last executing test programs: 2.580320807s ago: executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.511966881s ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000120000000032000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300000000000000000048000200656362286369706865725f6e756c6c290000000000"], 0x154}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0x150}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r4}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="000128bd7000ffdbdf2506000000050021000000002847d6000800110000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000002000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa300000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r7, 0x40049409, r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'wrr\x00'}, 0x2c) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f00000003c0)="815ba3", 0x3, 0x480c1, &(0x7f0000000400)={0xa, 0x4e24, 0x1, @local, 0x70000}, 0x1c) 1.068083498s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000) unshare(0x22020400) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x80, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6c, 0xe, {{{}, {}, @broadcast, @broadcast, @random="d1fdb9f0598b"}, 0x0, @random, 0x0, @void, @val={0x1, 0x4, [{}, {}, {}, {}]}, @val={0x3, 0x1}, @val, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0xffffffffffffff9c}, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x108, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x8000, 0x17}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xdf34}, @NL80211_ATTR_VENDOR_DATA={0xc5, 0xc5, "3a0a3aed1edf831f02ddc9c4a5afaac3dcfb4238465cf8e4758e8d0b53e9083abc2dedb7f25b136d2e9c818f36b3b990f8dd5436d07d8bbb46840dd86d49a79a21d28efed8f0701bf23e32beb656102596c4e6711e07458a4f594c1f1d50920dd2ea85700771d1ca43ec77f6172a29728bf67515f68962a35501952a689fcd3c7fd28430582b87715b6df01ac79dab15a98da3044c30e1064049f5ea7abe9f45bdd74104664f085bd3a0d707424ac467950e093d36bdf6981b232f4cb753744a95"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8014}, 0x40000c1) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010001fffad76002f15cbbaea0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r9, @ANYBLOB="0800040000000000"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r10 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r10}], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) 1.067549516s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x78, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f6ebb2fbd820900b16c313874eb45ef9d3347468133182bb5415d4894ac48070"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e5d9e446df4e371acdd6a9c962f6ab8"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x78}}, 0x0) 934.710875ms ago: executing program 0: bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x810, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$packet(r1, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="00010000120010002600000000000000007262675f6e6f70725f686d61635f736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400"/224], 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) 854.101906ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 838.261024ms ago: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000780)='+', 0xffc3, 0x0, 0x0, 0x0) 763.616375ms ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010102}]}, 0x2c}}, 0x0) 677.600622ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x4000000000002, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0xfffffffffffffffe, 0x4) pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000003c0)) 674.877494ms ago: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f00000001c0)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x5, 0x3, 0x0, [{@multicast1}, {@multicast1}, {@broadcast}]}]}}}], 0x30}, 0x0) 649.029122ms ago: executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="892f6610088166ffc3ed697a0000", 0xe, 0x0, &(0x7f0000000300), 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 623.342932ms ago: executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) 577.824651ms ago: executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x2) 537.505142ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x1e}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf23}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x38) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_delroute={0x134, 0x19, 0x0, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "c87b656e285d281181111413f0081ddc21c51ffc7e9526ed8503c2aa9a5e0a96d01a3ad6c30d6baa1bdf0f6c4db0f4286fccba8944cee7e579a8dc8b3cde07b51c0a437334c8c52b2cc9301fdc5a473aaf13fbd5536aa0c719f9e37963f8e40ae29ee94ccd6deef4750b5d9d6e8dc3967a4a5190ce4bc0dc8fac276a4270ec73d98334dbb9a2c0797698e4386e2c1872d2a04e6904ccd29d2a7b59082689da3602b982a9a619fa91f33a33723f92930f8a430d10ca1d979db27615a77556811503f3e6f300770b42f29d54f7f5f2fbe93144d1ee8a63e74d5f84c61acf20e8931d09f7c29048edbaff2ea4b29242fd9eec8082002947c4fa12d0fbffe2c4befd", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}]}, 0x134}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000a40)={'gretap0\x00', 0x0, 0x1, 0x80, 0x9a02, 0x7fff, {{0x1d, 0x4, 0x1, 0x27, 0x74, 0x67, 0x0, 0x18, 0x2f, 0x0, @broadcast, @rand_addr=0x640100ff, {[@cipso={0x86, 0x4f, 0x2, [{0x1, 0x6, "366c1c8e"}, {0x6, 0x11, "9577463b389fad69471e2ae0598b97"}, {0x5, 0x11, "cc38be805664c7b51314b504c4ea96"}, {0x6, 0xa, "f81e49039655f1d4"}, {0x2, 0x7, "3bde801762"}, {0x7, 0x10, "8c387af00aace27b342fe9b60476"}]}, @rr={0x7, 0xf, 0xbb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x3, 0x2}, {0x3, 0x7, 0x80000000}, {0x1, 0x8, 0x72c70de2}], "5bc3"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0x9, 0x1}, {0x7, 0x5}]}, @ptr={0x8}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @datasec={0xf, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x8001}, {0x2, 0x800}], "984042"}, @var={0xa, 0x0, 0x0, 0xe, 0x5}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @volatile={0x8}]}, {0x0, [0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000000700)=""/151, 0xee, 0x97, 0x1, 0x8}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xa, &(0x7f0000000340)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xa6}], &(0x7f0000000180)='GPL\x00', 0x8, 0x9d, &(0x7f00000003c0)=""/157, 0x40f00, 0x4, '\x00', r5, 0x11, r6, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0xb2000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, r1, r7, r1, r1], 0x0, 0x10, 0x2}, 0x90) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, 0x0}}, {{&(0x7f0000000100)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x6, 0x24, [{0x18}, {}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14e7c955e89524d0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 536.288637ms ago: executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 505.013477ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000040601010000000000000000030000020500010007"], 0x28}}, 0x0) 480.015162ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x2}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "5b8bdd708f955e3a"}, 0x2}}]}, 0x3c}}, 0x0) 439.912416ms ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000) unshare(0x22020400) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048810) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x80, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6c, 0xe, {{{}, {}, @broadcast, @broadcast, @random="d1fdb9f0598b"}, 0x0, @random, 0x0, @void, @val={0x1, 0x4, [{}, {}, {}, {}]}, @val={0x3, 0x1}, @val, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0xffffffffffffff9c}, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)={0x108, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x8000, 0x17}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xdf34}, @NL80211_ATTR_VENDOR_DATA={0xc5, 0xc5, "3a0a3aed1edf831f02ddc9c4a5afaac3dcfb4238465cf8e4758e8d0b53e9083abc2dedb7f25b136d2e9c818f36b3b990f8dd5436d07d8bbb46840dd86d49a79a21d28efed8f0701bf23e32beb656102596c4e6711e07458a4f594c1f1d50920dd2ea85700771d1ca43ec77f6172a29728bf67515f68962a35501952a689fcd3c7fd28430582b87715b6df01ac79dab15a98da3044c30e1064049f5ea7abe9f45bdd74104664f085bd3a0d707424ac467950e093d36bdf6981b232f4cb753744a95"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8014}, 0x40000c1) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010001fffad76002f15cbbaea0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r9, @ANYBLOB="0800040000000000"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r10 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x16, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r10}], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90) 424.248275ms ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1001}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @empty, @private2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 389.123848ms ago: executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={0xfffffffffffffffd, 0x8}) 368.401532ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 288.64255ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func_proto, @func={0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x20) 244.255585ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x811, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010102}]}, 0x2c}}, 0x0) 240.846652ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) 188.120662ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) socket$packet(0x11, 0x4000000000002, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x51b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0xfffffffffffffffe, 0x4) pipe(&(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f00000003c0)) 139.888734ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}, @IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x48}}, 0x0) 121.561429ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x0) 97.749709ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[], 0x1048}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) 53.69399ms ago: executing program 4: unshare(0x28000600) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getpeername$qrtr(r0, 0x0, 0x0) 0s ago: executing program 1: unshare(0x28000400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) kernel console output (not intermixed with test programs): inconsistent configuration, please check. [ 122.278184][ T7659] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 122.590428][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.807442][ T7695] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.835839][ T7695] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.781585][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.791684][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.800908][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.812998][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.827145][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.834830][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.915325][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.082042][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.198376][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.389351][ T35] team0: Port device netdevsim0 removed [ 124.416823][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.589875][ T7780] IPv6: Can't replace route, no match found [ 124.641833][ T7782] gretap0: refused to change device tx_queue_len [ 124.682484][ T7782] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.846922][ T7737] chnl_net:caif_netlink_parms(): no params data found [ 124.949940][ T35] bridge_slave_1: left allmulticast mode [ 124.961549][ T35] bridge_slave_1: left promiscuous mode [ 124.968267][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.006116][ T35] bridge_slave_0: left allmulticast mode [ 125.011818][ T35] bridge_slave_0: left promiscuous mode [ 125.033190][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.660566][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.672888][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.685380][ T35] bond0 (unregistering): (slave bond1): Releasing backup interface [ 125.698798][ T35] bond0 (unregistering): Released all slaves [ 125.788944][ T35] bond1 (unregistering): Released all slaves [ 125.819142][ T7811] IPv6: Can't replace route, no match found [ 125.827775][ T7812] veth1_to_bridge: entered allmulticast mode [ 125.866433][ T7812] veth1_to_bridge: left allmulticast mode [ 125.924888][ T5114] Bluetooth: hci2: command tx timeout [ 126.135994][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.155063][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.164320][ T7737] bridge_slave_0: entered allmulticast mode [ 126.177992][ T7737] bridge_slave_0: entered promiscuous mode [ 126.225388][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.262720][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.294545][ T7737] bridge_slave_1: entered allmulticast mode [ 126.323726][ T7737] bridge_slave_1: entered promiscuous mode [ 126.457500][ T7870] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 126.516236][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.537516][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.672393][ T7883] __nla_validate_parse: 7 callbacks suppressed [ 126.672411][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.692104][ T7883] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.703317][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.720171][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.754907][ T7881] veth1_to_bridge: entered allmulticast mode [ 126.801611][ T35] hsr_slave_0: left promiscuous mode [ 126.835054][ T35] hsr_slave_1: left promiscuous mode [ 126.849912][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.860478][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.881189][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.910126][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.951671][ T35] veth1_macvtap: left promiscuous mode [ 126.959233][ T35] veth0_macvtap: left promiscuous mode [ 126.969394][ T35] veth1_vlan: left promiscuous mode [ 126.975902][ T35] veth0_vlan: left promiscuous mode [ 127.450540][ T35] team0 (unregistering): Port device team_slave_1 removed [ 127.490195][ T35] team0 (unregistering): Port device team_slave_0 removed [ 