last executing test programs: 1m11.80976476s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x100}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000440)=@req={0x5, 0x9d2, 0xe57f, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000ed8600000095000000000000003b1d668214e415c49d2816f6e2e84a6abc8fe48737a242a421f02cca21b3b9e90ea74d6392663216567ea7803faf22d37e5f9f0c854e066fc777f95c3673f4ceac5c4f9a45ab53f50400638728df49abf4c92e437d7e4426273cdef309410882e8478f83bbeda6b5c270bc6f4e5244d723263a28b5fd3902c49db299a20b"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4c1, 0x7fffffff, 0x1000, 0x2000, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x3, 0x0, 0x10}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000001ac0)={&(0x7f0000000340)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007'], 0x30}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5ff", 0xc0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010c0006"], 0x98}}, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000280)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001f00b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b5090c000200000063b8f0ff00000000b509000000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffeab70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m10.861446024s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1={0xff, 0x5}}, 0x20) 1m10.778646428s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) 1m10.699227978s ago: executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 51.087921679s ago: executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 37.563022124s ago: executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 31.987310519s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="620ac4ff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 31.844725758s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000700000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) 31.625374382s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 31.53524839s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 31.381243584s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 31.215052042s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000700000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) 31.153417334s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 30.936508849s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 30.817488933s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800001e87c110a3030a0a336ac53d000059a4cb", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000031000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x0, 0x0) r2 = accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1400dfb30f480000000000000000000000000000000000005d5ae558e1895f8e40cea64120a1d500467f1851d931fe4341b7ea2a26704a292c565fa04b2fca5b045d41398aee1a2ca8fe2b13604246c5c003262ffeffde29da245c899c2327070dc636ec73d41ff6bd124cab02f0c35ba89d222fb1432ac9c35908706df82f32d8e10440d5957f"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, 0xe8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00f8"], 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "00034000"}}}]}, 0x48}}, 0x0) 30.6336985s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) 30.486917643s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.360490203s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) 30.241328192s ago: executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001f80)='X^e', 0x3}, {&(0x7f0000000040)='D', 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000200100000000000000000000000000003bbd"], 0x28}}], 0x2, 0x0) 30.156740377s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.time\x00', 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x5, 0x7}) 30.110283979s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 30.027018015s ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000880)="00214717a70700000000030600710a061827270500000000000000ffffae5d5d4d50e7182ce0ab6d00"/50, 0x32}], 0x1, 0x0, 0x0) 29.524647559s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='b 0:46'], 0xa) 29.466263876s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012101, 0x0) 29.409416186s ago: executing program 3: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000500)={@map=0x1, 0x0, 0x22, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) 29.331619266s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x4a, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 29.266868796s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x84, &(0x7f0000000200)=""/214, &(0x7f0000000300)=0xd6) 29.158120655s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x13, 0x10, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 460.334369ms ago: executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) 0s ago: executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22020600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) kernel console output (not intermixed with test programs): : pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2840297311/syzkaller.FJfWXC/468/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 192.271502][T10678] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 192.570772][T10696] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 192.605115][T10696] NCSI netlink: No device for ifindex 0 [ 192.633529][ T29] audit: type=1800 audit(1718884474.107:27): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 192.660028][ T29] audit: type=1804 audit(1718884474.137:28): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir185009402/syzkaller.7Xvf3H/74/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 192.692946][ T29] audit: type=1804 audit(1718884474.157:29): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir185009402/syzkaller.7Xvf3H/74/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 192.735202][ T29] audit: type=1804 audit(1718884474.167:30): pid=10702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir185009402/syzkaller.7Xvf3H/74/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 193.034229][T10723] bridge0: port 2(vlan0) entered blocking state [ 193.058784][T10723] bridge0: port 2(vlan0) entered disabled state [ 193.079940][T10723] vlan0: entered allmulticast mode [ 193.098422][T10723] vlan0: left allmulticast mode [ 193.228327][T10728] bridge: RTM_NEWNEIGH with invalid ether address [ 194.374404][T10797] __nla_validate_parse: 6 callbacks suppressed [ 194.374423][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.521909][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.616590][T10797] bridge: RTM_NEWNEIGH with invalid ether address [ 195.360763][T10854] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.370215][T10854] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.379081][T10854] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.387954][T10854] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.422472][T10854] vxlan0: entered promiscuous mode [ 195.432232][T10854] vxlan0: entered allmulticast mode [ 195.457190][T10854] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.466793][T10854] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.476162][T10854] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.485210][T10854] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.585899][T10864] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 196.095216][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 196.095233][ T29] audit: type=1804 audit(1718884477.577:33): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2840297311/syzkaller.FJfWXC/483/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 196.173682][ T29] audit: type=1804 audit(1718884477.647:34): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir443323067/syzkaller.1BCZZY/77/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 196.345210][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.416358][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.430169][T10973] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 197.567807][ T29] audit: type=1804 audit(1718884479.047:35): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir443323067/syzkaller.1BCZZY/87/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 198.485200][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.564187][T11048] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 199.085519][T11081] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 199.283595][T11094] validate_nla: 1 callbacks suppressed [ 199.283613][T11094] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 199.296673][T11095] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 199.305647][T11094] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.659456][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.702715][T11115] sch_fq: defrate 2 ignored. [ 199.886791][T11128] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 199.909016][T11130] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 199.918007][T11128] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 199.964959][T11126] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.992653][T11126] tipc: Started in network mode [ 199.997534][T11126] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 200.022226][T11126] tipc: Enabled bearer , priority 16 [ 200.484183][T11165] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 200.504779][T11165] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 200.531835][T11165] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.542987][T11165] tipc: Started in network mode [ 200.547942][T11165] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 200.558221][T11165] tipc: Enabled bearer , priority 16 [ 200.666212][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.046665][ T29] audit: type=1804 audit(1718884482.527:36): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir443323067/syzkaller.1BCZZY/108/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 201.092014][T11197] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 201.127737][T11197] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 201.145171][ T5161] tipc: Node number set to 10922666 [ 201.672771][ T25] tipc: Node number set to 10922666 [ 201.727273][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.871756][T11233] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 201.926574][T11233] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.941604][T11233] tipc: Enabling of bearer rejected, already enabled [ 202.572690][ T29] audit: type=1804 audit(1718884484.047:37): pid=11267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir185009402/syzkaller.7Xvf3H/135/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 202.637994][ T29] audit: type=1804 audit(1718884484.097:38): pid=11267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir185009402/syzkaller.7Xvf3H/135/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 202.698424][ T29] audit: type=1804 audit(1718884484.097:39): pid=11267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir185009402/syzkaller.7Xvf3H/135/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 202.718862][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.782360][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.486909][T11319] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.759440][T11357] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.881642][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.070741][ T5161] IPVS: starting estimator thread 0... [ 205.170388][T11384] IPVS: using max 19 ests per chain, 45600 per kthread [ 205.366690][T11403] syz-executor.0[11403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.366929][T11403] syz-executor.0[11403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.931361][T11434] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.971366][T11437] syz-executor.1[11437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.971606][T11437] syz-executor.1[11437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.278535][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.308430][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.311772][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.335364][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.353198][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.362841][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.373130][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.527961][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.602316][T11459] pim6reg: entered allmulticast mode [ 206.625570][T11459] pim6reg: left allmulticast mode [ 206.754018][T11452] lo speed is unknown, defaulting to 1000 [ 206.833150][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.952752][ T29] audit: type=1800 audit(1718884488.427:40): pid=11443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1945 res=0 errno=0 [ 207.059602][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 207.128786][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.215930][T11481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.477212][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.492817][ T35] bridge_slave_1: left allmulticast mode [ 207.502839][ T35] bridge_slave_1: left promiscuous mode [ 