor.3[11977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.988553][T11755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.026876][T11981] nbd: must specify a device to reconfigure [ 242.089812][T11755] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.113727][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.121000][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.193007][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.200270][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.323636][T11755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.398209][T11985] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.459621][T11985] IPv6: Can't replace route, no match found [ 242.506797][T11994] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 242.527137][T11994] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.545324][T11994] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 242.554116][T11994] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 242.563413][T11992] IPv6: Can't replace route, no match found [ 242.782867][T12007] syz-executor.1[12007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.782962][T12007] syz-executor.1[12007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.817811][T11755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.043578][T12023] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 243.270387][T11755] veth0_vlan: entered promiscuous mode [ 243.307671][T11755] veth1_vlan: entered promiscuous mode [ 243.377667][T11755] veth0_macvtap: entered promiscuous mode [ 243.391085][T11755] veth1_macvtap: entered promiscuous mode [ 243.413571][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.435278][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.448880][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.459656][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.469976][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.480461][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.490352][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.501205][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.513053][T11755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.522897][T12039] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 243.536068][T12039] __nla_validate_parse: 4 callbacks suppressed [ 243.536088][T12039] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.572444][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.594792][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.616829][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.635419][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.650656][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.664490][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.674740][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.685247][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.695235][T11755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.705735][T11755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.717992][T11755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.739090][ T5116] Bluetooth: hci6: command tx timeout [ 243.761028][T11755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.771285][T11755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.780962][T11755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.789755][T11755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.951678][T12048] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 243.996866][ T786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.023002][ T786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.157147][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.165038][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.471583][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.485607][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.498591][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.511084][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.511470][T12060] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.539775][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.547700][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.594289][T12060] IPv6: Can't replace route, no match found [ 244.738458][ T2834] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.958493][ T2834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.085579][ T2834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.430271][ T2834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.477151][T12062] chnl_net:caif_netlink_parms(): no params data found [ 245.873803][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.893795][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.918900][T12062] bridge_slave_0: entered allmulticast mode [ 245.932357][T12062] bridge_slave_0: entered promiscuous mode [ 245.952185][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.971210][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.981797][T12062] bridge_slave_1: entered allmulticast mode [ 245.990879][T12062] bridge_slave_1: entered promiscuous mode [ 246.017699][ T2834] bridge_slave_1: left allmulticast mode [ 246.023468][ T2834] bridge_slave_1: left promiscuous mode [ 246.035982][ T2834] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.053365][ T2834] bridge_slave_0: left allmulticast mode [ 246.059505][ T2834] bridge_slave_0: left promiscuous mode [ 246.065271][ T2834] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.146959][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.192446][T12137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.451601][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.542879][T12160] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 246.544890][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.574988][T12162] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.616828][ T5116] Bluetooth: hci0: command tx timeout [ 246.876748][T12171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.933974][ T2834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.957500][ T2834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.968814][ T2834] bond0 (unregistering): Released all slaves [ 247.047750][ T29] audit: type=1804 audit(1717173896.285:17): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir14987907/syzkaller.5RzSoN/153/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 247.123952][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.152877][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.213585][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.234676][T12180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.290577][T12184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.297275][T12184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 