127.863004][ T7737] team0: Port device team_slave_0 added [ 127.871896][ T7737] team0: Port device team_slave_1 added [ 127.879313][ T7881] veth1_to_bridge: left allmulticast mode [ 128.004868][ T5114] Bluetooth: hci2: command tx timeout [ 128.055498][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.067514][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.139809][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.193821][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.222572][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.262222][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.368993][ T7737] hsr_slave_0: entered promiscuous mode [ 128.382755][ T7737] hsr_slave_1: entered promiscuous mode [ 128.394803][ T7737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.403149][ T7737] Cannot create hsr debugfs directory [ 128.495387][ T7922] veth1_to_bridge: entered allmulticast mode [ 128.541252][ T7922] veth1_to_bridge: left allmulticast mode [ 128.778988][ T7936] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 128.795845][ T7940] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 129.101108][ T7948] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 129.308944][ T7737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.330494][ T7737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.353926][ T7737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.381630][ T7737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.667496][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.711350][ T7737] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.739668][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.746904][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.777370][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.784557][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.088920][ T5114] Bluetooth: hci2: command tx timeout [ 130.153236][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.268149][ T7737] veth0_vlan: entered promiscuous mode [ 130.291756][ T7737] veth1_vlan: entered promiscuous mode [ 130.349263][ T7737] veth0_macvtap: entered promiscuous mode [ 130.375646][ T7737] veth1_macvtap: entered promiscuous mode [ 130.394211][ T8009] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 130.409309][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.436974][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.450754][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.465097][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.490768][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.502950][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.516264][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.526785][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.537988][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.549115][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.561055][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.572138][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.582804][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.593998][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.628004][ T7737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.640807][ T7737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.664175][ T7737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.677321][ T7737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.870519][ T928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.890689][ T928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.958996][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.982033][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.065977][ T8030] sctp: [Deprecated]: syz-executor.4 (pid 8030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.065977][ T8030] Use struct sctp_sack_info instead [ 131.420545][ T8045] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 131.434284][ T8045] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 131.473160][ T8045] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 131.848468][ T8025] syz-executor.4 (8025) used greatest stack depth: 16976 bytes left [ 132.175238][ T5114] Bluetooth: hci2: command tx timeout [ 132.798682][ T8098] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 132.930567][ T8107] veth0_vlan: entered allmulticast mode [ 133.290521][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.515893][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.526479][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.534637][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.545550][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.554203][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 133.563583][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.831253][ T8148] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 133.867851][ T8148] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 133.877850][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 133.897154][ T8148] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 134.120924][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.128794][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.136526][ T8131] bridge_slave_0: entered allmulticast mode [ 134.143949][ T8131] bridge_slave_0: entered promiscuous mode [ 134.152713][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.161094][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.168851][ T8131] bridge_slave_1: entered allmulticast mode [ 134.176580][ T8131] bridge_slave_1: entered promiscuous mode [ 134.213867][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.226142][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.256450][ T8131] team0: Port device team_slave_0 added [ 134.264893][ T8131] team0: Port device team_slave_1 added [ 134.292374][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.300337][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.334907][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.348169][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.355339][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.382061][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.421544][ T8131] hsr_slave_0: entered promiscuous mode [ 134.428323][ T8131] hsr_slave_1: entered promiscuous mode [ 134.434515][ T8131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.443266][ T8131] Cannot create hsr debugfs directory [ 134.558517][ T8131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.635697][ T8131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.706300][ T8131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.772258][ T8131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.882868][ T8131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.895849][ T8131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.910502][ T8131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.919782][ T8131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.992567][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.014409][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.028625][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.035822][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.057014][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.064356][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.104212][ T8131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.116791][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.241347][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.357664][ T8170] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.362644][ T8175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.422005][ T8170] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.571385][ T8186] syz-executor.0[8186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.571553][ T8186] syz-executor.0[8186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.631087][ T5114] Bluetooth: hci1: command tx timeout [ 135.890792][ T8198] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 135.908889][ T8198] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 135.943672][ T8198] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 135.964351][ T8131] veth0_vlan: entered promiscuous mode [ 136.017419][ T8131] veth1_vlan: entered promiscuous mode [ 136.115785][ T8206] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.142865][ T8131] veth0_macvtap: entered promiscuous mode [ 136.167746][ T8131] veth1_macvtap: entered promiscuous mode [ 136.190677][ T8200] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.219700][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.262637][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.291112][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.320284][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.333699][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.358747][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.380916][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.397340][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.428303][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.452474][ T8221] sctp: [Deprecated]: syz-executor.0 (pid 8221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.452474][ T8221] Use struct sctp_sack_info instead [ 136.480555][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.498037][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.509628][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.520375][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.530574][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.544057][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.560765][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.573755][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.597171][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.620796][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.639829][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.698818][ T8230] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.918404][ T8131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.953119][ T8131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.973308][ T8131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.999988][ T8131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.026812][ T8245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.070038][ T8244] sctp: [Deprecated]: syz-executor.2 (pid 8244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.070038][ T8244] Use struct sctp_sack_info instead [ 137.262856][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.272059][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.374057][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.392749][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.438436][ T8265] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 137.690929][ T5114] Bluetooth: hci1: command tx timeout [ 138.061443][ T8287] sctp: [Deprecated]: syz-executor.0 (pid 8287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.061443][ T8287] Use struct sctp_sack_info instead [ 138.486078][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.038314][ T8323] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.056176][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.084467][ T8322] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.093871][ T8322] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.108907][ T8322] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.118372][ T8322] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.140254][ T8322] geneve2: entered allmulticast mode [ 139.644877][ T8348] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 139.765365][ T5114] Bluetooth: hci1: command tx timeout [ 141.118097][ T8426] Bluetooth: MGMT ver 1.22 [ 141.386605][ T8441] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 141.418251][ T8441] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.451372][ T8441] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 141.853721][ T5114] Bluetooth: hci1: command tx timeout [ 141.922309][ T8458] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.940271][ T8458] caif0 speed is unknown, defaulting to 1000 [ 142.060002][ T8458] caif0 speed is unknown, defaulting to 1000 [ 142.091816][ T8458] caif0 speed is unknown, defaulting to 1000 [ 142.185431][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.215671][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.225618][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.241036][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.278561][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.286915][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.462853][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.529885][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.567757][ T8482] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.591599][ T8482] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.594896][ T8458] infiniband syz1: set down [ 142.608034][ T8482] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.617660][ T8458] infiniband syz1: added caif0 [ 142.629244][ T8482] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.647421][ T8482] geneve2: entered allmulticast mode [ 142.668437][ T8491] dccp_v6_rcv: dropped packet with invalid checksum [ 142.683528][ T5113] caif0 speed is unknown, defaulting to 1000 [ 142.716338][ T8458] RDS/IB: syz1: added [ 142.722229][ T8458] smc: adding ib device syz1 with port count 1 [ 142.747513][ T8458] smc: ib device syz1 port 1 has pnetid [ 142.799607][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.828511][ T8470] caif0 speed is unknown, defaulting to 1000 [ 142.870552][ T5163] caif0 speed is unknown, defaulting to 1000 [ 142.948527][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.089857][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.150623][ T8507] caif0 speed is unknown, defaulting to 1000 [ 143.521543][ T35] bridge_slave_1: left allmulticast mode [ 143.532892][ T35] bridge_slave_1: left promiscuous mode [ 143.549536][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.575959][ T35] bridge_slave_0: left allmulticast mode [ 143.581668][ T35] bridge_slave_0: left promiscuous mode [ 143.590934][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.925063][ T5114] Bluetooth: hci1: command tx timeout [ 