207.508596][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.547006][ T35] bridge_slave_0: left allmulticast mode [ 207.553567][ T35] bridge_slave_0: left promiscuous mode [ 207.559330][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.590791][ T35] tipc: Resetting bearer [ 207.903512][ T35] tipc: Disabling bearer [ 208.017088][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.026522][ T35] bond_slave_0: left promiscuous mode [ 208.035284][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.044872][ T35] bond_slave_1: left promiscuous mode [ 208.051817][ T35] bond0 (unregistering): Released all slaves [ 208.146964][ T35] bond2 (unregistering): Released all slaves [ 208.220163][ T35] tipc: Left network mode [ 208.378602][T11452] chnl_net:caif_netlink_parms(): no params data found [ 208.432834][ T5116] Bluetooth: hci4: command tx timeout [ 208.574657][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.605388][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.621698][T11452] bridge_slave_0: entered allmulticast mode [ 208.644177][T11452] bridge_slave_0: entered promiscuous mode [ 208.655361][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.662485][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.687231][T11452] bridge_slave_1: entered allmulticast mode [ 208.694917][T11452] bridge_slave_1: entered promiscuous mode [ 208.723047][ T35] hsr_slave_0: left promiscuous mode [ 208.737526][ T35] hsr_slave_1: left promiscuous mode [ 208.755424][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.772289][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.783446][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.791012][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.852063][ T35] veth1_macvtap: left promiscuous mode [ 208.870336][ T35] veth0_macvtap: left promiscuous mode [ 208.877680][ T35] veth1_vlan: left promiscuous mode [ 208.890905][ T35] veth0_vlan: left promiscuous mode [ 209.197916][T11537] validate_nla: 3 callbacks suppressed [ 209.197934][T11537] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 209.288924][ T5161] IPVS: starting estimator thread 0... [ 209.402983][T11540] IPVS: using max 18 ests per chain, 43200 per kthread [ 209.848845][ T35] team0 (unregistering): Port device team_slave_1 removed [ 209.926975][ T35] team0 (unregistering): Port device team_slave_0 removed [ 210.250472][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.266382][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.453370][T11452] team0: Port device team_slave_0 added [ 210.485890][T11452] team0: Port device team_slave_1 added [ 210.513207][ T5116] Bluetooth: hci4: command 0x041b tx timeout [ 210.588779][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.599124][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.631089][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.644563][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.669057][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.735646][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.890270][T11452] hsr_slave_0: entered promiscuous mode [ 210.895194][T11579] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.906477][T11452] hsr_slave_1: entered promiscuous mode [ 210.921072][T11579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.930270][T11452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.938097][T11452] Cannot create hsr debugfs directory [ 211.534937][T11614] xt_connbytes: Forcing CT accounting to be enabled [ 211.541788][T11614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.742289][T11452] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.776878][T11452] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.789970][T11452] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.801085][T11452] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.942307][T11452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.977825][T11452] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.004014][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.011194][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.055976][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.063178][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.281176][T11648] syz-executor.2[11648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.281409][T11648] syz-executor.2[11648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.301979][T11648] syz-executor.2[11648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.327848][T11648] syz-executor.2[11648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.417123][T11452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.480431][T11452] veth0_vlan: entered promiscuous mode [ 212.495404][T11452] veth1_vlan: entered promiscuous mode [ 212.529530][T11452] veth0_macvtap: entered promiscuous mode [ 212.540233][T11452] veth1_macvtap: entered promiscuous mode [ 212.558911][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.571156][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.581113][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.593116][ T5116] Bluetooth: hci4: command 0x041b tx timeout [ 212.608445][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.618471][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.634471][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.675928][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.713040][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.722324][T11661] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 212.731253][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.755647][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.771951][T11452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.795565][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.814446][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.838954][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.852717][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.875298][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.896205][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.917677][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.928302][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.942645][T11452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.965972][T11452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.985160][T11452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.005760][T11661] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 213.049664][T11665] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 213.092229][T11452] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.116469][T11452] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.132895][T11452] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.155929][T11452] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.184986][T11669] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 213.195500][T11688] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 213.211249][T11688] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.223637][T11673] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 213.372130][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.381793][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.468145][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.486629][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.514890][T11696] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 213.590390][T11706] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.622805][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.632118][T11706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.681814][T11712] tc_dump_action: action bad kind [ 213.745578][T11716] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 213.768452][T11716] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 214.297604][T11748] tc_dump_action: action bad kind [ 214.474340][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.537263][T11754] 8021q: adding VLAN 0 to HW filter on device team1 [ 214.577981][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.664895][ T5117] Bluetooth: hci4: command 0x041b tx timeout [ 215.052292][T11786] tipc: Started in network mode [ 215.067853][T11786] tipc: Node identity 4, cluster identity 4711 [ 215.074365][T11786] tipc: Node number set to 4 [ 215.090746][T11786] tipc: Cannot configure node identity twice [ 215.319236][T11802] validate_nla: 3 callbacks suppressed [ 215.319255][T11802] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 215.343132][T11802] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.911891][T11847] tc_dump_action: action bad kind [ 216.329808][T11877] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 216.344141][T11877] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.456119][T11884] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.672725][T11893] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 216.680900][T11893] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.743462][ T5117] Bluetooth: hci4: command 0x041b tx timeout [ 217.452330][T11943] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.671507][T11963] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 218.384519][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.576608][T12006] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.613693][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.647801][T12001] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 218.679599][T12001] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.687462][T12008] 8021q: adding VLAN 0 to HW filter on device team2 [ 218.715691][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.727016][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.736087][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.766884][T12012] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 218.775210][T12012] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.784792][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.811964][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.829200][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.843481][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.970441][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.119256][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.310966][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.361973][T12013] lo speed is unknown, defaulting to 1000 [ 219.455192][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.661022][T12053] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 219.712471][T12042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 219.727255][ T35] bridge_slave_1: left allmulticast mode [ 219.738851][T12055] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 219.743783][ T35] bridge_slave_1: left promiscuous mode [ 219.760130][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.771595][ T35] bridge_slave_0: left allmulticast mode [ 219.787829][ T35] bridge_slave_0: left promiscuous mode [ 219.798321][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.139298][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.150376][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.174137][ T35] bond0 (unregistering): Released all slaves [ 220.247473][T12060] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 220.284471][T12060] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.903609][ T5117] Bluetooth: hci4: command tx timeout [ 220.961607][T12013] chnl_net:caif_netlink_parms(): no params data found [ 220.986854][ T35] hsr_slave_0: left promiscuous mode [ 221.006463][ T35] hsr_slave_1: left promiscuous mode [ 221.056329][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.064190][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.093377][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.100790][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.161275][ T35] veth1_macvtap: left promiscuous mode [ 221.169896][ T35] veth0_macvtap: left promiscuous mode [ 221.176012][ T35] veth1_vlan: left promiscuous mode [ 221.181662][ T35] veth0_vlan: left promiscuous mode [ 221.742166][T12122] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 221.768362][T12124] __nla_validate_parse: 3 callbacks suppressed [ 221.768380][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.234961][ T35] team0 (unregistering): Port device team_slave_1 removed [ 222.283072][ T35] team0 (unregistering): Port device team_slave_0 removed [ 222.911484][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.945055][T12157] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 222.953647][T12013] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.961065][T12157] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.970868][T12013] bridge_slave_0: entered allmulticast mode [ 222.980942][T12013] bridge_slave_0: entered promiscuous mode [ 222.993233][ T5117] Bluetooth: hci4: command tx timeout [ 222.999574][T12013] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.021439][T12013] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.031284][T12013] bridge_slave_1: entered allmulticast mode [ 223.042856][T12013] bridge_slave_1: entered promiscuous mode [ 