last executing test programs: 3.845059007s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x9c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 3.761354115s ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f050e00f0e8120006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000063c0)={@in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x0, 0x20, 0x0, "56dc0785cc575b945b486b69b51d337476b8bfefc25e0425a49db0799a4e3a5f5013e273707783df2c043f9115f6a3161c811fb862c277a3115186050f1c18ec6257450a3d34f1d11161d9caa549cde3"}, 0xd8) splice(r1, &(0x7f00000000c0)=0xfffffffffffffc00, r3, &(0x7f0000000140)=0xdccc, 0x7, 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="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", 0x23d, 0x4000000, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x8, 0x0) 3.613053499s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.538272711s ago: executing program 3: unshare(0x20040600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r4}, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="02", 0x1, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 3.285758734s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}}, 0x0) 3.231423117s ago: executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x4c, 0x4, 0x0, 0x0, 0x130, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x34, 0xe3, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x7ff}, {@broadcast, 0x80000000}, {@multicast1, 0xd23}, {@local, 0x4e}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @lsrr={0x83, 0xb, 0x4, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xffff0000}]}, @timestamp={0x44, 0x8, 0x51, 0x0, 0x2, [0x101]}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0x0, [{@local, 0x3}, {@private=0xa010101, 0x7fff}, {@local, 0x6}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x1}, {@rand_addr, 0x20}, {@empty, 0xfffffff8}, {@local}, {@multicast2, 0x9}]}, @ssrr={0x89, 0xf, 0x4, [@remote, @multicast2, @local]}, @cipso={0x86, 0x2f, 0x2, [{0x0, 0x6, "29648d3c"}, {0x1, 0x12, "b93a3b5712b90a27b88ca8530873f0a3"}, {0x7, 0x11, "f9e3aee3b73f04c61d22bb914bf0df"}]}, @rr={0x7, 0x23, 0xaf, [@dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101, @broadcast, @broadcast, @empty, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0xea, 0x0, 0x0, [0x4, 0x4, 0x9, 0x80000000, 0x9]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@private1, 0x2a, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x81, 0x20, 0x8, 0x5}}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="dd0000eb", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf252b0000000c00990007000000180000000400440078002a00827201ee0104000000080211000001ff010000ff7f0000541a00000805ffffffffffffff7f000000ffffffffffff00000000010802110000000900000001ffffffffffffff7f0000050802110000000200000000ffffffffffff00000000050802110000010100000004ffffffffffffff7f0000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8000000160085020000000000000000ff020000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e00000010000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7dbc409921c129680f"], 0xf8}}, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 3.147056748s ago: executing program 2: unshare(0x6020400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000040), 0x4) 3.085765734s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f096588b967481241a87860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.94087745s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004c00)={{r2, 0x0, 0x1000, 0x3, 0x7f, 0x8, 0x1000000001b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x6}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='jbd2_handle_stats\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) bpf$BPF_PROG_QUERY(0x8, &(0x7f00000003c0)={@ifindex, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000040)) 2.841982433s ago: executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000140a020000000000000000000a0000030900010073797a31000000000c00064000000000000000050900020073797a310000000038000000090a010400000000000000000700000008000a40000000000900020073797a310000000008000c40000080010800054000000021600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003400038030000080080003400000000124000b800c000180080001006669620007"], 0xf8}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xab8aaee, &(0x7f0000000300)}, 0x10) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) 2.618325716s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001fc0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}}, 0x0) 2.543274568s ago: executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000101475dc00000000000000000800030000080000080001"], 0x20}}, 0x0) 2.420107107s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) 2.155318697s ago: executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x4c, 0x4, 0x0, 0x0, 0x130, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x34, 0xe3, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x7ff}, {@broadcast, 0x80000000}, {@multicast1, 0xd23}, {@local, 0x4e}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @lsrr={0x83, 0xb, 0x4, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0xffff0000}]}, @timestamp={0x44, 0x8, 0x51, 0x0, 0x2, [0x101]}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0x0, [{@local, 0x3}, {@private=0xa010101, 0x7fff}, {@local, 0x6}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x1}, {@rand_addr, 0x20}, {@empty, 0xfffffff8}, {@local}, {@multicast2, 0x9}]}, @ssrr={0x89, 0xf, 0x4, [@remote, @multicast2, @local]}, @cipso={0x86, 0x2f, 0x2, [{0x0, 0x6, "29648d3c"}, {0x1, 0x12, "b93a3b5712b90a27b88ca8530873f0a3"}, {0x7, 0x11, "f9e3aee3b73f04c61d22bb914bf0df"}]}, @rr={0x7, 0x23, 0xaf, [@dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101, @broadcast, @broadcast, @empty, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0xea, 0x0, 0x0, [0x4, 0x4, 0x9, 0x80000000, 0x9]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@private1, 0x2a, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x81, 0x20, 0x8, 0x5}}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="dd0000eb", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf252b0000000c00990007000000180000000400440078002a00827201ee0104000000080211000001ff010000ff7f0000541a00000805ffffffffffffff7f000000ffffffffffff00000000010802110000000900000001ffffffffffffff7f0000050802110000000200000000ffffffffffff00000000050802110000010100000004ffffffffffffff7f0000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="f8000000160085020000000000000000ff020000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e00000010000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7dbc409921c129680f"], 0xf8}}, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 2.150452218s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010300000020"], 0xfce) 1.742807328s ago: executing program 2: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x3, &(0x7f00000002c0), 0x4) 1.710372489s ago: executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r2}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000340)={&(0x7f0000000240)="4bd563fa7b07f91c35", 0x9}}, 0x8090) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'vcan0\x00'}) 1.512112057s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x54}}, 0x0) 906.225322ms ago: executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) select(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 774.693269ms ago: executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x8, 0x0, 0x0, @private0, @mcast2, {[@routing={0x29, 0x0, 0x1, 0x2b}]}}}}}, 0x0) 708.120016ms ago: executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 682.702523ms ago: executing program 1: bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x46, &(0x7f0000001100)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ni={0x8c}}}}}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}]}}]}, 0x44}}, 0x0) 635.317301ms ago: executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000d80)={0x41}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0}, 0x0) 558.019203ms ago: executing program 2: r0 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_emit_ethernet(0x63, &(0x7f0000000040)={@broadcast, @local, @void, {@llc_tr={0x11, {@llc={0x6, 0x8e, "9080", "0b7aa3f87bf094df1836aed719c34df07a208b939b1cc229840e60c89413d46fd87dfae63fa2a1722ecef3f53c6ac56749bc38f25aafaf8e843ab5b775b9ab4400d7b81e0d69f87f8c88549c59d9c7d089"}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xbb}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000200)="f392e61d29d841bb7b965f39198dd0e387ee5c8e84dd82a5158055b41568c023737c861837a8091ec17a904353f4bbb8", 0x30}], 0x1}}], 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'pim6reg\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x5, &(0x7f0000000440)='\x00', 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000000141000000140017"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40804) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 488.317893ms ago: executing program 4: r0 = socket(0x840000000002, 0x3, 0xff) unshare(0x400) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) 366.863772ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0) 264.433716ms ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 177.818961ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 101.362458ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x54}}, 0x0) 0s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010300000020"], 0xfce) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. 2024/06/10 14:35:46 fuzzer started 2024/06/10 14:35:46 dialing manager at 10.128.0.169:30016 [ 53.659452][ T5088] cgroup: Unknown subsys name 'net' [ 53.859845][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/10 14:35:48 starting 5 executor processes [ 54.929518][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.941943][ T5089] syz-executor (5089) used greatest stack depth: 18800 bytes left [ 55.420097][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.429323][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.438955][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.447759][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.455861][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.463574][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.572439][ T4490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.581395][ T4490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.626049][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.634406][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.643754][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.652519][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.660291][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.680336][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.704602][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.712363][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.716536][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.720562][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.733857][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.735002][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.742596][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.749601][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.755684][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.762941][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.776356][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.776535][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.794483][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.825452][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.833838][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.842077][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.113324][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 56.367189][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 56.377843][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.386138][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.393649][ T5108] bridge_slave_0: entered allmulticast mode [ 56.401347][ T5108] bridge_slave_0: entered promiscuous mode [ 56.430562][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 56.455601][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.462856][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.470278][ T5108] bridge_slave_1: entered allmulticast mode [ 56.477084][ T5108] bridge_slave_1: entered promiscuous mode [ 56.556106][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.613605][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.654723][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.662497][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.669919][ T5111] bridge_slave_0: entered allmulticast mode [ 56.678545][ T5111] bridge_slave_0: entered promiscuous mode [ 56.706417][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 56.727230][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.734442][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.742237][ T5111] bridge_slave_1: entered allmulticast mode [ 56.749336][ T5111] bridge_slave_1: entered promiscuous mode [ 56.771572][ T5108] team0: Port device team_slave_0 added [ 56.825730][ T5108] team0: Port device team_slave_1 added [ 56.889036][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.902981][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.944989][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.952673][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.961043][ T5113] bridge_slave_0: entered allmulticast mode [ 56.968653][ T5113] bridge_slave_0: entered promiscuous mode [ 56.977922][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.985738][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.993482][ T5113] bridge_slave_1: entered allmulticast mode [ 57.001613][ T5113] bridge_slave_1: entered promiscuous mode [ 57.033785][ T5111] team0: Port device team_slave_0 added [ 57.044256][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.051818][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.078188][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.092339][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.099466][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.126146][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.162085][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 57.173588][ T5111] team0: Port device team_slave_1 added [ 57.199398][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.206914][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.214330][ T5116] bridge_slave_0: entered allmulticast mode [ 57.221393][ T5116] bridge_slave_0: entered promiscuous mode [ 57.231040][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.238379][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.246500][ T5116] bridge_slave_1: entered allmulticast mode [ 57.253315][ T5116] bridge_slave_1: entered promiscuous mode [ 57.318521][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.350659][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.357998][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.384357][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.410108][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.421729][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.439459][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.446678][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.473945][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.503363][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.548254][ T5108] hsr_slave_0: entered promiscuous mode [ 57.554736][ T5108] hsr_slave_1: entered promiscuous mode [ 57.576104][ T5119] Bluetooth: hci0: command tx timeout [ 57.591288][ T5113] team0: Port device team_slave_0 added [ 57.637166][ T5113] team0: Port device team_slave_1 added [ 57.647115][ T5116] team0: Port device team_slave_0 added [ 57.663970][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.671708][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.679174][ T5120] bridge_slave_0: entered allmulticast mode [ 57.686632][ T5120] bridge_slave_0: entered promiscuous mode [ 57.719092][ T5116] team0: Port device team_slave_1 added [ 57.730331][ T5111] hsr_slave_0: entered promiscuous mode [ 57.736918][ T5111] hsr_slave_1: entered promiscuous mode [ 57.743422][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.752140][ T5111] Cannot create hsr debugfs directory [ 57.776191][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.783431][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.791283][ T5120] bridge_slave_1: entered allmulticast mode [ 57.798306][ T5120] bridge_slave_1: entered promiscuous mode [ 57.815261][ T5119] Bluetooth: hci1: command tx timeout [ 57.834092][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.841276][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.868261][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.882231][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.889311][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.916210][ T5119] Bluetooth: hci3: command tx timeout [ 57.921711][ T4490] Bluetooth: hci4: command tx timeout [ 57.922163][ T5119] Bluetooth: hci2: command tx timeout [ 57.928672][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.990862][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.028687][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.035764][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.062379][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.076601][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.128284][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.136586][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.163894][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.256310][ T5120] team0: Port device team_slave_0 added [ 58.278918][ T5113] hsr_slave_0: entered promiscuous mode [ 58.285979][ T5113] hsr_slave_1: entered promiscuous mode [ 58.292883][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.301356][ T5113] Cannot create hsr debugfs directory [ 58.329853][ T5120] team0: Port device team_slave_1 added [ 58.417197][ T5116] hsr_slave_0: entered promiscuous mode [ 58.423958][ T5116] hsr_slave_1: entered promiscuous mode [ 58.430732][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.439562][ T5116] Cannot create hsr debugfs directory [ 58.468674][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.475779][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.502435][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.544851][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.552387][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.580676][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.738813][ T5111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.752955][ T5111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.769143][ T5120] hsr_slave_0: entered promiscuous mode [ 58.778217][ T5120] hsr_slave_1: entered promiscuous mode [ 58.784489][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.793077][ T5120] Cannot create hsr debugfs directory [ 58.848201][ T5111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.864772][ T5111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.968105][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.990243][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.001404][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.026414][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.145334][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.161272][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.172767][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.184745][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.314382][ T5116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.334150][ T5116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.349449][ T5116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.391895][ T5116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.460770][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.472109][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.483311][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.497040][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.530930][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.584026][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.612238][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.634562][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.658052][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.665646][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.674286][ T5119] Bluetooth: hci0: command tx timeout [ 59.724210][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.731601][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.783042][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.814459][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.873127][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.880462][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.891438][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.896869][ T5119] Bluetooth: hci1: command tx timeout [ 59.898689][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.956656][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.963989][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.977069][ T5119] Bluetooth: hci4: command tx timeout [ 59.977414][ T5124] Bluetooth: hci3: command tx timeout [ 59.982517][ T5119] Bluetooth: hci2: command tx timeout [ 59.992598][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.000519][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.109491][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.194366][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.218806][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.253778][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.318190][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.325977][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.342495][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.350034][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.444506][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.573531][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.593296][ T5111] veth0_vlan: entered promiscuous mode [ 60.605037][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.612250][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.654575][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.661900][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.691348][ T5111] veth1_vlan: entered promiscuous mode [ 60.738709][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.782192][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.794720][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.851291][ T5111] veth0_macvtap: entered promiscuous mode [ 60.903459][ T5111] veth1_macvtap: entered promiscuous mode [ 60.919380][ T5108] veth0_vlan: entered promiscuous mode [ 60.993358][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.009725][ T5108] veth1_vlan: entered promiscuous mode [ 61.046075][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.088148][ T5111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.108220][ T5111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.120742][ T5111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.129647][ T5111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.148409][ T5116] veth0_vlan: entered promiscuous mode [ 61.166102][ T5108] veth0_macvtap: entered promiscuous mode [ 61.187706][ T5108] veth1_macvtap: entered promiscuous mode [ 61.224674][ T5116] veth1_vlan: entered promiscuous mode [ 61.278547][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.289720][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.300870][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.328163][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.342420][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.354863][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.381852][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.404067][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.413168][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.423148][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.432485][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.506721][ T5116] veth0_macvtap: entered promiscuous mode [ 61.561398][ T5113] veth0_vlan: entered promiscuous mode [ 61.587812][ T5116] veth1_macvtap: entered promiscuous mode [ 61.607746][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.619282][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.655869][ T3927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.663962][ T3927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.682672][ T5120] veth0_vlan: entered promiscuous mode [ 61.697921][ T5113] veth1_vlan: entered promiscuous mode [ 61.731796][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.735715][ T5119] Bluetooth: hci0: command tx timeout [ 61.748001][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.759081][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.769855][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.780957][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.814726][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.826647][ T5120] veth1_vlan: entered promiscuous mode [ 61.833422][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.844820][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.855010][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.865598][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.867108][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.877244][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.902270][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.906779][ T5116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.916061][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.921049][ T5116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.937782][ T5116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.947038][ T5116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.975754][ T5119] Bluetooth: hci1: command tx timeout [ 62.040823][ T5113] veth0_macvtap: entered promiscuous mode [ 62.056571][ T5119] Bluetooth: hci2: command tx timeout [ 62.057917][ T5124] Bluetooth: hci3: command tx timeout [ 62.062006][ T5119] Bluetooth: hci4: command tx timeout [ 62.080844][ T5113] veth1_macvtap: entered promiscuous mode [ 62.303864][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.316984][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.328455][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.345966][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.360218][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.377830][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.398496][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.420817][ T5120] veth0_macvtap: entered promiscuous mode [ 62.443955][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.482532][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.494667][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.508166][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.518625][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.529243][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.541661][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.556332][ T3927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.564299][ T3927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.628090][ T5120] veth1_macvtap: entered promiscuous mode [ 62.660308][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.665327][ T5202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.678251][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.691814][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.701122][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.745812][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.753714][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.792567][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.812610][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.828668][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.839720][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.856069][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.873970][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.891089][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.902030][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.921045][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.948105][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.962935][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.973896][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.992944][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.003188][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.022862][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.033514][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.050361][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.062631][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.093985][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.106891][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.121218][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.150107][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.401576][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.420865][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.469257][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.489400][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.529388][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.578577][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.669513][ T4127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.722092][ T4127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.817017][ T5119] Bluetooth: hci0: command tx timeout [ 64.055852][ T5119] Bluetooth: hci1: command tx timeout [ 64.136231][ T4490] Bluetooth: hci2: command tx timeout [ 64.136507][ T5124] Bluetooth: hci4: command tx timeout [ 64.141684][ T5119] Bluetooth: hci3: command tx timeout [ 64.316080][ T5245] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.560719][ T29] audit: type=1804 audit(1718030158.026:2): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1035317236/syzkaller.yyKMSI/6/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 64.847972][ T5254] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.996505][ T5254] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 65.270418][ T5274] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.601564][ T29] audit: type=1804 audit(1718030159.066:3): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/4/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 66.222064][ T5301] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 66.236207][ T5299] Bluetooth: MGMT ver 1.22 [ 66.272071][ T5293] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 66.311247][ T5293] macvlan2: entered promiscuous mode [ 66.379054][ T5293] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 66.628146][ T5311] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 66.991362][ T5332] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.438628][ T5402] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 68.451070][ T5402] macvlan2: entered promiscuous mode [ 68.473176][ T5402] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 68.692319][ T5415] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 68.711012][ T5415] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.721969][ T5415] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 69.124844][ T29] audit: type=1804 audit(1718030162.586:4): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4237134003/syzkaller.J2awX5/24/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 69.291881][ T5438] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 70.196449][ T5474] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.830013][ T5510] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 70.838698][ T5510] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.849339][ T5510] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 70.865788][ T5510] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.970997][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.991753][ T5510] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.323440][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.924301][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.932249][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.014957][ T5568] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.035035][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.241109][ T5576] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 72.266464][ T5576] macvlan2: entered promiscuous mode [ 72.289773][ T5576] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 72.873862][ T5602] syz-executor.0 (5602) used greatest stack depth: 18352 bytes left [ 73.220069][ T5615] tap0: tun_chr_ioctl cmd 1074025681 [ 73.377334][ T5629] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.794769][ T5679] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 74.804134][ T5679] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.814709][ T5679] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 74.822990][ T5679] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.173794][ T5704] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 76.195224][ T5704] __nla_validate_parse: 4 callbacks suppressed [ 76.195243][ T5704] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.261604][ T5704] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 76.301057][ T5704] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.343547][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.406937][ T5713] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.045609][ T784] cfg80211: failed to load regulatory.db [ 77.452085][ T5748] Illegal XDP return value 4294967274 on prog (id 55) dev N/A, expect packet loss! [ 77.770024][ T5754] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 77.802870][ T5754] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.850153][ T5754] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 77.887076][ T5754] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.042918][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.081507][ T5762] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.950123][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.001685][ T5798] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.082591][ T5805] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 79.542961][ T5828] tap0: tun_chr_ioctl cmd 1074025681 [ 82.237432][ T5919] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 82.255904][ T5919] __nla_validate_parse: 3 callbacks suppressed [ 82.255928][ T5919] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.278637][ T5919] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 82.290415][ T5919] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.391512][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.405483][ T5919] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.865433][ T5950] wg2: entered promiscuous mode [ 82.870550][ T5950] wg2: entered allmulticast mode [ 83.095638][ T5124] Bluetooth: hci0: command tx timeout [ 83.977021][ T5124] Bluetooth: hci4: command 0x0405 tx timeout [ 84.743174][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.122628][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.175271][ T5119] Bluetooth: hci0: command tx timeout [ 85.247992][ T6019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.290848][ T6025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.311673][ T6025] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 85.323272][ T6025] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 85.347070][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.953571][ T6069] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 87.344240][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.362029][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.371374][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.393110][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.420918][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.434645][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.325450][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.338303][ T6073] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 88.666927][ T1110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.673679][ T6098] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 88.778957][ T1110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.961847][ T1110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.965005][ T6106] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 89.120865][ T1110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.149495][ T6113] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 89.182803][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 89.471974][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.496578][ T5119] Bluetooth: hci1: command tx timeout [ 89.527326][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.534624][ T6075] bridge_slave_0: entered allmulticast mode [ 89.574862][ T6075] bridge_slave_0: entered promiscuous mode [ 89.636916][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.653990][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.675481][ T6075] bridge_slave_1: entered allmulticast mode [ 89.683026][ T6075] bridge_slave_1: entered promiscuous mode [ 89.687646][ T6139] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 89.829814][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.886736][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.902321][ T1110] bridge_slave_1: left allmulticast mode [ 89.926606][ T1110] bridge_slave_1: left promiscuous mode [ 89.934583][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.984302][ T1110] bridge_slave_0: left allmulticast mode [ 89.995893][ T1110] bridge_slave_0: left promiscuous mode [ 90.002469][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.499450][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.513868][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.530642][ T1110] bond0 (unregistering): Released all slaves [ 90.543338][ T1110] bond1 (unregistering): Released all slaves [ 90.633962][ T1110] bond2 (unregistering): Released all slaves [ 90.747307][ T6075] team0: Port device team_slave_0 added [ 90.786433][ T6075] team0: Port device team_slave_1 added [ 91.028971][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.049048][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.108897][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.198106][ T6195] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 91.219607][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.246929][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.302382][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.508683][ T6209] IPv6: addrconf: prefix option has invalid lifetime [ 91.561574][ T1110] hsr_slave_0: left promiscuous mode [ 91.575240][ T5119] Bluetooth: hci1: command tx timeout [ 91.582227][ T1110] hsr_slave_1: left promiscuous mode [ 91.601625][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.630617][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.650478][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.667434][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.700659][ T1110] veth1_macvtap: left promiscuous mode [ 91.725814][ T1110] veth0_macvtap: left promiscuous mode [ 91.731525][ T1110] veth1_vlan: left promiscuous mode [ 91.750050][ T1110] veth0_vlan: left promiscuous mode [ 92.215477][ T5119] Bluetooth: hci0: command tx timeout [ 92.231858][ T6232] "syz-executor.2" (6232) uses obsolete ecb(arc4) skcipher [ 92.358128][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 92.407442][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 92.773482][ T6075] hsr_slave_0: entered promiscuous mode [ 92.792767][ T6075] hsr_slave_1: entered promiscuous mode [ 92.802641][ T6075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.814225][ T6075] Cannot create hsr debugfs directory [ 92.946202][ T6242] IPv6: addrconf: prefix option has invalid lifetime [ 93.476955][ T6268] "syz-executor.2" (6268) uses obsolete ecb(arc4) skcipher [ 93.658984][ T5119] Bluetooth: hci1: command tx timeout [ 93.744062][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.888408][ T6282] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.908434][ T6075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.926898][ T6282] openvswitch: netlink: VXLAN extension 45 out of range max 1 [ 93.930370][ T6075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.989362][ T6075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.011587][ T6075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.290066][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.316424][ T6301] batadv0: entered promiscuous mode [ 94.370687][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.399841][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.407231][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.463253][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.551088][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.559563][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.691990][ T6310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.781176][ T6075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.840525][ T6315] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.889963][ T6315] openvswitch: netlink: VXLAN extension 45 out of range max 1 [ 95.294439][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.323192][ T6345] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.543963][ T6075] veth0_vlan: entered promiscuous mode [ 95.584332][ T6075] veth1_vlan: entered promiscuous mode [ 95.719157][ T6075] veth0_macvtap: entered promiscuous mode [ 95.735718][ T5119] Bluetooth: hci1: command tx timeout [ 95.763567][ T6075] veth1_macvtap: entered promiscuous mode [ 95.810780][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.824066][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.834793][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.846825][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.856970][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.868752][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.879858][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.909567][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.921712][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.968579][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.000611][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.014140][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.030510][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.041994][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.053057][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.063768][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.074487][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.089424][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.102035][ T6075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.112382][ T6075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.123852][ T6075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.133020][ T6075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.142995][ T5119] Bluetooth: hci0: command tx timeout [ 96.308600][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.344019][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.417289][ T4127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.463350][ T4127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.541033][ T6400] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.567934][ T6400] openvswitch: netlink: VXLAN extension 45 out of range max 1 [ 97.075991][ T6429] batadv0: entered promiscuous mode [ 97.144148][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.278508][ T6436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.567622][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.595281][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.643463][ T6446] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 97.670356][ T6446] batadv_slave_0: entered promiscuous mode [ 98.271923][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.294747][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.368670][ T6486] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 98.386043][ T6486] batadv_slave_0: entered promiscuous mode [ 98.406505][ T6486] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 98.414899][ T6486] Cannot create hsr debugfs directory [ 98.624348][ T6499] bridge1: entered promiscuous mode [ 98.669512][ T6502] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 98.905800][ T6516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.967310][ T29] audit: type=1804 audit(1718030192.436:5): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1035317236/syzkaller.yyKMSI/116/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 99.104944][ T6523] __nla_validate_parse: 1 callbacks suppressed [ 99.104966][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.136169][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.305733][ T6536] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 99.533821][ T6542] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.560313][ T6542] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.662402][ T6553] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 99.671568][ T6553] netlink: 14581 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.879498][ T6562] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.893731][ T6562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.496992][ T6566] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.637100][ T29] audit: type=1804 audit(1718030195.106:6): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4237134003/syzkaller.J2awX5/126/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 101.705763][ T6584] batadv0: entered promiscuous mode [ 101.788909][ T6582] bond_slave_0: entered promiscuous mode [ 101.794965][ T6582] bond_slave_1: entered promiscuous mode [ 101.835412][ T6582] vlan2: entered promiscuous mode [ 101.859469][ T6582] bond0: entered promiscuous mode [ 101.881848][ T6582] vlan2: entered allmulticast mode [ 101.902135][ T6582] bond0: entered allmulticast mode [ 101.912752][ T6582] bond_slave_0: entered allmulticast mode [ 101.925521][ T6582] bond_slave_1: entered allmulticast mode [ 101.954747][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.970350][ T6591] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 102.195502][ T6600] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.240520][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.354637][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.371449][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.381185][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.390475][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.399355][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.407336][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.621603][ T3927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.807772][ T3927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.967990][ T3927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.996367][ T6634] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 103.016580][ T6634] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 103.028350][ T6634] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 103.045775][ T6634] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 103.054651][ T6634] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 103.071940][ T6634] netlink: 'syz-executor.0': attribute type 37 has an invalid length. [ 103.081581][ T6634] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 103.099796][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.114041][ T6631] syzkaller0: entered allmulticast mode [ 103.164267][ T3927] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 103.187846][ T3927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.615514][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.652943][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 103.675572][ T3927] bridge_slave_1: left allmulticast mode [ 103.681378][ T3927] bridge_slave_1: left promiscuous mode [ 103.698417][ T3927] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.748055][ T3927] bridge_slave_0: left allmulticast mode [ 103.754119][ T3927] bridge_slave_0: left promiscuous mode [ 103.798664][ T3927] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.460355][ T5119] Bluetooth: hci4: command tx timeout [ 104.543095][ T3927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.557445][ T3927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.569806][ T3927] bond0 (unregistering): Released all slaves [ 105.062969][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.070377][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.085411][ T6606] bridge_slave_0: entered allmulticast mode [ 105.092822][ T6606] bridge_slave_0: entered promiscuous mode [ 105.236574][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.262972][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.280040][ T6606] bridge_slave_1: entered allmulticast mode [ 105.295865][ T6606] bridge_slave_1: entered promiscuous mode [ 105.523939][ T3927] batadv_slave_0: left promiscuous mode [ 105.596291][ T3927] hsr_slave_0: left promiscuous mode [ 105.621934][ T3927] hsr_slave_1: left promiscuous mode [ 105.650974][ T3927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.703129][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.786064][ T3927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.813703][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.902410][ T3927] veth1_macvtap: left promiscuous mode [ 105.918257][ T3927] veth0_macvtap: left promiscuous mode [ 105.924077][ T3927] veth1_vlan: left promiscuous mode [ 105.952524][ T3927] veth0_vlan: left promiscuous mode [ 106.535456][ T5119] Bluetooth: hci4: command tx timeout [ 106.690029][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.432754][ T6812] xt_TCPMSS: Only works on TCP SYN packets [ 107.459861][ T3927] team0 (unregistering): Port device team_slave_1 removed [ 107.540150][ T3927] team0 (unregistering): Port device team_slave_0 removed [ 107.692338][ T6825] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 107.706055][ T6825] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.117058][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.387776][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.411118][ T6812] tap0: tun_chr_ioctl cmd 2147767517 [ 108.415911][ T6852] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 108.435378][ T6852] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.494549][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.615585][ T5119] Bluetooth: hci4: command tx timeout [ 108.646015][ T6857] batadv0: entered promiscuous mode [ 108.703040][ T6606] team0: Port device team_slave_0 added [ 108.729974][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.770738][ T6606] team0: Port device team_slave_1 added [ 108.895926][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.915755][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.945035][ T6873] x_tables: duplicate entry at hook 3 [ 108.966629][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.010262][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.021556][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.073594][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.120799][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.301284][ T6606] hsr_slave_0: entered promiscuous mode [ 109.314215][ T6606] hsr_slave_1: entered promiscuous mode [ 109.322324][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.355166][ T6606] Cannot create hsr debugfs directory [ 109.411426][ T6900] x_tables: duplicate entry at hook 3 [ 109.632825][ T6910] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 109.665402][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.465291][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.695449][ T5119] Bluetooth: hci4: command tx timeout [ 110.795007][ T6946] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 110.891028][ T6606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.972751][ T6606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.051005][ T6606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.132038][ T6606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.461599][ T6966] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.606863][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.679704][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.707388][ T6975] xt_TCPMSS: Only works on TCP SYN packets [ 111.728352][ T6973] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 111.740091][ T6973] geneve0: entered promiscuous mode [ 111.764674][ T6981] nbd: must specify at least one socket [ 111.813569][ T6973] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 111.838062][ T6975] tap0: tun_chr_ioctl cmd 2147767517 [ 111.856518][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.863724][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.884904][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.892317][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.156612][ T6998] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 