144.408659][ T5114] Bluetooth: hci3: command tx timeout [ 144.437720][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.467620][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.483951][ T35] bond0 (unregistering): Released all slaves [ 144.627800][ T8458] caif0 speed is unknown, defaulting to 1000 [ 144.629927][ T35] tipc: Left network mode [ 144.685928][ T35] IPVS: stopping backup sync thread 8265 ... [ 144.976237][ T8470] chnl_net:caif_netlink_parms(): no params data found [ 145.033641][ T8458] caif0 speed is unknown, defaulting to 1000 [ 145.297694][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.338659][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.372916][ T8470] bridge_slave_0: entered allmulticast mode [ 145.381986][ T8470] bridge_slave_0: entered promiscuous mode [ 145.395647][ T8458] caif0 speed is unknown, defaulting to 1000 [ 145.402627][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.419420][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.429944][ T8470] bridge_slave_1: entered allmulticast mode [ 145.456361][ T8470] bridge_slave_1: entered promiscuous mode [ 145.544068][ T8470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.589504][ T8470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.686892][ T8470] team0: Port device team_slave_0 added [ 145.732536][ T8470] team0: Port device team_slave_1 added [ 145.822319][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.842503][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.878462][ T8470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.908708][ T8458] caif0 speed is unknown, defaulting to 1000 [ 145.916140][ T8470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.944991][ T8470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.978736][ T8470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.991364][ T8579] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 146.094430][ T8470] hsr_slave_0: entered promiscuous mode [ 146.104348][ T8470] hsr_slave_1: entered promiscuous mode [ 146.111306][ T8470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.124476][ T8470] Cannot create hsr debugfs directory [ 146.330531][ T8458] caif0 speed is unknown, defaulting to 1000 [ 146.485428][ T5114] Bluetooth: hci3: command tx timeout [ 146.510996][ T8597] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.544287][ T8597] openvswitch: netlink: VXLAN extension 5 out of range max 1 [ 146.657521][ T8458] caif0 speed is unknown, defaulting to 1000 [ 146.824145][ T8470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.838698][ T8470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.870699][ T8470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.881513][ T8470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.894317][ T8458] caif0 speed is unknown, defaulting to 1000 [ 146.993924][ T8470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.021981][ T8470] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.043789][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.051005][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.083793][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.091076][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.764091][ T35] hsr_slave_0: left promiscuous mode [ 147.785057][ T35] hsr_slave_1: left promiscuous mode [ 147.844309][ T35] veth1_macvtap: left promiscuous mode [ 147.851377][ T35] veth0_macvtap: left promiscuous mode [ 147.857532][ T35] veth1_vlan: left promiscuous mode [ 147.862993][ T35] veth0_vlan: left promiscuous mode [ 148.453543][ T35] team0 (unregistering): Port device team_slave_1 removed [ 148.501486][ T35] team0 (unregistering): Port device team_slave_0 removed [ 148.566525][ T5114] Bluetooth: hci3: command tx timeout [ 148.891238][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.018911][ T8470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.222492][ T8470] veth0_vlan: entered promiscuous mode [ 149.246140][ T8470] veth1_vlan: entered promiscuous mode [ 149.369668][ T8470] veth0_macvtap: entered promiscuous mode [ 149.390220][ T8470] veth1_macvtap: entered promiscuous mode [ 149.421066][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.432674][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.451096][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.468622][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.495021][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.510984][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.523185][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.534180][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.544428][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.567617][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.593466][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.616129][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.650627][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.672135][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.694822][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.708423][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.719208][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.729823][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.748333][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.771654][ T8470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.804604][ T8470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.821189][ T8470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.062090][ T8470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.088619][ T8470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.107784][ T8470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.125538][ T8470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.147975][ T8674] caif0 speed is unknown, defaulting to 1000 [ 150.247207][ T8682] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.335889][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.357125][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.452408][ T5163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.484606][ T5163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.655862][ T5114] Bluetooth: hci3: command tx timeout [ 150.758740][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.811855][ T29] audit: type=1804 audit(1717545283.998:6): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1004256717/syzkaller.IHKHut/115/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 151.679350][ T29] audit: type=1804 audit(1717545284.878:7): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1683367800/syzkaller.TsEmCP/64/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 151.813023][ T8743] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 151.830891][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.853705][ T8745] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 151.944267][ T8747] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.239803][ T8762] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.455371][ T8774] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 152.475381][ T8774] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.485986][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.725095][ T5114] Bluetooth: hci3: command tx timeout [ 152.736180][ T8787] netlink: 134788 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.764579][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.002822][ T8888] SET target dimension over the limit! [ 155.293203][ T8911] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 155.357714][ T8914] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 155.371840][ T8914] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.532906][ T8926] Bluetooth: MGMT ver 1.22 [ 155.744097][ T8941] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 155.805486][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.981284][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.242936][ T8975] bridge_slave_1: left allmulticast mode [ 156.256003][ T8975] bridge_slave_1: left promiscuous mode [ 156.268564][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.289981][ T8975] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 156.302426][ T8975] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 156.331501][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.481105][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.343994][ T9040] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.790110][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.958000][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.260329][ T9123] SET target dimension over the limit! [ 159.457367][ T9132] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 159.641586][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.363469][ T9175] Bluetooth: MGMT ver 1.22 [ 160.562759][ T9181] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.657668][ T9237] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 161.752745][ T9242] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 161.770270][ T9243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.819825][ T9243] bond0: (slave bond1): Enslaving as an active interface with an up link [ 161.880155][ T9237] bond1: entered promiscuous mode [ 161.902740][ T9237] bond1: entered allmulticast mode [ 162.473332][ T9275] syz-executor.1[9275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.482311][ T9275] syz-executor.1[9275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.146095][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.187462][ T9308] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.306120][ T9316] Cannot find add_set index 0 as target [ 164.149755][ T9369] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 164.176515][ T9369] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.313684][ T5158] IPVS: starting estimator thread 0... [ 164.414893][ T9382] IPVS: using max 18 ests per chain, 43200 per kthread [ 164.653190][ T9404] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 164.678329][ T9403] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 164.715052][ T9403] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.186621][ T9442] xt_NFQUEUE: number of total queues is 0 [ 165.440350][ T9455] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 165.767640][ T9468] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.796631][ T9468] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.004334][ T5113] IPVS: starting estimator thread 0... [ 166.104985][ T9485] IPVS: using max 26 ests per chain, 62400 per kthread [ 166.649628][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.023555][ T9553] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.048771][ T9553] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.472749][ T9576] xt_socket: unknown flags 0x8 [ 168.147828][ T9606] xt_socket: unknown flags 0x8 [ 168.639363][ T9634] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2048 (only 8 groups) [ 168.966722][ T9651] Bluetooth: MGMT ver 1.22 [ 169.836987][ T9712] batadv_slave_1: entered promiscuous mode [ 169.959250][ T9718] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.991327][ T9707] batadv_slave_1: left promiscuous mode [ 170.403174][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.579455][ T9757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 170.602641][ T9757] nbd: illegal input index -1708589048 [ 170.932338][ T9777] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.951480][ T9783] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (129) [ 170.980999][ T9777] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.589926][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.750920][ T9822] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.781268][ T9824] netlink: 11562 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.882482][ T9831] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 171.908915][ T9831] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 171.954332][ T9831] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 172.242038][ T9853] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.309798][ T9857] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (129) [ 172.457504][ T9870] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 172.490253][ T9870] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 172.521760][ T9873] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 173.006591][ T9895] netlink: 182 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.624052][ T9973] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 174.779957][ T9983] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 174.857946][ T9987] batadv_slave_1: entered promiscuous mode [ 174.891365][ T9986] batadv_slave_1: left promiscuous mode [ 175.370759][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.422851][T10061] bridge2: entered allmulticast mode [ 176.782058][T10084] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 177.532020][T10118] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 177.821700][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.836470][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.859602][T10134] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 178.149988][T10154] netlink: 210596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.280087][T10160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.708105][T10189] SET target dimension over the limit! [ 178.797412][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.811658][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.830962][T10195] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 179.108304][T10208] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 179.268372][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.562718][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.688396][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.994553][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.825033][T10327] __nla_validate_parse: 1 callbacks suppressed [ 180.825052][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.876744][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.060077][T10333] À: renamed from syztnl0 [ 