last executing test programs: 32.212519989s ago: executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000cc0)) socket$l2tp6(0xa, 0x2, 0x73) getpeername$tipc(r0, &(0x7f0000000d00)=@name, &(0x7f0000000d40)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f00000000c0)='y', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002300)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}}, {{&(0x7f0000000700)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000001980)='F', 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@loopback}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x34, 0x0, 0x0, 0x80ffffff}, {0x80000006}]}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000280)=""/172, 0x0, 0xac, 0x1, 0x8}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000940)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) 31.600422061s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000680)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000006c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) listen(r1, 0x59d) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000700)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 31.596258934s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_da_reserve_space\x00', r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0xf000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x1, 0x8e, 0xe7c9, 0xa}, 0x48) 31.49167627s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffdef) shutdown(r0, 0x1) pipe(&(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 31.36521225s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000000111401000000000001000000080003000000000008004a0000000000080001000000000008003e"], 0x30}}, 0x0) 31.196200974s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x900}}, 0x78}}, 0x0) 31.173611821s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000100feff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='jbd2_handle_stats\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) 31.108486204s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)) 31.070177404s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x4, 0x5}) 31.019004325s ago: executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0x4, 0x2, 0xa8c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_request_blocks\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.95509494s ago: executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 30.83846704s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000002c0)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 30.836463538s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r1, 0xa29, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) 30.802892285s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 30.745279221s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.709169145s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 30.671122207s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x3c}}, 0x0) 30.611700653s ago: executing program 0: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000900)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="0029687dc171d07c6974395f07db", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x10) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x63, &(0x7f00000000c0)="a81dad97bdeb31a8eb30893e4425efa5f8af10c548a11abff30a74b504aace86e871b83a046a6730309b2cd99c52014025134334811e8d1f4623477e1f4b8df483c9cd3713842c807c4d64cc3be65656feebc82d05b87c9e262e4fcfe2bb95761b746e"}) 30.582343348s ago: executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in], 0x10) 30.560065131s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002240)={0x9b4, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x995, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @generic="c78b1d0dff411442869b4a7e103b949d4bb05387b627e94e2ec4cbadca474cf60cc03acd0e591b99bd23c7d91e4cbf59d1343c9f576249d31e69566a320174bdf1a1f9b2760f4e51013186846e4b85193f534b37f9b07652efcdbb805f5b96f4ec181ec948df5fee2fd2f1fb99249fbc5a68986c8a85df1a2cc09495776ca16d3dba50ce03daa569daba59423aa15cb010f233ddbe21a512576e2d5d319d51e50085d18cf8bfde12cb26f4002b", @generic="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"]}]}, 0x9b4}}, 0x0) 30.50915971s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 30.462742364s ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000002c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000001c0), 0x4) 30.403806044s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)) 30.214350363s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x539, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 30.020981087s ago: executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 720.043162ms ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1}}) 646.204258ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000680)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000006c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) listen(r1, 0x59d) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000700)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 583.443892ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}}, 0x0) 201.734388ms ago: executing program 4: r0 = socket(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="080001"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x3e}, 0x20) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x20, r3, 0x0, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r4 = socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 0s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. 2024/06/03 09:50:55 fuzzer started 2024/06/03 09:50:55 dialing manager at 10.128.0.169:30018 [ 65.056680][ T5087] cgroup: Unknown subsys name 'net' [ 65.204097][ T5087] cgroup: Unknown subsys name 'rlimit' 2024/06/03 09:50:56 starting 5 executor processes [ 66.327897][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.152129][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.170983][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.193729][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.194212][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.201984][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.209892][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.217774][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.231763][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.238880][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.241832][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.247396][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.253941][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.262832][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.270385][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.275158][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.283051][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.288873][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.296236][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.302807][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.309766][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.316481][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.323921][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.331335][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.345797][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.355634][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.372266][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.379608][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.382568][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.390646][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.404591][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.967195][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 67.991939][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 68.046485][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 68.101882][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 68.152818][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 68.244246][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.251841][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.261548][ T5108] bridge_slave_0: entered allmulticast mode [ 68.269285][ T5108] bridge_slave_0: entered promiscuous mode [ 68.284018][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.291305][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.298694][ T5109] bridge_slave_0: entered allmulticast mode [ 68.305502][ T5109] bridge_slave_0: entered promiscuous mode [ 68.344864][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.352182][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.359577][ T5108] bridge_slave_1: entered allmulticast mode [ 68.366315][ T5108] bridge_slave_1: entered promiscuous mode [ 68.393947][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.401260][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.408923][ T5109] bridge_slave_1: entered allmulticast mode [ 68.415810][ T5109] bridge_slave_1: entered promiscuous mode [ 68.436669][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.444226][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.451609][ T5118] bridge_slave_0: entered allmulticast mode [ 68.458561][ T5118] bridge_slave_0: entered promiscuous mode [ 68.484336][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.507477][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.537145][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.544645][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.552559][ T5118] bridge_slave_1: entered allmulticast mode [ 68.559977][ T5118] bridge_slave_1: entered promiscuous mode [ 68.573594][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.595715][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.626715][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.634339][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.642527][ T5110] bridge_slave_0: entered allmulticast mode [ 68.650307][ T5110] bridge_slave_0: entered promiscuous mode [ 68.705787][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.713272][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.721048][ T5110] bridge_slave_1: entered allmulticast mode [ 68.727886][ T5110] bridge_slave_1: entered promiscuous mode [ 68.736949][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.750071][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.774639][ T5108] team0: Port device team_slave_0 added [ 68.784171][ T5109] team0: Port device team_slave_0 added [ 68.835797][ T5108] team0: Port device team_slave_1 added [ 68.843448][ T5109] team0: Port device team_slave_1 added [ 68.894615][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.902227][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.909583][ T5119] bridge_slave_0: entered allmulticast mode [ 68.916356][ T5119] bridge_slave_0: entered