223.091066][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.177118][T12013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.218806][T12013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.343524][T12013] team0: Port device team_slave_0 added [ 223.366494][T12013] team0: Port device team_slave_1 added [ 223.484395][T12013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.491376][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.570998][T12013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.630720][T12013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.663963][T12013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.709961][T12013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.943379][T12013] hsr_slave_0: entered promiscuous mode [ 223.969469][T12013] hsr_slave_1: entered promiscuous mode [ 223.978032][T12013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.986535][T12013] Cannot create hsr debugfs directory [ 224.855197][T12013] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.867956][T12013] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.892276][T12013] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.925390][T12013] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.062921][ T5117] Bluetooth: hci4: command tx timeout [ 225.069828][T12254] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 225.083139][T12254] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.116366][T12254] bridge0: port 2(dummy0) entered blocking state [ 225.130314][T12254] bridge0: port 2(dummy0) entered disabled state [ 225.149599][T12254] dummy0: entered allmulticast mode [ 225.165400][T12254] dummy0: entered promiscuous mode [ 225.187638][T12254] bridge0: port 2(dummy0) entered blocking state [ 225.194156][T12254] bridge0: port 2(dummy0) entered forwarding state [ 225.229937][T12269] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 225.238411][T12269] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.248673][T12269] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 225.427772][T12013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.480953][T12013] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.543945][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.551112][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.580091][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.587349][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.646432][T12288] bond0: entered promiscuous mode [ 225.652094][T12288] bond_slave_1: entered promiscuous mode [ 225.698163][T12288] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 225.719977][T12288] bridge0: entered promiscuous mode [ 225.753535][T12296] netlink: 209316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.147089][T12013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.320605][T12013] veth0_vlan: entered promiscuous mode [ 226.337902][T12013] veth1_vlan: entered promiscuous mode [ 226.388228][T12013] veth0_macvtap: entered promiscuous mode [ 226.400346][T12013] veth1_macvtap: entered promiscuous mode [ 226.436310][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.452428][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.480098][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.488833][T12336] openvswitch: netlink: Missing key (keys=40, expected=100) [ 226.501825][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.521836][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.539255][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.554965][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.574439][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.595236][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.608035][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.629989][T12013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.668470][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.707602][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.721051][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.737247][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.755216][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.766741][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.778264][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.788873][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.798886][T12013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.810620][T12013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.842251][T12013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.865410][T12013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.893935][T12013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.935354][T12013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.960270][T12013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.154310][ T5117] Bluetooth: hci4: command tx timeout [ 227.245400][ T5656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.267993][ T5656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.363212][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.377264][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.621670][T12390] nftables ruleset with unbound set [ 227.662805][T12392] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 227.779617][T12396] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 227.956175][T12396] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 228.030091][T12396] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 228.058502][T12400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.066748][ T2880] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.497132][T12396] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 228.543310][T12396] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 228.590018][T12396] bond1 (unregistering): Released all slaves [ 228.705448][T12415] bond0: entered promiscuous mode [ 228.732690][T12415] bond_slave_0: entered promiscuous mode [ 228.753635][T12415] bond_slave_1: entered promiscuous mode [ 229.614142][T12453] team_slave_0: entered allmulticast mode [ 230.745869][T12488] syzkaller0: entered promiscuous mode [ 230.763006][T12488] syzkaller0: entered allmulticast mode [ 232.639095][T12536] tipc: Can't bind to reserved service type 0 [ 234.627450][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.641499][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.661525][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.681408][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.690337][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 234.703794][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.705989][T12509] ip6gretap0: entered promiscuous mode [ 234.736931][T12509] syz_tun: entered promiscuous mode [ 234.759968][T12509] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 234.772669][T12509] Cannot create hsr debugfs directory [ 235.069859][T12552] lo speed is unknown, defaulting to 1000 [ 235.473545][ T5649] bond0: (slave netdevsim0): Releasing backup interface [ 235.503200][ T5649] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 235.878281][T12552] chnl_net:caif_netlink_parms(): no params data found [ 235.940981][ T5649] dummy0: left allmulticast mode [ 235.952511][ T5649] dummy0: left promiscuous mode [ 235.984797][ T5649] bridge0: port 2(dummy0) entered disabled state [ 236.264830][T12613] x_tables: unsorted underflow at hook 3 [ 236.435935][ T5649] bridge_slave_0: left allmulticast mode [ 236.465069][ T5649] bridge_slave_0: left promiscuous mode [ 236.470882][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.536867][ T5649] bridge_slave_1: left allmulticast mode [ 236.559084][ T5649] bridge_slave_1: left promiscuous mode [ 236.588915][ T5649] bridge3: port 1(bridge_slave_1) entered disabled state [ 236.748736][ T5649] ip6gretap0 (unregistering): left promiscuous mode [ 236.829802][ T5117] Bluetooth: hci3: command tx timeout [ 236.882773][ T29] audit: type=1804 audit(1718884518.357:41): pid=12633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1881379433/syzkaller.5d6KrP/345/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 237.092038][T12640] nbd: socks must be embedded in a SOCK_ITEM attr [ 237.139666][ T5649] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 237.149392][ T5649] bridge0 (unregistering): left promiscuous mode [ 237.738823][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.753668][ T5649] bond_slave_1: left promiscuous mode [ 237.759568][ T5649] bond0 (unregistering): Released all slaves [ 237.793749][ T5649] bond1 (unregistering): Released all slaves [ 237.820661][ T5649] bond2 (unregistering): Released all slaves [ 238.230503][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.260507][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.386849][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.406607][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.425978][T12552] bridge_slave_0: entered allmulticast mode [ 238.443340][T12552] bridge_slave_0: entered promiscuous mode [ 238.478185][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.493579][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.500772][T12552] bridge_slave_1: entered allmulticast mode [ 238.518798][T12552] bridge_slave_1: entered promiscuous mode [ 238.724081][T12679] Bluetooth: MGMT ver 1.22 [ 238.828228][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.877499][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.912882][ T5117] Bluetooth: hci3: command tx timeout [ 239.117929][T12552] team0: Port device team_slave_0 added [ 239.158435][T12552] team0: Port device team_slave_1 added [ 239.221638][ T5649] batadv_slave_0: left promiscuous mode [ 239.240827][ T5649] hsr_slave_0: left promiscuous mode [ 239.255555][ T5649] hsr_slave_1: left promiscuous mode [ 239.276882][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.285792][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.295840][ T5649] veth0_vlan: left promiscuous mode [ 240.758702][ T5649] team0 (unregistering): Port device team_slave_1 removed [ 240.969595][ T5649] team0 (unregistering): Port device team_slave_0 removed [ 240.997478][ T5117] Bluetooth: hci3: command tx timeout [ 242.360434][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.367602][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.404855][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.530951][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.646090][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.662949][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.725171][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.062988][ T5117] Bluetooth: hci3: command tx timeout [ 243.137647][T12552] hsr_slave_0: entered promiscuous mode [ 243.188095][T12552] hsr_slave_1: entered promiscuous mode [ 243.219345][T12552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.232622][T12552] Cannot create hsr debugfs directory [ 243.322784][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.401974][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.686346][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.885891][ T5649] IPVS: stop unused estimator thread 0... [ 244.343992][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.528757][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.635428][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.649658][T12770] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 244.671246][T12770] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.680108][T12770] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.689045][T12770] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.701459][T12770] vxlan0: entered promiscuous mode [ 244.790115][T12552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.803865][T12552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.818621][T12552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.841466][T12552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.980051][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.016164][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.029680][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.036958][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.054388][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.061519][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.202135][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.334151][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.362860][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.386155][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.450975][T12792] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.460435][T12792] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.469923][T12792] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.479143][T12792] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.516796][T12792] vxlan0: entered promiscuous mode [ 245.564310][T12552] veth0_vlan: entered promiscuous mode [ 245.579724][T12552] veth1_vlan: entered promiscuous mode [ 245.588552][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.683579][T12552] veth0_macvtap: entered promiscuous mode [ 245.705834][T12552] veth1_macvtap: entered promiscuous mode [ 245.774647][T12810] No such timeout policy "syz1" [ 