181.270170][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.294965][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.314821][T10354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.964882][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.984005][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.032912][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.071668][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.085839][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.094277][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.102561][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.113252][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.125942][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.168075][T10386] caif0 speed is unknown, defaulting to 1000 [ 182.554461][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.768627][T10386] chnl_net:caif_netlink_parms(): no params data found [ 182.923535][T10386] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.963447][T10386] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.985898][T10386] bridge_slave_0: entered allmulticast mode [ 183.012000][T10386] bridge_slave_0: entered promiscuous mode [ 183.029752][T10432] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 183.042207][T10386] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.054044][T10432] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.067763][T10386] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.081067][T10386] bridge_slave_1: entered allmulticast mode [ 183.096914][T10386] bridge_slave_1: entered promiscuous mode [ 183.259307][T10386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.329391][T10386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.453356][T10386] team0: Port device team_slave_0 added [ 183.484264][T10386] team0: Port device team_slave_1 added [ 183.539889][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.631610][T10447] bond2: entered promiscuous mode [ 183.714508][T10386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.753403][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.804923][T10386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.837263][T10453] bridge1: entered promiscuous mode [ 183.856987][T10453] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 183.902100][T10447] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 183.919760][T10447] bridge1: left promiscuous mode [ 183.946579][T10447] bond2 (unregistering): Released all slaves [ 183.983883][T10386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.991378][T10386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.020853][T10386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.165793][ T5118] Bluetooth: hci2: command tx timeout [ 184.365016][T10386] hsr_slave_0: entered promiscuous mode [ 184.386429][T10386] hsr_slave_1: entered promiscuous mode [ 184.400743][T10386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.416596][T10386] Cannot create hsr debugfs directory [ 184.722298][T10493] bond1: entered promiscuous mode [ 184.793206][T10496] bridge3: entered promiscuous mode [ 184.826485][T10496] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 184.905852][T10502] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 184.933009][T10502] bridge3: left promiscuous mode [ 184.963461][T10502] bond1 (unregistering): Released all slaves [ 185.187495][T10386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.303407][T10386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.320639][T10518] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 185.329544][T10518] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 185.370622][T10518] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.380209][T10518] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.389588][T10518] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.398807][T10518] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.410575][T10518] vxlan1: entered promiscuous mode [ 185.517717][T10386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.650926][T10386] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.837745][T10386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.857301][T10386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.883984][T10386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.927249][T10386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.961653][T10540] À: renamed from syztnl0 [ 186.180647][T10386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.238376][T10386] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.245157][ T5114] Bluetooth: hci2: command tx timeout [ 186.265607][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.272827][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.317784][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.325024][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.713780][T10579] __nla_validate_parse: 4 callbacks suppressed [ 186.713798][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.765342][T10579] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 186.785088][T10579] netlink: 'syz-executor.4': attribute type 18 has an invalid length. [ 186.832452][T10579] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.841367][T10579] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.850184][T10579] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.859097][T10579] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.871205][T10579] vxlan0: entered promiscuous mode [ 186.948876][T10386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.054047][T10386] veth0_vlan: entered promiscuous mode [ 187.096844][T10386] veth1_vlan: entered promiscuous mode [ 187.103039][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 187.170860][T10386] veth0_macvtap: entered promiscuous mode [ 187.231091][T10386] veth1_macvtap: entered promiscuous mode [ 187.286995][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.321714][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.334077][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.345220][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.355302][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.367476][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.377496][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.388247][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.411246][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.433230][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.455263][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.494795][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.519626][T10386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.597111][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.629726][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.651994][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.663945][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.680860][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.703633][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.725796][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.742629][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.752891][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.763607][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.777992][T10386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.790103][T10386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.810052][T10386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.840146][T10625] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 187.882719][T10386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.910115][T10386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.926170][T10386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.945298][T10386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.110271][T10638] geneve1: mtu less than device minimum [ 188.215317][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.223191][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.310001][T10648] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 188.327203][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 188.348552][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.371478][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.440300][T10654] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 188.722131][T10675] geneve1: mtu less than device minimum [ 188.982059][T10695] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 189.006787][T10695] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.028364][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.203157][T10750] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 190.248343][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.284946][ T29] audit: type=1800 audit(1717545323.488:8): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 190.338519][ T29] audit: type=1804 audit(1717545323.498:9): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2234988273/syzkaller.xLGyER/6/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 190.406264][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 190.703554][T10776] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 190.749999][T10780] Bluetooth: MGMT ver 1.22 [ 190.879006][T10788] netlink: 'syz-executor.1': attribute type 40 has an invalid length. [ 191.036858][T10799] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 191.063005][T10799] hsr0: entered promiscuous mode [ 191.107501][T10799] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.141492][T10799] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 191.154620][T10799] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 191.174089][T10799] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 191.295730][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.349083][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.369384][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.387356][T10814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.409063][T10814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.417964][T10814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.485009][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 192.537686][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.544360][T10869] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.559117][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.855504][T10887] netlink: 'syz-executor.3': attribute type 40 has an invalid length. [ 194.565634][ T5118] Bluetooth: hci2: command 0x040f tx timeout [ 194.812901][T10959] sctp: [Deprecated]: syz-executor.0 (pid 10959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.812901][T10959] Use struct sctp_sack_info instead [ 195.192276][T10982] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 195.209214][ T29] audit: type=1804 audit(1717545328.418:10): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1004256717/syzkaller.IHKHut/325/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 195.249147][T10982] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 195.277283][T10982] debugfs: Directory 'netdev:' with parent 'phy32' already present! [ 195.350313][T10982] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 195.943866][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.243684][T11047] No such timeout policy "syz1" [ 196.460474][T11067] sctp: [Deprecated]: syz-executor.4 (pid 11067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.460474][T11067] Use struct sctp_sack_info instead [ 196.652331][ T5118] Bluetooth: hci2: command 0x040f tx timeout [ 196.729347][T11085] No such timeout policy "syz1" [ 196.819984][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.071094][T11110] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 197.085063][T11110] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 197.097457][T11111] sctp: [Deprecated]: syz-executor.1 (pid 11111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.097457][T11111] Use struct sctp_sack_info instead [ 197.236849][T11121] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 197.485349][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.540447][T11142] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.806434][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.819234][T11159] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 197.835284][T11159] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.972428][T11168] ip6gretap0: entered promiscuous mode [ 197.984273][T11168] macsec1: entered promiscuous mode [ 197.996077][T11168] macsec1: entered allmulticast mode [ 198.008016][T11168] ip6gretap0: entered allmulticast mode [ 198.028409][T11168] ip6gretap0: left allmulticast mode [ 198.034093][T11168] ip6gretap0: left promiscuous mode [ 198.585757][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.597474][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.606121][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.618435][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.627713][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.636791][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.827333][T11195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.838080][T11195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.880638][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.921500][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd8b000: rx timeout, send abort [ 198.931991][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bd8b000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.980810][T11195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.992573][T11195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.099398][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.150961][T11195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.161490][T11195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.609848][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.619043][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.630331][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.650631][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.671696][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.679297][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.223200][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802bd8bc00: rx timeout, send abort [ 200.232090][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bd8bc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.727115][ T5114] Bluetooth: hci3: command tx timeout [ 201.509792][T11186] caif0 speed is unknown, defaulting to 1000 [ 201.549821][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.621718][T11195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.654985][T11195] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.661812][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.713115][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.769533][ T5114] Bluetooth: hci0: command tx timeout [ 201.847155][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 201.860019][T11207] caif0 speed is unknown, defaulting to 1000 [ 202.024271][T11195] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.073684][T11195] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.149077][T11195] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.182192][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.192110][T11195] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.192471][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.209481][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.225547][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.235104][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 202.242654][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.305303][T11195] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.313661][T11195] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.330959][T11195] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.340722][T11195] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.444985][ T62] bridge_slave_1: left allmulticast mode [ 202.466265][ T62] bridge_slave_1: left promiscuous mode [ 202.486559][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.506990][ T62] bridge_slave_0: left allmulticast mode [ 202.512690][ T62] bridge_slave_0: left promiscuous mode [ 202.519030][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.530135][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.804842][ T5118] Bluetooth: hci3: command tx timeout [ 202.933569][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.947248][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.959377][ T62] bond0 (unregistering): Released all slaves [ 202.972722][ T62] bond1 (unregistering): Released all slaves [ 203.099912][T11234] caif0 speed is unknown, defaulting to 1000 [ 203.170531][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880233c3800: rx timeout, send abort [ 203.179229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880233c3800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.193193][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.339717][T11186] chnl_net:caif_netlink_parms(): no params data found [ 203.727002][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.745193][T11186] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.770759][T11186] bridge_slave_0: entered allmulticast mode [ 203.795778][T11186] bridge_slave_0: entered promiscuous mode [ 203.854960][ T5118] Bluetooth: hci0: command tx timeout [ 203.866018][ T62] hsr_slave_0: left promiscuous mode [ 203.875944][ T62] hsr_slave_1: left promiscuous mode [ 203.883028][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.890650][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.900602][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.908438][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.942487][ T62] veth1_macvtap: left promiscuous mode [ 203.949148][ T62] veth0_macvtap: left promiscuous mode [ 203.954991][ T62] veth1_vlan: left promiscuous mode [ 203.960340][ T62] veth0_vlan: left promiscuous mode [ 204.335927][ T5118] Bluetooth: hci5: command tx timeout [ 204.420110][ T62] team0 (unregistering): Port device team_slave_1 removed [ 204.460839][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880233c0800: rx timeout, send abort [ 204.469450][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880233c0800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.469962][ T62] team0 (unregistering): Port device team_slave_0 removed [ 204.889107][ T5118] Bluetooth: hci3: command tx timeout [ 205.034376][T11279] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.113502][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.125182][T11186] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.134978][T11186] bridge_slave_1: entered allmulticast mode [ 205.162271][T11186] bridge_slave_1: entered promiscuous mode [ 205.286674][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.377924][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.528212][T11207] chnl_net:caif_netlink_parms(): no params data found [ 205.640712][T11186] team0: Port device team_slave_0 added [ 205.682407][T11186] team0: Port device team_slave_1 added [ 205.734061][T11234] chnl_net:caif_netlink_parms(): no params data found [ 205.851209][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.868783][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.918430][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.934871][ T5118] Bluetooth: hci0: command tx timeout [ 206.017054][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.024135][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.081383][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.181308][T11207] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.199239][T11207] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.207373][T11207] bridge_slave_0: entered allmulticast mode [ 206.222193][T11207] bridge_slave_0: entered promiscuous mode [ 206.246809][T11207] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.254227][T11207] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.261852][T11207] bridge_slave_1: entered allmulticast mode [ 206.269481][T11207] bridge_slave_1: entered promiscuous mode [ 206.288406][T11298] ipvlan0: entered promiscuous mode [ 206.350360][T11296] ipvlan0: left promiscuous mode [ 206.398142][T11207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.409488][ T5118] Bluetooth: hci5: command tx timeout [ 206.435818][T11234] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.443069][T11234] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.450477][T11234] bridge_slave_0: entered allmulticast mode [ 206.458018][T11234] bridge_slave_0: entered promiscuous mode [ 206.470183][T11186] hsr_slave_0: entered promiscuous mode [ 206.477545][T11186] hsr_slave_1: entered promiscuous mode [ 206.488442][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.496355][T11186] Cannot create hsr debugfs directory [ 206.524908][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.547661][T11207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.558472][T11234] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.573893][T11234] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.581458][T11234] bridge_slave_1: entered allmulticast mode [ 206.593954][T11234] bridge_slave_1: entered promiscuous mode [ 206.651966][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.716201][T11207] team0: Port device team_slave_0 added [ 206.778423][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.833309][T11207] team0: Port device team_slave_1 added [ 206.872516][T11234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.932086][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.963627][T11207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.970886][ T5118] Bluetooth: hci3: command tx timeout [ 206.978329][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.005599][T11207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.026279][T11234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.053911][T11207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.062693][T11207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.088936][T11207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.220457][T11234] team0: Port device team_slave_0 added [ 207.313775][T11234] team0: Port device team_slave_1 added [ 207.328413][T11207] hsr_slave_0: entered promiscuous mode [ 207.341589][T11207] hsr_slave_1: entered promiscuous mode [ 207.352604][T11207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.379071][T11207] Cannot create hsr debugfs directory [ 207.538595][T11234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.555852][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.583687][T11234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.643968][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.682409][T11234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.690161][T11234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.718681][T11234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.938323][T11234] hsr_slave_0: entered promiscuous mode [ 207.953610][T11234] hsr_slave_1: entered promiscuous mode [ 207.969085][T11234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.979381][T11234] Cannot create hsr debugfs directory [ 207.990651][ T62] bridge_slave_1: left allmulticast mode [ 208.000461][ T62] bridge_slave_1: left promiscuous mode [ 208.008511][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.014927][ T5118] Bluetooth: hci0: command tx timeout [ 208.027082][ T62] bridge_slave_0: left allmulticast mode [ 208.032737][ T62] bridge_slave_0: left promiscuous mode [ 208.038935][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.412146][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.433407][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.445993][ T62] bond0 (unregistering): Released all slaves [ 208.458545][ T62] bond1 (unregistering): Released all slaves [ 208.495220][ T5118] Bluetooth: hci5: command tx timeout [ 208.966036][T11207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.988691][T11207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.014804][T11207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.049022][T11186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.065533][T11186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.104240][T11186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.132718][T11186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.194529][T11207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.205743][T11207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.216099][T11207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.380779][T11207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.400960][T11207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.411589][T11207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 209.471880][ T62] hsr_slave_0: left promiscuous mode [ 209.478868][ T62] hsr_slave_1: left promiscuous mode [ 209.547051][ T62] veth1_macvtap: left promiscuous mode [ 209.575500][ T62] veth0_macvtap: left promiscuous mode [ 209.585182][ T62] veth1_vlan: left promiscuous mode [ 209.590531][ T62] veth0_vlan: left promiscuous mode [ 209.643737][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.226173][ T62] team0 (unregistering): Port device team_slave_1 removed [ 210.276006][ T62] team0 (unregistering): Port device team_slave_0 removed [ 210.574967][ T5118] Bluetooth: hci5: command tx timeout [ 210.702974][T11207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.714215][T11207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.734819][T11207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 210.758619][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.950598][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.032950][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.111534][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.167974][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.175233][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.245924][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.253229][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.301142][T11415] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.379154][T11186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.401456][T11186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.547703][T11207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.581988][T11207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.617567][T11207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.644321][T11207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.827401][T11234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.854211][T11234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.882663][T11234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.945454][T11234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.013815][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.190934][T11186] veth0_vlan: entered promiscuous mode [ 212.203533][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.223012][T11186] veth1_vlan: entered promiscuous mode [ 212.288232][T11207] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.347252][T11234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.371542][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.378766][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.389977][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.397184][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.480886][T11234] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.530424][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.537633][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.576016][T11186] veth0_macvtap: entered promiscuous mode [ 212.589565][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.596768][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.631898][T11186] veth1_macvtap: entered promiscuous mode [ 