promiscuous mode [ 68.950114][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.962102][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.972620][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.980665][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.007141][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.021278][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.028496][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.054518][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.071478][ T5118] team0: Port device team_slave_0 added [ 69.078739][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.085952][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.093916][ T5119] bridge_slave_1: entered allmulticast mode [ 69.101481][ T5119] bridge_slave_1: entered promiscuous mode [ 69.109521][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.116493][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.143131][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.156700][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.164168][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.190391][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.220977][ T5118] team0: Port device team_slave_1 added [ 69.256608][ T5110] team0: Port device team_slave_0 added [ 69.334850][ T5110] team0: Port device team_slave_1 added [ 69.367582][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.382303][ T5108] hsr_slave_0: entered promiscuous mode [ 69.389875][ T5108] hsr_slave_1: entered promiscuous mode [ 69.401228][ T5109] hsr_slave_0: entered promiscuous mode [ 69.407903][ T5109] hsr_slave_1: entered promiscuous mode [ 69.414284][ T5116] Bluetooth: hci1: command tx timeout [ 69.414340][ T5123] Bluetooth: hci2: command tx timeout [ 69.419988][ T5112] Bluetooth: hci0: command tx timeout [ 69.432555][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.441153][ T5109] Cannot create hsr debugfs directory [ 69.455198][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.462464][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.489100][ T5112] Bluetooth: hci4: command tx timeout [ 69.494527][ T5116] Bluetooth: hci3: command tx timeout [ 69.495898][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.514321][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.547799][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.554866][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.580959][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.594959][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.602412][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.628508][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.659004][ T5119] team0: Port device team_slave_0 added [ 69.676174][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.683218][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.709460][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.736955][ T5119] team0: Port device team_slave_1 added [ 69.834319][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.841768][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.868510][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.885903][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.893787][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.919836][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.936280][ T5110] hsr_slave_0: entered promiscuous mode [ 69.944001][ T5110] hsr_slave_1: entered promiscuous mode [ 69.950823][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.958541][ T5110] Cannot create hsr debugfs directory [ 69.968337][ T5118] hsr_slave_0: entered promiscuous mode [ 69.974920][ T5118] hsr_slave_1: entered promiscuous mode [ 69.981797][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.989624][ T5118] Cannot create hsr debugfs directory [ 70.120760][ T5119] hsr_slave_0: entered promiscuous mode [ 70.127052][ T5119] hsr_slave_1: entered promiscuous mode [ 70.138347][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.146567][ T5119] Cannot create hsr debugfs directory [ 70.465987][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.479228][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.502616][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.532896][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.588172][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.603418][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.624732][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.634629][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.698862][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.709455][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.733695][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.744158][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.833996][ T5118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.845382][ T5118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.860945][ T5118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.873169][ T5118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.953818][ T5119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.967237][ T5119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.991178][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.998441][ T5119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.010357][ T5119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.065263][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.131880][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.139231][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.150469][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.157722][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.231976][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.275989][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.322424][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.329652][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.364747][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.371987][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.391461][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.415421][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.490331][ T5116] Bluetooth: hci1: command tx timeout [ 71.494978][ T5112] Bluetooth: hci2: command tx timeout [ 71.495760][ T5123] Bluetooth: hci0: command tx timeout [ 71.524322][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.540293][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.547659][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.566974][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.568740][ T5116] Bluetooth: hci3: command tx timeout [ 71.574175][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.587809][ T5116] Bluetooth: hci4: command tx timeout [ 71.647116][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.664405][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.706134][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.723645][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.769788][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.777001][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.797577][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.804820][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.852166][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.859888][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.886477][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.893815][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.264858][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.293405][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.300632][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.345842][ T5109] veth0_vlan: entered promiscuous mode [ 72.424723][ T5109] veth1_vlan: entered promiscuous mode [ 72.457259][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.487656][ T5108] veth0_vlan: entered promiscuous mode [ 72.515959][ T5108] veth1_vlan: entered promiscuous mode [ 72.581082][ T5109] veth0_macvtap: entered promiscuous mode [ 72.607479][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.636267][ T5109] veth1_macvtap: entered promiscuous mode [ 72.654597][ T5108] veth0_macvtap: entered promiscuous mode [ 72.666704][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.694597][ T5108] veth1_macvtap: entered promiscuous mode [ 72.723488][ T5110] veth0_vlan: entered promiscuous mode [ 72.753158][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.766763][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.785498][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.796390][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.809504][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.827920][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838704][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.847424][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.859019][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.877567][ T5118] veth0_vlan: entered promiscuous mode [ 72.884015][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.894878][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.906653][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.921194][ T5110] veth1_vlan: entered promiscuous mode [ 72.944880][ T5118] veth1_vlan: entered promiscuous mode [ 72.955903][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.965183][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.974121][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.986582][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.063996][ T5119] veth0_vlan: entered promiscuous mode [ 73.153994][ T5119] veth1_vlan: entered promiscuous mode [ 73.176718][ T5110] veth0_macvtap: entered promiscuous mode [ 73.210271][ T5110] veth1_macvtap: entered promiscuous mode [ 73.222390][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.244161][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.259973][ T5118] veth0_macvtap: entered promiscuous mode [ 73.280269][ T5118] veth1_macvtap: entered promiscuous mode [ 73.287416][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.304561][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.315286][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.326243][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.339124][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.355144][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.366279][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.376245][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.386986][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.400344][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.431685][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440832][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.442099][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.454848][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.463452][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.466336][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.545442][ T5158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.554272][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555167][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.568394][ T5116] Bluetooth: hci1: command tx timeout [ 73.573906][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.578707][ T5123] Bluetooth: hci0: command tx timeout [ 73.589406][ T5112] Bluetooth: hci2: command tx timeout [ 73.598217][ T5158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.600426][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.617194][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.618718][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.634618][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.645563][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.655728][ T5112] Bluetooth: hci4: command tx timeout [ 73.655777][ T5112] Bluetooth: hci3: command tx timeout [ 73.669219][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.680677][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.691211][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.701302][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.722185][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.733062][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.743615][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.755520][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.768014][ T5118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777127][ T5118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.786188][ T5118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.795065][ T5118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.852456][ T5119] veth0_macvtap: entered promiscuous mode [ 73.880323][ T5119] veth1_macvtap: entered promiscuous mode [ 73.981631][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.011878][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.026066][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.037003][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.052181][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.062904][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.073179][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.083780][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.095631][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.144068][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.159562][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.170330][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.183898][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.205638][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.217705][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.237101][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.262784][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.276554][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.340416][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.360706][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.395684][ T5119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.421302][ T5119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.456029][ T5119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474571][ T5119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.504326][ T2417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.517302][ T2417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.610439][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.631290][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.634525][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.658371][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.824000][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.878414][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.066135][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.110806][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.189463][ T5224] veth0_vlan: entered allmulticast mode [ 75.652157][ T5116] Bluetooth: hci1: command tx timeout [ 75.652165][ T5112] Bluetooth: hci0: command tx timeout [ 75.658507][ T5112] Bluetooth: hci2: command tx timeout [ 75.731951][ T5112] Bluetooth: hci3: command tx timeout [ 75.737419][ T5112] Bluetooth: hci4: command tx timeout [ 76.046132][ T5255] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 76.353547][ T5261] veth0_vlan: entered allmulticast mode [ 76.642730][ T5265] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.675007][ T5265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.151838][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.221624][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.909781][ T5305] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.072296][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.640053][ T5331] Bluetooth: MGMT ver 1.22 [ 78.669151][ T5333] veth0_vlan: entered allmulticast mode [ 78.890513][ T5334] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.629563][ T5368] hsr0: entered promiscuous mode [ 80.814386][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.841325][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.850826][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.861081][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.869898][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.878983][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.985188][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.196043][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.224279][ T5419] IPv6: Can't replace route, no match found [ 81.354550][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.537803][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.865100][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.905713][ T5411] chnl_net:caif_netlink_parms(): no params data found [ 81.978256][ T62] bridge_slave_1: left allmulticast mode [ 81.984214][ T62] bridge_slave_1: left promiscuous mode [ 82.024948][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.063738][ T62] bridge_slave_0: left allmulticast mode [ 82.087500][ T62] bridge_slave_0: left promiscuous mode [ 82.095727][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.874959][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.907911][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.928214][ T5116] Bluetooth: hci2: command tx timeout [ 82.969534][ T62] bond0 (unregistering): Released all slaves [ 82.997320][ T62] bond1 (unregistering): Released all slaves [ 83.158445][ T5455] bond0: option min_links: invalid value (18446744073709486080) [ 83.175014][ T5455] bond0: option min_links: allowed values 0 - 2147483647 [ 83.536197][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.568920][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.593306][ T5411] bridge_slave_0: entered allmulticast mode [ 83.605998][ T5411] bridge_slave_0: entered promiscuous mode [ 83.617222][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.643016][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.654697][ T5411] bridge_slave_1: entered allmulticast mode [ 83.662650][ T5488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.676417][ T5411] bridge_slave_1: entered promiscuous mode [ 83.814699][ T5492] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 83.898586][ T5411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.937516][ T29] audit: type=1800 audit(1717408274.406:2): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 84.018856][ T5411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.068703][ T62] hsr_slave_0: left promiscuous mode [ 84.076817][ T62] hsr_slave_1: left promiscuous mode [ 84.085538][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.093662][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.134472][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.146001][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.211760][ T62] veth1_macvtap: left promiscuous mode [ 84.217946][ T62] veth0_macvtap: left promiscuous mode [ 84.233433][ T62] veth1_vlan: left promiscuous mode [ 84.241154][ T62] veth0_vlan: left promiscuous mode [ 84.675282][ T62] team0 (unregistering): Port device team_slave_1 removed [ 84.713670][ T62] team0 (unregistering): Port device team_slave_0 removed [ 85.009760][ T5116] Bluetooth: hci2: command tx timeout [ 85.190778][ T5411] team0: Port device team_slave_0 added [ 85.231435][ T5411] team0: Port device team_slave_1 added [ 85.361673][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.389193][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.446589][ T5411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.512712][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.541864][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.619538][ T5411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.655305][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.890913][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.055106][ T5541] veth1_macvtap: left promiscuous mode [ 86.062710][ T5541] macsec0: entered promiscuous mode [ 86.068401][ T5541] macsec0: entered allmulticast mode [ 86.129023][ T5546] veth1_macvtap: entered promiscuous mode [ 86.139567][ T5546] veth1_macvtap: entered allmulticast mode [ 86.146243][ T5546] macsec0: left promiscuous mode [ 86.151731][ T5546] macsec0: left allmulticast mode [ 86.157081][ T5546] veth1_macvtap: left allmulticast mode [ 86.187181][ T5411] hsr_slave_0: entered promiscuous mode [ 86.210890][ T5411] hsr_slave_1: entered promiscuous mode [ 86.220159][ T5411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.232853][ T5411] Cannot create hsr debugfs directory [ 86.352683][ T5555] Bluetooth: MGMT ver 1.22 [ 86.544649][ T5560] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 86.554063][ T5560] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 86.563319][ T5560] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.705840][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.843340][ T5572] veth1_macvtap: left promiscuous mode [ 86.864991][ T5572] macsec0: entered promiscuous mode [ 86.874041][ T5572] macsec0: entered allmulticast mode [ 86.903101][ T5574] veth1_macvtap: entered promiscuous mode [ 86.920746][ T5574] veth1_macvtap: entered allmulticast mode [ 86.927220][ T5574] macsec0: left promiscuous mode [ 86.948351][ T5574] macsec0: left allmulticast mode [ 86.961872][ T5574] veth1_macvtap: left allmulticast mode [ 86.996114][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 87.089163][ T5116] Bluetooth: hci2: command tx timeout [ 87.170714][ T5411] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.181330][ T5411] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.210834][ T5411] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.223941][ T5411] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.433124][ T5411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.471496][ T5411] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.515254][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.522492][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.538029][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.545313][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.562395][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 87.659718][ T9] cfg80211: failed to load regulatory.db [ 88.062691][ T5411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.087240][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.183080][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 88.184135][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.199940][ T5628] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 88.210629][ T5637] bond1: entered allmulticast mode [ 88.236590][ T5637] batadv1: entered allmulticast mode [ 88.287415][ T5628] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 88.314407][ T5635] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 88.335573][ T5628] batadv1: left allmulticast mode [ 88.355855][ T5628] bond1 (unregistering): Released all slaves [ 88.505462][ T5411] veth0_vlan: entered promiscuous mode [ 88.595650][ T5411] veth1_vlan: entered promiscuous mode [ 88.726260][ T5411] veth0_macvtap: entered promiscuous mode [ 88.800495][ T5650] wg2: entered promiscuous mode [ 88.838814][ T5650] wg2: entered allmulticast mode [ 88.887764][ T5411] veth1_macvtap: entered promiscuous mode [ 88.983023][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.028217][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.043138][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.058529][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.096665][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.122451][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.142959][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.165427][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.178381][ T5116] Bluetooth: hci2: command tx timeout [ 89.197507][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.269616][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.308279][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.329270][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.350094][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.368351][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.398292][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.418188][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.439169][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.472542][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.502926][ T5411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.520317][ T5411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.538538][ T5411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560280][ T5411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.769585][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.808336][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.862978][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.891170][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.935659][ T29] audit: type=1804 audit(1717408280.406:3): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3558669541/syzkaller.UenYHl/42/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 89.986320][ T5688] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.127181][ T5693] wg2: entered promiscuous mode [ 90.136570][ T5693] wg2: entered allmulticast mode [ 90.304689][ T5703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.510324][ T5714] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.667487][ T5723] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 90.692646][ T5723] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.744854][ T5721] wg2: entered promiscuous mode [ 90.770372][ T5721] wg2: entered allmulticast mode [ 91.271140][ T5753] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.418966][ T5761] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 91.703407][ T5775] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 92.092589][ T5799] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.214989][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.265526][ T5805] veth1: entered allmulticast mode [ 92.405648][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.775883][ T5821] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.795398][ T5821] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.173961][ T5839] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.315137][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.448516][ T5856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.469416][ T5856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.502474][ T5857] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.525261][ T5857] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.004350][ T5883] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.058642][ T5883] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.312063][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.321738][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.332031][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.340359][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.349170][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.361484][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.457678][ T2455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.545743][ T2455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.595858][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 94.634297][ T2455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.699727][ T2455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.726704][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.733906][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.741297][ T5891] bridge_slave_0: entered allmulticast mode [ 94.748107][ T5891] bridge_slave_0: entered promiscuous mode [ 94.755742][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.763493][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.771241][ T5891] bridge_slave_1: entered allmulticast mode [ 94.779032][ T5891] bridge_slave_1: entered promiscuous mode [ 94.813176][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.827417][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.876614][ T5891] team0: Port device team_slave_0 added [ 94.886307][ T5891] team0: Port device team_slave_1 added [ 94.925299][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.933184][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.959737][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.979627][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.986612][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.014108][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.074071][ T2455] bridge_slave_1: left allmulticast mode [ 95.079983][ T2455] bridge_slave_1: left promiscuous mode [ 95.085727][ T2455] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.096771][ T2455] bridge_slave_0: left allmulticast mode [ 95.104167][ T2455] bridge_slave_0: left promiscuous mode [ 95.111884][ T2455] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.392812][ T2455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.404571][ T2455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.415453][ T2455] bond0 (unregistering): Released all slaves [ 95.435521][ T5891] hsr_slave_0: entered promiscuous mode [ 95.442436][ T5891] hsr_slave_1: entered promiscuous mode [ 95.453785][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.462188][ T5891] Cannot create hsr debugfs directory [ 95.730775][ T2455] hsr_slave_0: left promiscuous mode [ 95.736745][ T2455] hsr_slave_1: left promiscuous mode [ 95.743913][ T2455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.753376][ T2455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.764661][ T2455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.772398][ T2455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.791099][ T2455] veth1_macvtap: left promiscuous mode [ 95.796640][ T2455] veth0_macvtap: left promiscuous mode [ 95.802483][ T2455] veth1_vlan: left promiscuous mode [ 95.828585][ T2455] veth0_vlan: left promiscuous mode [ 96.267280][ T29] audit: type=1804 audit(1717408286.736:4): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2369132623/syzkaller.wFVSUJ/72/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 96.448783][ T5116] Bluetooth: hci2: command tx timeout [ 96.921994][ T2455] team0 (unregistering): Port device team_slave_1 removed [ 96.927417][ T5940] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.984717][ T2455] team0 (unregistering): Port device team_slave_0 removed [ 97.588357][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.840789][ T5891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.883082][ T5891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.915179][ T5891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.944768][ T5891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.136509][ T5974] bond0: entered promiscuous mode [ 98.147142][ T5974] bond_slave_0: entered promiscuous mode [ 98.168685][ T5974] bond_slave_1: entered promiscuous mode [ 98.337081][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.406441][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.441049][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.448269][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.495370][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.502710][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.529403][ T5116] Bluetooth: hci2: command tx timeout [ 98.819273][ T6011] bond0: entered promiscuous mode [ 98.826451][ T6011] bond_slave_0: entered promiscuous mode [ 98.832564][ T6011] bond_slave_1: entered promiscuous mode [ 99.008017][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.121535][ T5891] veth0_vlan: entered promiscuous mode [ 99.158535][ T5891] veth1_vlan: entered promiscuous mode [ 99.246694][ T5891] veth0_macvtap: entered promiscuous mode [ 99.259737][ T6027] syz-executor.1[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.259980][ T6027] syz-executor.1[6027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.290948][ T5891] veth1_macvtap: entered promiscuous mode [ 99.322767][ T6029] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 