247.375979][ T29] audit: type=1804 audit(1717173896.595:18): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1603038927/syzkaller.ZlScZv/666/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 247.379967][T12062] team0: Port device team_slave_0 added [ 247.530266][T12062] team0: Port device team_slave_1 added [ 247.633839][ T2834] hsr_slave_0: left promiscuous mode [ 247.685820][ T2834] hsr_slave_1: left promiscuous mode [ 247.703971][ T2834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.721564][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.749737][ T2834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.765989][ T2834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.778687][T12203] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.785208][T12203] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 247.839273][ T2834] veth1_macvtap: left promiscuous mode [ 247.845025][ T2834] veth0_macvtap: left promiscuous mode [ 247.851448][ T2834] veth1_vlan: left promiscuous mode [ 247.857214][ T2834] veth0_vlan: left promiscuous mode [ 247.866088][T12205] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 247.937477][T12210] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.944134][T12210] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.028400][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.563441][ T2834] team0 (unregistering): Port device team_slave_1 removed [ 248.613568][ T2834] team0 (unregistering): Port device team_slave_0 removed [ 248.698851][ T5116] Bluetooth: hci0: command tx timeout [ 249.131644][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.166861][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.215399][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.240381][T12220] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.307549][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.314550][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.384851][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.515020][T12062] hsr_slave_0: entered promiscuous mode [ 249.532945][T12236] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 249.539502][T12236] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 249.576820][T12062] hsr_slave_1: entered promiscuous mode [ 249.619757][T12062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.629980][T12062] Cannot create hsr debugfs directory [ 250.590649][T12062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.617471][T12062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.700272][T12062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.711999][T12294] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.776080][ T5116] Bluetooth: hci0: command tx timeout [ 250.818223][T12062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.835005][T12294] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 250.856174][T12294] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 250.917780][T12307] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 251.111547][T12062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.164795][T12062] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.185975][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.193181][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.223049][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.230284][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.569844][T12062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.630428][T12062] veth0_vlan: entered promiscuous mode [ 251.702266][T12062] veth1_vlan: entered promiscuous mode [ 251.797238][T12062] veth0_macvtap: entered promiscuous mode [ 251.828695][T12062] veth1_macvtap: entered promiscuous mode [ 251.857520][T12336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.866761][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.891288][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.911147][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.944206][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.965839][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.012416][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.028635][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.041863][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.055111][T12062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.092362][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.115574][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.155779][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.175435][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.195253][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.214459][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.225587][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.236424][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.254438][T12062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.275307][T12062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.288253][T12062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.301996][T12062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.313350][T12062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.324098][T12062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.336627][T12062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.587750][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.605061][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.680249][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.716669][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.739262][T12385] hsr0: entered promiscuous mode [ 252.839217][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.865738][ T5116] Bluetooth: hci0: command tx timeout [ 252.977699][ C0] net_ratelimit: 2 callbacks suppressed [ 252.977720][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 253.172292][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.388317][T12421] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 253.571373][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.808116][T12445] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 253.858316][T12445] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.923075][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.130704][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.729425][T12487] sctp: [Deprecated]: syz-executor.0 (pid 12487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.729425][T12487] Use struct sctp_sack_info instead [ 254.740060][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.397493][T12512] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 256.365071][T12553] sctp: [Deprecated]: syz-executor.1 (pid 12553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.365071][T12553] Use struct sctp_sack_info instead [ 256.881497][T12573] xt_CT: No such helper "netbios-ns" [ 257.154766][T12588] sctp: [Deprecated]: syz-executor.0 (pid 12588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.154766][T12588] Use struct sctp_sack_info instead [ 257.368411][T12598] tc_dump_action: action bad kind [ 257.576339][ T5124] Bluetooth: hci0: command 0x0405 tx timeout [ 257.649447][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.098822][T12636] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.159791][T12632] tc_dump_action: action bad kind [ 259.376537][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.486696][T12668] tc_dump_action: action bad kind [ 259.666351][ T5124] Bluetooth: hci0: command 0x0405 tx timeout [ 259.719090][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.794569][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.966790][T12690] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 259.990844][T12692] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.137498][T12700] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 260.388034][T12715] x_tables: duplicate underflow at hook 2 [ 261.735866][ T5124] Bluetooth: hci0: command 0x0405 tx timeout [ 262.401271][T12721] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 262.417946][T12720] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.114209][T12754] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 263.857742][T12768] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.360948][T12779] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 264.506662][T12783] xt_TCPMSS: Only works on TCP SYN packets [ 264.755057][ T29] audit: type=1804 audit(1717173913.985:19): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir14987907/syzkaller.5RzSoN/233/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 265.213347][T12801] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 265.491381][T12807] Bluetooth: MGMT ver 1.22 [ 265.632007][T12811] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.680233][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.824808][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.856400][T12816] block nbd0: not configured, cannot reconfigure [ 265.916749][T12812] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 266.557254][T12834] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 267.280725][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.326067][T12848] block nbd0: not configured, cannot reconfigure [ 267.424606][T12846] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 268.439827][T12878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.842536][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.896027][T12868] block nbd0: not configured, cannot reconfigure [ 268.953172][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.977151][T12896] block nbd0: not configured, cannot reconfigure [ 269.075869][T12896] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 269.150897][T12908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.178163][T12910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.186154][T12908] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 269.231369][T12908] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.240430][T12908] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.249370][T12908] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.258251][T12908] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.267504][T12908] vxlan0: entered promiscuous mode [ 269.583067][T12868] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 270.357202][T12963] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 270.828732][T12995] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 270.838813][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.003785][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.102768][T13005] team1: Mode changed to "activebackup" [ 271.201007][T13013] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 271.220455][T13013] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 271.239602][T13013] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 271.562038][T13033] pim6reg: entered allmulticast mode [ 271.568213][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.694453][T13042] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 271.850722][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.863564][T13048] block nbd0: not configured, cannot reconfigure [ 271.916632][T13044] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 272.069684][T13061] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 272.078612][T13061] netlink: 3285 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.436338][T13083] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 272.446600][T13083] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 272.465854][T13083] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 272.477392][T13087] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 272.485808][T13087] netlink: 3285 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.615221][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.661132][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 274.791109][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.800695][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.503744][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.787442][T13171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.796320][T13171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.807468][T13171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.825117][T13171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.840076][T13171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.856006][T13171] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 275.914786][T13171] bridge0: port 1(macsec0) entered blocking state [ 275.935025][T13171] bridge0: port 1(macsec0) entered disabled state [ 275.942416][T13171] macsec0: entered allmulticast mode [ 275.948888][T13171] veth1_macvtap: entered allmulticast mode [ 275.954993][T13171] macsec0: left promiscuous mode [ 275.965390][T13171] macsec0: entered promiscuous mode [ 275.983635][T13171] bridge0: port 1(macsec0) entered blocking state [ 275.990690][T13171] bridge0: port 1(macsec0) entered forwarding state [ 276.093915][T13181] __nla_validate_parse: 2 callbacks suppressed [ 276.093936][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.208750][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.486720][T13199] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.975522][T13233] validate_nla: 3 callbacks suppressed [ 276.975543][T13233] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 276.986000][T13234] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.251288][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.369104][T13245] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.423521][T13247] batadv0: entered promiscuous mode [ 277.448136][T13247] batadv0: left promiscuous mode [ 278.075819][T13263] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 278.107685][T13269] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.257729][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.273802][T13277] batadv0: entered promiscuous mode [ 278.274416][T13276] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.346517][T13277] batadv0: left promiscuous mode [ 278.801189][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.531045][T13416] __nla_validate_parse: 3 callbacks suppressed [ 281.531069][T13416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.636108][T13414] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.963634][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.974970][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.744526][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.756427][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.773930][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.785326][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.806184][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.814374][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.255590][T13469] chnl_net:caif_netlink_parms(): no params data found [ 283.538366][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.784001][T13469] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.792254][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.800127][T13469] bridge_slave_0: entered allmulticast mode [ 283.808093][T13469] bridge_slave_0: entered promiscuous mode [ 283.833169][T13469] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.841051][T13469] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.848724][T13469] bridge_slave_1: entered allmulticast mode [ 283.856533][T13469] bridge_slave_1: entered promiscuous mode [ 283.987361][T13469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.009617][T13469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.021934][T13508] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.524961][T13469] team0: Port device team_slave_0 added [ 284.567947][T13469] team0: Port device team_slave_1 added [ 284.643364][T13469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.653895][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.691751][T13469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.718259][T13469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.734567][T13469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.794005][T13469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.862710][ T5116] Bluetooth: hci1: command tx timeout [ 284.971476][T13469] hsr_slave_0: entered promiscuous mode [ 285.056894][T13469] hsr_slave_1: entered promiscuous mode [ 285.094564][T13469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.120900][T13469] Cannot create hsr debugfs directory [ 285.442158][T13469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.455056][T13469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.637142][T13469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.652448][T13469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.779962][T13469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.804421][T13469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.045541][T13469] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 286.088737][T13469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.120621][T13469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.501212][T13469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.539321][T13469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.567059][T13469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.586723][T13469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.918499][T13469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.940023][ T5116] Bluetooth: hci1: command tx timeout [ 287.028159][T13469] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.064597][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.071820][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.119336][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.126613][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.201262][T13469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.396286][T13622] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 287.699590][T13469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.809445][T13469] veth0_vlan: entered promiscuous mode [ 287.839596][T13469] veth1_vlan: entered promiscuous mode [ 287.940280][T13469] veth0_macvtap: entered promiscuous mode [ 287.974248][T13469] veth1_macvtap: entered promiscuous mode [ 288.020889][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.042199][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.057257][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.078227][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.088467][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.113697][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.143499][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.163596][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.178748][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.189625][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.216289][T13469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.253274][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.285701][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.299098][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.309808][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.322036][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.333343][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.343401][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.355713][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.365567][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.376900][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.387200][T13469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.398067][T13469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.415328][T13469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.449125][T13469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.459436][T13469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.469594][T13469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.479022][T13469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.596888][ T2834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.604772][ T2834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.676561][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.691831][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.790082][T13675] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.016320][ T5116] Bluetooth: hci1: command tx timeout [ 289.178429][T13690] [ 289.180819][T13690] ====================================================== [ 289.187855][T13690] WARNING: possible circular locking dependency detected [ 289.194887][T13690] 6.9.0-syzkaller-12171-gccf23c916ca3 #0 Not tainted [ 289.201569][T13690] ------------------------------------------------------ [ 289.208594][T13690] syz-executor.3/13690 is trying to acquire lock: [ 289.215015][T13690] ffff888025195bf0 (clock-AF_UNIX){++..