212.713678][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.731349][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.743079][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.753643][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.763794][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.786033][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.814689][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.826695][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.842510][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.854186][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.887855][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.934322][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.984880][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.005346][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.019177][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.045169][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.075186][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.085974][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.096759][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.106698][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.122314][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.146688][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.213326][T11186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.238191][T11186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.258270][T11186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.271474][T11186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.309835][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.349643][T11455] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 213.384948][T11455] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.554001][T11207] veth0_vlan: entered promiscuous mode [ 213.583624][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.614590][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.693308][T11207] veth1_vlan: entered promiscuous mode [ 213.750214][T11234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.754745][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.771696][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.870973][T11207] veth0_macvtap: entered promiscuous mode [ 213.898195][T11207] veth1_macvtap: entered promiscuous mode [ 213.958486][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.960719][T11234] veth0_vlan: entered promiscuous mode [ 214.003029][T11234] veth1_vlan: entered promiscuous mode [ 214.022220][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.022366][T11468] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.062299][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.086205][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.106766][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.128898][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.146513][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.168782][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.189036][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.206744][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.227975][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.249105][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.272688][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.289372][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.302171][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.368982][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.387623][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.400357][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.418181][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.431014][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.441852][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.451997][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.462971][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.491767][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.518209][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.536633][T11207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.548028][T11207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.560485][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.594898][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.621562][T11207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.632389][T11207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.643450][T11207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.652987][T11207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.677171][T11234] veth0_macvtap: entered promiscuous mode [ 214.729299][T11234] veth1_macvtap: entered promiscuous mode [ 214.742309][T11495] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.776809][T11495] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 214.920387][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.943804][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.953785][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.965101][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.988403][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.006394][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.016766][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.028291][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.038998][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.060645][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.075862][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.090175][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.100383][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.117673][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.130426][T11234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.140903][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.189312][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.200103][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.201057][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.223171][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.230350][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.242534][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.261563][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.272482][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.291402][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.314804][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.332379][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.344054][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.355010][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.366687][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.376745][T11234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.387421][T11234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.400282][T11234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.421224][T11234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.439170][T11234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.448987][T11234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.458139][T11234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.566930][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.588368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.674609][ T928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.707844][ T928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.720880][T11526] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 215.741596][T11526] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 215.813417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.849720][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.982493][T11541] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.189845][T11549] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 216.259758][T11549] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.294471][T11549] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 216.315087][T11549] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.400158][T11561] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 216.449997][T11561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.488804][T11561] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 216.648553][T11574] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 216.671855][T11574] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.685653][T11567] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.704490][T11574] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 217.124244][T11597] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 217.137070][T11597] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.149765][T11597] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 217.168770][T11597] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.521445][T11678] xt_limit: Overflow, try lower: 16384/524288 [ 218.582454][T11682] ebt_among: src integrity fail: 300 [ 218.617212][T11685] validate_nla: 1 callbacks suppressed [ 218.617232][T11685] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 218.723610][T11693] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 219.052255][T11706] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 219.087914][T11706] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 219.115660][T11710] xt_limit: Overflow, try lower: 16384/524288 [ 219.264086][T11718] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 219.379892][T11722] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 220.239690][T11770] __nla_validate_parse: 3 callbacks suppressed [ 220.239710][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.273844][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.293515][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.492549][T11784] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 220.841617][T11807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.861674][T11807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.893647][T11807] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.660985][T11862] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.692398][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.925348][T11880] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 222.095439][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.122450][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.404974][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 222.445515][T11916] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 222.701203][ T29] audit: type=1804 audit(1717545355.898:11): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3695392856/syzkaller.aTRntP/473/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 222.745613][T11926] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 224.750673][ T29] audit: type=1804 audit(1717545357.958:12): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir816523433/syzkaller.lCgcAY/55/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 225.076265][T12033] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 225.647745][T12052] __nla_validate_parse: 6 callbacks suppressed [ 225.647764][T12052] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.899730][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.911625][ T29] audit: type=1804 audit(1717545359.118:13): pid=12059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1181785100/syzkaller.yWrjQ3/50/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 225.954609][T12059] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 225.959215][T12070] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.025044][T12066] team1: Mode changed to "activebackup" [ 226.204087][T12083] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.781089][T12113] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.792581][T12109] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.947715][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.994316][T12119] ip6gretap0: entered promiscuous mode [ 227.008015][T12126] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.384801][T12138] sctp: [Deprecated]: syz-executor.1 (pid 12138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.384801][T12138] Use struct sctp_sack_info instead [ 227.703496][T12148] tipc: Enabling of bearer rejected, failed to enable media [ 227.720954][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.731832][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.751787][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.760952][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.786016][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.795284][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.802767][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.911835][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.922604][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.970934][T12149] caif0 speed is unknown, defaulting to 1000 [ 228.080617][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.114898][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.247708][T12170] openvswitch: netlink: Key type 241 is out of range max 32 [ 228.253386][T12171] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.338703][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.358675][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.506985][T12186] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 228.517898][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.530678][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.990841][ T11] bridge_slave_0: left allmulticast mode [ 229.010293][ T11] bridge_slave_0: left promiscuous mode [ 229.029377][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.679143][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.695005][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.707231][ T11] bond0 (unregistering): Released all slaves [ 229.719636][T12149] chnl_net:caif_netlink_parms(): no params data found [ 229.854989][ T5114] Bluetooth: hci2: command tx timeout [ 230.272339][T12149] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.290205][T12149] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.303598][T12149] bridge_slave_0: entered allmulticast mode [ 230.318083][T12149] bridge_slave_0: entered promiscuous mode [ 230.334142][T12149] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.345272][T12149] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.352614][T12149] bridge_slave_1: entered allmulticast mode [ 230.365819][T12149] bridge_slave_1: entered promiscuous mode [ 230.507304][T12260] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 230.530658][T12260] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 230.626334][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.680781][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.854052][T12149] team0: Port device team_slave_0 added [ 230.907053][T12149] team0: Port device team_slave_1 added [ 231.092109][ T11] hsr_slave_0: left promiscuous mode [ 231.108261][ T11] hsr_slave_1: left promiscuous mode [ 