99.385561][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.405944][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.433524][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.456812][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.476234][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.489384][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.500285][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.511418][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.525406][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.542273][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.562949][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.576595][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.588280][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.608623][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.626453][ T6012] dccp_close: ABORT with 32 bytes unread [ 99.627691][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.654394][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.672578][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.686913][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.707367][ T6029] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 99.740613][ T6029] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 99.755054][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.777317][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.786803][ T6029] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 99.787088][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.811960][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.981038][ T6055] Cannot find del_set index 0 as target [ 100.010938][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.032835][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.096149][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.107238][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.511168][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.609075][ T5116] Bluetooth: hci2: command tx timeout [ 101.429143][ T6133] syz-executor.0[6133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.429305][ T6133] syz-executor.0[6133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.514340][ T6093] dccp_close: ABORT with 32 bytes unread [ 101.822222][ T6153] Cannot find del_set index 0 as target [ 101.979795][ T6160] syz-executor.1[6160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.980032][ T6160] syz-executor.1[6160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.285031][ T6178] macvlan2: entered promiscuous mode [ 102.302926][ T6178] macvlan2: entered allmulticast mode [ 102.309097][ T6178] bridge0: entered promiscuous mode [ 102.314607][ T6178] bridge0: entered allmulticast mode [ 102.327586][ T6178] team0: Port device macvlan2 added [ 102.437228][ T6182] Cannot find del_set index 0 as target [ 102.688320][ T5112] Bluetooth: hci2: command tx timeout [ 102.757702][ T6198] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.801029][ T6198] bond0: entered promiscuous mode [ 102.817492][ T6198] bond_slave_0: entered promiscuous mode [ 102.826101][ T6198] bond_slave_1: entered promiscuous mode [ 102.841955][ T6200] macvlan2: entered promiscuous mode [ 102.847315][ T6200] macvlan2: entered allmulticast mode [ 102.864395][ T6200] bridge0: entered promiscuous mode [ 102.871041][ T6200] bridge0: entered allmulticast mode [ 102.882694][ T6200] team0: Port device macvlan2 added [ 102.922152][ T6198] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 103.055184][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.058448][ T6197] bond0: left promiscuous mode [ 103.084149][ T6197] bond_slave_0: left promiscuous mode [ 103.091951][ T6197] bond_slave_1: left promiscuous mode [ 103.160003][ T6212] Cannot find del_set index 0 as target [ 103.362938][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.396225][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 103.447323][ T6232] macvlan3: entered promiscuous mode [ 103.453842][ T6232] macvlan3: entered allmulticast mode [ 103.466267][ T6232] team0: Port device macvlan3 added [ 103.776215][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.911051][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.925319][ T6245] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 104.751128][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 104.768359][ T5112] Bluetooth: hci2: command 0x0405 tx timeout [ 104.857114][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.406750][ T6299] sctp: [Deprecated]: syz-executor.0 (pid 6299) Use of int in maxseg socket option. [ 105.406750][ T6299] Use struct sctp_assoc_value instead [ 105.463844][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.474148][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.483293][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.493268][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.510979][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 105.523461][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.647897][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.648747][ T6308] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.795046][ T6313] sctp: [Deprecated]: syz-executor.0 (pid 6313) Use of int in maxseg socket option. [ 105.795046][ T6313] Use struct sctp_assoc_value instead [ 105.832249][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.973904][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.137466][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.402325][ T6300] chnl_net:caif_netlink_parms(): no params data found [ 106.536626][ T6338] Cannot find set identified by id 0 to match [ 106.575630][ T11] bridge_slave_1: left allmulticast mode [ 106.585034][ T11] bridge_slave_1: left promiscuous mode [ 106.591084][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.634973][ T11] bridge_slave_0: left allmulticast mode [ 106.643111][ T11] bridge_slave_0: left promiscuous mode [ 106.658440][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.233730][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.243530][ T11] bond_slave_0: left promiscuous mode [ 107.254623][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.267872][ T11] bond_slave_1: left promiscuous mode [ 107.282958][ T11] bond0 (unregistering): Released all slaves [ 107.394631][ T6351] tun0: tun_chr_ioctl cmd 2147767520 [ 107.456406][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.465008][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.474667][ T6300] bridge_slave_0: entered allmulticast mode [ 107.482901][ T6300] bridge_slave_0: entered promiscuous mode [ 107.545875][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.555328][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.568508][ T5112] Bluetooth: hci1: command tx timeout [ 107.579384][ T6300] bridge_slave_1: entered allmulticast mode [ 107.596310][ T6300] bridge_slave_1: entered promiscuous mode [ 107.636696][ T6375] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 107.647819][ T6371] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.748322][ T6300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.766589][ T6300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.837043][ T11] hsr_slave_0: left promiscuous mode [ 107.846148][ T11] hsr_slave_1: left promiscuous mode [ 107.856093][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.871940][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.881300][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.894019][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.926318][ T11] veth1_macvtap: left promiscuous mode [ 107.940021][ T11] veth0_macvtap: left promiscuous mode [ 107.946184][ T11] veth1_vlan: left promiscuous mode [ 107.952013][ T11] veth0_vlan: left promiscuous mode [ 108.214232][ T6388] Cannot find set identified by id 0 to match [ 108.570928][ T11] team0 (unregistering): Port device team_slave_1 removed [ 108.608662][ T11] team0 (unregistering): Port device team_slave_0 removed [ 109.012074][ T6300] team0: Port device team_slave_0 added [ 109.102802][ T6300] team0: Port device team_slave_1 added [ 109.193868][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.216208][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.260833][ T6300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.273060][ T6402] tun0: tun_chr_ioctl cmd 2147767520 [ 109.300865][ T6300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.307868][ T6300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.391271][ T6300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.577513][ T6300] hsr_slave_0: entered promiscuous mode [ 109.606969][ T6300] hsr_slave_1: entered promiscuous mode [ 109.648312][ T5112] Bluetooth: hci1: command 0x041b tx timeout [ 110.156241][ T6419] tipc: Can't bind to reserved service type 0 [ 110.198691][ T6419] tipc: Started in network mode [ 110.203761][ T6419] tipc: Node identity ffffffff, cluster identity 4711 [ 110.215832][ T6421] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 110.221945][ T6419] tipc: Node number set to 4294967295 [ 110.225594][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.369130][ T6300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.392614][ T6300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.413147][ T6424] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.414951][ T6300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.438690][ T6424] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 110.451552][ T6300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.641682][ T6300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.691041][ T6300] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.714325][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.721548][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.747945][ T6433] netlink: 210596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.768755][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.775934][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.996688][ T6443] tipc: Started in network mode [ 111.009378][ T6443] tipc: Node identity ffffffff, cluster identity 4711 [ 111.031649][ T6443] tipc: Node number set to 4294967295 [ 111.197699][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.212733][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.213133][ T6451] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.336456][ T6300] veth0_vlan: entered promiscuous mode [ 111.392621][ T6300] veth1_vlan: entered promiscuous mode [ 111.489681][ T6300] veth0_macvtap: entered promiscuous mode [ 111.540619][ T6300] veth1_macvtap: entered promiscuous mode [ 111.590644][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.606704][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.617505][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.635015][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.653084][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.679667][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.693289][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.708517][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.722723][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.732811][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 