}-{2:2}, at: sk_psock_drop+0x34/0x500 [ 289.223868][T13690] [ 289.223868][T13690] but task is already holding lock: [ 289.231229][T13690] ffff88807bb08220 (&stab->lock){+.-.}-{2:2}, at: sock_map_update_common+0x1b6/0x5b0 [ 289.240721][T13690] [ 289.240721][T13690] which lock already depends on the new lock. [ 289.240721][T13690] [ 289.251130][T13690] [ 289.251130][T13690] the existing dependency chain (in reverse order) is: [ 289.260245][T13690] [ 289.260245][T13690] -> #1 (&stab->lock){+.-.}-{2:2}: [ 289.267541][T13690] lock_acquire+0x1ed/0x550 [ 289.272570][T13690] _raw_spin_lock_bh+0x35/0x50 [ 289.277856][T13690] sock_map_delete_elem+0x175/0x250 [ 289.283575][T13690] 0xffffffffa0002191 [ 289.288076][T13690] bpf_trace_run2+0x2ec/0x540 [ 289.293269][T13690] kfree+0x2bb/0x360 [ 289.297676][T13690] __bpf_prog_put_noref+0xd7/0x310 [ 289.303304][T13690] bpf_prog_put_deferred+0x2f3/0x3e0 [ 289.309102][T13690] bpf_prog_put+0x264/0x2a0 [ 289.314116][T13690] sk_psock_drop+0x214/0x500 [ 289.319219][T13690] sock_map_close+0x209/0x2d0 [ 289.324407][T13690] unix_release+0x85/0xc0 [ 289.329251][T13690] sock_close+0xbc/0x240 [ 289.334020][T13690] __fput+0x406/0x8b0 [ 289.338522][T13690] __x64_sys_close+0x7f/0x110 [ 289.343716][T13690] do_syscall_64+0xf3/0x230 [ 289.348747][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.355153][T13690] [ 289.355153][T13690] -> #0 (clock-AF_UNIX){++..}-{2:2}: [ 289.362616][T13690] validate_chain+0x18e0/0x5900 [ 289.368002][T13690] __lock_acquire+0x1346/0x1fd0 [ 289.373361][T13690] lock_acquire+0x1ed/0x550 [ 289.378391][T13690] _raw_write_lock_bh+0x35/0x50 [ 289.383776][T13690] sk_psock_drop+0x34/0x500 [ 289.388801][T13690] sock_map_update_common+0x4f0/0x5b0 [ 289.394687][T13690] sock_map_update_elem_sys+0x55f/0x910 [ 289.400741][T13690] map_update_elem+0x53a/0x6f0 [ 289.406020][T13690] __sys_bpf+0x76f/0x810 [ 289.410778][T13690] __x64_sys_bpf+0x7c/0x90 [ 289.415746][T13690] do_syscall_64+0xf3/0x230 [ 289.420764][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.427169][T13690] [ 289.427169][T13690] other info that might help us debug this: [ 289.427169][T13690] [ 289.437383][T13690] Possible unsafe locking scenario: [ 289.437383][T13690] [ 289.444818][T13690] CPU0 CPU1 [ 289.450172][T13690] ---- ---- [ 289.455525][T13690] lock(&stab->lock); [ 289.459589][T13690] lock(clock-AF_UNIX); [ 289.466344][T13690] lock(&stab->lock); [ 289.472923][T13690] lock(clock-AF_UNIX); [ 289.477156][T13690] [ 289.477156][T13690] *** DEADLOCK *** [ 289.477156][T13690] [ 289.485286][T13690] 3 locks held by syz-executor.3/13690: [ 289.490816][T13690] #0: ffff88807d641258 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sock_map_update_elem_sys+0x1cc/0x910 [ 289.501257][T13690] #1: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: sock_map_update_elem_sys+0x1d8/0x910 [ 289.511523][T13690] #2: ffff88807bb08220 (&stab->lock){+.-.}-{2:2}, at: sock_map_update_common+0x1b6/0x5b0 [ 289.521448][T13690] [ 289.521448][T13690] stack backtrace: [ 289.527344][T13690] CPU: 0 PID: 13690 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 289.537398][T13690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 289.547451][T13690] Call Trace: [ 289.550719][T13690] [ 289.553640][T13690] dump_stack_lvl+0x241/0x360 [ 289.558322][T13690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.563533][T13690] ? print_circular_bug+0x130/0x1a0 [ 289.568737][T13690] check_noncircular+0x36a/0x4a0 [ 289.573671][T13690] ? __pfx_check_noncircular+0x10/0x10 [ 289.579135][T13690] ? lockdep_lock+0x123/0x2b0 [ 289.583890][T13690] ? validate_chain+0x11e/0x5900 [ 289.588824][T13690] validate_chain+0x18e0/0x5900 [ 289.593675][T13690] ? __pfx_validate_chain+0x10/0x10 [ 289.598865][T13690] ? __pfx_validate_chain+0x10/0x10 [ 289.604052][T13690] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 289.610025][T13690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.616343][T13690] ? mark_lock+0x9a/0x350 [ 289.620664][T13690] ? look_up_lock_class+0x77/0x160 [ 289.625791][T13690] ? mark_lock+0x9a/0x350 [ 289.630115][T13690] __lock_acquire+0x1346/0x1fd0 [ 289.634965][T13690] lock_acquire+0x1ed/0x550 [ 289.639463][T13690] ? sk_psock_drop+0x34/0x500 [ 289.644139][T13690] ? __pfx_lock_acquire+0x10/0x10 [ 289.649154][T13690] ? sk_psock_drop+0x34/0x500 [ 289.653825][T13690] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 289.659640][T13690] ? do_raw_spin_unlock+0x13c/0x8b0 [ 289.664839][T13690] ? sock_map_unref+0xcc/0x5e0 [ 289.669622][T13690] ? sk_psock_drop+0x34/0x500 [ 289.674289][T13690] _raw_write_lock_bh+0x35/0x50 [ 289.679135][T13690] ? sk_psock_drop+0x34/0x500 [ 289.683803][T13690] sk_psock_drop+0x34/0x500 [ 289.688309][T13690] sock_map_update_common+0x4f0/0x5b0 [ 289.693679][T13690] sock_map_update_elem_sys+0x55f/0x910 [ 289.699218][T13690] ? sock_map_update_elem_sys+0x1d8/0x910 [ 289.704929][T13690] ? __pfx_sock_map_update_elem_sys+0x10/0x10 [ 289.711004][T13690] map_update_elem+0x53a/0x6f0 [ 289.715772][T13690] __sys_bpf+0x76f/0x810 [ 289.720010][T13690] ? __pfx___sys_bpf+0x10/0x10 [ 289.724787][T13690] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 289.730849][T13690] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 289.736905][T13690] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.743229][T13690] ? do_syscall_64+0x100/0x230 [ 289.747985][T13690] __x64_sys_bpf+0x7c/0x90 [ 289.752394][T13690] do_syscall_64+0xf3/0x230 [ 289.756935][T13690] ? clear_bhb_loop+0x35/0x90 [ 289.761604][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.767506][T13690] RIP: 0033:0x7f497747cee9 [ 289.771912][T13690] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 289.791536][T13690] RSP: 002b:00007f497814a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.799943][T13690] RAX: ffffffffffffffda RBX: 00007f49775b3fa0 RCX: 00007f497747cee9 [ 289.807912][T13690] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002 [ 289.815895][T13690] RBP: 00007f49774c947f R08: 0000000000000000 R09: 0000000000000000 2024/05/31 16:45:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 289.823855][T13690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.831826][T13690] R13: 000000000000000b R14: 00007f49775b3fa0 R15: 00007ffc46219be8 [ 289.839795][T13690]