last executing test programs: 43.158012366s ago: executing program 4: ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20181, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000003c0)={0x0, 0x4a00}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 42.195818676s ago: executing program 4: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r0) 42.038356076s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 41.653564854s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3fc, 0x4, 0x25}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 41.470288565s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) 41.436269626s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008088100b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 41.24622504s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x4, 0x9, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r4, 0x40000000000001, {0x0, 0x0, 0x4}}, 0x18) 41.145345886s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 41.031012674s ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@abs, 0x20000000) 41.001546507s ago: executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x2, 0x840, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "20a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1e0e797322f4ae4c8dc89cf2b1440000000000000e79f00"}}, 0x80}}, 0x800) 40.999467745s ago: executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}, 0x0) close(r0) 40.972037595s ago: executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x100) 40.848260786s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028008000640000000020c000180080001400000000005000500020000000500010006000000766c7bfe206d913187b9d38493b6ccdb73a54392e06635cfd374f37a5bd17a0c5b586bef0461304e5c7b2b155c57fb798f3aa8c28683cdde22ab4f9e53946c85fbc4577ca5af88550c1bd90044447b0313b3301210065547"], 0x68}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x1, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x60000081}, 0x0) 40.832583967s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3fc, 0x4, 0x25}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 40.710891513s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x15}, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) 40.054926071s ago: executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r0, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 38.872276299s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="74e1dd1e86b1cc9f53b00000000000000000240012800bdcbcd68c656e657665000014000280050009000000000005000a0000000000"], 0x44}}, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000810000000000000000000000000000000300000000030005000000000002000000ac1414000000000000000000"], 0x50}, 0x1, 0x7}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}, 0x0) close(r3) 38.395581957s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x4, 0x9, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r3, 0x40000000000001, {0x0, 0x0, 0x4}}, 0x18) 38.224222153s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000180)=0x100003, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 38.099281162s ago: executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 31.227362562s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 30.249675457s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)={0x168, 0x3f, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="f6712bf43509293d5035d6d6476bd2b0996dc3bc315dfe46fbdb6aca7848f20f090a89ae647d9b331bcc52bd544cce677458fadd3836906ed701113752028ce1e57fd7512ea65e8339582d6a43fef75dd7e701030455586c0ffbe5d8bcefcec3e3e8dba890322de00efbb0c7bdfca1395003c7c08fcb43b33e3743cd568b3862d68080e857b67a287d14ba317181d2c8141bc98f011e9ab18d8e4d2dbd765cdee0c673b6f17f9f2f57feb5957f25135d1c19e6bd38ade5a289e337d2225c56538b2a2484dbcb46d2656321d1", @nested={0x64, 0x2f, 0x0, 0x1, [@typed={0x5d, 0x5c, 0x0, 0x0, @binary="a6b83dabec85c2e885f11947586669a885580586ee7476ec0ca41c7ee8ff02043e2c311c52d1c19de27dfa7607802642aebec1f9c4122f1cb848d9457b8e48314d3b5e4e0ea548deca0ad54793ce681bafffad53e9e80a1c2a"}]}, @typed={0x8, 0x82, 0x0, 0x0, @u32=0x20}, @generic="87bfc66d563b4e12c5e8753c7e053b76b39fa5c677b6cacb3dbcb83ae8b0"]}, 0x168}, {&(0x7f0000000140)={0x24, 0x28, 0x100, 0x70bd26, 0x25dfdbfe, "", [@nested={0x14, 0x103, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}]}]}, 0x24}, {&(0x7f0000000580)={0x80, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x70, 0x0, 0x0, 0x1, [@typed={0x6b, 0x12f, 0x0, 0x0, @binary="463fa8eff3680010a01e960a11c6f8c3e32b2d22ce12721f2affc51c5226889a712e0e46d882df733ff1ddce04feef042b24719d209e49297f76cc07d7b1e652393c5061234a93dc107d4d4411c6cc789b4560818552dcad5490e803bd8c11255a30ba25d5ecc8"}]}]}, 0x80}], 0x3, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) nanosleep(&(0x7f00000003c0), 0x0) 30.191962657s ago: executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x2, 0x840, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "20a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1e0e797322f4ae4c8dc89cf2b1440000000000000e79f00"}}, 0x80}}, 0x800) 30.128517937s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028008000640000000020c000180080001400000000005000500020000000500010006000000766c7bfe206d913187b9d38493b6ccdb73a54392e06635cfd374f37a5bd17a0c5b586bef0461304e5c7b2b155c57fb798f3aa8c28683cdde22ab4f9e53946c85fbc4577ca5af88550c1bd90044447b0313b3301210065547"], 0x68}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x1, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x60000081}, 0x0) 30.054644646s ago: executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) socket(0x11, 0x800000003, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed}, 0xe) getpeername(0xffffffffffffffff, 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000040), 0x8) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$bt_sco(r6, &(0x7f00000001c0)={0x1f, @none}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x3c0, 0x0, 0x270, 0xffffffff, 0x1c8, 0x270, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0xae01, 0xd8, 0x110, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @loopback, @icmp_id, @icmp_id}}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'bridge0\x00', 'ipvlan0\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0xff00, {0x0, @multicast1, @multicast1, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'caif0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0xfc}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x200, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) close(r0) 10.798867384s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)="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", 0x13f}, {&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000440)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086d191c0a8f23acdeb928805cae14ca8aec1241e536cdb42ef1675f8b948568fe6229a3bb6b7fbf033", 0x96}, {&(0x7f0000000800)="560e784a5947b90900000000000000d4f4adc887d8a4c55ae9e6", 0x1a}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) 10.672635983s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 8.832975324s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x4, 0x9, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r3, 0x40000000000001, {0x0, 0x0, 0x4}}, 0x18) 8.048424984s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000001c0), 0x10000200, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000340)={0x0, &(0x7f0000000840)=""/22, &(0x7f0000000880), &(0x7f0000000240), 0x8, r0}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. 2024/05/28 02:14:52 fuzzer started 2024/05/28 02:14:52 dialing manager at 10.128.0.169:30018 [ 73.835903][ T5096] cgroup: Unknown subsys name 'net' [ 74.031539][ T5096] cgroup: Unknown subsys name 'rlimit' 2024/05/28 02:14:54 starting 5 executor processes [ 75.530215][ T5101] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.503638][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.521494][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.542899][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.551618][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.564911][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.565454][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.572608][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.581497][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.587829][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.595412][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.602366][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.609466][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.615369][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.622539][ T5129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.630434][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.645083][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.646062][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.653084][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.660218][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.674717][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.682300][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.689872][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.697327][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.706308][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.707240][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.722385][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.722713][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.737570][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.745615][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.753601][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.268546][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 77.418920][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 77.607562][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 77.622642][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 77.645264][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.653585][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.661935][ T5121] bridge_slave_0: entered allmulticast mode [ 77.671284][ T5121] bridge_slave_0: entered promiscuous mode [ 77.710223][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.717602][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.725135][ T5121] bridge_slave_1: entered allmulticast mode [ 77.733489][ T5121] bridge_slave_1: entered promiscuous mode [ 77.795605][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 77.891618][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.905404][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.927516][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.935116][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.942530][ T5124] bridge_slave_0: entered allmulticast mode [ 77.950156][ T5124] bridge_slave_0: entered promiscuous mode [ 77.993284][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.000561][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.007919][ T5124] bridge_slave_1: entered allmulticast mode [ 78.015921][ T5124] bridge_slave_1: entered promiscuous mode [ 78.076055][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.083644][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.091699][ T5118] bridge_slave_0: entered allmulticast mode [ 78.098857][ T5118] bridge_slave_0: entered promiscuous mode [ 78.107514][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.114903][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.122740][ T5118] bridge_slave_1: entered allmulticast mode [ 78.130197][ T5118] bridge_slave_1: entered promiscuous mode [ 78.180266][ T5121] team0: Port device team_slave_0 added [ 78.226814][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.234817][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.242799][ T5115] bridge_slave_0: entered allmulticast mode [ 78.251058][ T5115] bridge_slave_0: entered promiscuous mode [ 78.262321][ T5121] team0: Port device team_slave_1 added [ 78.269725][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.277011][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.284355][ T5113] bridge_slave_0: entered allmulticast mode [ 78.291553][ T5113] bridge_slave_0: entered promiscuous mode [ 78.322786][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.335957][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.345658][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.353276][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.360883][ T5115] bridge_slave_1: entered allmulticast mode [ 78.368030][ T5115] bridge_slave_1: entered promiscuous mode [ 78.398213][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.406257][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.413686][ T5113] bridge_slave_1: entered allmulticast mode [ 78.421308][ T5113] bridge_slave_1: entered promiscuous mode [ 