112.503099][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.563838][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.606035][ T7028] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 112.649217][ T6606] veth0_vlan: entered promiscuous mode [ 112.672348][ T6606] veth1_vlan: entered promiscuous mode [ 112.742438][ T6606] veth0_macvtap: entered promiscuous mode [ 112.757605][ T6606] veth1_macvtap: entered promiscuous mode [ 112.788512][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.816451][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.849794][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.871412][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.890432][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.900575][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.911469][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.926089][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.954468][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.974879][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.984206][ T7043] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.986089][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.007553][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.017584][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.030700][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.040848][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.051480][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.064409][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.080403][ T7041] bridge0: port 3(ip6gretap0) entered blocking state [ 113.090642][ T7041] bridge0: port 3(ip6gretap0) entered disabled state [ 113.110361][ T7041] ip6gretap0: entered allmulticast mode [ 113.123796][ T7041] ip6gretap0: entered promiscuous mode [ 113.135250][ T7041] bridge0: port 3(ip6gretap0) entered blocking state [ 113.142518][ T7041] bridge0: port 3(ip6gretap0) entered forwarding state [ 113.169300][ T7048] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 113.191179][ T7048] geneve0: entered promiscuous mode [ 113.220942][ T7048] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 113.232462][ T6606] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.249710][ T6606] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.260502][ T6606] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.269468][ T6606] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.393083][ T7055] nbd: must specify at least one socket [ 113.571484][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.601392][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.664268][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.695034][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.772508][ T7071] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.974562][ T7084] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 114.001761][ T7084] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.034204][ T7084] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 115.160297][ T7120] veth1_macvtap: left promiscuous mode [ 115.180374][ T7120] macsec0: entered promiscuous mode [ 115.202014][ T7120] macsec0: entered allmulticast mode [ 115.281577][ T7120] veth1_macvtap: entered promiscuous mode [ 115.292912][ T7120] veth1_macvtap: entered allmulticast mode [ 115.306540][ T7120] macsec0: left promiscuous mode [ 115.311728][ T7120] macsec0: left allmulticast mode [ 115.331871][ T7120] veth1_macvtap: left allmulticast mode [ 115.355572][ T7129] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 115.740735][ T7153] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.938749][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.597795][ T7201] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 116.752978][ T7218] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.883543][ T5157] IPVS: starting estimator thread 0... [ 117.005356][ T7229] IPVS: using max 23 ests per chain, 55200 per kthread [ 117.170013][ T7247] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.559698][ T7276] nbd: must specify at least one socket [ 117.790760][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.123868][ T7295] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.158586][ T7295] debugfs: Directory 'ü!ô' with parent 'ieee80211' already present! [ 118.610107][ T7309] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 118.768708][ T7319] veth1_macvtap: left promiscuous mode [ 118.801477][ T7319] macsec0: entered promiscuous mode [ 118.811028][ T7319] macsec0: entered allmulticast mode [ 118.873789][ T7324] veth1_macvtap: entered promiscuous mode [ 118.900098][ T29] audit: type=1804 audit(1718030212.366:7): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2069439342/syzkaller.HOd7NW/15/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 118.943038][ T7324] veth1_macvtap: entered allmulticast mode [ 118.948090][ T7319] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 118.963217][ T7324] macsec0: left promiscuous mode [ 118.977993][ T7324] macsec0: left allmulticast mode [ 119.005898][ T7324] veth1_macvtap: left allmulticast mode [ 119.166664][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.227934][ T7335] 8021q: adding VLAN 0 to HW filter on device team1 [ 119.254788][ T7335] bond0: (slave team1): Enslaving as an active interface with an up link [ 119.644929][ T7368] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.429682][ T7390] veth1_macvtap: left promiscuous mode [ 120.563136][ T7390] macsec0: entered promiscuous mode [ 120.763531][ T7390] macsec0: entered allmulticast mode [ 120.825563][ T7401] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 120.899331][ T7404] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 120.936961][ T7396] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.251406][ T7397] lo: entered promiscuous mode [ 121.381014][ T7397] lo: left promiscuous mode [ 121.542689][ T7400] veth1_macvtap: entered promiscuous mode [ 121.702922][ T7400] veth1_macvtap: entered allmulticast mode [ 121.943384][ T7400] macsec0: left promiscuous mode [ 122.051660][ T7400] macsec0: left allmulticast mode [ 122.202979][ T7400] veth1_macvtap: left allmulticast mode [ 122.635751][ T5215] IPVS: starting estimator thread 0... [ 122.745790][ T7427] IPVS: using max 23 ests per chain, 55200 per kthread [ 123.037682][ T7449] lo: entered promiscuous mode [ 123.116168][ T7454] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 123.135018][ T7454] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.157193][ T7448] lo: left promiscuous mode [ 123.272062][ T7458] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 123.281914][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.287470][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.308949][ T7458] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.144044][ T7508] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 124.173663][ T7508] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.275896][ T7508] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 124.289880][ T7508] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.012271][ T7548] veth0: entered promiscuous mode [ 125.036485][ T7548] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 125.052290][ T7548] Cannot create hsr debugfs directory [ 125.061059][ T7554] lo: entered promiscuous mode [ 125.142282][ T7550] lo: left promiscuous mode [ 125.236320][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.334317][ T7568] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 125.459401][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.646704][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.684970][ T7584] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 125.743426][ T7584] team0: Device ipvlan1 failed to register rx_handler [ 125.958592][ T7604] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 126.240811][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.672217][ T7631] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 126.701787][ T7631] team0: Device ipvlan1 failed to register rx_handler [ 126.739390][ T7633] 8021q: adding VLAN 0 to HW filter on device team1 [ 126.759470][ T7633] bond0: (slave team1): Enslaving as an active interface with an up link [ 126.782213][ T7638] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 127.180110][ T7654] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 127.280008][ T7660] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 127.468093][ T7665] 8021q: adding VLAN 0 to HW filter on device team1 [ 127.487396][ T7665] bond0: (slave team1): Enslaving as an active interface with an up link [ 127.818960][ T7683] dummy0: entered promiscuous mode [ 127.838148][ T7683] macvlan2: entered allmulticast mode [ 127.859818][ T7683] dummy0: entered allmulticast mode [ 128.148937][ T29] audit: type=1804 audit(1718030221.616:8): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2345758503/syzkaller.rVWhhU/133/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 128.314242][ T7705] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 128.382561][ T7713] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 128.571519][ T7718] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 128.611830][ T7718] team0: Device ipvlan1 failed to register rx_handler [ 128.797520][ T7731] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 128.816257][ T7731] batman_adv: batadv0: Adding interface: wlan0 [ 128.822812][ T7731] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.849530][ T7731] batman_adv: batadv0: Interface activated: wlan0 [ 129.262617][ T7757] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 129.276046][ T7757] batman_adv: batadv0: Adding interface: wlan0 [ 129.288416][ T7757] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.315898][ T7757] batman_adv: batadv0: Interface activated: wlan0 [ 129.620960][ T7773] __nla_validate_parse: 4 callbacks suppressed [ 129.620981][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.962716][ T7781] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 130.016601][ T7779] 8021q: adding VLAN 0 to HW filter on device team1 [ 130.153233][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.388628][ T7779] team1: entered promiscuous mode [ 130.394074][ T7779] team1: entered allmulticast mode [ 130.411811][ T7783] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 130.594804][ T7779] bond0: (slave team1): Enslaving as an active interface with an up link [ 130.731517][ T7782] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.217588][ T29] audit: type=1800 audit(1718030226.686:9): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 133.291003][ T7809] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 133.338996][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.346327][ T7809] team0: Device ipvlan1 failed to register rx_handler [ 133.347806][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.411575][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.440777][ T7816] macvlan3: entered allmulticast mode [ 133.489435][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.541578][ T7822] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 133.593896][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.628122][ T7822] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 133.649441][ T7823] veth1_macvtap: left promiscuous mode [ 133.668122][ T7823] macsec0: entered promiscuous mode [ 133.673401][ T7823] macsec0: entered allmulticast mode [ 133.711814][ T7833] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 133.755508][ T7829] veth1_macvtap: entered promiscuous mode [ 133.791680][ T7829] veth1_macvtap: entered allmulticast mode [ 133.802456][ T7840] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 133.814428][ T7829] macsec0: left promiscuous mode [ 133.820030][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.830306][ T7829] macsec0: left allmulticast mode [ 133.843662][ T7829] veth1_macvtap: left allmulticast mode [ 133.992303][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.051812][ T7854] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.374914][ T7866] tipc: Enabling of bearer rejected, failed to enable media [ 134.435709][ T7862] pim6reg1: entered allmulticast mode [ 134.488446][ T7862] pim6reg1: entered promiscuous mode [ 134.515695][ T7870] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 134.537310][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.564326][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.600951][ T7871] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 134.681732][ T7874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 134.732276][ T7874] batman_adv: batadv0: Adding interface: gretap1 [ 134.756437][ T7874] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.815249][ T7874] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 134.875474][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.103796][ T7893] tipc: Enabling of bearer rejected, failed to enable media [ 135.272019][ T7898] veth1_macvtap: left promiscuous mode [ 135.281669][ T7898] macsec0: entered promiscuous mode [ 135.297731][ T7898] macsec0: entered allmulticast mode [ 135.335683][ T7905] veth1_macvtap: entered promiscuous mode [ 135.350396][ T7905] veth1_macvtap: entered allmulticast mode [ 135.358851][ T7905] macsec0: left promiscuous mode [ 135.373129][ T7905] macsec0: left allmulticast mode [ 135.380121][ T7903] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 135.402448][ T7898] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 