245.793545][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.809734][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.842593][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.871553][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.897513][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.912807][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.928396][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.945434][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.955451][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.966286][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.980869][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.992272][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.007785][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.031047][T12818] bond0: option use_carrier: invalid value (164) [ 246.065929][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.091989][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.112268][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.129933][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.150000][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.182982][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.200041][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.251436][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.278900][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.298549][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.317020][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.328104][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.341637][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.398871][T12552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.412667][T12552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.421380][T12552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.457861][T12552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.514278][T12840] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 246.535170][T12839] Êü: entered promiscuous mode [ 246.676047][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.709040][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.794045][ T2891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.815711][ T2891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.858065][T12857] bridge0: port 2(macvlan2) entered blocking state [ 246.864921][T12857] bridge0: port 2(macvlan2) entered disabled state [ 246.871667][T12857] macvlan2: entered allmulticast mode [ 246.883419][T12857] macvlan2: entered promiscuous mode [ 246.984649][T12854] macvlan2 (unregistering): left allmulticast mode [ 247.001690][T12854] macvlan2 (unregistering): left promiscuous mode [ 247.008984][T12854] bridge0: port 2(macvlan2) entered disabled state [ 247.174321][T12867] bridge0: entered promiscuous mode [ 247.191667][T12867] macvtap1: entered promiscuous mode [ 247.198112][T12867] macvtap1: entered allmulticast mode [ 247.208264][T12867] bridge0: entered allmulticast mode [ 247.228561][T12870] bridge0: left allmulticast mode [ 247.230168][T12874] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 247.238408][T12870] bridge0: left promiscuous mode [ 247.267443][T12870] macvtap1: left promiscuous mode [ 247.288905][T12870] macvtap1: left allmulticast mode [ 247.510092][T12889] No such timeout policy "syz1" [ 248.219024][T12937] vlan2: entered promiscuous mode [ 248.230325][T12937] syz_tun: entered promiscuous mode [ 248.263279][T12937] team0: Port device vlan2 added [ 248.729389][T12965] bond0: (slave bond_slave_0): Releasing backup interface [ 248.778695][T12973] __nla_validate_parse: 8 callbacks suppressed [ 248.778712][T12973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.929638][T12984] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.063148][ T2880] wlan1: Trigger new scan to find an IBSS to join [ 249.142557][T12999] dccp_invalid_packet: pskb_may_pull failed [ 249.495448][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.757144][T13034] dccp_invalid_packet: pskb_may_pull failed [ 249.897586][T13042] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 249.908021][T13042] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.178168][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.213010][T13059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.220733][T13059] IPv6: NLM_F_CREATE should be set when creating new route [ 250.246579][T13059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.253905][T13059] IPv6: NLM_F_CREATE should be set when creating new route [ 250.294410][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.373709][T13068] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.403624][T13059] bond0: (slave bond_slave_1): Releasing backup interface [ 251.052942][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.252171][T13103] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 251.481948][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.498365][T13113] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.030809][T13149] hsr_slave_1 (unregistering): left promiscuous mode [ 252.110024][ T2880] wlan1: Trigger new scan to find an IBSS to join [ 252.450158][T13181] Cannot find add_set index 0 as target [ 252.858219][T13204] vcan0 speed is unknown, defaulting to 1000 [ 252.885971][T13204] vcan0 speed is unknown, defaulting to 1000 [ 252.910456][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 252.923463][T13204] vcan0 speed is unknown, defaulting to 1000 [ 253.326532][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.340167][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.348398][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.364370][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.373478][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 253.381938][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.443151][T13204] infiniband syz1: set active [ 253.447963][T13204] infiniband syz1: added vcan0 [ 253.517029][ T2891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.546293][ T25] vcan0 speed is unknown, defaulting to 1000 [ 253.590306][T13204] RDS/IB: syz1: added [ 253.598362][T13222] lo speed is unknown, defaulting to 1000 [ 253.613725][T13204] smc: adding ib device syz1 with port count 1 [ 253.630735][T13204] smc: ib device syz1 port 1 has pnetid [ 253.747946][ T2891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.793681][ T25] vcan0 speed is unknown, defaulting to 1000 [ 253.805360][T13204] vcan0 speed is unknown, defaulting to 1000 [ 253.889855][ T2891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.056191][ T2891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.349476][ T2891] bridge_slave_1: left allmulticast mode [ 254.362692][ T2891] bridge_slave_1: left promiscuous mode [ 254.368508][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.400869][ T2891] bridge_slave_0: left allmulticast mode [ 254.412593][ T2891] bridge_slave_0: left promiscuous mode [ 254.418342][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.039983][ T2891] bond0 (unregistering): Released all slaves [ 255.062945][ T5656] wlan1: Creating new IBSS network, BSSID 2e:56:31:e8:35:75 [ 255.080607][T13204] vcan0 speed is unknown, defaulting to 1000 [ 255.389703][T13295] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 255.400417][T13295] __nla_validate_parse: 4 callbacks suppressed [ 255.400435][T13295] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.424750][T13291] team0: Port device team_slave_0 removed [ 255.433141][T13291] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 255.473062][ T5117] Bluetooth: hci3: command tx timeout [ 255.698421][T13222] vcan0 speed is unknown, defaulting to 1000 [ 255.837719][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.850710][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.956492][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.134327][T13204] vcan0 speed is unknown, defaulting to 1000 [ 256.483100][T12013] syz_tun: left promiscuous mode [ 256.595331][T12013] team0: Port device vlan2 removed [ 256.697719][T13204] vcan0 speed is unknown, defaulting to 1000 [ 256.796118][T13222] chnl_net:caif_netlink_parms(): no params data found [ 256.864086][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.873214][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.882117][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.892428][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.901929][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.909872][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.143511][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.179075][T13222] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.192503][T13222] bridge_slave_0: entered allmulticast mode [ 257.211280][T13222] bridge_slave_0: entered promiscuous mode [ 257.237794][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.254671][T13222] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.269787][T13222] bridge_slave_1: entered allmulticast mode [ 257.321839][T13222] bridge_slave_1: entered promiscuous mode [ 257.352401][T13204] vcan0 speed is unknown, defaulting to 1000 [ 257.396957][T13222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.429040][T13222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.543557][ T5127] Bluetooth: hci3: command tx timeout [ 257.563397][T13222] team0: Port device team_slave_0 added [ 257.580539][T13222] team0: Port device team_slave_1 added [ 257.670125][T13222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.677384][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.704699][T13222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.717264][T13204] vcan0 speed is unknown, defaulting to 1000 [ 257.721849][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.747446][T13222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.762682][T13222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.810339][T13222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.027946][T13222] hsr_slave_0: entered promiscuous mode [ 258.042358][T13222] hsr_slave_1: entered promiscuous mode [ 258.050669][T13222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.062591][T13222] Cannot create hsr debugfs directory [ 258.074687][T13204] vcan0 speed is unknown, defaulting to 1000 [ 258.074703][T13375] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 258.423079][T13204] vcan0 speed is unknown, defaulting to 1000 [ 258.733069][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.800603][T13396] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.849096][T13338] lo speed is unknown, defaulting to 1000 [ 258.928302][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.955954][T13402] batadv_slave_1: entered promiscuous mode [ 258.995618][ T5127] Bluetooth: hci4: command tx timeout [ 259.002447][T13395] batadv_slave_1: left promiscuous mode [ 259.063093][T13222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.115962][T13222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.186000][T13222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.219995][T13222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.474656][ T2891] hsr_slave_0: left promiscuous mode [ 259.486404][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.522610][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.543431][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.551452][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.613409][ T2891] veth1_macvtap: left promiscuous mode [ 259.618962][ T2891] veth0_macvtap: left promiscuous mode [ 259.632609][ T5127] Bluetooth: hci3: command tx timeout [ 259.638297][ T2891] veth1_vlan: left promiscuous mode [ 259.643834][ T2891] veth0_vlan: left promiscuous mode [ 260.059766][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 260.095043][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 260.480840][T13418] team0: Port device team_slave_0 removed [ 260.489193][T13418] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 260.866427][T13222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.891027][T13338] chnl_net:caif_netlink_parms(): no params data found [ 260.917338][T13449] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 260.933789][T13449] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.946044][T13222] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.967950][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.008535][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.015744][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.065360][ T5127] Bluetooth: hci4: command tx timeout [ 261.094077][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.101239][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.141498][T13338] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.148815][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.156539][T13338] bridge_slave_0: entered allmulticast mode [ 261.164304][T13338] bridge_slave_0: entered promiscuous mode [ 261.178502][T13338] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.187088][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.194694][T13338] bridge_slave_1: entered allmulticast mode [ 261.211047][T13338] bridge_slave_1: entered promiscuous mode [ 261.296360][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.316648][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.378454][ T2891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.391841][ T2891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.437861][T13338] team0: Port device team_slave_0 added [ 261.475741][ T2891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.490742][ T2891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.511453][T13338] team0: Port device team_slave_1 added [ 261.569818][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.586055][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.641151][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.682580][T13470] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 261.709858][ T5127] Bluetooth: hci3: command tx timeout [ 261.717016][ T2891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.732632][ T2891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.770309][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.783787][T13474] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 261.787078][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.791995][T13474] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 261.835404][T13474] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 261.849712][T13474] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 261.849999][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.874605][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.944629][ T2891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.955296][ T2891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.086691][T13484] syzkaller0: entered promiscuous mode [ 262.092172][T13484] syzkaller0: entered allmulticast mode [ 262.167799][T13338] hsr_slave_0: entered promiscuous mode [ 262.184630][T13338] hsr_slave_1: entered promiscuous mode [ 262.198570][T13338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.212963][T13338] Cannot create hsr debugfs directory [ 263.146013][ T5127] Bluetooth: hci4: command tx timeout [ 263.945559][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.077377][T13222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.204988][ T2891] bridge_slave_1: left allmulticast mode [ 264.210666][ T2891] bridge_slave_1: left promiscuous mode [ 264.227554][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.251147][ T2891] bridge_slave_0: left allmulticast mode [ 264.268622][ T2891] bridge_slave_0: left promiscuous mode [ 264.292913][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.064548][T13549] Bluetooth: MGMT ver 1.22 [ 265.114432][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.127395][ T2891] bond_slave_0: left promiscuous mode [ 265.137565][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.147850][ T2891] bond_slave_1: left promiscuous mode [ 265.156160][ T2891] bond0 (unregistering): Released all slaves [ 265.225214][ T5127] Bluetooth: hci4: command tx timeout [ 265.289054][T13536] syzkaller0: entered promiscuous mode [ 265.295293][T13536] syzkaller0: entered allmulticast mode [ 265.309365][T13551] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 265.340853][T13551] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 267.111495][T13565] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 267.119706][T13565] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 267.131262][T13565] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.368233][T13222] veth0_vlan: entered promiscuous mode [ 267.398694][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.664095][T13589] wireguard0: entered promiscuous mode [ 267.669638][T13589] wireguard0: entered allmulticast mode [ 267.703674][ T2891] hsr_slave_0: left promiscuous mode [ 267.712141][ T2891] hsr_slave_1: left promiscuous mode [ 267.718442][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.727127][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.737079][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.744795][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.766979][ T2891] veth1_macvtap: left promiscuous mode [ 267.772727][ T2891] veth0_macvtap: left promiscuous mode [ 267.778341][ T2891] veth1_vlan: left promiscuous mode [ 267.783878][ T2891] veth0_vlan: left promiscuous mode [ 268.339523][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 268.387303][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 268.784851][ T7983] syz_tun (unregistering): left promiscuous mode [ 268.811208][T13222] veth1_vlan: entered promiscuous mode [ 268.871424][T13222] veth0_macvtap: entered promiscuous mode [ 268.883731][T13222] veth1_macvtap: entered promiscuous mode [ 268.996311][T13598] syzkaller0: entered promiscuous mode [ 269.002095][T13598] syzkaller0: entered allmulticast mode [ 269.024081][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.047250][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.064929][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.084355][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.094430][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.107255][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.117239][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.129892][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.142036][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.153674][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.165933][T13222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.204798][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.348774][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.416283][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.482262][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.572724][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.633822][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.705705][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.781300][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.859140][T13222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.925883][T13222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.954108][T13222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.188453][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.198796][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.208945][ T29] audit: type=1804 audit(1718884551.677:42): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir443323067/syzkaller.1BCZZY/344/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 270.235413][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.281015][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.299137][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.306888][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.636019][T13222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.655612][T13222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.667052][T13222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.675870][T13222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.807069][T13611] lo speed is unknown, defaulting to 1000 [ 271.901837][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.920572][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.946771][T13338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.009316][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.018030][T13338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.028375][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.076887][T13338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.112589][T13338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.208141][ T2891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.262777][T13611] vcan0 speed is unknown, defaulting to 1000 [ 272.430891][ T5127] Bluetooth: hci1: command tx timeout [ 272.439973][ T2891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.608911][ T2891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.815649][ T2891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.913373][T13338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.027691][T13338] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.047062][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.054260][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.077145][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.084327][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.271554][ T2891] bridge_slave_0: left allmulticast mode [ 273.291464][ T2891] bridge_slave_0: left promiscuous mode [ 273.315860][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.387638][ T2891] tipc: Resetting bearer [ 273.486394][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.509941][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.518684][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.529439][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.539106][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.551285][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.662065][ T2891] ip6gretap0 (unregistering): left promiscuous mode [ 273.872834][ T2891] tipc: Disabling bearer [ 274.101568][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.112094][ T2891] bond_slave_1: left promiscuous mode [ 274.120101][ T2891] bond0 (unregistering): Released all slaves [ 274.198856][T13338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.260390][ T2891] tipc: Left network mode [ 274.329305][T13667] lo speed is unknown, defaulting to 1000 [ 274.506519][ T5116] Bluetooth: hci1: command tx timeout [ 274.592898][T13611] chnl_net:caif_netlink_parms(): no params data found [ 274.820616][T13667] vcan0 speed is unknown, defaulting to 1000 [ 275.060218][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.074614][T13611] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.081849][T13611] bridge_slave_0: entered allmulticast mode [ 275.118616][T13611] bridge_slave_0: entered promiscuous mode [ 275.147561][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.154879][T13611] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.162160][T13611] bridge_slave_1: entered allmulticast mode [ 275.172009][T13611] bridge_slave_1: entered promiscuous mode [ 275.291941][T13338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.456208][T13611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.507480][T13611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.603664][ T2891] hsr_slave_0: left promiscuous mode [ 275.609375][T13728] xt_nat: multiple ranges no longer supported [ 275.624713][ T5116] Bluetooth: hci3: command tx timeout [ 275.633132][ T2891] hsr_slave_1: left promiscuous mode [ 275.650794][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.658641][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.666818][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.674297][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.724966][T13732] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.747533][ T2891] veth1_macvtap: left promiscuous mode [ 275.763565][ T2891] veth0_macvtap: left promiscuous mode [ 275.772734][ T2891] veth1_vlan: left promiscuous mode [ 276.497311][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 276.595628][ T5116] Bluetooth: hci1: command tx timeout [ 277.032392][T13611] team0: Port device team_slave_0 added [ 277.056021][T13611] team0: Port device team_slave_1 added [ 277.212065][T13611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.235239][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.276346][T13611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.364047][T13611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.379416][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.424972][T13611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.510390][T13753] syzkaller0: entered promiscuous mode [ 277.516459][T13753] syzkaller0: entered allmulticast mode [ 277.560182][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.703063][ T5116] Bluetooth: hci3: command tx timeout [ 278.662993][ T5116] Bluetooth: hci1: command tx timeout [ 279.116443][T13338] veth0_vlan: entered promiscuous mode [ 279.129775][T13338] veth1_vlan: entered promiscuous mode [ 279.176127][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.204355][T13611] hsr_slave_0: entered promiscuous mode [ 279.213715][T13611] hsr_slave_1: entered promiscuous mode [ 279.310709][T13338] veth0_macvtap: entered promiscuous mode [ 279.359623][T13338] veth1_macvtap: entered promiscuous mode [ 279.434528][T13667] chnl_net:caif_netlink_parms(): no params data found [ 279.478758][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.512630][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.531518][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.546203][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.561429][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.571976][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.582001][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.592980][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.602911][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.613538][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.628370][T13338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.784349][ T5116] Bluetooth: hci3: command tx timeout [ 