78.431645][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.445944][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.557000][ T5118] team0: Port device team_slave_0 added [ 78.567175][ T5124] team0: Port device team_slave_0 added [ 78.579119][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.593377][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.603741][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.610943][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.637147][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.664729][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.676070][ T5118] team0: Port device team_slave_1 added [ 78.687969][ T5124] team0: Port device team_slave_1 added [ 78.700319][ T5129] Bluetooth: hci0: command tx timeout [ 78.736601][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.743949][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.771248][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.782688][ T5129] Bluetooth: hci1: command tx timeout [ 78.782713][ T5119] Bluetooth: hci3: command tx timeout [ 78.789047][ T5119] Bluetooth: hci4: command tx timeout [ 78.794803][ T5129] Bluetooth: hci2: command tx timeout [ 78.813506][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.854874][ T5115] team0: Port device team_slave_0 added [ 78.907206][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.914429][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.942083][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.959386][ T5115] team0: Port device team_slave_1 added [ 78.993715][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.001533][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.028520][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.041654][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.049081][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.075915][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.107419][ T5121] hsr_slave_0: entered promiscuous mode [ 79.114410][ T5121] hsr_slave_1: entered promiscuous mode [ 79.126587][ T5113] team0: Port device team_slave_0 added [ 79.136507][ T5113] team0: Port device team_slave_1 added [ 79.143833][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.151571][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.177856][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.256573][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.263837][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.291093][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.307008][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.315192][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.341985][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.380864][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.387972][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.414458][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.446851][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.454264][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.481499][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.570508][ T5124] hsr_slave_0: entered promiscuous mode [ 79.577317][ T5124] hsr_slave_1: entered promiscuous mode [ 79.584853][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.593241][ T5124] Cannot create hsr debugfs directory [ 79.652151][ T5118] hsr_slave_0: entered promiscuous mode [ 79.658749][ T5118] hsr_slave_1: entered promiscuous mode [ 79.665963][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.674010][ T5118] Cannot create hsr debugfs directory [ 79.725906][ T5113] hsr_slave_0: entered promiscuous mode [ 79.732994][ T5113] hsr_slave_1: entered promiscuous mode [ 79.740351][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.748233][ T5113] Cannot create hsr debugfs directory [ 79.862798][ T5115] hsr_slave_0: entered promiscuous mode [ 79.870773][ T5115] hsr_slave_1: entered promiscuous mode [ 79.877334][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.885131][ T5115] Cannot create hsr debugfs directory [ 80.317588][ T5121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.336319][ T5121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.348069][ T5121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.359106][ T5121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.442949][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.459590][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.473187][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.493593][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.590325][ T5118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.603683][ T5118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.614817][ T5118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.625895][ T5118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.770139][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.780566][ T5129] Bluetooth: hci0: command tx timeout [ 80.795466][ T5115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.807721][ T5115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.836902][ T5115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.851409][ T5115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.859616][ T5129] Bluetooth: hci2: command tx timeout [ 80.869317][ T5129] Bluetooth: hci4: command tx timeout [ 80.869513][ T5130] Bluetooth: hci3: command tx timeout [ 80.880994][ T5119] Bluetooth: hci1: command tx timeout [ 80.950754][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.986004][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.002333][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.032241][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.039716][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.051209][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.058394][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.081448][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.094124][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.164935][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.281878][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.296413][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.373461][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380683][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.399924][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.407207][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.432977][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.452271][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.525117][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.532471][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.551351][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.558482][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.694594][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.714177][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.782790][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.790138][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.806073][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.835105][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.842329][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.863654][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.922309][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.929673][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.990839][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.998053][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.164907][ T5121] veth0_vlan: entered promiscuous mode [ 82.267053][ T5121] veth1_vlan: entered promiscuous mode [ 82.417316][ T5121] veth0_macvtap: entered promiscuous mode [ 82.475153][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.492926][ T5121] veth1_macvtap: entered promiscuous mode [ 82.534338][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.662533][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.745631][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.777462][ T5115] veth0_vlan: entered promiscuous mode [ 82.815254][ T5121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829782][ T5121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.846786][ T5121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.856481][ T5121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.865350][ T5119] Bluetooth: hci0: command tx timeout [ 82.940056][ T5119] Bluetooth: hci4: command tx timeout [ 82.945578][ T5119] Bluetooth: hci2: command tx timeout [ 82.948487][ T5124] veth0_vlan: entered promiscuous mode [ 82.953188][ T5130] Bluetooth: hci1: command tx timeout [ 82.959920][ T5129] Bluetooth: hci3: command tx timeout [ 82.981233][ T5115] veth1_vlan: entered promiscuous mode [ 83.082365][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.116161][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.128570][ T5124] veth1_vlan: entered promiscuous mode [ 83.203949][ T5115] veth0_macvtap: entered promiscuous mode [ 83.294678][ T5115] veth1_macvtap: entered promiscuous mode [ 83.346760][ T5124] veth0_macvtap: entered promiscuous mode [ 83.376035][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.389486][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.414432][ T5124] veth1_macvtap: entered promiscuous mode [ 83.445438][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.458049][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.472242][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.531641][ T5118] veth0_vlan: entered promiscuous mode [ 83.552717][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.568036][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.578555][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.595429][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.607928][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.617992][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.629491][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.641804][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.666695][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.673272][ T5115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.684743][ T5115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.687308][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.695342][ T5115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.714822][ T5115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.730614][ T5118] veth1_vlan: entered promiscuous mode [ 83.738696][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.750354][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.760908][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.772348][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.784808][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.828103][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.838110][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.848045][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.857163][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.162783][ T5113] veth0_vlan: entered promiscuous mode [ 84.182185][ T5118] veth0_macvtap: entered promiscuous mode [ 84.199961][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.208153][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.248517][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.248613][ T5118] veth1_macvtap: entered promiscuous mode [ 84.259417][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.328571][ T5113] veth1_vlan: entered promiscuous mode [ 84.338242][ T5164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.347567][ T5164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.418711][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.430663][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.440582][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.451773][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.462420][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.473034][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.487133][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.507555][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.526620][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.537240][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.557157][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.581856][ T5205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.589316][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.605653][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.617099][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.654754][ T930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.661099][ T5113] veth0_macvtap: entered promiscuous mode [ 84.679603][ T930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.741193][ T5113] veth1_macvtap: entered promiscuous mode [ 84.822967][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.872345][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.928909][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.937706][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.949339][ T5117] Bluetooth: hci0: command tx timeout [ 85.019330][ T5117] Bluetooth: hci1: command tx timeout [ 85.020347][ T5129] Bluetooth: hci2: command tx timeout [ 85.024824][ T5130] Bluetooth: hci4: command tx timeout [ 85.031482][ T5129] Bluetooth: hci3: command tx timeout [ 85.116912][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.154711][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.166196][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.178401][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.201707][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.212974][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.223082][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.233789][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.247962][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.335683][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.349974][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.360116][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.371543][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.383844][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.395223][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.406464][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.417933][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.431665][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.474885][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.487798][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.497955][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.507729][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.546322][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.567467][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.636124][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.667304][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.689997][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.050326][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.081767][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.244464][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.279491][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.392773][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.433297][ T5259] team0: Port device bond0 added [ 86.479404][ T5259] syz-executor.3 (5259) used greatest stack depth: 19280 bytes left [ 87.440613][ T5294] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.469264][ T5294] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 87.477674][ T5294] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.577037][ T29] audit: type=1804 audit(1716862506.920:2): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4275942855/syzkaller.khWvfb/4/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 87.728476][ T5306] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 87.868608][ T5306] syz-executor.2 (5306) used greatest stack depth: 19192 bytes left [ 88.147247][ T5320] Zero length message leads to an empty skb [ 88.482814][ T5337] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.502302][ T5337] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 88.522083][ T5337] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.753973][ T5344] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 88.823243][ T5346] vlan2: entered promiscuous mode [ 88.846847][ T5346] team0: entered promiscuous mode [ 88.856873][ T5346] team_slave_0: entered promiscuous mode [ 88.870208][ T5346] team_slave_1: entered promiscuous mode [ 88.882783][ T5346] vlan2: entered allmulticast mode [ 88.890396][ T5346] team0: entered allmulticast mode [ 88.895989][ T5346] team_slave_0: entered allmulticast mode [ 88.902946][ T5346] team_slave_1: entered allmulticast mode [ 89.186695][ T5362] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.337839][ T5368] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.351398][ T5368] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 89.365747][ T5368] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.154113][ T29] audit: type=1804 audit(1716862509.490:3): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4275942855/syzkaller.khWvfb/11/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 90.247851][ T5397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.771550][ T29] audit: type=1804 audit(1716862510.120:4): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4275942855/syzkaller.khWvfb/13/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 90.963606][ T5418] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 91.021390][ T5420] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.050092][ T5420] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 91.070874][ T5420] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.122656][ T5418] syz-executor.0 (5418) used greatest stack depth: 18872 bytes left [ 91.394363][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.466890][ T5431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.920585][ T5452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.246879][ T1059] cfg80211: failed to load regulatory.db [ 92.314510][ T5464] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 92.630430][ T5473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.919780][ T5478] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.962344][ T5482] delete_channel: no stack [ 93.147162][ T5495] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 93.752966][ T5522] vlan2: entered promiscuous mode [ 93.765718][ T5522] team0: entered promiscuous mode [ 93.774417][ T5522] team_slave_0: entered promiscuous mode [ 93.788599][ T5522] team_slave_1: entered promiscuous mode [ 93.801186][ T5522] vlan2: entered allmulticast mode [ 93.812137][ T5522] team0: entered allmulticast mode [ 93.823095][ T5522] team_slave_0: entered allmulticast mode [ 93.836196][ T5522] team_slave_1: entered allmulticast mode [ 93.948285][ T5527] bridge1: entered promiscuous mode [ 93.956137][ T5527] bridge1: entered allmulticast mode [ 94.809119][ T5559] vlan2: entered promiscuous mode [ 94.821120][ T5559] team0: entered promiscuous mode [ 94.835729][ T5559] team_slave_0: entered promiscuous mode [ 94.842872][ T5559] team_slave_1: entered promiscuous mode [ 94.849381][ T5559] vlan2: entered allmulticast mode [ 94.854778][ T5559] team0: entered allmulticast mode [ 94.861715][ T5559] team_slave_0: entered allmulticast mode [ 94.867737][ T5559] team_slave_1: entered allmulticast mode [ 95.800422][ T5591] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.838254][ T5597] vlan2: entered promiscuous mode [ 95.856252][ T5597] team0: entered promiscuous mode [ 95.868220][ T5597] team_slave_0: entered promiscuous mode [ 95.876740][ T5597] team_slave_1: entered promiscuous mode [ 95.886697][ T5597] vlan2: entered allmulticast mode [ 95.893530][ T5597] team0: entered allmulticast mode [ 95.913063][ T5597] team_slave_0: entered allmulticast mode [ 95.927404][ T5597] team_slave_1: entered allmulticast mode [ 96.771661][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.812597][ T5634] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.833093][ T5634] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.856945][ T5634] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.881815][ T5634] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 96.906332][ T5634] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.934546][ T5634] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.953114][ T5634] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.967809][ T5634] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 96.983030][ T5634] geneve2: entered promiscuous mode [ 96.993118][ T5634] geneve2: entered allmulticast mode [ 97.155812][ T5640] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.476116][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.493677][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.581190][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.609533][ T5664] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.618492][ T5664] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.629000][ T5664] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.638595][ T5664] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.649141][ T5664] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.665320][ T5664] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.677241][ T5664] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.696873][ T5664] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.706549][ T5664] geneve2: entered promiscuous mode [ 97.715513][ T5664] geneve2: entered allmulticast mode [ 97.727236][ T5663] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.737187][ T5663] 0ªX¹¦D: renamed from gretap0 (while UP) [ 97.765292][ T5663] 0ªX¹¦D: entered allmulticast mode [ 97.794971][ T5663] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 98.631602][ T5704] ebt_among: dst integrity fail: 200 [ 98.916715][ T5715] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 99.122674][ T5725] veth0_macvtap: left promiscuous mode [ 99.248642][ T5732] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.272985][ T5732] 0ªX¹¦D: renamed from gretap0 (while UP) [ 99.292409][ T5732] 0ªX¹¦D: entered allmulticast mode [ 99.310744][ T5732] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 99.461120][ T5736] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.502759][ T5736] 0ªX¹¦D: renamed from gretap0 (while UP) [ 99.543885][ T5736] 0ªX¹¦D: entered allmulticast mode [ 99.550273][ T5736] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 99.580786][ T5117] Bluetooth: hci4: command 0x0405 tx timeout [ 99.761425][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888024241800: rx timeout, send abort [ 100.117577][ T5769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.271052][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888024241800: abort rx timeout. Force session deactivation [ 100.286505][ T5778] tc_dump_action: action bad kind [ 100.388113][ T5784] ieee802154 phy0 wpan0: encryption failed: -90 [ 100.422018][ T5781] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.439248][ T5781] 1ªX¹¦D: renamed from 10ªX¹¦D (while UP) [ 100.466832][ T5781] A link change request failed with some changes committed already. Interface 11ªX¹¦D may have been left with an inconsistent configuration, please check. [ 100.533360][ T5790] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.552048][ T5790] 0ªX¹¦À: renamed from caif0 [ 100.564998][ T5790] 0ªX¹¦À: entered allmulticast mode [ 100.570694][ T5790] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.653677][ T5791] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.668280][ T5791] 1ªX¹¦D: renamed from 10ªX¹¦D (while UP) [ 100.694660][ T5791] A link change request failed with some changes committed already. Interface 11ªX¹¦D may have been left with an inconsistent configuration, please check. [ 100.730928][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888024241400: rx timeout, send abort [ 100.951305][ T5804] geneve1: entered promiscuous mode [ 100.972513][ T5804] geneve1: entered allmulticast mode [ 101.056306][ T5804] team0: Port device geneve1 added [ 101.120956][ T5809] veth0_macvtap: left promiscuous mode [ 101.239496][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888024241400: abort rx timeout. Force session deactivation [ 101.668167][ T5117] Bluetooth: hci4: command 0x0405 tx timeout [ 101.744987][ T5841] syz-executor.1[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.745170][ T5841] syz-executor.1[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.764352][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ef47c00: rx timeout, send abort [ 101.819615][ T5841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.835064][ T5841] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.284503][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ef47c00: abort rx timeout. Force session deactivation [ 102.556872][ T5866] tc_dump_action: action bad kind [ 102.730151][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ef47000: rx timeout, send abort [ 102.965906][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 103.239707][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ef47000: abort rx timeout. Force session deactivation [ 103.518433][ T5904] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.627566][ T5909] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.656107][ T5909] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 103.681977][ T5909] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.832176][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.853886][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.867519][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.908447][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.939088][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.960104][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.989710][ T5923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 104.748082][ T5957] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.766322][ T5955] vlan3: entered promiscuous mode [ 104.772615][ T5955] bond0: entered promiscuous mode [ 104.777710][ T5955] bond_slave_0: entered promiscuous mode [ 104.784186][ T5957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 104.800519][ T5957] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.816155][ T5955] bond_slave_1: entered promiscuous mode [ 104.824915][ T5955] vlan3: entered allmulticast mode [ 104.838601][ T5955] bond0: entered allmulticast mode [ 104.845365][ T5955] bond_slave_0: entered allmulticast mode [ 104.855308][ T5955] bond_slave_1: entered allmulticast mode [ 105.290931][ T5978] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 105.323129][ T5978] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.747829][ T5998] syz_tun: entered promiscuous mode [ 105.754632][ T5998] macsec1: entered promiscuous mode [ 105.773637][ T5998] macsec1: entered allmulticast mode [ 105.792863][ T5998] syz_tun: entered allmulticast mode [ 105.884189][ T6000] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.142115][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.151406][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.159837][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.168009][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.184823][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.193533][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.202935][ T6017] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.231092][ T6019] tipc: Can't bind to reserved service type 0 [ 106.282307][ T6017] Bluetooth: MGMT ver 1.22 [ 106.395893][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.585770][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.705807][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.764069][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.834273][ T6036] ip6gretap0: entered promiscuous mode [ 106.861899][ T6036] batadv_slave_0: entered promiscuous mode [ 106.936172][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.058347][ T6039] syz_tun: entered promiscuous mode [ 107.066319][ T6039] macsec1: entered promiscuous mode [ 107.076420][ T6039] macsec1: entered allmulticast mode [ 107.085418][ T6039] syz_tun: entered allmulticast mode [ 107.254629][ T6041] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.291705][ T12] bridge_slave_1: left allmulticast mode [ 107.314224][ T12] bridge_slave_1: left promiscuous mode [ 107.323435][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.390985][ T12] bridge_slave_0: left allmulticast mode [ 107.413054][ T12] bridge_slave_0: left promiscuous mode [ 107.431558][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.742812][ T6069] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 107.871790][ T12] team0: Port device geneve1 removed [ 108.063199][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.091290][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.106097][ T12] bond0 (unregistering): Released all slaves [ 108.126095][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 108.299782][ T5117] Bluetooth: hci2: command tx timeout [ 108.378994][ T5117] Bluetooth: hci0: command 0x0401 tx timeout [ 108.382455][ T5129] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 108.677397][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.706936][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.731294][ T6014] bridge_slave_0: entered allmulticast mode [ 108.742427][ T6014] bridge_slave_0: entered promiscuous mode [ 108.766580][ T6089] __nla_validate_parse: 4 callbacks suppressed [ 108.766604][ T6089] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.780785][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.799071][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.806429][ T6014] bridge_slave_1: entered allmulticast mode [ 108.841080][ T6014] bridge_slave_1: entered promiscuous mode [ 108.974218][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.081570][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.121607][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.148096][ T6107] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 109.207099][ T12] hsr_slave_0: left promiscuous mode [ 109.219875][ T12] hsr_slave_1: left promiscuous mode [ 109.229179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.242907][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.274172][ T12] team0: left allmulticast mode [ 109.280396][ T12] team_slave_0: left allmulticast mode [ 109.286255][ T12] team_slave_1: left allmulticast mode [ 109.294779][ T12] team0: left promiscuous mode [ 109.300547][ T12] team_slave_0: left promiscuous mode [ 109.306624][ T12] team_slave_1: left promiscuous mode [ 109.315317][ T12] veth1_macvtap: left promiscuous mode [ 109.330402][ T12] veth0_macvtap: left promiscuous mode [ 109.337351][ T12] veth1_vlan: left promiscuous mode [ 109.343652][ T12] veth0_vlan: left promiscuous mode [ 109.971269][ T12] team0 (unregistering): Port device team_slave_1 removed [ 110.020321][ T12] team0 (unregistering): Port device team_slave_0 removed [ 110.381523][ T5117] Bluetooth: hci2: command tx timeout [ 110.520087][ T6116] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.571810][ T6014] team0: Port device team_slave_0 added [ 110.652988][ T6014] team0: Port device team_slave_1 added [ 110.831524][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.838547][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.925100][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.936316][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.963664][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.979471][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.986568][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.102519][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.159051][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.179035][ T5117] Bluetooth: hci0: command 0x0401 tx timeout [ 111.186311][ T5129] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 111.280207][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.306078][ T6014] hsr_slave_0: entered promiscuous mode [ 111.308712][ T6154] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 111.323490][ T6014] hsr_slave_1: entered promiscuous mode [ 111.332714][ T6014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.341073][ T6014] Cannot create hsr debugfs directory [ 111.347402][ T6149] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.786228][ T6167] bridge0: mtu less than device minimum [ 111.879096][ T6167] batadv0: entered promiscuous mode [ 112.002242][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.018694][ T6181] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 112.077871][ T6181] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 112.086370][ T6181] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 112.094726][ T6181] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 112.138939][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.376003][ T6195] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 112.459497][ T5117] Bluetooth: hci2: command tx timeout [ 112.686094][ T6014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.776137][ T6014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.802334][ T6014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.860711][ T6014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.062231][ T6217] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 113.092525][ T6215] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 113.138080][ T6215] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 113.171955][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.256426][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.309771][ T6223] Driver unsupported XDP return value 0 on prog (id 143) dev N/A, expect packet loss! [ 113.323735][ T6014] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.343497][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.375618][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.382874][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.395033][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.402394][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.041990][ T29] audit: type=1804 audit(1716862533.390:5): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3506517709/syzkaller.6ZQkpD/78/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 114.223139][ T6259] __nla_validate_parse: 2 callbacks suppressed [ 114.223163][ T6259] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.274263][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.337758][ T6014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.539837][ T5129] Bluetooth: hci0: command 0x0401 tx timeout [ 114.545999][ T5130] Bluetooth: hci2: command tx timeout [ 114.551969][ T5117] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 114.566746][ T6014] veth0_vlan: entered promiscuous mode [ 114.636558][ T6014] veth1_vlan: entered promiscuous mode [ 114.762329][ T6014] veth0_macvtap: entered promiscuous mode [ 114.792756][ T6014] veth1_macvtap: entered promiscuous mode [ 114.903872][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.927292][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.941124][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.968029][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.984628][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.996738][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.009034][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.020075][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.032022][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.041431][ T6280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.058606][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.101115][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.113647][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.132907][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.148312][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.160197][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.176583][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.187337][ T6014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.206998][ T6014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.232170][ T6014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.265152][ T6014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.296979][ T6014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.327211][ T6014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.350642][ T6014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.437524][ T6300] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.687612][ T5221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.728477][ T5221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.742180][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.855814][ T6317] xt_SECMARK: invalid mode: 0 [ 115.891458][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.910412][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.270643][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.363638][ T6335] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.396110][ T6339] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 116.668096][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.719228][ T6347] tipc: Started in network mode [ 116.724523][ T6347] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711 [ 116.740404][ T6347] tipc: Enabling of bearer rejected, failed to enable media [ 116.945870][ T6362] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.084519][ T6365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 117.677359][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.698132][ T6386] tipc: Started in network mode [ 117.703588][ T6386] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711 [ 117.716476][ T6386] tipc: Enabling of bearer rejected, failed to enable media [ 118.075187][ T6400] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.321951][ T6414] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.578006][ T6425] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 118.921622][ T6439] pim6reg: entered allmulticast mode [ 119.040183][ T6438] pim6reg: left allmulticast mode [ 119.269708][ T5130] Bluetooth: hci0: command 0x0401 tx timeout [ 119.275869][ T5117] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 119.367646][ T6465] __nla_validate_parse: 2 callbacks suppressed [ 119.367732][ T6465] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.741105][ T6480] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 119.775725][ T6480] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 119.803556][ T6480] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.820085][ T6480] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.062622][ T6498] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.100399][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.145146][ T6487] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.158208][ T6487] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.167369][ T6487] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.176905][ T6487] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.195451][ T6487] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.213532][ T6487] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.234160][ T6487] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.253385][ T6487] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.273796][ T6487] geneve2: entered promiscuous mode [ 120.289213][ T6487] geneve2: entered allmulticast mode [ 120.612544][ T6527] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.692990][ T6526] IPVS: Error connecting to the multicast addr [ 120.956533][ T6540] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.240460][ T6553] IPVS: Error connecting to the multicast addr [ 121.340299][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.368214][ T6552] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.378667][ T6552] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.387856][ T6552] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.396874][ T6552] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 121.412430][ T6552] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.428478][ T6552] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.437815][ T6552] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.449192][ T6552] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 121.459521][ T6552] geneve2: entered promiscuous mode [ 121.476836][ T6552] geneve2: entered allmulticast mode [ 121.499335][ T5130] Bluetooth: hci0: command 0x0401 tx timeout [ 121.505564][ T5117] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 121.517300][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.721240][ T6575] IPVS: Error connecting to the multicast addr [ 121.774866][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.721120][ T6634] geneve1: entered promiscuous mode [ 122.731406][ T6634] geneve1: entered allmulticast mode [ 122.830470][ T6634] team0: Port device geneve1 added [ 123.361373][ T6673] delete_channel: no stack [ 123.865387][ T6703] delete_channel: no stack [ 124.491126][ T6738] __nla_validate_parse: 15 callbacks suppressed [ 124.491150][ T6738] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.554500][ T6746] delete_channel: no stack [ 124.918432][ T6760] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.414352][ T6789] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.546835][ T6797] delete_channel: no stack [ 125.764429][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.791335][ T6807] bridge_slave_0: left allmulticast mode [ 125.817069][ T6807] bridge_slave_0: left promiscuous mode [ 125.840560][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.205053][ T6826] tipc: Enabling of bearer rejected, failed to enable media [ 126.531641][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.784593][ T6843] delete_channel: no stack [ 127.627749][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.786539][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.802815][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.812160][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.828470][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.837060][ T5130] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.846345][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.923629][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.926764][ T6858] delete_channel: no stack [ 128.130661][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.246636][ T6884] delete_channel: no stack [ 128.316517][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.414229][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.456835][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.859507][ T12] bridge_slave_1: left allmulticast mode [ 128.865405][ T12] bridge_slave_1: left promiscuous mode [ 128.885087][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.912438][ T12] bridge_slave_0: left allmulticast mode [ 128.918252][ T12] bridge_slave_0: left promiscuous mode [ 128.939625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.042088][ T6920] delete_channel: no stack [ 129.614482][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.631854][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.649650][ T12] bond0 (unregistering): Released all slaves [ 129.664671][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.782781][ T6934] Bluetooth: MGMT ver 1.22 [ 129.822632][ T6871] chnl_net:caif_netlink_parms(): no params data found [ 129.862056][ T12] tipc: Left network mode [ 129.899486][ T5117] Bluetooth: hci2: command tx timeout [ 130.181763][ T6949] delete_channel: no stack [ 130.375994][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.403545][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.416831][ T6871] bridge_slave_0: entered allmulticast mode [ 130.428184][ T6871] bridge_slave_0: entered promiscuous mode [ 130.502195][ T6958] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.513273][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.522640][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.531054][ T6871] bridge_slave_1: entered allmulticast mode [ 130.538594][ T6871] bridge_slave_1: entered promiscuous mode [ 130.566713][ T6965] veth1_macvtap: left promiscuous mode [ 130.845214][ T6986] delete_channel: no stack [ 130.855215][ T12] hsr_slave_0: left promiscuous mode [ 130.897253][ T12] hsr_slave_1: left promiscuous mode [ 130.925287][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.934080][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.945888][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.961183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.008357][ T12] veth1_macvtap: left promiscuous mode [ 131.017447][ T12] veth0_macvtap: left promiscuous mode [ 131.025102][ T12] veth1_vlan: left promiscuous mode [ 131.033650][ T12] veth0_vlan: left promiscuous mode [ 131.107116][ T29] audit: type=1804 audit(1716862550.450:6): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir396335611/syzkaller.0bPwWQ/143/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 131.626044][ T12] team0 (unregistering): Port device team_slave_1 removed [ 131.676661][ T12] team0 (unregistering): Port device team_slave_0 removed [ 131.829160][ T5117] Bluetooth: hci3: command 0x0401 tx timeout [ 131.838883][ T5130] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 131.989445][ T5130] Bluetooth: hci2: command tx timeout [ 132.116075][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.138626][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.156488][ T6990] tipc: Started in network mode [ 132.169463][ T6990] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 132.179514][ T6990] tipc: Enabling of bearer rejected, failed to enable media [ 132.339961][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.365172][ T6871] team0: Port device team_slave_0 added [ 132.382687][ T6871] team0: Port device team_slave_1 added [ 132.531233][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.547410][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.598848][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.611606][ T7014] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 132.634617][ T7014] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 132.645838][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.654087][ T7014] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 132.656106][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.663616][ T7014] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 132.710110][ T7014] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 132.728884][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.746937][ T7014] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.798217][ T7019] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 132.887307][ T6871] hsr_slave_0: entered promiscuous mode [ 132.920541][ T6871] hsr_slave_1: entered promiscuous mode [ 132.942827][ T6871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.952175][ T6871] Cannot create hsr debugfs directory [ 132.968151][ T7028] tipc: Enabling of bearer rejected, failed to enable media [ 133.087860][ T7028] tipc: Cannot configure node identity twice [ 133.123480][ T29] audit: type=1804 audit(1716862552.470:7): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2502299010/syzkaller.mq7Gks/146/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 133.188245][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.195032][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.321108][ T7041] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 133.697090][ T7055] vlan4: entered promiscuous mode [ 133.713859][ T7055] macvtap0: entered promiscuous mode [ 133.733652][ T7055] vlan4: entered allmulticast mode [ 133.755282][ T7055] macvtap0: entered allmulticast mode [ 133.767093][ T7055] veth0_macvtap: entered allmulticast mode [ 134.059674][ T5130] Bluetooth: hci2: command tx timeout [ 134.108690][ T7077] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 134.154789][ T7077] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 134.184353][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.193937][ T7077] netlink: 9188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.203838][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.224105][ T7077] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.313136][ T6871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.350595][ T6871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.396087][ T6871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.401151][ T7088] delete_channel: no stack [ 134.426298][ T6871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.696454][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.771554][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.833045][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.893009][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.900286][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.954379][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.995962][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.003284][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.068940][ T7115] delete_channel: no stack [ 135.167317][ T6871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.212850][ T6871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.730099][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.826640][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.973248][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.111603][ T6871] veth0_vlan: entered promiscuous mode [ 136.143476][ T5130] Bluetooth: hci2: command tx timeout [ 136.155720][ T6871] veth1_vlan: entered promiscuous mode [ 136.311824][ T7177] bridge2: entered promiscuous mode [ 136.328024][ T7177] bridge2: entered allmulticast mode [ 136.456795][ T6871] veth0_macvtap: entered promiscuous mode [ 136.507488][ T6871] veth1_macvtap: entered promiscuous mode [ 136.590936][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.620867][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.638539][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.676693][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.705206][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.731525][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.758928][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.784940][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.803784][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.833034][ T7198] vlan3: entered promiscuous mode [ 136.838542][ T7198] macvtap0: entered promiscuous mode [ 136.851090][ T7198] vlan3: entered allmulticast mode [ 136.856684][ T7198] macvtap0: entered allmulticast mode [ 136.866491][ T7198] veth0_macvtap: entered allmulticast mode [ 136.912390][ T7202] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 136.937154][ T7202] (unnamed net_device) (uninitialized): option mode: invalid value (110) [ 