135.412394][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.429657][ T7905] veth1_macvtap: left allmulticast mode [ 135.454066][ T7901] pim6reg1: entered allmulticast mode [ 135.494987][ T7901] pim6reg1: entered promiscuous mode [ 135.605871][ T7911] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 135.620479][ T7911] batman_adv: batadv0: Adding interface: gretap2 [ 135.628559][ T7911] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.665633][ T7911] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 135.985979][ T7923] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 136.005214][ T7923] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.310579][ T7939] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.339628][ T7939] batman_adv: batadv0: Adding interface: gretap1 [ 136.366429][ T7939] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.430769][ T7939] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 137.017490][ T7979] veth1_macvtap: left promiscuous mode [ 137.033365][ T7979] macsec0: entered promiscuous mode [ 137.049717][ T7979] macsec0: entered allmulticast mode [ 137.100959][ T7979] veth1_macvtap: entered promiscuous mode [ 137.121101][ T7979] veth1_macvtap: entered allmulticast mode [ 137.140142][ T7979] macsec0: left promiscuous mode [ 137.164869][ T7979] macsec0: left allmulticast mode [ 137.180299][ T7986] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 137.191319][ T7979] veth1_macvtap: left allmulticast mode [ 137.758448][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.769965][ T8004] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.786618][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.914663][ T8010] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 137.948116][ T8010] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.436030][ T8033] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 138.451722][ T8029] Zero length message leads to an empty skb [ 138.459432][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.611220][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.640347][ T8037] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.239390][ T8096] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 140.275684][ T8096] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 140.283915][ T8096] __nla_validate_parse: 1 callbacks suppressed [ 140.283931][ T8096] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.338058][ T8096] NCSI netlink: No device for ifindex 131080 [ 140.851898][ T8134] dccp_invalid_packet: P.Data Offset(4) too small [ 140.913853][ T8136] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 140.946932][ T8136] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 140.975212][ T8136] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.016662][ T8136] NCSI netlink: No device for ifindex 131080 [ 141.596056][ T29] audit: type=1804 audit(1718030235.066:10): pid=8160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/228/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 141.723363][ T8169] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.156294][ T8182] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 142.168777][ T8182] veth0_macvtap: left promiscuous mode [ 142.188434][ T8182] macvtap0: entered allmulticast mode [ 142.221963][ T8182] macvtap0: refused to change device tx_queue_len [ 142.434006][ T8194] dccp_invalid_packet: P.Data Offset(4) too small [ 142.450017][ T8196] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 142.460188][ T8196] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 142.485235][ T8196] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.506894][ T8196] NCSI netlink: No device for ifindex 131080 [ 142.684888][ T8210] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.173793][ T8224] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 143.228666][ T8224] veth0_macvtap: left promiscuous mode [ 143.257981][ T8224] macvtap0: entered allmulticast mode [ 143.288236][ T8224] macvtap0: refused to change device tx_queue_len [ 143.476695][ T8233] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.515278][ T8233] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 143.586023][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.609913][ T8233] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.750893][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.779708][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.226246][ T29] audit: type=1804 audit(1718030237.686:11): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1035317236/syzkaller.yyKMSI/278/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 144.265212][ T8265] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 144.485919][ T29] audit: type=1800 audit(1718030237.956:12): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 144.532674][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.551708][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.792898][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.062834][ T8303] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 145.082244][ T8303] batman_adv: batadv0: Adding interface: wlan0 [ 145.093843][ T8303] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.123078][ T8303] batman_adv: batadv0: Interface activated: wlan0 [ 145.367948][ T8322] __nla_validate_parse: 1 callbacks suppressed [ 145.367968][ T8322] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.477348][ T8327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.527517][ T8327] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 145.724051][ T8344] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 145.769883][ T8344] batman_adv: batadv0: Adding interface: wlan0 [ 145.781851][ T8344] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.809793][ T8344] batman_adv: batadv0: Interface activated: wlan0 [ 145.823796][ T8343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.932061][ T29] audit: type=1804 audit(1718030239.396:13): pid=8351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2069439342/syzkaller.HOd7NW/102/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 145.978788][ T8362] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.372491][ T29] audit: type=1804 audit(1718030239.836:14): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1035317236/syzkaller.yyKMSI/287/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 146.394593][ T8386] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 146.427370][ T8388] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 146.483041][ T8392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.920930][ T8415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.002406][ T8419] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 147.050105][ T29] audit: type=1804 audit(1718030240.516:15): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2345758503/syzkaller.rVWhhU/183/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 147.099242][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.115658][ T8422] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 147.223659][ T8429] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 147.242563][ T8429] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.323953][ T29] audit: type=1804 audit(1718030240.786:16): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3607284832/syzkaller.NPuoah/283/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 147.344680][ T8433] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 147.404217][ T8433] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.658666][ T8449] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 147.723729][ T8454] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 147.764569][ T8454] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 147.904003][ T29] audit: type=1804 audit(1718030241.366:17): pid=8465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/259/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 147.919728][ T8465] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 148.582889][ T8495] syz_tun: entered promiscuous mode [ 148.605544][ T8495] macsec1: entered promiscuous mode [ 148.623184][ T8495] syz_tun: left promiscuous mode [ 148.726971][ T8505] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 150.280315][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.310781][ T8591] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.480723][ T29] audit: type=1804 audit(1718030243.946:18): pid=8593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/270/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 151.021635][ T8624] xt_hashlimit: max too large, truncated to 1048576 [ 151.212071][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.305639][ T8637] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 151.480864][ T8648] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 151.515449][ T8648] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.516747][ T8652] xt_hashlimit: max too large, truncated to 1048576 [ 151.754428][ T8668] syz-executor.4[8668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.754576][ T8668] syz-executor.4[8668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.834083][ T8673] bridge0: port 2(bridge_slave_1) entered listening state [ 152.097294][ T8689] xt_hashlimit: max too large, truncated to 1048576 [ 152.251601][ T8696] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20001 [ 152.451724][ T8700] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 152.495684][ T8700] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 152.624620][ T8702] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 153.096095][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.180156][ T8722] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 153.362227][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.469192][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.616986][ T8732] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.715898][ T8739] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.867515][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.877075][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.889354][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.914469][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.931561][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.942443][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.212430][ T8739] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 154.423430][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.798113][ T29] audit: type=1804 audit(1718030248.256:19): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/281/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 154.811346][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.989776][ T8754] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 155.313686][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.914738][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.152693][ T5124] Bluetooth: hci1: command tx timeout [ 156.558315][ T29] audit: type=1800 audit(1718030250.026:20): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 156.754550][ T51] bridge_slave_1: left allmulticast mode [ 156.792249][ T51] bridge_slave_1: left promiscuous mode [ 156.823629][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.882720][ T51] bridge_slave_0: left allmulticast mode [ 156.896280][ T51] bridge_slave_0: left promiscuous mode [ 156.918581][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.317344][ T51] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 157.493307][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.508897][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.521333][ T51] bond0 (unregistering): (slave team1): Releasing backup interface [ 157.537091][ T51] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 157.551832][ T51] bond0 (unregistering): Released all slaves [ 157.733495][ T8779] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 157.786354][ T8784] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 157.809620][ T8784] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.840080][ T8784] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 157.871383][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 158.155831][ T8794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.215274][ T5124] Bluetooth: hci1: command tx timeout [ 158.653361][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.685728][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.696193][ T8742] bridge_slave_0: entered allmulticast mode [ 158.726677][ T8742] bridge_slave_0: entered promiscuous mode [ 158.791786][ T51] hsr_slave_0: left promiscuous mode [ 158.808546][ T51] hsr_slave_1: left promiscuous mode [ 158.842919][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.899497][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.915224][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.993656][ T51] veth1_macvtap: left promiscuous mode [ 159.014441][ T51] veth1_vlan: left promiscuous mode [ 159.025439][ T8826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 159.031689][ T51] veth0_vlan: left promiscuous mode [ 159.052055][ T8826] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.071904][ T8826] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 160.295406][ T5124] Bluetooth: hci1: command tx timeout [ 160.994345][ T51] team0 (unregistering): Port device team_slave_1 removed [ 161.064849][ T51] team0 (unregistering): Port device team_slave_0 removed [ 161.238748][ T8859] netlink: 'syz-executor.4': attribute type 178 has an invalid length. [ 161.602724][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.614308][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.624219][ T8742] bridge_slave_1: entered allmulticast mode [ 161.634539][ T8742] bridge_slave_1: entered promiscuous mode [ 161.676202][ T8820] geneve2: entered promiscuous mode [ 161.681458][ T8820] geneve2: entered allmulticast mode [ 161.819573][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.852955][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.996202][ T8742] team0: Port device team_slave_0 added [ 162.017127][ T8742] team0: Port device team_slave_1 added [ 162.043994][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.065763][ T8874] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.091963][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.114978][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.149274][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.216602][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.232099][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.272054][ T8742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.360722][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.376299][ T5124] Bluetooth: hci1: command tx timeout [ 162.378163][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.408532][ T8742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.866784][ T8742] hsr_slave_0: entered promiscuous mode [ 162.882314][ T8742] hsr_slave_1: entered promiscuous mode [ 162.890285][ T8742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.899396][ T8742] Cannot create hsr debugfs directory [ 162.980979][ T8896] geneve2: entered promiscuous mode [ 162.995613][ T8896] geneve2: entered allmulticast mode [ 163.090330][ T8903] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 163.542016][ T8926] netlink: 'syz-executor.4': attribute type 178 has an invalid length. [ 163.623570][ T8930] geneve2: entered promiscuous mode [ 163.643630][ T8930] geneve2: entered allmulticast mode [ 163.926088][ T8742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.944389][ T8742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.967863][ T8742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.981740][ T8742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.017499][ T8949] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.188680][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.228645][ T8742] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.247836][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.255247][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.262861][ T8956] netlink: 'syz-executor.2': attribute type 178 has an invalid length. [ 164.286452][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.293718][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.737039][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.888175][ T8742] veth0_vlan: entered promiscuous mode [ 164.904827][ T8742] veth1_vlan: entered promiscuous mode [ 165.014154][ T8742] veth0_macvtap: entered promiscuous mode [ 165.067866][ T8742] veth1_macvtap: entered promiscuous mode [ 165.163490][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.209087][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.223966][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.235014][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.245362][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.259427][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.277443][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.288825][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.300887][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.336363][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.375101][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.395932][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.413783][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.434527][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.454895][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.465009][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.483507][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.507612][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.535005][ T8742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.549326][ T8742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.563875][ T8742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.581394][ T8742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.721419][ T8742] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 165.733828][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.768103][ T8742] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 165.795180][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.821398][ T8742] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 165.841736][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.852567][ T8742] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 165.862365][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.911156][ T3927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.947731][ T3927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.016893][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.056351][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.266000][ T9022] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.524802][ T29] audit: type=1804 audit(1718030259.986:21): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/310/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 166.788304][ T9056] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.842871][ T9056] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.933783][ T9071] syz-executor.0[9071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.933943][ T9071] syz-executor.0[9071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.957030][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.013721][ T9071] bridge0: port 2(bridge_slave_1) entered listening state [ 167.023923][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.056840][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.095429][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.125765][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.227580][ T9083] vlan1: entered promiscuous mode [ 167.361040][ T9083] vlan1 (unregistering): left promiscuous mode [ 167.836346][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.858270][ T9114] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 167.892526][ T9114] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 168.062420][ T9108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.021227][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.075465][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.098456][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.118033][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.142171][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.236482][ T9195] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 169.649026][ T29] audit: type=1804 audit(1718030263.116:22): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1209203350/syzkaller.1pxp67/323/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 169.664265][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.803353][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.825314][ T9226] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 169.850855][ T9226] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 169.996523][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.017732][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.543529][ T29] audit: type=1804 audit(1718030264.006:23): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1606342823/syzkaller.Pbbb3L/21/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 170.585342][ T9260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.674199][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.322408][ T9282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.906258][ T29] audit: type=1800 audit(1718030265.366:24): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 171.964847][ T9321] netlink: zone id is out of range [ 172.451977][ T9333] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 172.635382][ T9344] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1023 (only 8 groups) [ 172.994943][ T9364] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 173.255979][ T9380] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 173.277287][ T9377] can: request_module (can-proto-0) failed. [ 173.652945][ T9405] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 173.912020][ T9415] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1023 (only 8 groups) [ 173.927326][ T9416] bond1: entered promiscuous mode [ 173.980537][ T9416] bond1 (unregistering): Released all slaves [ 174.187318][ T9439] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 175.024821][ T9472] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 175.048294][ T9477] __nla_validate_parse: 9 callbacks suppressed [ 175.048316][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.064325][ T9477] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.186097][ T9483] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 175.652994][ T9505] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 175.763470][ T9509] can: request_module (can-proto-0) failed. [ 175.986305][ T9522] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 176.153293][ T9516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.290896][ T9518] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 176.383647][ T9518] team0: Device veth1_macvtap failed to register rx_handler [ 176.721596][ T9551] team_slave_0: entered promiscuous mode [ 176.727789][ T9551] team_slave_1: entered promiscuous mode [ 176.736164][ T9551] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 176.757410][ T9551] team_slave_0: left promiscuous mode [ 176.762932][ T9551] team_slave_1: left promiscuous mode [ 176.828422][ T9554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.087131][ T9570] syz-executor.3[9570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.087286][ T9570] syz-executor.3[9570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.559703][ T9595] team_slave_0: entered promiscuous mode [ 177.577271][ T9595] team_slave_1: entered promiscuous mode [ 177.638095][ T9595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.668594][ T9595] team_slave_0: left promiscuous mode [ 177.674163][ T9595] team_slave_1: left promiscuous mode [ 178.032334][ T9624] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 178.042203][ T9624] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.063548][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.076420][ T9623] tipc: Enabling of bearer rejected, failed to enable media [ 178.330137][ T9620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 178.966009][ T9671] Cannot find del_set index 65532 as target [ 178.989754][ T9666] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 178.998930][ T9666] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.016280][ T9670] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.432080][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 179.622888][ T9697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 179.978075][ T9719] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 179.996474][ T9719] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.032989][ T9719] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.484107][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.009653][ T9774] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 181.039385][ T9774] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.155696][ T9774] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.301767][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.499874][ T4490] Bluetooth: hci3: command 0x0406 tx timeout [ 181.499931][ T5125] Bluetooth: hci2: command 0x0406 tx timeout [ 181.506510][ T4490] Bluetooth: hci0: command 0x0406 tx timeout [ 181.969714][ T9805] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 181.981526][ T9805] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 181.991050][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.003566][ T9805] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.078122][ T9814] sctp: [Deprecated]: syz-executor.2 (pid 9814) Use of int in max_burst socket option. [ 182.078122][ T9814] Use struct sctp_assoc_value instead [ 182.089201][ T5164] IPVS: starting estimator thread 0... [ 182.104647][ T9810] bond2: entered promiscuous mode [ 182.137001][ T9796] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 182.154142][ T9805] sctp: [Deprecated]: syz-executor.0 (pid 9805) Use of int in max_burst socket option. [ 182.154142][ T9805] Use struct sctp_assoc_value instead [ 182.190947][ T9796] team0: Device veth1_macvtap failed to register rx_handler [ 182.239775][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.246298][ T9815] IPVS: using max 19 ests per chain, 45600 per kthread [ 182.318974][ T9816] bond2 (unregistering): Released all slaves [ 182.390207][ T9821] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 182.910469][ T9844] sctp: [Deprecated]: syz-executor.2 (pid 9844) Use of int in max_burst socket option. [ 182.910469][ T9844] Use struct sctp_assoc_value instead [ 182.928895][ T9841] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 182.956075][ T9841] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 182.964391][ T9841] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.033614][ T9841] sctp: [Deprecated]: syz-executor.4 (pid 9841) Use of int in max_burst socket option. [ 183.033614][ T9841] Use struct sctp_assoc_value instead [ 183.272051][ T9852] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.296552][ T29] audit: type=1800 audit(1718030276.766:25): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 183.358005][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.628664][ T9869] sctp: [Deprecated]: syz-executor.0 (pid 9869) Use of int in max_burst socket option. [ 183.628664][ T9869] Use struct sctp_assoc_value instead [ 183.857524][ T9877] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 183.916896][ T9875] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 183.952083][ T9875] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 183.976685][ T5164] IPVS: starting estimator thread 0... [ 184.008175][ T9875] sctp: [Deprecated]: syz-executor.2 (pid 9875) Use of int in max_burst socket option. [ 184.008175][ T9875] Use struct sctp_assoc_value instead [ 184.086250][ T9880] IPVS: using max 21 ests per chain, 50400 per kthread [ 186.148347][ T9970] vlan1: entered allmulticast mode [ 186.175319][ T9970] bond0: entered allmulticast mode [ 186.180543][ T9970] bond_slave_0: entered allmulticast mode [ 186.198684][ T9970] bond_slave_1: entered allmulticast mode [ 186.225168][ T9970] team1: entered allmulticast mode [ 186.248013][ T9970] bond0: left allmulticast mode [ 186.276767][ T9970] bond_slave_0: left allmulticast mode [ 186.282730][ T9970] bond_slave_1: left allmulticast mode [ 186.306306][ T9970] team1: left allmulticast mode [ 186.550252][ T9984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.569485][ T9984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.733459][ T9993] __nla_validate_parse: 4 callbacks suppressed [ 186.733481][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.836374][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.174158][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.292715][ T29] audit: type=1800 audit(1718030280.756:26): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 187.728062][ T29] audit: type=1804 audit(1718030281.196:27): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1606342823/syzkaller.Pbbb3L/85/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 187.918683][T10030] validate_nla: 1 callbacks suppressed [ 187.918703][T10030] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 187.960493][T10030] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 187.964533][T10036] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 187.987376][T10030] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.994830][ T5215] IPVS: starting estimator thread 0... [ 188.060562][T10030] sctp: [Deprecated]: syz-executor.3 (pid 10030) Use of int in max_burst socket option. [ 188.060562][T10030] Use struct sctp_assoc_value instead [ 188.095684][T10037] IPVS: using max 18 ests per chain, 43200 per kthread [ 188.542571][ T29] audit: type=1804 audit(1718030281.996:28): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2069439342/syzkaller.HOd7NW/246/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 188.628317][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.821412][T10075] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 188.830446][T10084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.840122][T10084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.884979][T10075] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 188.931523][T10075] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.980184][T10082] sctp: [Deprecated]: syz-executor.0 (pid 10082) Use of int in max_burst socket option. [ 188.980184][T10082] Use struct sctp_assoc_value instead [ 189.098163][T10096] sctp: [Deprecated]: syz-executor.1 (pid 10096) Use of int in maxseg socket option. [ 189.098163][T10096] Use struct sctp_assoc_value instead [ 189.187396][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.653399][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.733558][T10131] vlan1: entered allmulticast mode [ 189.762543][T10131] bond0: entered allmulticast mode [ 189.781416][T10131] bond_slave_0: entered allmulticast mode [ 189.793291][T10131] bond_slave_1: entered allmulticast mode [ 189.801424][T10131] team1: entered allmulticast mode [ 189.841192][T10131] bond0: left allmulticast mode [ 189.851404][T10131] bond_slave_0: left allmulticast mode [ 189.862181][T10131] bond_slave_1: left allmulticast mode [ 189.876727][T10131] team1: left allmulticast mode [ 190.454739][T10176] sctp: [Deprecated]: syz-executor.2 (pid 10176) Use of int in maxseg socket option. [ 190.454739][T10176] Use struct sctp_assoc_value instead [ 190.483818][T10177] vlan1: entered allmulticast mode [ 190.501161][T10177] bond0: entered allmulticast mode [ 190.512331][T10177] bond_slave_0: entered allmulticast mode [ 190.522855][T10177] bond_slave_1: entered allmulticast mode [ 190.529501][T10177] batadv0: entered allmulticast mode [ 190.538376][T10177] bond0: left allmulticast mode [ 190.543270][T10177] bond_slave_0: left allmulticast mode [ 190.549925][T10177] bond_slave_1: left allmulticast mode [ 190.557189][T10177] batadv0: left allmulticast mode [ 190.588804][T10179] smc: adding net device pimreg with user defined pnetid SYZ1 [ 190.598540][T10179] pimreg: entered allmulticast mode [ 190.751176][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.814165][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.230147][T10202] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 191.257027][T10202] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 191.291483][T10201] sctp: [Deprecated]: syz-executor.4 (pid 10201) Use of int in max_burst socket option. [ 191.291483][T10201] Use struct sctp_assoc_value instead [ 191.572924][ T166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.686149][ T166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.822836][ T166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.877779][T10222] __nla_validate_parse: 1 callbacks suppressed [ 191.877802][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.959567][ T166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.989455][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.086865][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.099298][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.108799][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.120854][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.136647][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.144029][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.388849][ T166] bridge_slave_1: left allmulticast mode [ 192.394649][ T166] bridge_slave_1: left promiscuous mode [ 192.400810][ T166] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.411765][ T166] bridge_slave_0: left allmulticast mode [ 192.418335][ T166] bridge_slave_0: left promiscuous mode [ 192.424486][ T166] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.665617][ T166] batman_adv: batadv0: Removing interface: gretap1 [ 192.935002][ T166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.953270][ T166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.972352][ T166] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 192.983850][ T166] bond0 (unregistering): Released all slaves [ 192.996894][ T166] bond1 (unregistering): Released all slaves [ 193.302430][T10226] chnl_net:caif_netlink_parms(): no params data found [ 193.426752][ T166] batman_adv: batadv0: Interface deactivated: wlan0 [ 193.496253][ T166] batman_adv: batadv0: Removing interface: wlan0 [ 193.679224][ T166] hsr_slave_0: left promiscuous mode [ 193.697653][ T166] hsr_slave_1: left promiscuous mode [ 193.716446][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.723926][ T166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.741630][ T166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.754479][ T166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.800322][ T166] dummy0: left allmulticast mode [ 193.806343][ T166] dummy0: left promiscuous mode [ 193.811874][ T166] veth1_macvtap: left promiscuous mode [ 193.818642][ T166] veth0_macvtap: left promiscuous mode [ 193.824636][ T166] veth1_vlan: left promiscuous mode [ 193.830932][ T166] veth0_vlan: left promiscuous mode [ 194.221155][ T53] Bluetooth: hci4: command tx timeout [ 194.499160][ T166] team0 (unregistering): Port device team_slave_1 removed [ 194.553502][ T166] team0 (unregistering): Port device team_slave_0 removed [ 194.787257][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.791323][ C1] [ 194.793851][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.796382][ C1] ============================= [ 194.796393][ C1] WARNING: suspicious RCU usage [ 194.812349][ C1] 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 Not tainted [ 194.819513][ C1] ----------------------------- [ 194.824440][ C1] net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage! [ 194.833422][ C1] 2024/06/10 14:38:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 194.833422][ C1] other info that might help us debug this: [ 194.833422][ C1] [ 194.843696][ C1] [ 194.843696][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 194.852087][ C1] 3 locks held by swapper/1/0: [ 194.856902][ C1] #0: ffffc90000a18c00 ((&p->forward_delay_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 194.867309][ C1] #1: ffff888027baccb8 (&br->lock){+.-.}-{2:2}, at: br_forward_delay_timer_expired+0x50/0x440 [ 194.877988][ C1] #2: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: br_mst_set_state+0x171/0x7a0 [ 194.887653][ C1] [ 194.887653][ C1] stack backtrace: [ 194.893581][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 194.903392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 194.913635][ C1] Call Trace: [ 194.916922][ C1] [ 194.919764][ C1] dump_stack_lvl+0x241/0x360 [ 194.924449][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.929652][ C1] ? __pfx__printk+0x10/0x10 [ 194.934254][ C1] lockdep_rcu_suspicious+0x221/0x340 [ 194.939633][ C1] br_mst_set_state+0x29e/0x7a0 [ 194.944489][ C1] ? br_mst_set_state+0x171/0x7a0 [ 194.949513][ C1] ? __pfx_br_mst_set_state+0x10/0x10 [ 194.954910][ C1] br_set_state+0x28a/0x7b0 [ 194.959421][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 194.964464][ C1] ? __pfx_br_set_state+0x10/0x10 [ 194.969577][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 194.974964][ C1] br_forward_delay_timer_expired+0x9a/0x440 [ 194.980952][ C1] ? call_timer_fn+0x161/0x650 [ 194.985725][ C1] call_timer_fn+0x18e/0x650 [ 194.990319][ C1] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 194.996913][ C1] ? call_timer_fn+0xc0/0x650 [ 195.001590][ C1] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 195.008180][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 195.013383][ C1] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 195.019981][ C1] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 195.026575][ C1] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 195.033252][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.038536][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 195.043821][ C1] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 195.050507][ C1] __run_timer_base+0x66a/0x8e0 [ 195.055387][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 195.060797][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.067160][ C1] run_timer_softirq+0xb7/0x170 [ 195.072103][ C1] handle_softirqs+0x2c4/0x970 [ 195.076870][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 195.081635][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 195.086924][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 195.092155][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 195.096777][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 195.101993][ C1] irq_exit_rcu+0x9/0x30 [ 195.106249][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 195.111889][ C1] [ 195.114816][ C1] [ 195.117746][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 195.123743][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 195.129041][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 25 c5 a2 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 195.149092][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 195.155172][ C1] RAX: ffff8880176b0000 RBX: ffff8880186e7864 RCX: 0000000000035cc9 [ 195.163370][ C1] RDX: 0000000000000001 RSI: ffff8880186e7800 RDI: ffff8880186e7864 [ 195.171367][ C1] RBP: 000000000003a5b8 R08: ffff8880b9537d0b R09: 1ffff110172a6fa1 [ 195.179437][ C1] R10: dffffc0000000000 R11: ffffffff8b86b9f0 R12: ffff88801b769800 [ 195.187588][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eace280 [ 195.195569][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 195.200874][ C1] acpi_idle_enter+0xe4/0x140 [ 195.205556][ C1] cpuidle_enter_state+0x112/0x480 [ 195.210671][ C1] ? __pfx_menu_select+0x10/0x10 [ 195.215816][ C1] cpuidle_enter+0x5d/0xa0 [ 195.220251][ C1] do_idle+0x375/0x5d0 [ 195.224328][ C1] ? __pfx_do_idle+0x10/0x10 [ 195.228932][ C1] ? do_idle+0x5a3/0x5d0 [ 195.233204][ C1] cpu_startup_entry+0x42/0x60 [ 195.237976][ C1] start_secondary+0x100/0x100 [ 195.242828][ C1] common_startup_64+0x13e/0x147 [ 195.247780][ C1] [ 195.251031][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state