111.746080][ T6463] vlan2: entered promiscuous mode [ 111.814199][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.840431][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.855950][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.857874][ T6471] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 111.866638][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.866659][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.896216][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.908511][ T6300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.920158][ T6300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.933443][ T6300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.956373][ T6472] tipc: Started in network mode [ 111.969556][ T6472] tipc: Node identity ffffffff, cluster identity 4711 [ 111.981073][ T6472] tipc: Node number set to 4294967295 [ 111.996216][ T6300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007364][ T6300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.035619][ T6300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.048897][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.053639][ T6300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.260875][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.284366][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.325282][ T6485] macvlan4: entered allmulticast mode [ 112.429190][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.445894][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.808390][ T5116] Bluetooth: hci1: command 0x041b tx timeout [ 114.027679][ T6565] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.583359][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.689494][ T6597] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (33024) [ 114.752892][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.903159][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.052326][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.329452][ T62] bridge_slave_1: left allmulticast mode [ 115.335189][ T62] bridge_slave_1: left promiscuous mode [ 115.367275][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.403376][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.415412][ T62] bridge_slave_0: left allmulticast mode [ 115.421864][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.431644][ T62] bridge_slave_0: left promiscuous mode [ 115.437323][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.441507][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.454224][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.454235][ T6629] Zero length message leads to an empty skb [ 115.478531][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.496157][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.888211][ T5112] Bluetooth: hci1: command 0x041b tx timeout [ 116.016957][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.029352][ T62] bond_slave_0: left promiscuous mode [ 116.037655][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.047393][ T62] bond_slave_1: left promiscuous mode [ 116.057420][ T62] bond0 (unregistering): Released all slaves [ 116.158983][ T62] tipc: Left network mode [ 116.487328][ T62] hsr_slave_0: left promiscuous mode [ 116.503064][ T62] hsr_slave_1: left promiscuous mode [ 116.519077][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.539640][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.559043][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.566664][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.596942][ T62] veth1_macvtap: left promiscuous mode [ 116.607481][ T62] veth0_macvtap: left promiscuous mode [ 116.623077][ T62] veth1_vlan: left promiscuous mode [ 117.147060][ T62] team0 (unregistering): Port device team_slave_1 removed [ 117.184759][ T62] team0 (unregistering): Port device team_slave_0 removed [ 117.537501][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.573183][ T5112] Bluetooth: hci4: command tx timeout [ 117.633164][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 117.978413][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.993470][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.015338][ T6622] bridge_slave_0: entered allmulticast mode [ 118.038668][ T6622] bridge_slave_0: entered promiscuous mode [ 118.061197][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.070140][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.088277][ T6701] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 118.092039][ T6622] bridge_slave_1: entered allmulticast mode [ 118.109052][ T6701] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 118.110527][ T6622] bridge_slave_1: entered promiscuous mode [ 118.132985][ T6701] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.201111][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.225237][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.273347][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.480617][ T6622] team0: Port device team_slave_0 added [ 118.507457][ T6622] team0: Port device team_slave_1 added [ 118.577220][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.584361][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.624297][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.637676][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.645049][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.677476][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.697466][ T6723] team0: entered promiscuous mode [ 118.703380][ T6723] team_slave_0: entered promiscuous mode [ 118.713706][ T6723] team_slave_1: entered promiscuous mode [ 118.740182][ T6724] team_slave_0: entered allmulticast mode [ 118.776475][ T6724] team0: Port device team_slave_0 removed [ 118.817001][ T6721] team0: left promiscuous mode [ 118.822851][ T6721] team_slave_1: left promiscuous mode [ 118.885777][ T6622] hsr_slave_0: entered promiscuous mode [ 118.897170][ T6622] hsr_slave_1: entered promiscuous mode [ 118.904168][ T6622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.912344][ T6622] Cannot create hsr debugfs directory [ 119.433985][ T6752] hsr0: entered promiscuous mode [ 119.470960][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.480511][ T6753] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 119.499804][ T6753] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.509344][ T6753] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.518867][ T6753] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.527606][ T6753] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.542102][ T6753] vxlan0: entered promiscuous mode [ 119.649518][ T5112] Bluetooth: hci4: command tx timeout [ 119.842998][ T6622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.872309][ T6622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.006955][ T6622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.029970][ T6622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.206144][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.232791][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.255586][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.262822][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.279851][ T6778] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 120.287977][ T6778] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.306367][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.313592][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.427197][ T6784] hsr0: entered promiscuous mode [ 120.472340][ T6788] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 120.780902][ T6802] team0: entered promiscuous mode [ 120.787135][ T6802] team_slave_0: entered promiscuous mode [ 120.794696][ T6802] team_slave_1: entered promiscuous mode [ 120.805653][ T6802] team_slave_0: entered allmulticast mode [ 120.841285][ T6802] team0: Port device team_slave_0 removed [ 120.886161][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.895121][ T6801] team0: left promiscuous mode [ 120.901953][ T6801] team_slave_1: left promiscuous mode [ 120.945129][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.964390][ T6807] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 120.993650][ T6809] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.026750][ T6622] veth0_vlan: entered promiscuous mode [ 121.072659][ T6622] veth1_vlan: entered promiscuous mode [ 121.133333][ T6622] veth0_macvtap: entered promiscuous mode [ 121.156721][ T6622] veth1_macvtap: entered promiscuous mode [ 121.186944][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.223297][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.237695][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.259973][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.283374][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.294006][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.310585][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.325421][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.347288][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.387296][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.411543][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.433103][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.447516][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.465092][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.477860][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.495442][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.506342][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.518329][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.555039][ T6622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.567112][ T6622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.577826][ T6622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.587818][ T6622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.722250][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.742841][ T5112] Bluetooth: hci4: command tx timeout [ 121.757106][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.785540][ T5191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.816238][ T5191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.207856][ T6850] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.813656][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.866109][ T6880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.032954][ T6887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.061122][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.339793][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.771813][ T6915] tap0: tun_chr_ioctl cmd 1074025672 [ 123.778551][ T6915] tap0: ignored: set checksum enabled [ 123.793423][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.808926][ T5112] Bluetooth: hci4: command tx timeout [ 123.856005][ T6919] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.865828][ T6919] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.063169][ T6927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.108783][ T6927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.122007][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.144049][ T6930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.854952][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.319799][ T6965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.339922][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.363219][ T6966] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.386238][ T6965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.441996][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.474649][ T6969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.661101][ T7011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.683711][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.705432][ T7011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.717102][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.871381][ T7017] ip6gretap0: entered promiscuous mode [ 126.880729][ T7017] batadv_slave_0: entered promiscuous mode [ 126.887834][ T7017] hsr1: entered allmulticast mode [ 126.894596][ T7017] ip6gretap0: entered allmulticast mode [ 126.900300][ T7017] batadv_slave_0: entered allmulticast mode [ 127.088616][ T7025] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.098566][ T7025] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.433825][ T7034] bond0: entered promiscuous mode [ 127.448230][ T7034] bond_slave_0: entered promiscuous mode [ 127.456756][ T7034] bond_slave_1: entered promiscuous mode [ 128.018226][ T7066] ip6erspan0: entered promiscuous mode [ 128.059188][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.235353][ T7075] xt_TCPMSS: Only works on TCP SYN packets [ 128.305961][ T7079] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.316918][ T7079] 0ªX¹¦D: renamed from gretap0 (while UP) [ 128.330650][ T7079] 0ªX¹¦D: entered allmulticast mode [ 128.336612][ T7079] A link change request failed with some changes committed already. Interface c0ªX¹¦D may have been left with an inconsistent configuration, please check. [ 128.452392][ T7084] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.473095][ T7084] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.714653][ T7098] ip6erspan0: entered promiscuous mode [ 128.772456][ T7100] xt_TCPMSS: Only works on TCP SYN packets [ 128.997363][ T7110] bond0: entered promiscuous mode [ 129.003992][ T7110] bond_slave_0: entered promiscuous mode [ 129.011618][ T7110] bond_slave_1: entered promiscuous mode [ 129.035607][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.120246][ T7115] ip6erspan0: entered promiscuous mode [ 129.421767][ T7129] ip6erspan0: entered promiscuous mode [ 129.558342][ T5163] IPVS: starting estimator thread 0... [ 129.622927][ T7141] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.644606][ T7141] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.658323][ T7138] IPVS: using max 22 ests per chain, 52800 per kthread [ 129.663739][ T7141] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 129.683252][ T7141] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 130.172421][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.267116][ T7168] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 130.276030][ T7168] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.877590][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.888473][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.896709][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.905843][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.915939][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 130.923619][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.974389][ T7200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.980107][ T7202] sock: sock_timestamping_bind_phc: sock not bind to device [ 131.358885][ T7216] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 131.452574][ T7216] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 131.525715][ T7195] chnl_net:caif_netlink_parms(): no params data found [ 131.703017][ T7235] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 131.767400][ T7241] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 131.839881][ T7195] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.881379][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.907653][ T7195] bridge_slave_0: entered allmulticast mode [ 131.915180][ T7195] bridge_slave_0: entered promiscuous mode [ 131.940238][ T7195] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.947529][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.972124][ T7256] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 131.975341][ T7195] bridge_slave_1: entered allmulticast mode [ 131.999857][ T7195] bridge_slave_1: entered promiscuous mode [ 132.124470][ T7195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.161059][ T7195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.251591][ T7195] team0: Port device team_slave_0 added [ 132.269463][ T7195] team0: Port device team_slave_1 added [ 132.296595][ T7272] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.345000][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.356408][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.429280][ T7195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.452963][ T7272] bond0: option mode: unable to set because the bond device has slaves [ 132.489881][ T7195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.508935][ T7195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.567343][ T7195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.692252][ T7195] hsr_slave_0: entered promiscuous mode [ 132.706865][ T7195] hsr_slave_1: entered promiscuous mode [ 132.713188][ T7282] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 132.723408][ T7195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.736399][ T7195] Cannot create hsr debugfs directory [ 133.021184][ T5116] Bluetooth: hci5: command tx timeout [ 133.266010][ T7195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.507145][ T7195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.700985][ T7195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.738773][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.748397][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.900882][ T7302] netlink: 'syz-executor.3': attribute type 298 has an invalid length. [ 133.905243][ T7195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.189052][ T7195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.223151][ T7195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.256734][ T7195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.285075][ T7195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.452575][ T7319] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.461819][ T7319] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.470730][ T7319] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.479581][ T7319] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.694797][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.739815][ T7326] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 134.801364][ T7195] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.853750][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.860969][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.879882][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.887176][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.088940][ T5116] Bluetooth: hci5: command tx timeout [ 135.360473][ T7195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.697120][ T7350] validate_nla: 1 callbacks suppressed [ 135.697139][ T7350] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 135.813344][ T7195] veth0_vlan: entered promiscuous mode [ 135.873833][ T7195] veth1_vlan: entered promiscuous mode [ 135.933892][ T7195] veth0_macvtap: entered promiscuous mode [ 135.945412][ T7195] veth1_macvtap: entered promiscuous mode [ 135.975668][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.010886][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.021346][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.032202][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.042192][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.053975][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.071165][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.099658][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.119297][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.135769][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.156710][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.185950][ T7358] veth0Wvlan: renamed from syz_tun (while UP) [ 136.224694][ T7359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.334433][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.389243][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.419302][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.449228][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.480658][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.508155][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.518031][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.550014][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.568443][ T7195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.588122][ T7195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.619794][ T7195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.648031][ T7195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.678166][ T7195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.698201][ T7195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.706959][ T7195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.946478][ T5158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.982074][ T5158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.049229][ T7382] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 137.137066][ T7382] bond1: entered promiscuous mode [ 137.165679][ T7384] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.178436][ T5116] Bluetooth: hci5: command tx timeout [ 137.258160][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.305100][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.601206][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.697372][ T7435] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 138.780930][ T7435] syzkaller0: entered promiscuous mode [ 138.806999][ T7435] syzkaller0: entered allmulticast mode [ 138.943005][ T29] audit: type=1804 audit(1717408329.416:5): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir74705687/syzkaller.mWVrXm/68/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 