137.010839][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.048691][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.069711][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.109236][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.136922][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.159874][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.179910][ T6871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.201744][ T6871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.231197][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.357671][ T6871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.398200][ T6871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.407121][ T6871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.416240][ T6871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.171503][ T5172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.196561][ T5172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.250664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.258727][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.544297][ T7256] syz_tun: entered promiscuous mode [ 138.557948][ T7256] macsec1: entered promiscuous mode [ 138.572711][ T7256] macsec1: entered allmulticast mode [ 138.605673][ T7256] syz_tun: entered allmulticast mode [ 139.032231][ T7276] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.198663][ T7329] bridge3: entered promiscuous mode [ 140.449412][ T7335] syz_tun: entered promiscuous mode [ 140.479927][ T7335] macsec1: entered promiscuous mode [ 140.495253][ T7335] macsec1: entered allmulticast mode [ 140.507026][ T7335] syz_tun: entered allmulticast mode [ 142.134756][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.282780][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.347765][ T29] audit: type=1804 audit(1716862561.690:8): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.378124][ T7445] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.441958][ T29] audit: type=1804 audit(1716862561.700:9): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.539332][ T29] audit: type=1804 audit(1716862561.720:10): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.583200][ T29] audit: type=1804 audit(1716862561.720:11): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.652950][ T29] audit: type=1804 audit(1716862561.720:12): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.732107][ T29] audit: type=1804 audit(1716862561.720:13): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.852298][ T29] audit: type=1804 audit(1716862561.720:14): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 142.901359][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.904360][ T29] audit: type=1804 audit(1716862561.720:15): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 143.021276][ T29] audit: type=1804 audit(1716862561.720:16): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 143.036065][ T7477] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 143.103584][ T29] audit: type=1804 audit(1716862561.720:17): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/13/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 143.138851][ T7477] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 143.264274][ T7480] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 143.351016][ T7490] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.430132][ T7480] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 144.540116][ T7537] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 144.568525][ T7537] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.608614][ T7537] bridge0: port 3(team0) entered blocking state [ 144.644538][ T7537] bridge0: port 3(team0) entered disabled state [ 144.683161][ T7537] bridge0: port 3(team0) entered blocking state [ 144.690507][ T7537] bridge0: port 3(team0) entered forwarding state [ 144.751926][ T7544] vlan0: entered promiscuous mode [ 144.778457][ T7544] vlan0: entered allmulticast mode [ 144.839483][ T7544] veth0_vlan: entered allmulticast mode [ 144.878227][ T7544] team0: Port device vlan0 added [ 144.939744][ T7554] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.053987][ T7554] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.067701][ T7557] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.112505][ T7558] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.159346][ T7554] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.903295][ T7598] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.089463][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.703812][ T7679] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.727189][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.821645][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.126736][ T5124] syz_tun (unregistering): left allmulticast mode [ 148.235722][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.261598][ T7702] vlan2: entered allmulticast mode [ 148.276710][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.424962][ T2774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.656768][ T2774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.703430][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.828697][ T2774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.981935][ T2774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.278406][ T2774] bridge_slave_1: left allmulticast mode [ 149.291413][ T2774] bridge_slave_1: left promiscuous mode [ 149.308176][ T2774] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.343495][ T2774] bridge_slave_0: left allmulticast mode [ 149.358317][ T2774] bridge_slave_0: left promiscuous mode [ 149.377641][ T2774] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.394073][ T5117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.412938][ T5117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.422873][ T5117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.433047][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.459608][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.467411][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.153134][ T2774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.166072][ T2774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.178019][ T2774] bond0 (unregistering): Released all slaves [ 150.303833][ T2774] tipc: Left network mode [ 150.391508][ T7785] netlink: 4456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.791875][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.014775][ T2774] hsr_slave_0: left promiscuous mode [ 151.026082][ T2774] hsr_slave_1: left promiscuous mode [ 151.044289][ T2774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.051858][ T2774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.070109][ T2774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.077604][ T2774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.190927][ T2774] macvtap0: left allmulticast mode [ 151.196456][ T2774] veth0_macvtap: left allmulticast mode [ 151.207804][ T2774] macvtap0: left promiscuous mode [ 151.217761][ T2774] team0: left allmulticast mode [ 151.236512][ T2774] team_slave_0: left allmulticast mode [ 151.244698][ T2774] team_slave_1: left allmulticast mode [ 151.256773][ T2774] team0: left promiscuous mode [ 151.271126][ T2774] team_slave_0: left promiscuous mode [ 151.276909][ T2774] team_slave_1: left promiscuous mode [ 151.283458][ T2774] veth1_macvtap: left promiscuous mode [ 151.289204][ T2774] veth0_macvtap: left promiscuous mode [ 151.295012][ T2774] veth1_vlan: left promiscuous mode [ 151.300880][ T2774] veth0_vlan: left promiscuous mode [ 151.501134][ T5117] Bluetooth: hci4: command tx timeout [ 151.878456][ T2774] team0 (unregistering): Port device team_slave_1 removed [ 151.932379][ T2774] team0 (unregistering): Port device team_slave_0 removed [ 152.266799][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.277058][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.313688][ T7823] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 152.641691][ T7756] chnl_net:caif_netlink_parms(): no params data found [ 152.977945][ T7845] validate_nla: 14 callbacks suppressed [ 152.977966][ T7845] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 153.087660][ T7845] team0: Port device wlan1 added [ 153.130108][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.144138][ T7756] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.161181][ T7756] bridge_slave_0: entered allmulticast mode [ 153.190229][ T7756] bridge_slave_0: entered promiscuous mode [ 153.305134][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.334797][ T7756] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.349075][ T7756] bridge_slave_1: entered allmulticast mode [ 153.386210][ T7756] bridge_slave_1: entered promiscuous mode [ 153.517291][ T7756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.565164][ T7756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.589516][ T5117] Bluetooth: hci4: command tx timeout [ 153.647898][ T7878] tipc: Started in network mode [ 153.671971][ T7878] tipc: Node identity 2007ff, cluster identity 4711 [ 153.697696][ T7878] tipc: Node number set to 2099199 [ 153.867827][ T7756] team0: Port device team_slave_0 added [ 153.897305][ T7756] team0: Port device team_slave_1 added [ 154.006399][ T7890] __nla_validate_parse: 1 callbacks suppressed [ 154.006422][ T7890] netlink: 4456 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.037456][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.051317][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.110572][ T7756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.357728][ T7756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.389768][ T7756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.446122][ T7756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.500383][ T7903] ip6gretap0: entered promiscuous mode [ 154.507151][ T7903] macsec2: entered promiscuous mode [ 154.513251][ T7903] macsec2: entered allmulticast mode [ 154.519454][ T7903] ip6gretap0: entered allmulticast mode [ 154.742566][ T7756] hsr_slave_0: entered promiscuous mode [ 154.750980][ T7756] hsr_slave_1: entered promiscuous mode [ 154.758153][ T7756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.767068][ T7756] Cannot create hsr debugfs directory [ 154.863560][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 154.955429][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 154.976270][ T7916] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 155.001451][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 155.013046][ T7915] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 155.659012][ T5117] Bluetooth: hci4: command tx timeout [ 155.809278][ T7929] tipc: Cannot configure node identity twice [ 156.436528][ T7756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.465597][ T7756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.495261][ T7756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.550927][ T7756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.599950][ T7949] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.692238][ T7955] Cannot find set identified by id 0 to match [ 156.734105][ T7958] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 156.778167][ T7958] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 156.806823][ T7959] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 156.845217][ T7958] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 156.983047][ T7756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.084173][ T7756] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.127665][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.134942][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.193342][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.200632][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.267387][ T7970] tipc: Started in network mode [ 157.287122][ T7970] tipc: Node identity 2007ff, cluster identity 4711 [ 157.296739][ T7970] tipc: Node number set to 2099199 [ 157.739081][ T5117] Bluetooth: hci4: command tx timeout [ 157.766121][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.799928][ T7988] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.809476][ T7988] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.818421][ T7988] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.827408][ T7988] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.884423][ T7988] vxlan0: entered promiscuous mode [ 158.080545][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.129266][ T8004] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.138106][ T8004] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.147350][ T8004] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.156229][ T8004] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.177960][ T8004] vxlan0: entered promiscuous mode [ 158.199988][ T8006] validate_nla: 7 callbacks suppressed [ 158.200013][ T8006] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 158.287321][ T7756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.486034][ T7756] veth0_vlan: entered promiscuous mode [ 158.499487][ T8010] Cannot find set identified by id 0 to match [ 158.660078][ T8015] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.676449][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.688227][ T7756] veth1_vlan: entered promiscuous mode [ 158.815877][ T7756] veth0_macvtap: entered promiscuous mode [ 158.863190][ T7756] veth1_macvtap: entered promiscuous mode [ 158.932735][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.952523][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.970198][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.996995][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.010716][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.022427][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.033399][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.044188][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.057399][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.113441][ T8022] vlan3: entered promiscuous mode [ 159.118658][ T8022] macvtap0: entered promiscuous mode [ 159.125882][ T8022] vlan3: entered allmulticast mode [ 159.131779][ T8022] macvtap0: entered allmulticast mode [ 159.137348][ T8022] veth0_macvtap: entered allmulticast mode [ 159.147573][ T8022] macvtap0: left allmulticast mode [ 159.155719][ T8022] veth0_macvtap: left allmulticast mode [ 159.163345][ T8022] macvtap0: left promiscuous mode [ 159.243480][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.285604][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.298055][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.311562][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.330983][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.346517][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.370299][ T7756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.382429][ T8029] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 159.386207][ T7756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.429409][ T7756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.462313][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.473022][ T8029] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 159.485481][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.497234][ T7756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.509621][ T8035] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 159.518594][ T7756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.527389][ T7756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.536175][ T7756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.554694][ T8032] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 159.565508][ T8029] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 159.576213][ T8027] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.586839][ T8035] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 159.606716][ T8037] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 159.656605][ T8035] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 159.680020][ T8036] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 159.911250][ T2774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.937888][ T2774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.035129][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.053424][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.271208][ T8046] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.325888][ T8046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.346176][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.432715][ T8050] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.442306][ T8050] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.451571][ T8050] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.460839][ T8050] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.490617][ T8050] vxlan0: entered promiscuous mode [ 160.504494][ T8055] tipc: Started in network mode [ 160.515852][ T8055] tipc: Node identity 2007ff, cluster identity 4711 [ 160.525905][ T8055] tipc: Node number set to 2099199 [ 160.590996][ T8061] Cannot find set identified by id 0 to match [ 161.148120][ T8083] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.515034][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.549201][ T8094] tipc: Cannot configure node identity twice [ 161.573908][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.079466][ T8110] vlan2: entered promiscuous mode [ 162.084988][ T8110] macvtap0: entered promiscuous mode [ 162.115524][ T8110] vlan2: entered allmulticast mode [ 162.121022][ T8110] macvtap0: entered allmulticast mode [ 162.139881][ T8110] veth0_macvtap: entered allmulticast mode [ 162.486198][ T8131] Cannot find set identified by id 0 to match [ 162.582334][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.120023][ T8175] validate_nla: 17 callbacks suppressed [ 164.120047][ T8175] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.161697][ T8175] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.186766][ T8179] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.208099][ T8175] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.252546][ T8175] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.692934][ T8186] vlan3: entered promiscuous mode [ 164.718675][ T8186] macvtap0: entered promiscuous mode [ 164.745054][ T8186] vlan3: entered allmulticast mode [ 164.766425][ T8186] macvtap0: entered allmulticast mode [ 164.779609][ T8186] veth0_macvtap: entered allmulticast mode [ 164.809002][ T8196] __nla_validate_parse: 4 callbacks suppressed [ 164.809026][ T8196] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.900566][ T8198] tipc: Started in network mode [ 164.927732][ T8198] tipc: Node identity 2007ff, cluster identity 4711 [ 164.939357][ T8198] tipc: Node number set to 2099199 [ 165.043157][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.297709][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.338661][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.452773][ T8230] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 165.595106][ T8230] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 165.611537][ T8233] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 165.648467][ T8236] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 165.689455][ T8240] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 165.895637][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.946302][ T8251] batadv_slave_1: entered promiscuous mode [ 166.554437][ T8241] batadv_slave_1: left promiscuous mode [ 166.579889][ T8273] xt_ecn: cannot match TCP bits for non-tcp packets [ 166.718526][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.755270][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.830364][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.845871][ T8275] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 167.056196][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.477262][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.605525][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.618315][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.665434][ T8319] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 168.203641][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.221518][ T8347] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.247145][ T8347] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.267245][ T8347] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.284459][ T8347] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 168.324771][ T8347] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.356362][ T8347] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.373557][ T8347] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.402710][ T8347] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.438364][ T8347] geneve2: entered promiscuous mode [ 168.458639][ T8347] geneve2: entered allmulticast mode [ 169.041063][ T8391] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 170.208256][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.453933][ T8437] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.996293][ T8453] validate_nla: 13 callbacks suppressed [ 170.996315][ T8453] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 171.041178][ T8453] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 171.109453][ T8459] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 171.149284][ T8453] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 171.202761][ T8453] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 171.272511][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.583823][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.642602][ T8479] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.691759][ T8479] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.714762][ T8479] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.735334][ T8479] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 171.746131][ T8479] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.763933][ T8479] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.776152][ T8479] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.791377][ T8479] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.804498][ T8479] geneve2: entered promiscuous mode [ 171.813418][ T8479] geneve2: entered allmulticast mode [ 173.811911][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 173.811931][ T29] audit: type=1804 audit(1716862593.160:26): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2502299010/syzkaller.mq7Gks/274/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 174.645720][ T29] audit: type=1804 audit(1716862593.990:27): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1845152033/syzkaller.tOvPua/96/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 174.843526][ T8646] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.240491][ T8670] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 175.268278][ T8670] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 175.299061][ T8673] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 175.336843][ T8670] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 175.356194][ T8674] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 176.014957][ T8706] validate_nla: 5 callbacks suppressed [ 176.014979][ T8706] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.040649][ T8706] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.062186][ T8706] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.082319][ T8706] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.116649][ T8706] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.890859][ T8734] debugfs: Directory '!' with parent 'ieee80211' already present! [ 177.026421][ T8739] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.442517][ T8765] sctp: [Deprecated]: syz-executor.4 (pid 8765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.442517][ T8765] Use struct sctp_sack_info instead [ 177.521639][ T8767] netlink: 'syz-executor.0': attribute type 142 has an invalid length. [ 177.540544][ T8770] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 177.560218][ T8770] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 177.598966][ T8771] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 177.645679][ T8770] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 178.940655][ T8828] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.141671][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.862628][ T8877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.870552][ T8877] IPv6: NLM_F_CREATE should be set when creating new route [ 179.966760][ T8879] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.044914][ T8879] vxcan1: tx address claim with dlc 1 [ 180.252621][ T8891] can: request_module (can-proto-4) failed. [ 180.753846][ T8919] netlink: 1086 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.037007][ T8930] xt_cgroup: xt_cgroup: no path or classid specified [ 181.220659][ T8937] validate_nla: 11 callbacks suppressed [ 181.220682][ T8937] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 181.257991][ T8937] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 181.290076][ T8942] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 181.334849][ T8937] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 181.381523][ T8937] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 181.400625][ T8937] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 181.625316][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.824319][ T8974] xt_cgroup: xt_cgroup: no path or classid specified [ 181.858131][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.885845][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.308411][ T8992] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 