279.832182][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.845343][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.858953][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.869617][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.888041][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.898745][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.908809][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.919334][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.931156][T13338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.943808][T13338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.956720][T13338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.967906][T13338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.982619][T13338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.991339][T13338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.002967][T13809] xt_connbytes: Forcing CT accounting to be enabled [ 280.010767][T13338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.181372][T13667] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.187585][T13817] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 280.202265][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.209552][T13667] bridge_slave_0: entered allmulticast mode [ 280.218190][T13667] bridge_slave_0: entered promiscuous mode [ 280.232155][T13667] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.241498][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.251598][T13667] bridge_slave_1: entered allmulticast mode [ 280.258681][T13667] bridge_slave_1: entered promiscuous mode [ 280.321778][T13667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.360085][T13667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.468466][ T2891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.501349][T13667] team0: Port device team_slave_0 added [ 280.521208][T13667] team0: Port device team_slave_1 added [ 280.556406][ T2891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.583372][T13824] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.593995][T13824] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 280.696605][T13667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.712611][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.756887][T13667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.802951][ T2891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.823587][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.831071][T13667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.842500][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.855488][T13667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.883673][T13667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.004071][ T2891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.153428][ T5656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.161276][ T5656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.190143][T13667] hsr_slave_0: entered promiscuous mode [ 281.205850][T13667] hsr_slave_1: entered promiscuous mode [ 281.221785][T13667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.240471][T13667] Cannot create hsr debugfs directory [ 281.362772][T13611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.405929][T13611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.447848][T13611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.494709][T13611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.523724][T13858] Bluetooth: MGMT ver 1.22 [ 281.528279][T13858] Bluetooth: hci3: invalid len left 7, exp >= 35 [ 281.609323][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.789977][ T2891] bridge_slave_1: left allmulticast mode [ 281.797009][ T2891] bridge_slave_1: left promiscuous mode [ 281.803757][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.824346][ T2891] bridge_slave_0: left allmulticast mode [ 281.837692][ T2891] bridge_slave_0: left promiscuous mode [ 281.845669][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.863570][ T5116] Bluetooth: hci3: command tx timeout [ 282.300138][ T2891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.317859][ T2891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.328415][ T2891] bond0 (unregistering): Released all slaves [ 282.340316][T13866] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.675824][T13892] team0: Failed to send options change via netlink (err -105) [ 282.692317][T13892] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 282.703973][T13892] team0: Port device team_slave_0 removed [ 282.804781][T13611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.893466][T13611] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.050425][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.057623][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.106714][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.256835][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.264045][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.319073][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.437012][ T2891] hsr_slave_0: left promiscuous mode [ 283.448354][ T2891] hsr_slave_1: left promiscuous mode [ 283.465581][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.495763][T13922] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 283.502889][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.524374][ T2891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.531946][ T2891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.576340][ T2891] veth1_macvtap: left promiscuous mode [ 283.581899][ T2891] veth0_macvtap: left promiscuous mode [ 283.596087][ T2891] veth1_vlan: left promiscuous mode [ 283.601447][ T2891] veth0_vlan: left promiscuous mode [ 284.131816][ T2891] team0 (unregistering): Port device team_slave_1 removed [ 284.174456][ T2891] team0 (unregistering): Port device team_slave_0 removed [ 284.559842][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.837719][T13667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.890578][T13667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.913563][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.991568][T13667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.012017][T13667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.162766][T13959] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 285.274327][T13611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.350481][T13967] (unnamed net_device) (uninitialized): peer notification delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 285.466166][T13667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.528241][T13977] lo speed is unknown, defaulting to 1000 [ 285.567348][T13667] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.612432][T13611] veth0_vlan: entered promiscuous mode [ 285.637162][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.644364][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.708837][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.716050][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.794791][T13611] veth1_vlan: entered promiscuous mode [ 285.839353][T13989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.897766][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.939850][T13611] veth0_macvtap: entered promiscuous mode [ 285.980328][T13611] veth1_macvtap: entered promiscuous mode [ 286.020822][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.063592][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.095641][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.106510][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.132899][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.143529][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.155716][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.167240][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.179550][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.191213][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.224241][T13611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.250285][T13977] vcan0 speed is unknown, defaulting to 1000 [ 286.281662][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.314096][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.341358][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.370833][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.389842][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.410739][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.430739][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.444562][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.459826][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.470464][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.507581][T13611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.528130][T13611] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.541107][T13611] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.551418][T13611] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.564767][T13611] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.763902][T13667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.784401][ T5656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.792247][ T5656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.863361][T14016] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.878736][T14016] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 286.889340][ T5656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.922720][ T5656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.017558][T13667] veth0_vlan: entered promiscuous mode [ 287.081341][T13667] veth1_vlan: entered promiscuous mode [ 287.282935][T13667] veth0_macvtap: entered promiscuous mode [ 287.299335][T13667] veth1_macvtap: entered promiscuous mode [ 287.304751][ T5658] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.424834][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.444172][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.457964][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.468758][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.478696][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.489292][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.500709][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.519359][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.530537][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.549422][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.560568][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.581778][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.604830][T13667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.628929][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.643739][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.668850][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.692228][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.702114][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.715431][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.725329][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.736027][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.745868][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.756354][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.766208][T13667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.776669][T13667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.789768][T13667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.851943][T13667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.882895][T13667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.892363][T13667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.922574][T13667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.214416][ T5651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.466243][T14047] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.531709][ T5651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.649479][ T5649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.668272][ T5649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.747618][ T5656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.760209][ T5656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.801599][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.812453][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.821656][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.840875][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.848609][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.856179][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.911000][ T5651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.942433][T14065] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.033585][ T5651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.099598][T14056] lo speed is unknown, defaulting to 1000 [ 289.289893][ T5651] bridge_slave_1: left allmulticast mode [ 289.311322][ T5651] bridge_slave_1: left promiscuous mode [ 289.327732][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.373271][ T5651] bridge_slave_0: left allmulticast mode [ 289.378947][ T5651] bridge_slave_0: left promiscuous mode [ 289.411739][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.190431][ T5651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.221281][ T5651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.238860][ T5651] bond0 (unregistering): Released all slaves [ 290.259668][T14056] vcan0 speed is unknown, defaulting to 1000 [ 290.327338][T14080] lo speed is unknown, defaulting to 1000 [ 290.460762][T14103] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 290.804863][T14080] vcan0 speed is unknown, defaulting to 1000 [ 290.905118][ T5127] Bluetooth: hci1: command tx timeout [ 291.606656][T14143] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.729460][T14147] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 291.748659][ T5651] hsr_slave_0: left promiscuous mode [ 291.757252][ T5651] hsr_slave_1: left promiscuous mode [ 291.770711][ T5651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.781439][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.802093][ T5651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.811496][ T5651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.855390][ T5651] veth1_macvtap: left promiscuous mode [ 291.861058][ T5651] veth0_macvtap: left promiscuous mode [ 291.872872][ T5651] veth1_vlan: left promiscuous mode [ 291.881674][ T5651] veth0_vlan: left promiscuous mode [ 291.884489][T14147] xt_NFQUEUE: number of total queues is 0 [ 292.020221][T14153] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 292.445914][ T5651] team0 (unregistering): Port device team_slave_1 removed [ 292.511581][ T5651] team0 (unregistering): Port device team_slave_0 removed [ 292.985105][ T5127] Bluetooth: hci1: command tx timeout [ 293.032377][T14153] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 293.045562][T14056] chnl_net:caif_netlink_parms(): no params data found [ 293.585730][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.601658][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.609056][T14056] bridge_slave_0: entered allmulticast mode [ 293.616800][T14056] bridge_slave_0: entered promiscuous mode [ 293.646854][T14056] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.654288][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.661570][T14056] bridge_slave_1: entered allmulticast mode [ 293.670250][T14056] bridge_slave_1: entered promiscuous mode [ 293.730446][T14056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.757441][T14056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.827640][T14056] team0: Port device team_slave_0 added [ 293.840054][T14056] team0: Port device team_slave_1 added [ 293.892956][T14056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.900020][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.929486][T14056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.948792][T14056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.956966][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.984184][T14056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.055317][T14056] hsr_slave_0: entered promiscuous mode [ 294.093396][T14056] hsr_slave_1: entered promiscuous mode [ 294.859116][T14234] geneve2: entered promiscuous mode [ 294.896155][T14234] geneve2: entered allmulticast mode [ 294.940645][T14251] xt_NFQUEUE: number of total queues is 0 [ 294.971981][T14243] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 295.002466][T14241] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 295.063116][ T5127] Bluetooth: hci1: command tx timeout [ 295.245252][T14234] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 295.659005][T14279] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 295.775561][T14284] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 296.023030][T14284] xt_NFQUEUE: number of total queues is 0 [ 296.043993][T14056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.065998][T14056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.139315][T14056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.179369][T14056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.207920][T14299] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.260165][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.292755][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.304540][T14306] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.363690][T14056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.420955][T14056] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.443156][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.450290][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.486526][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.493719][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.969984][T14343] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.070901][T14056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.153139][ T5127] Bluetooth: hci1: command tx timeout [ 297.259202][T14056] veth0_vlan: entered promiscuous mode [ 297.287005][T14056] veth1_vlan: entered promiscuous mode [ 297.485135][T14351] macvlan2: entered allmulticast mode [ 297.511477][T14351] team_slave_1: entered promiscuous mode [ 297.518205][T14351] team0: entered allmulticast mode [ 297.543783][T14351] team_slave_1: entered allmulticast mode [ 297.550018][T14351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.601030][T14351] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 297.626002][T14056] veth0_macvtap: entered promiscuous mode [ 297.655844][T14056] veth1_macvtap: entered promiscuous mode [ 297.741227][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.781637][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.793407][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.822746][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.833983][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.851130][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.867928][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.878538][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.888830][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.909004][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.922415][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.941532][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.956631][T14056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.980490][T14382] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 298.010394][T14382] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 298.047998][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.069247][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.080234][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.090851][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.101069][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.113043][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.125099][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.136341][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.146298][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.157931][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.167772][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.179020][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.192945][T14056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.215513][T14382] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 298.224179][T14382] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 298.260443][T14056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.283514][T14056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.292236][T14056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.304053][T14056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.487193][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.513182][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.589271][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.605028][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.801544][T14417] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.835190][T14419] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.983124][ T5112] Bluetooth: hci2: command 0x0405 tx timeout [ 299.056150][T14433] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 299.282218][T14448] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.402773][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.844498][T14486] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 299.994647][T14496] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 300.010262][T14496] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 300.063293][T14490] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 300.071399][T14490] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 300.089053][T14499] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.288866][T14510] macvlan2: entered allmulticast mode [ 300.301908][T14510] team_slave_0: entered promiscuous mode [ 300.307662][T14510] team_slave_1: entered promiscuous mode [ 300.322152][T14510] team0: entered allmulticast mode [ 300.328771][T14510] team_slave_0: entered allmulticast mode [ 300.334798][T14510] team_slave_1: entered allmulticast mode [ 300.344524][T14510] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.354544][T14510] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 300.461948][T14519] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 300.471882][T14521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.142761][ T5112] Bluetooth: hci3: command 0x0405 tx timeout [ 301.490760][ T5649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.526910][T14558] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 301.858566][T14571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.885615][T14576] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.191529][T14585] geneve2: entered promiscuous mode [ 302.203152][T14585] geneve2: entered allmulticast mode [ 302.217710][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.228168][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.236512][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.247366][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.255261][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 302.264487][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.324056][T14587] lo speed is unknown, defaulting to 1000 [ 302.431137][ T5649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.606075][ T5649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.646434][T14587] vcan0 speed is unknown, defaulting to 1000 [ 302.790627][ T5649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.048565][ T5649] bridge_slave_1: left allmulticast mode [ 303.056305][ T5649] bridge_slave_1: left promiscuous mode [ 303.062130][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.078965][ T5649] bridge_slave_0: left allmulticast mode [ 303.086164][ T5649] bridge_slave_0: left promiscuous mode [ 303.110670][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.970560][ T5649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.986226][ T5649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.010141][ T5649] bond0 (unregistering): Released all slaves [ 304.205706][T14620] syz-executor.4[14620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.205949][T14620] syz-executor.4[14620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.347135][ T5116] Bluetooth: hci1: command tx timeout [ 304.765794][T14587] chnl_net:caif_netlink_parms(): no params data found [ 304.986013][T14667] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.301206][ T5649] hsr_slave_0: left promiscuous mode [ 305.338085][ T5649] hsr_slave_1: left promiscuous mode [ 305.360816][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.372674][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.382072][ T5649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.399885][ T5649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.446288][ T5649] veth1_macvtap: left promiscuous mode [ 305.451888][ T5649] veth0_macvtap: left promiscuous mode [ 305.457640][ T5649] veth1_vlan: left promiscuous mode [ 305.463597][ T5649] veth0_vlan: left promiscuous mode [ 306.012999][ T5649] team0 (unregistering): Port device team_slave_1 removed [ 306.055351][ T5649] team0 (unregistering): Port device team_slave_0 removed [ 306.422767][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 306.477159][T14684] ip6tnl1: entered promiscuous mode [ 306.482469][T14684] ip6tnl1: entered allmulticast mode [ 306.490250][T14695] validate_nla: 1 callbacks suppressed [ 306.490261][T14695] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 306.582660][T14587] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.592476][T14587] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.603152][T14703] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 306.611249][T14703] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 306.611361][T14587] bridge_slave_0: entered allmulticast mode [ 306.654042][T14587] bridge_slave_0: entered promiscuous mode [ 306.660627][T14703] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 306.688665][T14587] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.692613][T14703] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 306.722642][T14703] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 306.724756][T14587] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.741758][T14703] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.763563][T14587] bridge_slave_1: entered allmulticast mode [ 306.771284][T14587] bridge_slave_1: entered promiscuous mode [ 306.939636][T14587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.003500][T14587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.168133][T14587] team0: Port device team_slave_0 added [ 307.204026][T14587] team0: Port device team_slave_1 added [ 307.306231][T14587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.324612][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.360677][T14587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.389893][T14587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.411476][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.445498][T14587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.564439][T14587] hsr_slave_0: entered promiscuous mode [ 307.589853][T14587] hsr_slave_1: entered promiscuous mode [ 307.797551][T14770] syz-executor.4[14770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.797695][T14770] syz-executor.4[14770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.998329][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.383271][ T9758] bond0: (slave syz_tun): Releasing backup interface [ 308.484837][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.503839][ T5112] Bluetooth: hci1: command 0x041b tx timeout [ 308.510732][T14798] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 308.543536][T14798] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 308.598090][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.634569][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.643281][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.655188][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.666813][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.674583][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.343848][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.353739][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.362481][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.372112][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.383443][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.390773][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.592744][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 310.742792][ T5116] Bluetooth: hci2: command tx timeout [ 312.422708][ T5116] Bluetooth: hci4: command tx timeout [ 312.662717][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 312.822833][ T5116] Bluetooth: hci2: command tx timeout [ 314.502730][ T5116] Bluetooth: hci4: command tx timeout [ 314.902743][ T5116] Bluetooth: hci2: command tx timeout [ 316.582817][ T5116] Bluetooth: hci4: command tx timeout [ 316.982784][ T5116] Bluetooth: hci2: command tx timeout [ 317.385835][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.663959][ T5116] Bluetooth: hci4: command tx timeout [ 318.683923][ T5651] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.791448][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.800395][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.809977][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.828509][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.840854][ T5112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.849361][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.338117][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.355086][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.363564][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.371574][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.379823][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.387607][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.912696][ T5116] Bluetooth: hci5: command tx timeout [ 341.462728][ T5116] Bluetooth: hci6: command tx timeout [ 342.983738][ T5112] Bluetooth: hci5: command tx timeout [ 343.542621][ T5116] Bluetooth: hci6: command tx timeout [ 345.066118][ T5116] Bluetooth: hci5: command tx timeout [ 345.622699][ T5116] Bluetooth: hci6: command tx timeout [ 347.152731][ T5116] Bluetooth: hci5: command tx timeout [ 347.712820][ T5116] Bluetooth: hci6: command tx timeout [ 350.673940][ T5651] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 367.001598][ T5112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.011312][ T5112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.019607][ T5112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.028905][ T5112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.036811][ T5112] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 367.047906][ T5112] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.072889][ T5116] Bluetooth: hci7: command tx timeout [ 371.152641][ T5116] Bluetooth: hci7: command tx timeout [ 373.222941][ T5116] Bluetooth: hci7: command tx timeout [ 373.247092][ T5112] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.256112][ T5112] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.266314][ T5112] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.276460][ T5112] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.285402][ T5112] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 373.293086][ T5112] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 375.259604][ T5112] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 375.274994][ T5112] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 375.288553][ T5112] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 375.299620][ T5112] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 375.307027][ T5112] Bluetooth: hci7: command tx timeout [ 375.313317][ T5112] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 375.321851][ T5112] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 375.382856][ T5116] Bluetooth: hci8: command tx timeout [ 377.382869][ T5116] Bluetooth: hci9: command tx timeout [ 377.462806][ T5116] Bluetooth: hci8: command tx timeout [ 378.825885][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.470946][ T5116] Bluetooth: hci9: command tx timeout [ 379.542769][ T5116] Bluetooth: hci8: command tx timeout [ 381.542757][ T5116] Bluetooth: hci9: command tx timeout [ 381.623058][ T5116] Bluetooth: hci8: command tx timeout [ 382.663041][ T5656] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.622806][ T5116] Bluetooth: hci9: command tx timeout [ 403.803364][ T5112] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 403.813504][ T5112] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 403.821402][ T5112] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 403.831913][ T5112] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 403.843246][ T5112] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 403.851543][ T5112] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 404.341277][ T5112] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 404.351584][ T5112] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 404.360832][ T5112] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 404.373651][ T5112] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 404.382171][ T5112] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 404.390795][ T5112] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 405.948282][ T5112] Bluetooth: hci10: command tx timeout [ 406.422784][ T5112] Bluetooth: hci11: command tx timeout [ 408.022648][ T5112] Bluetooth: hci10: command tx timeout [ 408.502674][ T5112] Bluetooth: hci11: command tx timeout [ 410.102744][ T5112] Bluetooth: hci10: command tx timeout [ 410.582691][ T5112] Bluetooth: hci11: command tx timeout [ 412.182750][ T5112] Bluetooth: hci10: command tx timeout [ 412.665174][ T5112] Bluetooth: hci11: command tx timeout [ 414.671484][ T5658] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 426.982827][ T5116] Bluetooth: hci3: command 0x0405 tx timeout [ 432.102738][ T5127] Bluetooth: hci1: command 0x041b tx timeout [ 432.108809][ T5127] Bluetooth: hci2: command 0x0406 tx timeout [ 432.179902][T14868] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 432.193457][T14868] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 432.201695][T14868] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 432.211155][T14868] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 432.220110][T14868] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 432.227619][T14868] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 434.262797][T14868] Bluetooth: hci12: command tx timeout [ 436.342723][T14868] Bluetooth: hci12: command tx timeout [ 437.222677][T14868] Bluetooth: hci4: command 0x0406 tx timeout [ 438.303455][T14868] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 438.313134][T14868] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 438.321812][T14868] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 438.330102][T14868] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 438.339283][T14868] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 438.347236][T14868] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 438.422807][T14868] Bluetooth: hci12: command tx timeout [ 440.247078][T14877] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 440.261608][T14877] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 440.275028][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.284651][T14877] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 440.300796][T14877] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 440.309331][T14877] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 440.317383][T14877] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 440.422732][T14868] Bluetooth: hci13: command tx timeout [ 440.502639][T14868] Bluetooth: hci12: command tx timeout [ 442.432822][T14868] Bluetooth: hci14: command tx timeout [ 442.502809][T14868] Bluetooth: hci13: command tx timeout [ 444.512761][T14868] Bluetooth: hci14: command tx timeout [ 444.592681][T14868] Bluetooth: hci13: command tx timeout [ 446.582884][T14868] Bluetooth: hci14: command tx timeout [ 446.662864][T14877] Bluetooth: hci13: command tx timeout [ 446.662897][T14875] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.662728][T14877] Bluetooth: hci14: command tx timeout [ 462.828144][T14868] Bluetooth: hci6: command 0x0406 tx timeout [ 462.833168][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 464.582915][ T30] INFO: task kworker/0:7:5163 blocked for more than 143 seconds. [ 464.590681][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 464.609054][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.620049][ T30] task:kworker/0:7 state:D stack:22896 pid:5163 tgid:5163 ppid:2 flags:0x00004000 2024/06/20 11:59:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 464.638457][ T30] Workqueue: events linkwatch_event [ 464.647867][ T30] Call Trace: [ 464.651699][ T30] [ 464.663640][ T30] __schedule+0x17e8/0x4a20 [ 464.668203][ T30] ? __pfx___schedule+0x10/0x10 [ 464.681387][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.687559][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.693020][ T30] ? kick_pool+0x1bd/0x620 [ 464.697458][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.710431][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 464.715977][ T30] ? schedule+0x90/0x320 [ 464.720251][ T30] schedule+0x14b/0x320 [ 464.732567][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.738047][ T30] __mutex_lock+0x6a4/0xd70 [ 464.762257][ T30] ? __mutex_lock+0x527/0xd70 [ 464.768249][ T30] ? linkwatch_event+0xe/0x60 [ 464.780708][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.786802][ T30] ? process_scheduled_works+0x945/0x1830 [ 464.800445][ T30] linkwatch_event+0xe/0x60 [ 464.805118][ T30] process_scheduled_works+0xa2c/0x1830 [ 464.810709][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.816970][ T30] ? assign_work+0x364/0x3d0 [ 464.821577][ T30] worker_thread+0x86d/0xd70 [ 464.832624][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 464.838549][ T30] ? __kthread_parkme+0x169/0x1d0 [ 464.854588][ T30] ? __pfx_worker_thread+0x10/0x10 [ 464.860247][ T30] kthread+0x2f0/0x390 [ 464.875748][ T30] ? __pfx_worker_thread+0x10/0x10 [ 464.880894][ T30] ? __pfx_kthread+0x10/0x10 [ 464.891151][ T30] ret_from_fork+0x4b/0x80 [ 464.896637][ T30] ? __pfx_kthread+0x10/0x10 [ 464.901243][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.915395][ T30] [ 464.918516][ T30] INFO: task syz-executor.3:13338 blocked for more than 143 seconds. [ 464.927812][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 464.942680][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.951371][ T30] task:syz-executor.3 state:D stack:19952 pid:13338 tgid:13338 ppid:1 flags:0x00004006 [ 464.971197][ T30] Call Trace: [ 464.976410][ T30] [ 464.979373][ T30] __schedule+0x17e8/0x4a20 [ 464.993786][ T30] ? __pfx___schedule+0x10/0x10 [ 464.998696][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.012619][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 465.018127][ T30] ? schedule+0x90/0x320 [ 465.022379][ T30] schedule+0x14b/0x320 [ 465.032653][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.038139][ T30] __mutex_lock+0x6a4/0xd70 [ 465.050339][ T30] ? __mutex_lock+0x527/0xd70 [ 465.055153][ T30] ? tun_chr_close+0x3e/0x1b0 [ 465.059844][ T30] ? __pfx___mutex_lock+0x10/0x10 [