231.123449][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.135572][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.143859][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.162501][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.229830][ T11] veth1_macvtap: left promiscuous mode [ 231.242205][ T11] veth0_macvtap: left promiscuous mode [ 231.250285][ T11] veth1_vlan: left promiscuous mode [ 231.255883][T12292] Bluetooth: MGMT ver 1.22 [ 231.264152][ T11] veth0_vlan: left promiscuous mode [ 231.497164][T12302] xt_TCPMSS: Only works on TCP SYN packets [ 231.924909][ T5114] Bluetooth: hci2: command tx timeout [ 232.410990][ T11] team0 (unregistering): Port device team_slave_1 removed [ 232.523925][ T11] team0 (unregistering): Port device team_slave_0 removed [ 233.020401][T12310] __nla_validate_parse: 1 callbacks suppressed [ 233.020421][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.060400][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.096801][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.180704][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.226006][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.232997][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.323325][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.551620][T12149] hsr_slave_0: entered promiscuous mode [ 233.567261][T12149] hsr_slave_1: entered promiscuous mode [ 233.584426][T12348] netem: unknown loss type 8 [ 233.602452][T12348] netem: change failed [ 233.952944][ T11] IPVS: stop unused estimator thread 0... [ 234.004911][ T5114] Bluetooth: hci2: command tx timeout [ 234.011799][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.041932][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.118257][T12372] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.183149][T12369] IPv6: Can't replace route, no match found [ 234.295212][T12383] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 234.308905][T12382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.607013][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.632656][T12149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.639729][T12393] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.662082][T12149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.694364][T12149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.722944][T12149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 234.981835][T12149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.073166][T12149] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.126584][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.133760][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.198164][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.205408][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.756983][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.874461][T12149] veth0_vlan: entered promiscuous mode [ 235.912407][T12149] veth1_vlan: entered promiscuous mode [ 235.971319][T12149] veth0_macvtap: entered promiscuous mode [ 236.013966][T12149] veth1_macvtap: entered promiscuous mode [ 236.078802][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.092074][ T5114] Bluetooth: hci2: command tx timeout [ 236.112743][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.132628][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.170999][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.194987][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.214259][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.224224][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.235228][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.263309][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.283857][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.303214][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.321003][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.354999][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.376710][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.393681][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.407631][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.439453][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.462629][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.473262][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.499736][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.519766][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.550212][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.573820][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.584434][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.613941][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.623938][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.634855][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.645542][T12149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.656063][T12149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.669869][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.751868][T12149] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.774757][T12149] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.783600][T12149] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.805065][T12149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.831931][T12461] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.983702][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.006596][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.065903][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.073782][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.081040][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.315868][T12483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.326898][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.340735][T12477] xt_CT: No such helper "pptp" [ 237.389902][T12485] bond1: entered promiscuous mode [ 237.399791][T12477] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 237.785526][T12477] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.793366][T12477] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.140296][T12494] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 238.325394][ T5118] Bluetooth: hci3: command 0x1407 tx timeout [ 238.332867][ T5114] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 238.406991][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.457778][T12477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.902580][T12477] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.912188][T12477] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.923990][T12477] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.938992][T12477] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.071723][T12485] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 239.083840][T12485] bond1: (slave vti0): Error -95 calling set_mac_address [ 239.107491][T12487] __nla_validate_parse: 1 callbacks suppressed [ 239.107511][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.129154][T12487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.137217][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.177344][T12507] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 239.193529][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.240437][T12501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.267506][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.439027][T12512] team1: Mode "" not found [ 239.593948][T12527] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 239.977579][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.019681][T12557] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.085599][T12559] team1: Mode "" not found [ 240.586813][T12587] Bluetooth: MGMT ver 1.22 [ 241.049787][T12613] lo speed is unknown, defaulting to 1000 [ 241.072660][T12613] lo speed is unknown, defaulting to 1000 [ 241.103253][T12613] lo speed is unknown, defaulting to 1000 [ 241.162961][T12613] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 241.216032][T12613] lo speed is unknown, defaulting to 1000 [ 241.225437][T12613] lo speed is unknown, defaulting to 1000 [ 241.233127][T12613] lo speed is unknown, defaulting to 1000 [ 241.250809][T12613] lo speed is unknown, defaulting to 1000 [ 241.261835][T12613] lo speed is unknown, defaulting to 1000 [ 241.295231][T12613] lo speed is unknown, defaulting to 1000 [ 241.311464][T12613] lo speed is unknown, defaulting to 1000 [ 241.326236][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.337471][T12613] lo speed is unknown, defaulting to 1000 [ 241.551565][T12638] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 241.573288][T12640] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 241.582750][T12638] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.596443][T12640] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 241.617512][T12640] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.627114][T12638] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.762799][T12648] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 242.101228][T12673] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 242.644934][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.645154][ T5118] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 242.651039][ T5125] Bluetooth: hci2: command 0x0405 tx timeout [ 243.904828][T12778] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 244.291839][T12807] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 244.319259][T12807] __nla_validate_parse: 5 callbacks suppressed [ 244.319279][T12807] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.116968][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.581583][T12870] Bluetooth: hci3: invalid length 0, exp 2 for type 19 [ 245.780533][T12883] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.819720][T12886] mac80211_hwsim hwsim35 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 246.544142][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.067827][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.157428][T12963] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 247.166126][T12963] netlink: 211132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.667373][T12983] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.721611][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.842785][T12996] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 247.896284][T12996] team_slave_1: mtu greater than device maximum [ 247.914416][T12996] team0: Device team_slave_1 failed to change mtu [ 248.146161][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.303663][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.335001][ T1054] wlan0: Trigger new scan to find an IBSS to join [ 248.468764][T13037] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 248.520151][T13037] team_slave_1: mtu greater than device maximum [ 248.541211][T13037] team0: Device team_slave_1 failed to change mtu [ 248.970066][T13069] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 249.017400][T13069] team_slave_1: mtu greater than device maximum [ 249.039828][T13069] team0: Device team_slave_1 failed to change mtu [ 249.492703][T13101] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 249.828821][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.008936][T13130] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 250.065069][T13134] tipc: Started in network mode [ 250.074874][T13134] tipc: Node identity , cluster identity 4711 [ 250.095259][T13134] tipc: Failed to obtain node identity [ 250.122090][T13134] tipc: Enabling of bearer rejected, failed to enable media [ 250.195832][T13144] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 250.215504][T13144] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.347247][T13153] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.477499][T13161] xt_ecn: cannot match TCP bits for non-tcp packets [ 250.648722][T13174] tipc: Started in network mode [ 250.653652][T13174] tipc: Node identity , cluster identity 4711 [ 250.703114][T13174] tipc: Failed to obtain node identity [ 250.714942][T13174] tipc: Enabling of bearer rejected, failed to enable media [ 250.740790][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.822014][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.160171][T13205] macvlan2: entered promiscuous mode [ 251.173669][T13205] vlan1: entered promiscuous mode [ 251.199181][T13205] team0: Port device macvlan2 added [ 251.295405][ T35] wlan0: Trigger new scan to find an IBSS to join [ 252.142926][T13262] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 252.586397][T13283] xt_ecn: cannot match TCP bits for non-tcp packets [ 253.156135][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.650067][T13342] tipc: Started in network mode [ 253.655866][T13342] tipc: Node identity fe800000000000000000000000000032, cluster identity 4711 [ 253.669291][T13342] tipc: Enabled bearer , priority 10 [ 254.325586][ T11] wlan0: Trigger new scan to find an IBSS to join [ 254.786316][ T57] tipc: Node number set to 4269801522 [ 255.069142][T13373] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.253831][ T62] wlan0: Creating new IBSS network, BSSID de:7b:4d:55:ff:0d [ 255.497780][T13402] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 255.507071][T13402] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.416956][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.440294][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.562954][T13468] dccp_invalid_packet: P.Data Offset(144) too large [ 256.797225][T13480] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 256.987033][T13491] xt_CONNSECMARK: invalid mode: 0 [ 257.334728][ T29] audit: type=1800 audit(1717545390.538:14): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 257.415227][ T29] audit: type=1800 audit(1717545390.568:15): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 257.439473][T13512] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 257.762332][T13535] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 258.382811][T13574] xt_CONNSECMARK: invalid mode: 0 [ 258.540197][T13581] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 258.576930][T13580] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 258.901810][T13601] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 258.947049][T13601] macvlan3: entered promiscuous mode [ 258.972257][T13605] xt_CONNSECMARK: invalid mode: 0 [ 258.978037][T13603] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.988265][T13601] macvlan3: entered allmulticast mode [ 258.993690][T13601] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 259.013715][T13603] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 259.125924][T13615] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 259.136408][T13614] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 259.215278][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.563227][T13644] xt_CONNSECMARK: invalid mode: 0 [ 260.079750][T13669] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 260.102444][ T29] audit: type=1804 audit(1717545393.288:16): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir186434576/syzkaller.ta6wT2/543/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 260.254800][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.778715][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.812489][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.131945][T13736] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 261.160057][T13736] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.646460][T13758] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 262.130720][T13778] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 262.489167][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.976985][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.022384][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.052058][T13824] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 263.072339][T13824] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 263.099199][T13827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.365971][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 263.439386][T13851] bond0: entered promiscuous mode [ 263.444492][T13851] bond_slave_0: entered promiscuous mode [ 263.489518][T13851] bond_slave_1: entered promiscuous mode [ 263.646631][T13862] macvlan4: entered promiscuous mode [ 263.670362][T13862] macvlan4: entered allmulticast mode [ 263.709331][T13869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.021716][T13885] tipc: Can't bind to reserved service type 0 [ 264.055776][T13885] tipc: Started in network mode [ 264.072895][T13885] tipc: Node identity ffffffff, cluster identity 4711 [ 264.085809][T13885] tipc: Node number set to 4294967295 [ 265.381594][T13967] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.441197][T13967] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.496331][T13971] No such timeout policy "syz0" [ 265.507909][T13977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.096151][T14012] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.141695][T14012] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.195473][T14015] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.201683][T14012] No such timeout policy "syz0" [ 266.234378][T14015] unsupported nlmsg_type 40 [ 266.422627][T14028] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.796655][T14052] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 266.827059][T14052] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 266.855378][T14052] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.049716][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.157499][T14068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.164825][T14068] IPv6: NLM_F_CREATE should be set when creating new route [ 267.301214][T14082] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 267.337238][T14082] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 267.359147][T14082] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.381085][T14083] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.288063][T14146] xt_TCPMSS: Only works on TCP SYN packets [ 268.430785][T14155] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 268.449134][T14155] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.751585][T14173] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.973259][T14184] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 269.281938][T14201] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 269.556717][T14213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.564053][T14213] IPv6: NLM_F_CREATE should be set when creating new route [ 270.144520][T14244] dccp_xmit_packet: Payload too large (65475) for featneg. [ 270.842049][T14291] ------------[ cut here ]------------ [ 270.848334][T14291] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 270.871529][T14291] WARNING: CPU: 1 PID: 14291 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 270.883186][T14291] Modules linked in: 2024/06/04 23:56:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 270.888558][T14291] CPU: 1 PID: 14291 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0 [ 270.899935][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 270.910390][T14291] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 270.918112][T14291] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 a0 39 e1 8c 48 89 ee e8 1e 79 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 270.938757][T14291] RSP: 0018:ffffc900049d7318 EFLAGS: 00010246 [ 270.945845][T14291] RAX: bb4d3820bef61e00 RBX: 1ffff1100d8a0a9e RCX: 0000000000040000 [ 270.954149][T14291] RDX: ffffc9000bf64000 RSI: 0000000000004392 RDI: 0000000000004393 [ 270.963030][T14291] RBP: ffff88806c504130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 270.971722][T14291] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 270.980559][T14291] R13: 0000000002000000 R14: ffff88806c504ca0 R15: ffff88806c5054f0 [ 270.989203][T14291] FS: 00007f48edb476c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 270.999383][T14291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.006730][T14291] CR2: 0000001b2ed22000 CR3: 0000000041d2c000 CR4: 00000000003506f0 [ 271.015294][T14291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.023304][T14291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.031870][T14291] Call Trace: [ 271.035773][T14291] [ 271.038810][T14291] ? __warn+0x163/0x4e0 [ 271.042996][T14291] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.050354][T14291] ? report_bug+0x2b3/0x500 [ 271.055456][T14291] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.062001][T14291] ? handle_bug+0x3e/0x70 [ 271.066914][T14291] ? exc_invalid_op+0x1a/0x50 [ 271.071615][T14291] ? asm_exc_invalid_op+0x1a/0x20 [ 271.077284][T14291] ? __warn_printk+0x292/0x360 [ 271.082179][T14291] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.089260][T14291] ? ieee80211_link_info_change_notify+0x272/0x330 [ 271.096869][T14291] ieee80211_set_mcast_rate+0x46/0x60 [ 271.102274][T14291] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 271.109169][T14291] nl80211_set_mcast_rate+0xaff/0xeb0 [ 271.114587][T14291] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.121125][T14291] genl_rcv_msg+0xb14/0xec0 [ 271.126376][T14291] ? mark_lock+0x9a/0x350 [ 271.130746][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.136419][T14291] ? __pfx_lock_acquire+0x10/0x10 [ 271.141468][T14291] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.147113][T14291] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.153044][T14291] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.158742][T14291] ? __pfx___might_resched+0x10/0x10 [ 271.164068][T14291] netlink_rcv_skb+0x1e3/0x430 [ 271.168900][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.173948][T14291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.179864][T14291] genl_rcv+0x28/0x40 [ 271.183878][T14291] netlink_unicast+0x7ea/0x980 [ 271.189223][T14291] ? __pfx_netlink_unicast+0x10/0x10 [ 271.194540][T14291] ? __virt_addr_valid+0x183/0x520 [ 271.200859][T14291] ? __check_object_size+0x49c/0x900 [ 271.207195][T14291] ? bpf_lsm_netlink_send+0x9/0x10 [ 271.212355][T14291] netlink_sendmsg+0x8db/0xcb0 [ 271.217705][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.223029][T14291] ? __import_iovec+0x536/0x820 [ 271.228507][T14291] ? aa_sock_msg_perm+0x91/0x160 [ 271.233528][T14291] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.239393][T14291] ? security_socket_sendmsg+0x87/0xb0 [ 271.245407][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.250808][T14291] __sock_sendmsg+0x221/0x270 [ 271.256106][T14291] ____sys_sendmsg+0x525/0x7d0 [ 271.260911][T14291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.266811][T14291] __sys_sendmsg+0x2b0/0x3a0 [ 271.271461][T14291] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.277254][T14291] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.283605][T14291] ? do_syscall_64+0x100/0x230 [ 271.289022][T14291] ? do_syscall_64+0xb6/0x230 [ 271.293724][T14291] do_syscall_64+0xf3/0x230 [ 271.298821][T14291] ? clear_bhb_loop+0x35/0x90 [ 271.304098][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.310812][T14291] RIP: 0033:0x7f48ece7cee9 [ 271.315882][T14291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 271.336219][T14291] RSP: 002b:00007f48edb470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.345237][T14291] RAX: ffffffffffffffda RBX: 00007f48ecfb3f80 RCX: 00007f48ece7cee9 [ 271.353334][T14291] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 271.361897][T14291] RBP: 00007f48eceda6fe R08: 0000000000000000 R09: 0000000000000000 [ 271.370595][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.379240][T14291] R13: 000000000000000b R14: 00007f48ecfb3f80 R15: 00007ffcd6eda968 [ 271.387789][T14291] [ 271.390828][T14291] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.398119][T14291] CPU: 1 PID: 14291 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0 [ 271.408639][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 271.418718][T14291] Call Trace: [ 271.422010][T14291] [ 271.424948][T14291] dump_stack_lvl+0x241/0x360 [ 271.429647][T14291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.434866][T14291] ? __pfx__printk+0x10/0x10 [ 271.439466][T14291] ? _printk+0xd5/0x120 [ 271.443646][T14291] ? vscnprintf+0x5d/0x90 [ 271.447992][T14291] panic+0x349/0x860 [ 271.451902][T14291] ? __warn+0x172/0x4e0 [ 271.456059][T14291] ? __pfx_panic+0x10/0x10 [ 271.460466][T14291] ? show_trace_log_lvl+0x4e6/0x520 [ 271.465692][T14291] __warn+0x346/0x4e0 [ 271.469679][T14291] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.476180][T14291] report_bug+0x2b3/0x500 [ 271.480511][T14291] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.487010][T14291] handle_bug+0x3e/0x70 [ 271.491162][T14291] exc_invalid_op+0x1a/0x50 [ 271.495658][T14291] asm_exc_invalid_op+0x1a/0x20 [ 271.500505][T14291] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 271.507612][T14291] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 a0 39 e1 8c 48 89 ee e8 1e 79 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 271.527226][T14291] RSP: 0018:ffffc900049d7318 EFLAGS: 00010246 [ 271.533311][T14291] RAX: bb4d3820bef61e00 RBX: 1ffff1100d8a0a9e RCX: 0000000000040000 [ 271.541283][T14291] RDX: ffffc9000bf64000 RSI: 0000000000004392 RDI: 0000000000004393 [ 271.549251][T14291] RBP: ffff88806c504130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 271.557220][T14291] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 271.565188][T14291] R13: 0000000002000000 R14: ffff88806c504ca0 R15: ffff88806c5054f0 [ 271.573162][T14291] ? __warn_printk+0x292/0x360 [ 271.577937][T14291] ? ieee80211_link_info_change_notify+0x272/0x330 [ 271.584438][T14291] ieee80211_set_mcast_rate+0x46/0x60 [ 271.589812][T14291] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 271.595882][T14291] nl80211_set_mcast_rate+0xaff/0xeb0 [ 271.601261][T14291] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.607174][T14291] genl_rcv_msg+0xb14/0xec0 [ 271.611689][T14291] ? mark_lock+0x9a/0x350 [ 271.616028][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.621069][T14291] ? __pfx_lock_acquire+0x10/0x10 [ 271.626172][T14291] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.631533][T14291] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.637430][T14291] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.642890][T14291] ? __pfx___might_resched+0x10/0x10 [ 271.648182][T14291] netlink_rcv_skb+0x1e3/0x430 [ 271.652944][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.657966][T14291] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.663272][T14291] genl_rcv+0x28/0x40 [ 271.667255][T14291] netlink_unicast+0x7ea/0x980 [ 271.672025][T14291] ? __pfx_netlink_unicast+0x10/0x10 [ 271.677308][T14291] ? __virt_addr_valid+0x183/0x520 [ 271.682418][T14291] ? __check_object_size+0x49c/0x900 [ 271.687713][T14291] ? bpf_lsm_netlink_send+0x9/0x10 [ 271.692826][T14291] netlink_sendmsg+0x8db/0xcb0 [ 271.697598][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.702878][T14291] ? __import_iovec+0x536/0x820 [ 271.707731][T14291] ? aa_sock_msg_perm+0x91/0x160 [ 271.712666][T14291] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.717950][T14291] ? security_socket_sendmsg+0x87/0xb0 [ 271.723415][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.728699][T14291] __sock_sendmsg+0x221/0x270 [ 271.733380][T14291] ____sys_sendmsg+0x525/0x7d0 [ 271.738150][T14291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.743451][T14291] __sys_sendmsg+0x2b0/0x3a0 [ 271.748038][T14291] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.753184][T14291] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.759513][T14291] ? do_syscall_64+0x100/0x230 [ 271.764281][T14291] ? do_syscall_64+0xb6/0x230 [ 271.768958][T14291] do_syscall_64+0xf3/0x230 [ 271.773463][T14291] ? clear_bhb_loop+0x35/0x90 [ 271.778140][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.784029][T14291] RIP: 0033:0x7f48ece7cee9 [ 271.788441][T14291] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 271.808047][T14291] RSP: 002b:00007f48edb470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.816637][T14291] RAX: ffffffffffffffda RBX: 00007f48ecfb3f80 RCX: 00007f48ece7cee9 [ 271.824603][T14291] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 271.832568][T14291] RBP: 00007f48eceda6fe R08: 0000000000000000 R09: 0000000000000000 [ 271.840532][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.848496][T14291] R13: 000000000000000b R14: 00007f48ecfb3f80 R15: 00007ffcd6eda968 [ 271.856476][T14291] [ 271.859744][T14291] Kernel Offset: disabled [ 271.864151][T14291] Rebooting in 86400 seconds..