182.345333][ T8992] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 182.377255][ T8992] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 182.435915][ T8992] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 182.932783][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.969164][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.150233][ T9049] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.397763][ T9051] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 183.424117][ T9057] ipip0: entered promiscuous mode [ 183.934000][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.299744][ T9091] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.791996][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 185.077141][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.097522][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.338906][ T5129] Bluetooth: hci4: command 0x0405 tx timeout [ 186.001491][ T9169] pim6reg1: entered promiscuous mode [ 186.012923][ T9169] pim6reg1: entered allmulticast mode [ 186.414010][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.458894][ T5117] Bluetooth: hci3: command 0x0401 tx timeout [ 186.458954][ T5130] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 186.722465][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.940104][ T9179] pim6reg1: entered promiscuous mode [ 186.956073][ T9179] pim6reg1: entered allmulticast mode [ 187.146643][ T9216] validate_nla: 8 callbacks suppressed [ 187.146667][ T9216] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 187.170953][ T9216] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.370971][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.937134][ T9254] bond_slave_0: entered promiscuous mode [ 187.943613][ T9254] bond_slave_1: entered promiscuous mode [ 187.983742][ T9254] macsec2: entered promiscuous mode [ 187.999901][ T9254] bond0: entered promiscuous mode [ 188.019742][ T9254] macsec2: entered allmulticast mode [ 188.031636][ T9254] bond0: entered allmulticast mode [ 188.048602][ T9254] bond_slave_0: entered allmulticast mode [ 188.063675][ T9254] bond_slave_1: entered allmulticast mode [ 188.097582][ T9254] bond0: left allmulticast mode [ 188.111327][ T9254] bond_slave_0: left allmulticast mode [ 188.129279][ T9254] bond_slave_1: left allmulticast mode [ 188.149288][ T9254] bond0: left promiscuous mode [ 188.159962][ T9254] bond_slave_0: left promiscuous mode [ 188.165545][ T9254] bond_slave_1: left promiscuous mode [ 188.513348][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.068697][ T2774] tipc: Subscription rejected, illegal request [ 191.031691][ T12] tipc: Subscription rejected, illegal request [ 194.630980][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.822576][ T5117] Bluetooth: hci3: command 0x0401 tx timeout [ 201.828679][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 201.835440][ T5119] Bluetooth: hci0: command 0x0401 tx timeout [ 205.979135][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 208.058994][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 222.957033][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.966635][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.980676][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.993827][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.002909][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.016034][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.081747][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.096540][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.115194][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.124356][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.134059][ T5129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.145663][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.627907][ T5129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 224.639211][ T5129] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 224.653700][ T5129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 224.663138][ T5129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 224.671717][ T5129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 224.679284][ T5129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.099495][ T53] Bluetooth: hci5: command tx timeout [ 225.184887][ T53] Bluetooth: hci6: command tx timeout [ 225.391467][ T5129] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 225.402192][ T5129] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 225.414273][ T5129] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 225.423476][ T5129] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 225.431519][ T5129] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 225.439387][ T5129] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 226.699393][ T5129] Bluetooth: hci7: command tx timeout [ 227.182827][ T5129] Bluetooth: hci5: command tx timeout [ 227.262594][ T5129] Bluetooth: hci6: command tx timeout [ 227.499271][ T5129] Bluetooth: hci8: command tx timeout [ 228.779096][ T5129] Bluetooth: hci7: command tx timeout [ 229.259604][ T5129] Bluetooth: hci5: command tx timeout [ 229.338982][ T5129] Bluetooth: hci6: command tx timeout [ 229.579056][ T5129] Bluetooth: hci8: command tx timeout [ 230.859120][ T5129] Bluetooth: hci7: command tx timeout [ 231.339477][ T5129] Bluetooth: hci5: command tx timeout [ 231.419093][ T5129] Bluetooth: hci6: command tx timeout [ 231.658906][ T5129] Bluetooth: hci8: command tx timeout [ 232.940626][ T5129] Bluetooth: hci7: command tx timeout [ 233.426161][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 233.442263][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 233.454505][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 233.471099][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 233.485748][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 233.493587][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 233.738966][ T53] Bluetooth: hci8: command tx timeout [ 235.580147][ T53] Bluetooth: hci9: command tx timeout [ 237.659226][ T53] Bluetooth: hci9: command tx timeout [ 239.739086][ T53] Bluetooth: hci9: command tx timeout [ 241.824830][ T53] Bluetooth: hci9: command tx timeout [ 256.062974][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.265718][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 288.430343][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 288.442356][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 288.451470][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 288.463694][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 288.472026][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 288.479684][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 288.516301][ T5129] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 288.526873][ T5129] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 288.536351][ T5129] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 288.550201][ T5129] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 288.567362][ T5129] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 288.575182][ T5129] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 289.677052][ T5129] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 289.689005][ T5129] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 289.698587][ T5129] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 289.708013][ T5129] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 289.716474][ T5129] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 289.724140][ T5129] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 290.507030][ T5129] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 290.519125][ T5129] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 290.529141][ T5129] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 290.538934][ T5129] Bluetooth: hci10: command tx timeout [ 290.546132][ T5129] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 290.575058][ T5129] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 290.582904][ T5129] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 290.619076][ T5129] Bluetooth: hci11: command tx timeout [ 291.738916][ T5129] Bluetooth: hci12: command tx timeout [ 292.619018][ T5129] Bluetooth: hci13: command tx timeout [ 292.619122][ T53] Bluetooth: hci10: command tx timeout [ 292.709136][ T53] Bluetooth: hci11: command tx timeout [ 293.838791][ T53] Bluetooth: hci12: command tx timeout [ 294.699554][ T53] Bluetooth: hci13: command tx timeout [ 294.705130][ T53] Bluetooth: hci10: command tx timeout [ 294.779082][ T53] Bluetooth: hci11: command tx timeout [ 295.899105][ T53] Bluetooth: hci12: command tx timeout [ 296.789059][ T53] Bluetooth: hci10: command tx timeout [ 296.789074][ T5129] Bluetooth: hci13: command tx timeout [ 296.868862][ T5129] Bluetooth: hci11: command tx timeout [ 297.981692][ T5129] Bluetooth: hci12: command tx timeout [ 298.591701][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 298.602482][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 298.616275][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 298.626080][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 298.641577][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 298.650224][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 298.869015][ T53] Bluetooth: hci13: command tx timeout [ 300.699376][ T53] Bluetooth: hci14: command tx timeout [ 302.783002][ T53] Bluetooth: hci14: command tx timeout [ 304.859236][ T53] Bluetooth: hci14: command tx timeout [ 306.939282][ T53] Bluetooth: hci14: command tx timeout [ 309.338968][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 317.512991][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.899046][ T30] INFO: task syz-executor.3:9402 blocked for more than 143 seconds. [ 339.907189][ T30] Not tainted 6.9.0-syzkaller-12072-g5233a55a5254 #0 [ 339.924963][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.933746][ T30] task:syz-executor.3 state:D stack:28944 pid:9402 tgid:9401 ppid:5121 flags:0x00000006 2024/05/28 02:19:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 339.951181][ T30] Call Trace: [ 339.954822][ T30] [ 339.957874][ T30] __schedule+0x17e8/0x4a20 [ 339.997587][ T30] ? __pfx___schedule+0x10/0x10 [ 340.005740][ T30] ? __pfx_lock_release+0x10/0x10 [ 340.017339][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 340.023303][ T30] ? schedule+0x90/0x320 [ 340.027619][ T30] schedule+0x14b/0x320 [ 340.034513][ T30] schedule_preempt_disabled+0x13/0x30 [ 340.044875][ T30] __mutex_lock+0x6a4/0xd70 [ 340.049552][ T30] ? __mutex_lock+0x527/0xd70 [ 340.054271][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 340.067047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 340.075596][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 340.087823][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 340.092993][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 340.098408][ T30] ? aa_sk_perm+0x967/0xab0 [ 340.103271][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 340.108177][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 340.119096][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 340.124092][ T30] ip_setsockopt+0x63/0x100 [ 340.133636][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 340.143259][ T30] do_sock_setsockopt+0x3af/0x720 [ 340.148367][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 340.158832][ T30] ? __fget_files+0x29/0x470 [ 340.163617][ T30] ? __fget_files+0x3f6/0x470 [ 340.168400][ T30] __sys_setsockopt+0x1ae/0x250 [ 340.198839][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 340.203961][ T30] do_syscall_64+0xf3/0x230 [ 340.208495][ T30] ? clear_bhb_loop+0x35/0x90 [ 340.228826][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.234832][ T30] RIP: 0033:0x7fd10c87cee9 [ 340.248708][ T30] RSP: 002b:00007fd10d6610c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.257264][ T30] RAX: ffffffffffffffda RBX: 00007fd10c9b3f80 RCX: 00007fd10c87cee9 [ 340.298720][ T30] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 340.306776][ T30] RBP: 00007fd10c8c947f R08: 0000000000000040 R09: 0000000000000000 [ 340.328773][ T30] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000000 [ 340.336841][ T30] R13: 000000000000000b R14: 00007fd10c9b3f80 R15: 00007ffe74bc41c8 [ 340.358735][ T30] [ 340.361854][ T30] INFO: task syz-executor.3:9403 blocked for more than 143 seconds. [ 340.388759][ T30] Not tainted 6.9.0-syzkaller-12072-g5233a55a5254 #0 [ 340.396067][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 340.418753][ T30] task:syz-executor.3 state:D stack:28944 pid:9403 tgid:9401 ppid:5121 flags:0x00004006 [ 340.438769][ T30] Call Trace: [ 340.442098][ T30] [ 340.445061][ T30] __schedule+0x17e8/0x4a20 [ 340.458771][ T30] ? __pfx___schedule+0x10/0x10 [ 340.463703][ T30] ? __pfx_lock_release+0x10/0x10 [