139.248546][ T5116] Bluetooth: hci5: command tx timeout [ 142.055112][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.351576][ T7504] pim6reg: entered allmulticast mode [ 142.732978][ T7526] IPv6: Can't replace route, no match found [ 143.061988][ T7543] netlink: 14568 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.185931][ T7545] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 143.198932][ T7552] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 143.243438][ T7555] openvswitch: netlink: Unknown key attributes 1 [ 143.361857][ T7561] IPv6: Can't replace route, no match found [ 143.948944][ T7586] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 144.161653][ T29] audit: type=1804 audit(1717408334.626:6): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2369132623/syzkaller.wFVSUJ/231/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 144.457312][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.510032][ T7621] xt_bpf: check failed: parse error [ 144.854961][ T29] audit: type=1804 audit(1717408335.326:7): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3560596505/syzkaller.iVc6ub/17/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 175.129228][ T5112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.139336][ T5112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.147688][ T5112] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.168239][ T5112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.176268][ T5112] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 175.184887][ T5112] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.226625][ T5116] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.240027][ T5116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.258718][ T5116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.278846][ T5116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.291986][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 175.299578][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.307547][ T5123] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 175.318672][ T5112] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 175.331849][ T5112] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 175.355480][ T5112] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 175.363999][ T5112] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 175.371853][ T5112] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 175.615556][ T5112] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 175.624953][ T5112] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 175.634053][ T5112] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 175.644015][ T5112] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 175.652847][ T5112] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 175.667343][ T5112] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 175.691985][ T5112] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 175.703625][ T5112] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 175.713427][ T5112] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 175.725498][ T5112] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 175.734604][ T5112] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 175.742444][ T5112] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 177.249214][ T5125] Bluetooth: hci6: command tx timeout [ 177.408426][ T5125] Bluetooth: hci8: command tx timeout [ 177.408455][ T5112] Bluetooth: hci7: command tx timeout [ 177.738279][ T5125] Bluetooth: hci9: command tx timeout [ 177.808905][ T5125] Bluetooth: hci10: command tx timeout [ 179.328333][ T5125] Bluetooth: hci6: command tx timeout [ 179.488243][ T5125] Bluetooth: hci7: command tx timeout [ 179.488257][ T5112] Bluetooth: hci8: command tx timeout [ 179.819263][ T5125] Bluetooth: hci9: command tx timeout [ 179.889536][ T5125] Bluetooth: hci10: command tx timeout [ 181.408378][ T5125] Bluetooth: hci6: command tx timeout [ 181.573627][ T5112] Bluetooth: hci8: command tx timeout [ 181.585574][ T5125] Bluetooth: hci7: command tx timeout [ 181.888245][ T5125] Bluetooth: hci9: command tx timeout [ 181.968304][ T5125] Bluetooth: hci10: command tx timeout [ 183.488473][ T5125] Bluetooth: hci6: command tx timeout [ 183.651091][ T5125] Bluetooth: hci7: command tx timeout [ 183.657362][ T5112] Bluetooth: hci8: command tx timeout [ 183.968226][ T5112] Bluetooth: hci9: command tx timeout [ 184.053669][ T5112] Bluetooth: hci10: command tx timeout [ 192.135223][ T5125] Bluetooth: hci3: command 0x0406 tx timeout [ 195.181832][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.188434][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.735926][ T5125] Bluetooth: hci2: command 0x0405 tx timeout [ 227.968348][ T5125] Bluetooth: hci1: command 0x041b tx timeout [ 238.208417][ T5125] Bluetooth: hci4: command 0x0406 tx timeout [ 240.169461][ T5125] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 240.182867][ T5125] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 240.191371][ T5125] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 240.200559][ T5125] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 240.214257][ T5125] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 240.225405][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 240.236661][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 240.278210][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 240.292420][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 240.300718][ T5116] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 240.311532][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 240.332103][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 240.339401][ T5116] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 240.359819][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 240.367410][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 240.375112][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 240.397703][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 240.406279][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 240.566393][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 240.575596][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 240.598470][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 240.607587][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 240.618725][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 240.626982][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 240.755899][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 240.765959][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 240.775790][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 240.796252][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 240.804288][ T53] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 240.813075][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 242.288572][ T5125] Bluetooth: hci11: command tx timeout [ 242.448381][ T53] Bluetooth: hci13: command tx timeout [ 242.456355][ T5125] Bluetooth: hci12: command tx timeout [ 242.688359][ T5125] Bluetooth: hci14: command tx timeout [ 242.850000][ T5125] Bluetooth: hci15: command tx timeout [ 244.368634][ T5125] Bluetooth: hci11: command tx timeout [ 244.538238][ T5125] Bluetooth: hci12: command tx timeout [ 244.543795][ T5125] Bluetooth: hci13: command tx timeout [ 244.768344][ T5125] Bluetooth: hci14: command tx timeout [ 244.928374][ T5125] Bluetooth: hci15: command tx timeout [ 246.448862][ T5125] Bluetooth: hci11: command tx timeout [ 246.608385][ T53] Bluetooth: hci12: command tx timeout [ 246.616105][ T5125] Bluetooth: hci13: command tx timeout [ 246.848163][ T5125] Bluetooth: hci14: command tx timeout [ 247.008587][ T53] Bluetooth: hci15: command tx timeout [ 248.528728][ T5125] Bluetooth: hci11: command tx timeout [ 248.688282][ T5125] Bluetooth: hci13: command tx timeout [ 248.693929][ T5125] Bluetooth: hci12: command tx timeout [ 248.928464][ T5125] Bluetooth: hci14: command tx timeout [ 249.090029][ T5125] Bluetooth: hci15: command tx timeout [ 256.614660][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.624092][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.928350][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 289.888520][ T30] INFO: task syz-executor.2:7623 blocked for more than 143 seconds. [ 289.896560][ T30] Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 [ 289.917568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.930515][ T30] task:syz-executor.2 state:D stack:26112 pid:7623 tgid:7622 ppid:5891 flags:0x00000006 2024/06/03 09:54:40 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 289.978249][ T30] Call Trace: [ 289.981597][ T30] [ 289.984574][ T30] __schedule+0x17e8/0x4a20 [ 289.997076][ T30] ? __pfx___schedule+0x10/0x10 [ 290.011164][ T30] ? __pfx_lock_release+0x10/0x10 [ 290.016252][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 290.038166][ T30] ? schedule+0x90/0x320 [ 290.042482][ T30] schedule+0x14b/0x320 [ 290.046667][ T30] schedule_preempt_disabled+0x13/0x30 [ 290.068182][ T30] __mutex_lock+0x6a4/0xd70 [ 290.072767][ T30] ? __mutex_lock+0x527/0xd70 [ 290.077467][ T30] ? ethnl_default_set_doit+0x38f/0x900 [ 290.108384][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 290.113495][ T30] ? ethnl_set_rings_validate+0x894/0x9b0 [ 290.131406][ T30] ethnl_default_set_doit+0x38f/0x900 [ 290.136965][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 290.164678][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 290.178267][ T30] genl_rcv_msg+0xb14/0xec0 [ 290.183701][ T30] ? mark_lock+0x9a/0x350 [ 290.208341][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.213465][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 290.237880][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 290.265623][ T30] ? __pfx___might_resched+0x10/0x10 [ 290.271096][ T30] netlink_rcv_skb+0x1e3/0x430 [ 290.275886][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 290.308251][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.313626][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 290.338071][ T30] genl_rcv+0x28/0x40 [ 290.342125][ T30] netlink_unicast+0x7ea/0x980 [ 290.346928][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 290.395685][ T30] ? __virt_addr_valid+0x183/0x520 [ 290.400964][ T30] ? __check_object_size+0x49c/0x900 [ 290.406286][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 290.435625][ T30] netlink_sendmsg+0x8db/0xcb0 [ 290.440586][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.445907][ T30] ? __import_iovec+0x536/0x820 [ 290.458380][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 290.463380][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 290.478122][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 290.483684][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [