last executing test programs: 40.585974734s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000010000071117600000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x22020400) r0 = socket(0x2b, 0x5, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x1dc, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x148, 0x11d, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0xa}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x7}, {0x3, 0x1}, {0x0, 0x8}, {0x5, 0x3}, {0x2}, {0x1, 0x8}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x4}, {0x0, 0x10}, {0x0, 0x6}, {0x5, 0xa}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x4}, {0x7, 0xa}, {}, {0x2, 0x4}, {0x6, 0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x3, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0x2}, {0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x7, 0x2}, {0x1, 0x5}, {0x4}, {0x1, 0x9}, {0x2}, {0x1, 0x9}, {}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x6, 0x1}, {}, {0x4, 0x6}, {0x1, 0x4}, {0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x3}, {0x1, 0x1}, {0x4, 0x6}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x5}, {0x6, 0x3}, {0x2, 0x4}, {0x3, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0x3ff, 0x6, 0x100, 0x7, 0x6, 0xdf9]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x6}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x3, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {}, {0x1, 0x2}, {0x5, 0xa}, {0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x7}, {0x3}, {0x2, 0x6}, {0x0, 0x7}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x5, 0x8}, {0x5, 0x5}, {0x4, 0x3}, {0x5, 0x4}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x4, 0x36, 0x30, 0x2, 0x12, 0x6, 0x18, 0x3, 0x6c, 0x6, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x1dc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x74, r7, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IE={0x47, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x5, 0x80}}, @erp={0x2a, 0x1}, @dsss={0x3, 0x1, 0x30367fbc17cbfea0}, @rann={0x7e, 0x15, {{0x0, 0x15}, 0x39, 0x1, @broadcast, 0x0, 0x2, 0x7ff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x3, 0x41}}, @random_vendor={0xdd, 0xd, "36bd434dd48234eb4f1230acd5"}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4806) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0xc0) connect$netrom(r6, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$netrom(r6, 0x0, 0x0) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) read(r4, &(0x7f0000000300)=""/93, 0x5d) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="000000c0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="e8ff3f0000000002280012000c00010076657468"], 0x48}}, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r10) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507001100000000000000000102", @ANYRES32=r11, @ANYRES64], 0x48}}, 0x0) 40.278241867s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) 40.049496315s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}], 0x20}, 0x4008804) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0x3f0, 0x3f0, 0x230, 0x230, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@loopback={0x6200000000000000}, @local, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "038b6c1b3a6e172abcf2d545b110551a4524d4bcdcde36863af3721745bf"}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netpci0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@local, @private1, [], [], 'veth0_macvtap\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@multicast1}}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008800) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, 0x0, 0x0) epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'}) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef0000000000000000000000000600030000000000080001000000000024000200020000000000000000000000000000000100000000000000fc"], 0x4c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)='2', 0x1}], 0x1}, 0x8400) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac04, 0x0]}]]}, 0x34}}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}, {0x0}], 0x2}, 0x0) 39.106326795s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x24}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d"], 0x28}}, 0x0) 38.94620494s ago: executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x0) socket$unix(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @prog_id}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{0x0}, {0x0}], 0x2}, 0x1}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x1c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r5, 0x2, 0x6, 0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpeername$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) getsockname(r0, &(0x7f00000006c0)=@alg, &(0x7f00000005c0)=0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a}, 0x90) 38.802467973s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001800000a1800000007000000030000000000000c02000000000000000000000d00000000000000615f2e00fc32718053e850a8ac9d92fe3aa2d6f9ca38520fdbee8dbc2e356983"], 0x0, 0x37}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socket$kcm(0xf, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x34}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 32.329757303s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x2880008, r0}) 32.181151932s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="d0", 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 31.404715793s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4622, 0x1000000080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 31.269353925s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000001b) close(r2) 31.228247042s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540), 0x10) 31.223733289s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x91) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 31.129968174s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) 31.040885308s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x8d28, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.989219733s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 30.890085033s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r1], 0x20}}, 0x0) 30.81818191s ago: executing program 2: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x400}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd}}]}]}}}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1004}, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 30.710818452s ago: executing program 2: sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x0) 30.689009753s ago: executing program 4: socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.688736904s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 30.555837341s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 30.540887673s ago: executing program 0: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac14141218009400111a8200040090f7c10f4b31901b77481e35fd008a"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 30.408094585s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540), 0x10) 30.319406154s ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x81}, 0xe) 30.250236856s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002240)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x1e1, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @generic="c78b1d0dff411442869b4a7e103b949d4bb05387b627e94e2ec4cbadca474cf60cc03acd0e591b99bd23c7d91e4cbf59d1343c9f576249d31e69566a320174bdf1a1f9b2760f4e51013186846e", @generic="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"]}]}, 0x200}}, 0x0) 30.020788969s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 673.812755ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_gstrings={0xf}}) 668.91352ms ago: executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8923, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e") setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000700)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d40845da05627d17b31db8eda6a842dc0b7bd93cf1e61df444"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x482000, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)=0x1) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0x2, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x0, 'team_slave_1\x00', {0x3}}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000640), 0x4) 521.05644ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000bbbbbb07bbbbaaaaaaaaaaaa88a800008100000086dd60ada961000811002001000000000000000000000000000000000000000000000000ff"], 0x4a) 0s ago: executing program 1: writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x30, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x62090) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4095, 0x1014}, {&(0x7f00000003c0)=""/254, 0xf0}], 0x4, 0x0, 0x353}}], 0xebadb096fd1881, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.57' (ED25519) to the list of known hosts. 2024/06/04 16:13:51 fuzzer started 2024/06/04 16:13:51 dialing manager at 10.128.0.169:30016 [ 73.082050][ T5092] cgroup: Unknown subsys name 'net' [ 73.248796][ T5092] cgroup: Unknown subsys name 'rlimit' 2024/06/04 16:13:53 starting 5 executor processes [ 74.675809][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.924234][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.932848][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.934571][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.942767][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.954183][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.956014][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.962320][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.968816][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.972068][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.978717][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.000372][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.008461][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.009747][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.016507][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.022884][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.030570][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.045303][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.055395][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.067797][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.075055][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.084225][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.092551][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.113644][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.125821][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.136992][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.145810][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.155303][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.162494][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.203659][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.214316][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.709013][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 76.729322][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 76.995523][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 77.052250][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 77.070570][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 77.116601][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.124806][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.132202][ T5114] bridge_slave_0: entered allmulticast mode [ 77.140041][ T5114] bridge_slave_0: entered promiscuous mode [ 77.170535][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.177948][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.185942][ T5112] bridge_slave_0: entered allmulticast mode [ 77.193716][ T5112] bridge_slave_0: entered promiscuous mode [ 77.209409][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.217030][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.224446][ T5112] bridge_slave_1: entered allmulticast mode [ 77.231592][ T5112] bridge_slave_1: entered promiscuous mode [ 77.252183][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.259441][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.270899][ T5114] bridge_slave_1: entered allmulticast mode [ 77.278717][ T5114] bridge_slave_1: entered promiscuous mode [ 77.400582][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.419244][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.444695][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.484856][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.583567][ T5112] team0: Port device team_slave_0 added [ 77.618881][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.626323][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.633851][ T5111] bridge_slave_0: entered allmulticast mode [ 77.641195][ T5111] bridge_slave_0: entered promiscuous mode [ 77.662897][ T5112] team0: Port device team_slave_1 added [ 77.684001][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.691196][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.699004][ T5118] bridge_slave_0: entered allmulticast mode [ 77.707526][ T5118] bridge_slave_0: entered promiscuous mode [ 77.718879][ T5114] team0: Port device team_slave_0 added [ 77.726556][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.734145][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.741370][ T5111] bridge_slave_1: entered allmulticast mode [ 77.749101][ T5111] bridge_slave_1: entered promiscuous mode [ 77.771789][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.779295][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.786848][ T5122] bridge_slave_0: entered allmulticast mode [ 77.794199][ T5122] bridge_slave_0: entered promiscuous mode [ 77.820583][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.828040][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.836008][ T5118] bridge_slave_1: entered allmulticast mode [ 77.843073][ T5118] bridge_slave_1: entered promiscuous mode [ 77.852038][ T5114] team0: Port device team_slave_1 added [ 77.871784][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.879312][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.887035][ T5122] bridge_slave_1: entered allmulticast mode [ 77.894486][ T5122] bridge_slave_1: entered promiscuous mode [ 77.902568][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.909767][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.936175][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.950641][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.957889][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.984682][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.025952][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.043681][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.084798][ T5123] Bluetooth: hci0: command tx timeout [ 78.090054][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.144925][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.156926][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.163690][ T5123] Bluetooth: hci2: command tx timeout [ 78.171841][ T5123] Bluetooth: hci1: command tx timeout [ 78.187060][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.194244][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.220455][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.234773][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.241775][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.243433][ T5123] Bluetooth: hci3: command tx timeout [ 78.268630][ T5119] Bluetooth: hci4: command tx timeout [ 78.280735][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.321371][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.354355][ T5111] team0: Port device team_slave_0 added [ 78.402405][ T5118] team0: Port device team_slave_0 added [ 78.412985][ T5118] team0: Port device team_slave_1 added [ 78.452247][ T5111] team0: Port device team_slave_1 added [ 78.464174][ T5112] hsr_slave_0: entered promiscuous mode [ 78.471125][ T5112] hsr_slave_1: entered promiscuous mode [ 78.482665][ T5122] team0: Port device team_slave_0 added [ 78.504621][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.511685][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.538694][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.582289][ T5122] team0: Port device team_slave_1 added [ 78.602241][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.609448][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.635495][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.668001][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.675368][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.702352][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.745701][ T5114] hsr_slave_0: entered promiscuous mode [ 78.752354][ T5114] hsr_slave_1: entered promiscuous mode [ 78.759349][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.767907][ T5114] Cannot create hsr debugfs directory [ 78.798844][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.806182][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.834526][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.846783][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.854080][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.880126][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.921871][ T5118] hsr_slave_0: entered promiscuous mode [ 78.929044][ T5118] hsr_slave_1: entered promiscuous mode [ 78.935735][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.943895][ T5118] Cannot create hsr debugfs directory [ 78.986693][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.994480][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.021571][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.233831][ T5111] hsr_slave_0: entered promiscuous mode [ 79.240487][ T5111] hsr_slave_1: entered promiscuous mode [ 79.247122][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.255155][ T5111] Cannot create hsr debugfs directory [ 79.284755][ T5122] hsr_slave_0: entered promiscuous mode [ 79.291367][ T5122] hsr_slave_1: entered promiscuous mode [ 79.298169][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.306044][ T5122] Cannot create hsr debugfs directory [ 79.679125][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.692468][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.737631][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.760903][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.859357][ T5114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.870571][ T5114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.889655][ T5114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.902524][ T5114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.020108][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.031433][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.052642][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.066169][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.164407][ T5119] Bluetooth: hci0: command tx timeout [ 80.200671][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.227945][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.238856][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.246893][ T5119] Bluetooth: hci1: command tx timeout [ 80.251889][ T5123] Bluetooth: hci2: command tx timeout [ 80.261790][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.323492][ T5123] Bluetooth: hci4: command tx timeout [ 80.323547][ T5119] Bluetooth: hci3: command tx timeout [ 80.346665][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.387139][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.399469][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.446403][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.458872][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.502969][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.526371][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.585646][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.593405][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.605965][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.613317][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.635018][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.687027][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.694311][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.709797][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.717030][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.907251][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.949650][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.049215][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.098944][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.132782][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.140056][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.158055][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.165327][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.215252][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.222471][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.248182][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.281633][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.288886][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.330843][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.368605][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.428635][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.435892][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.469763][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.482063][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.489283][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.659916][ T5122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.695850][ T5112] veth0_vlan: entered promiscuous mode [ 81.741752][ T5112] veth1_vlan: entered promiscuous mode [ 81.790192][ T5114] veth0_vlan: entered promiscuous mode [ 81.886663][ T5114] veth1_vlan: entered promiscuous mode [ 81.916096][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.006857][ T5112] veth0_macvtap: entered promiscuous mode [ 82.086666][ T5112] veth1_macvtap: entered promiscuous mode [ 82.128043][ T5114] veth0_macvtap: entered promiscuous mode [ 82.150918][ T5118] veth0_vlan: entered promiscuous mode [ 82.172355][ T5118] veth1_vlan: entered promiscuous mode [ 82.201561][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.228182][ T5114] veth1_macvtap: entered promiscuous mode [ 82.244218][ T5119] Bluetooth: hci0: command tx timeout [ 82.250568][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.267542][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.284296][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.294478][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303602][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.312397][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.324422][ T5119] Bluetooth: hci2: command tx timeout [ 82.329909][ T5119] Bluetooth: hci1: command tx timeout [ 82.358223][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.370166][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.382056][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.404274][ T5123] Bluetooth: hci3: command tx timeout [ 82.409896][ T5119] Bluetooth: hci4: command tx timeout [ 82.431798][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.443038][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.456646][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.469750][ T5114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.479559][ T5114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.489132][ T5114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.498097][ T5114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.519907][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.630137][ T5118] veth0_macvtap: entered promiscuous mode [ 82.667268][ T5118] veth1_macvtap: entered promiscuous mode [ 82.742997][ T5122] veth0_vlan: entered promiscuous mode [ 82.787196][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.801211][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.849987][ T5122] veth1_vlan: entered promiscuous mode [ 82.881112][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.897618][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.907684][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.918643][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.932023][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.969446][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.981985][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.992898][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.003702][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.015504][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.045884][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.048658][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.061505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.064908][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.079523][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.090080][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.140158][ T746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.162840][ T746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.185427][ T5122] veth0_macvtap: entered promiscuous mode [ 83.265672][ T5122] veth1_macvtap: entered promiscuous mode [ 83.297258][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.314520][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.370444][ T5111] veth0_vlan: entered promiscuous mode [ 83.401166][ T5197] xt_ecn: cannot match TCP bits for non-tcp packets [ 83.415667][ T5111] veth1_vlan: entered promiscuous mode [ 83.458701][ T5197] team0: Port device macvlan2 added [ 83.466895][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.477877][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.488171][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.499119][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.512211][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.538827][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.561320][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.607132][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.635392][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.652430][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.678926][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.698017][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.713372][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.726012][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.748324][ T2399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.757265][ T5205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.780806][ T2399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.794234][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.803027][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.821378][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830851][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.937423][ T5111] veth0_macvtap: entered promiscuous mode [ 83.969070][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.972577][ T5111] veth1_macvtap: entered promiscuous mode [ 84.004202][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.156327][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.185445][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.219623][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.246235][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.269784][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.286725][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.296805][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.308006][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.321778][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.324123][ T5119] Bluetooth: hci0: command tx timeout [ 84.361258][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.405872][ T5119] Bluetooth: hci1: command tx timeout [ 84.411490][ T5123] Bluetooth: hci2: command tx timeout [ 84.441495][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.458145][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.469379][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.482444][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.494250][ T5123] Bluetooth: hci4: command tx timeout [ 84.499866][ T5123] Bluetooth: hci3: command tx timeout [ 84.506864][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.521167][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.539262][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.560557][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.605212][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.619746][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.631178][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.640702][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.651853][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.807599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.851011][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.000531][ T2399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.016416][ T2399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.312950][ T2399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.357345][ T2399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.546045][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.565489][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.709683][ T5265] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.078664][ T5281] Zero length message leads to an empty skb [ 86.131709][ T5284] netlink: 'syz-executor.3': attribute type 58 has an invalid length. [ 86.183371][ T5284] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.192455][ T5284] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.256963][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.636362][ T5305] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 86.659041][ T5293] syzkaller0: entered promiscuous mode [ 86.680980][ T5293] syzkaller0: entered allmulticast mode [ 86.809436][ T5309] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.860189][ T5309] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 88.820902][ T5311] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 88.835518][ T5325] sctp: [Deprecated]: syz-executor.0 (pid 5325) Use of int in maxseg socket option. [ 88.835518][ T5325] Use struct sctp_assoc_value instead [ 88.862235][ T5325] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 89.277564][ T5340] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 89.311141][ T5340] batman_adv: batadv0: Adding interface: team0 [ 89.326491][ T5340] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.366157][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.395239][ T5340] batman_adv: batadv0: Interface activated: team0 [ 89.418361][ T5342] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 89.452627][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.460486][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.673056][ T5345] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 89.968054][ T5362] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.092866][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.401757][ T5375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.685519][ T5387] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 90.718497][ T5387] batman_adv: batadv0: Adding interface: team0 [ 90.755880][ T5387] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.813828][ T5387] batman_adv: batadv0: Interface activated: team0 [ 91.176841][ T5406] netlink: zone id is out of range [ 91.189315][ T5406] netlink: zone id is out of range [ 91.197548][ T5406] netlink: zone id is out of range [ 91.197843][ T5411] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 91.202950][ T5406] netlink: zone id is out of range [ 91.276110][ T5406] netlink: zone id is out of range [ 91.293993][ T5406] netlink: zone id is out of range [ 91.306632][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.314788][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.314953][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.379260][ T5406] netlink: zone id is out of range [ 91.433694][ T5406] netlink: zone id is out of range [ 91.495816][ T5406] netlink: zone id is out of range [ 91.521822][ T5406] netlink: zone id is out of range [ 92.167511][ T5435] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 92.205340][ T5435] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 92.232534][ T5432] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 92.315843][ T5438] syz-executor.2[5438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.415872][ T786] cfg80211: failed to load regulatory.db [ 92.552589][ T5442] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 92.588848][ T5442] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 92.856612][ T5424] syz-executor.4 (5424) used greatest stack depth: 18480 bytes left [ 93.101174][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.143630][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.386982][ T5472] Illegal XDP return value 124 on prog (id 28) dev N/A, expect packet loss! [ 93.539233][ T5478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.600119][ T5479] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 93.705082][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.723917][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.516078][ T785] IPVS: starting estimator thread 0... [ 94.644016][ T5517] IPVS: using max 16 ests per chain, 38400 per kthread [ 94.709306][ T5525] __nla_validate_parse: 1 callbacks suppressed [ 94.709330][ T5525] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.870061][ T5528] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 94.923945][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.223542][ T5545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.418521][ T5553] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 95.449398][ T5555] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 95.476445][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.512814][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.521606][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.892972][ T5569] tipc: Enabling of bearer rejected, failed to enable media [ 96.755562][ T5602] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 96.794716][ T5602] batman_adv: batadv0: Adding interface: team0 [ 96.807738][ T5602] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.836515][ T5602] batman_adv: batadv0: Interface activated: team0 [ 97.048986][ T5612] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 97.318910][ T5588] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 97.326355][ T5623] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 97.376623][ T5623] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 97.786833][ T5640] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.831534][ T5640] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 98.212918][ T5663] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.590189][ T5675] syzkaller0: entered promiscuous mode [ 98.608091][ T5675] syzkaller0: entered allmulticast mode [ 99.363774][ T5700] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.148449][ T29] audit: type=1804 audit(1717517658.712:2): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir117514646/syzkaller.UkKyHt/28/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 100.162710][ T5717] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.338898][ T5718] "syz-executor.0" (5718) uses obsolete ecb(arc4) skcipher [ 100.822164][ T5700] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.996958][ T5724] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.355348][ T5744] Bluetooth: MGMT ver 1.22 [ 101.905190][ T5765] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.968229][ T5770] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 101.981134][ T5770] team0: Device virt_wifi0 failed to register rx_handler [ 102.071737][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.202713][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.249465][ T5780] net_ratelimit: 329 callbacks suppressed [ 102.249487][ T5780] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [.] L3 index 0 [ 102.431919][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.879784][ T5799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.916507][ T5799] xt_CONNSECMARK: invalid mode: 0 [ 103.429900][ T5818] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.865923][ T5839] x_tables: duplicate underflow at hook 1 [ 103.927934][ T5836] team0: Port device virt_wifi0 added [ 104.146215][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.201738][ T5835] dccp_close: ABORT with 100 bytes unread [ 104.378112][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.540476][ T5856] bridge0: port 3(bond1) entered blocking state [ 104.551162][ T5856] bridge0: port 3(bond1) entered disabled state [ 104.566169][ T5856] bond1: entered allmulticast mode [ 104.566856][ T5866] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 104.584586][ T5856] bond1: entered promiscuous mode [ 104.638040][ T5868] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.675868][ T5868] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.685874][ T5868] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.825108][ T5880] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.866025][ T5875] team1: Mode changed to "loadbalance" [ 105.006249][ T5888] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 105.692203][ T5922] __nla_validate_parse: 4 callbacks suppressed [ 105.692226][ T5922] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.732661][ T5921] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.747410][ T5922] netem: change failed [ 105.758873][ T5921] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 105.773398][ T5925] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.810141][ T5922] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.835016][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.939769][ T5933] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.286781][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.399948][ T5988] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 107.506478][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.529558][ T8] IPVS: starting estimator thread 0... [ 107.568780][ T5992] vlan2: entered promiscuous mode [ 107.594447][ T5992] team_slave_0: entered promiscuous mode [ 107.621811][ T5992] vlan2: entered allmulticast mode [ 107.630361][ T6000] IPVS: using max 18 ests per chain, 43200 per kthread [ 107.669936][ T5992] team_slave_0: entered allmulticast mode [ 107.843704][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.911200][ T6013] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.920829][ T6013] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.930395][ T6013] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.939810][ T6013] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.967767][ T6013] vxlan0: entered promiscuous mode [ 107.998875][ T6022] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.676957][ T6100] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 110.442541][ T6141] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 110.579220][ T29] audit: type=1804 audit(1717517669.142:3): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3117898249/syzkaller.Njt8qM/54/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 110.703593][ T6149] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.704003][ T6147] __nla_validate_parse: 4 callbacks suppressed [ 110.704022][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.735700][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.067850][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.914908][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.237003][ T6226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.607270][ T6244] xt_TCPMSS: Only works on TCP SYN packets [ 112.636316][ T6244] netem: unknown loss type 8 [ 112.641759][ T6244] netem: change failed [ 112.699896][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.961034][ T29] audit: type=1804 audit(1717517671.522:4): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3117898249/syzkaller.Njt8qM/64/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 113.025279][ T6259] syz-executor.2[6259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.025457][ T6259] syz-executor.2[6259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.060933][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.301803][ T6277] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 113.312071][ T6277] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.345955][ T6277] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.672920][ T6296] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 113.693576][ T6296] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.727059][ T6295] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 113.812395][ T6295] team0: Device ip6gre0 is of different type [ 113.833797][ T6296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 114.632416][ T6339] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 115.635263][ T6379] No such timeout policy "syz0" [ 115.981930][ T6400] __nla_validate_parse: 3 callbacks suppressed [ 115.981954][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.050329][ T6401] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.349078][ T6416] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.742948][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.257440][ T6453] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSRP.]L3 index 0 [ 117.384554][ T6464] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.927713][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.978971][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.989385][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.998287][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.016570][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.030085][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.038782][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.199848][ T953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.521766][ T953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.795046][ T953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.878742][ T953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.910543][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.991934][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.020214][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.191569][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.339929][ T6481] chnl_net:caif_netlink_parms(): no params data found [ 119.359070][ T953] bridge_slave_1: left allmulticast mode [ 119.374456][ T953] bridge_slave_1: left promiscuous mode [ 119.382237][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.424845][ T953] bridge_slave_0: left allmulticast mode [ 119.430593][ T953] bridge_slave_0: left promiscuous mode [ 119.462532][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.083893][ T5119] Bluetooth: hci3: command tx timeout [ 120.273924][ T953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.290562][ T953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.311311][ T953] bond0 (unregistering): Released all slaves [ 120.372947][ T6551] pim6reg: entered allmulticast mode [ 120.401213][ T6552] vxcan1: entered allmulticast mode [ 120.611106][ T6568] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.778101][ T29] audit: type=1804 audit(1717517679.342:5): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir906822595/syzkaller.Jc8cgK/81/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 120.992885][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.014263][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.034720][ T6481] bridge_slave_0: entered allmulticast mode [ 121.061806][ T6481] bridge_slave_0: entered promiscuous mode [ 121.095981][ T6481] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.124984][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.134131][ T6481] bridge_slave_1: entered allmulticast mode [ 121.142219][ T6481] bridge_slave_1: entered promiscuous mode [ 121.210806][ T6593] __nla_validate_parse: 6 callbacks suppressed [ 121.210829][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.254557][ T953] hsr_slave_0: left promiscuous mode [ 121.262816][ T953] hsr_slave_1: left promiscuous mode [ 121.279107][ T953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.304439][ T953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.318370][ T953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.327828][ T953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.364738][ T953] veth1_macvtap: left promiscuous mode [ 121.371758][ T953] veth0_macvtap: left promiscuous mode [ 121.378469][ T953] veth1_vlan: left promiscuous mode [ 121.386331][ T953] veth0_vlan: left promiscuous mode [ 122.028133][ T953] team0 (unregistering): Port device team_slave_1 removed [ 122.087198][ T953] team0 (unregistering): Port device team_slave_0 removed [ 122.163263][ T5119] Bluetooth: hci3: command tx timeout [ 122.792797][ T6481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.825394][ T6481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.049059][ T6481] team0: Port device team_slave_0 added [ 123.061879][ T6481] team0: Port device team_slave_1 added [ 123.118491][ T6626] bridge_slave_1: left allmulticast mode [ 123.127478][ T6626] bridge_slave_1: left promiscuous mode [ 123.155414][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.181343][ T6626] bridge_slave_0: left allmulticast mode [ 123.189695][ T6626] bridge_slave_0: left promiscuous mode [ 123.196283][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.341175][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.359010][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.435237][ T6481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.451900][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.459378][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.487492][ T6481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.622936][ T6481] hsr_slave_0: entered promiscuous mode [ 123.639721][ T6481] hsr_slave_1: entered promiscuous mode [ 123.647999][ T6481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.656935][ T6481] Cannot create hsr debugfs directory [ 123.906028][ T6656] bridge0: entered allmulticast mode [ 123.916257][ T6657] bridge0: left allmulticast mode [ 124.067604][ T6666] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.245016][ T5119] Bluetooth: hci3: command tx timeout [ 124.628698][ T6481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.648519][ T6481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.679063][ T6481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.710311][ T6481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.831108][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.907233][ T6481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.952187][ T6481] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.988422][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.995717][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.054596][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.061938][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.630629][ T6730] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.652251][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.821226][ T6481] veth0_vlan: entered promiscuous mode [ 125.872708][ T6481] veth1_vlan: entered promiscuous mode [ 125.889226][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.021132][ T6744] pim6reg: entered allmulticast mode [ 126.054174][ T6481] veth0_macvtap: entered promiscuous mode [ 126.064703][ T6742] vxcan1: entered allmulticast mode [ 126.071249][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.082677][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.095718][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.109476][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.141216][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.156194][ T6481] veth1_macvtap: entered promiscuous mode [ 126.250609][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.280391][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.292322][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.311982][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.322580][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.336078][ T5119] Bluetooth: hci3: command tx timeout [ 126.341715][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.352348][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.366077][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.381662][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.396332][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.408034][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.421710][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.433813][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.445520][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.461225][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.474721][ T6481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.487776][ T6481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.501894][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.519020][ T6481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.538025][ T6481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.578072][ T6481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.607270][ T6481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.771538][ T6748] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 126.895608][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.923863][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.972776][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.988352][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.262290][ T6772] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.826364][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.959647][ T6792] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.433019][ T6803] pim6reg: entered allmulticast mode [ 128.455913][ T6801] vxcan1: entered allmulticast mode [ 128.559000][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.955257][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.169080][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.235261][ T6837] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.416479][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.430818][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.454450][ T6849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.936934][ T6864] tun0: tun_chr_ioctl cmd 1074025678 [ 129.965443][ T6864] tun0: group set to 0 [ 130.215802][ T6884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 130.229590][ T6884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 131.809603][ T6952] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.833226][ T6952] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.552032][ T6983] __nla_validate_parse: 8 callbacks suppressed [ 132.552055][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.802650][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.881445][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.000669][ T6993] vxcan1 (unregistering): left allmulticast mode [ 133.201122][ T7003] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.277982][ T7011] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.329502][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.368424][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.375546][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.380495][ T7011] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.395733][ T7018] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 133.439940][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.474212][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.125290][ T7052] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 134.139316][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.151357][ T7052] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 134.160698][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.544432][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.685313][ T7080] batadv_slave_1: default FDB implementation only supports local addresses [ 135.218297][ T7111] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 135.422668][ T7118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.445864][ T7118] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 136.724279][ T7182] tipc: MTU too low for tipc bearer [ 137.574424][ T7210] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 137.725422][ T7217] __nla_validate_parse: 8 callbacks suppressed [ 137.725447][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.321379][ T7246] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.412356][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.732810][ T7260] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.234259][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.684812][ T7289] "syz-executor.2" (7289) uses obsolete ecb(arc4) skcipher [ 139.759770][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.787521][ T7292] "syz-executor.2" (7292) uses obsolete ecb(arc4) skcipher [ 139.885055][ T7295] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.006506][ T7305] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.745853][ T7319] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.294320][ T7339] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 141.312367][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.341143][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.399432][ T7339] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 141.552055][ T7358] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.773614][ T7407] __nla_validate_parse: 3 callbacks suppressed [ 142.773640][ T7407] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.805268][ T7407] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.050916][ T7419] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 143.064357][ T7419] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 143.122322][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.183308][ T7419] syz-executor.3[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.183480][ T7419] syz-executor.3[7419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.339817][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.355851][ T7429] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.538730][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.577693][ T7434] IPv6: sit2: Disabled Multicast RS [ 143.784432][ T7440] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.827558][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.861191][ T7443] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.299793][ T7463] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.423029][ T7509] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20001 [ 146.221278][ T7549] syz-executor.2[7549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.221567][ T7549] syz-executor.2[7549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.256620][ T7543] syz-executor.2[7543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.500339][ T7566] Bluetooth: MGMT ver 1.22 [ 146.941423][ T7587] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 147.848444][ T7626] __nla_validate_parse: 18 callbacks suppressed [ 147.848466][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.060053][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.129615][ T7638] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 148.149793][ T7638] netlink: 1156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.169278][ T7638] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 148.184201][ T7638] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 148.201497][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.218935][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.400592][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.826540][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.839647][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.971957][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.018783][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.976386][ T29] audit: type=1804 audit(1717517708.542:6): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir344069168/syzkaller.BTPpfR/79/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 152.667512][ T7840] tipc: Started in network mode [ 152.679641][ T7840] tipc: Node identity 000000001b0000006e, cluster identity 8 [ 152.941748][ T7851] __nla_validate_parse: 16 callbacks suppressed [ 152.941772][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.966844][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.202608][ T7867] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.236880][ T7867] openvswitch: netlink: ufid size 84 bytes exceeds the range (1, 16) [ 153.248963][ T7867] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 153.492487][ T7879] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.760204][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.794936][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.104355][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.460560][ T7926] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.591041][ T7933] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 154.620698][ T7933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.692874][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.445558][ T7974] openvswitch: netlink: Key type 6417 is out of range max 32 [ 157.211229][ T29] audit: type=1804 audit(1717517715.772:7): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir988839414/syzkaller.0voKs3/183/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 157.246011][ T8054] syz-executor.1[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.246187][ T8054] syz-executor.1[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.510527][ T8065] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 157.543225][ T8065] pim6reg0: linktype set to 65534 [ 157.950925][ T8085] __nla_validate_parse: 17 callbacks suppressed [ 157.950950][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.984693][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.997126][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.042236][ T8091] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.299075][ T8101] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.321955][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.345064][ T8101] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 158.366494][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.579455][ T8115] tunl0: entered promiscuous mode [ 158.604367][ T8115] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 158.628638][ T8115] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.787402][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.798256][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.899779][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.949866][ T8129] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 159.502580][ T8148] tunl0: entered promiscuous mode [ 159.541349][ T8148] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 160.467415][ T8196] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 160.637532][ T8202] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 160.677070][ T8205] Cannot find add_set index 0 as target [ 161.195535][ T29] audit: type=1804 audit(1717517719.762:8): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3595789105/syzkaller.ciMIg3/204/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 161.352500][ T8234] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 161.372910][ T8238] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 161.396672][ T8238] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 161.835545][ T8250] syz_tun: entered promiscuous mode [ 161.848303][ T8250] macsec1: entered promiscuous mode [ 161.866157][ T8250] syz_tun: left promiscuous mode [ 162.182198][ T8266] sctp: [Deprecated]: syz-executor.3 (pid 8266) Use of int in max_burst socket option deprecated. [ 162.182198][ T8266] Use struct sctp_assoc_value instead [ 163.020839][ T8303] tun0: tun_chr_ioctl cmd 1074025677 [ 163.047581][ T8303] tun0: linktype set to 778 [ 163.222553][ T8318] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 163.253375][ T8319] __nla_validate_parse: 20 callbacks suppressed [ 163.253398][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.374397][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.401181][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.591381][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.601861][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.917424][ T8351] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.948884][ T8351] netlink: zone id is out of range [ 163.973701][ T8351] netlink: zone id is out of range [ 163.991909][ T8351] netlink: zone id is out of range [ 164.009509][ T8351] netlink: zone id is out of range [ 164.017171][ T8351] netlink: zone id is out of range [ 164.024425][ T8351] netlink: zone id is out of range [ 164.030590][ T8351] netlink: get zone limit has 4 unknown bytes [ 164.298750][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.333611][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.358072][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.374432][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.657691][ T8380] bond0: (slave bond_slave_0): Releasing backup interface [ 164.892787][ T8387] syz_tun: entered promiscuous mode [ 164.900344][ T8387] macsec1: entered promiscuous mode [ 164.919244][ T8387] syz_tun: left promiscuous mode [ 165.808032][ T8411] JR³xRË: entered promiscuous mode [ 166.050472][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.108978][ T8460] bond0: (slave bond_slave_0): Releasing backup interface [ 167.663453][ T8475] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 167.755561][ T8480] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 168.537474][ T8513] __nla_validate_parse: 18 callbacks suppressed [ 168.537500][ T8513] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.869083][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.236690][ T8536] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.255670][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.276688][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.278750][ T8538] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.457336][ T8546] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.514689][ T8552] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.846018][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.968651][ T8565] tunl0: entered promiscuous mode [ 170.002004][ T8565] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 170.031398][ T8565] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.452730][ T8585] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 170.653588][ T8585] bond0: (slave bond_slave_0): Releasing backup interface [ 170.759555][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.961983][ T8590] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.379988][ T8590] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.561742][ T8590] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.634663][ T8616] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 171.705057][ T8590] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.909605][ T8625] TCP: TCP_TX_DELAY enabled [ 171.981247][ T8590] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.009643][ T8590] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.042379][ T8590] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.092536][ T8590] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.156237][ T8665] can: request_module (can-proto-3) failed. [ 173.266974][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.277457][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.302930][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.320480][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.331821][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.340835][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.485469][ T2399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.562424][ T8685] __nla_validate_parse: 11 callbacks suppressed [ 173.562449][ T8685] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.741803][ T2399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.780351][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.920503][ T2399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.970194][ T8702] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.146690][ T2399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.439080][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.446451][ T8720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.455396][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.462814][ T8720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.472217][ T8720] bridge0: entered promiscuous mode [ 174.477946][ T8720] bridge0: entered allmulticast mode [ 174.513319][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.525235][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.678554][ T2399] bridge_slave_1: left allmulticast mode [ 174.685239][ T2399] bridge_slave_1: left promiscuous mode [ 174.692021][ T2399] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.751606][ T2399] bridge_slave_0: left allmulticast mode [ 174.767799][ T2399] bridge_slave_0: left promiscuous mode [ 174.789173][ T2399] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.870663][ T8737] ebt_among: dst integrity fail: 101 [ 175.443448][ T5119] Bluetooth: hci3: command tx timeout [ 175.829080][ T2399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.842954][ T2399] bond0 (unregistering): Released all slaves [ 175.917885][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.050404][ T8670] chnl_net:caif_netlink_parms(): no params data found [ 176.119725][ T29] audit: type=1804 audit(1717517734.682:9): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir906822595/syzkaller.Jc8cgK/231/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 176.152787][ T8751] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.289076][ T8759] Bluetooth: MGMT ver 1.22 [ 176.314508][ T8759] Bluetooth: hci3: invalid length 0, exp 2 for type 2 [ 176.446881][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.547268][ T2399] hsr_slave_0: left promiscuous mode [ 176.568869][ T2399] hsr_slave_1: left promiscuous mode [ 176.592650][ T2399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.622390][ T2399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.647634][ T2399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.664720][ T2399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.692342][ T2399] veth1_macvtap: left promiscuous mode [ 176.698433][ T2399] veth0_macvtap: left promiscuous mode [ 176.705053][ T2399] veth1_vlan: left promiscuous mode [ 176.710929][ T2399] veth0_vlan: left promiscuous mode [ 177.408869][ T2399] team0 (unregistering): Port device team_slave_1 removed [ 177.460902][ T2399] team0 (unregistering): Port device team_slave_0 removed [ 177.523377][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 177.952171][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.962170][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.035588][ T8670] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.045819][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.063009][ T8670] bridge_slave_0: entered allmulticast mode [ 178.086244][ T8670] bridge_slave_0: entered promiscuous mode [ 178.106445][ T8670] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.115813][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.130872][ T8670] bridge_slave_1: entered allmulticast mode [ 178.139749][ T8670] bridge_slave_1: entered promiscuous mode [ 178.470460][ T8670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.552683][ T8670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.615046][ T8805] netlink: 368 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.644415][ T8810] netlink: 368 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.770917][ T8805] JR³xRË: entered promiscuous mode [ 178.797478][ T8670] team0: Port device team_slave_0 added [ 178.810690][ T8810] openvswitch: JR³xRË: Dropping previously announced user features [ 178.836117][ T8670] team0: Port device team_slave_1 added [ 178.980112][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.006037][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.054963][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.079136][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.151752][ T8670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.180012][ T8670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.192231][ T8670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.259398][ T8670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.534856][ T8670] hsr_slave_0: entered promiscuous mode [ 179.551933][ T8670] hsr_slave_1: entered promiscuous mode [ 179.581090][ T8670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.590047][ T8670] Cannot create hsr debugfs directory [ 179.616611][ T5123] Bluetooth: hci3: command 0x041b tx timeout [ 180.171488][ T8851] vlan2: entered promiscuous mode [ 180.184973][ T8851] vlan2: entered allmulticast mode [ 180.275771][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.299843][ T8865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.167983][ T8670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.185654][ T8670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.197422][ T8670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.212510][ T8670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.453770][ T8892] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 181.462198][ T8892] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.552109][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.572653][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.615785][ T8670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.666682][ T8670] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.685305][ T5123] Bluetooth: hci3: command 0x041b tx timeout [ 181.701578][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.709081][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.726306][ T8902] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 181.736594][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.769499][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.776865][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.284082][ T8914] tap0: tun_chr_ioctl cmd 1074025677 [ 182.295882][ T8914] tap0: linktype set to 1 [ 182.417032][ T8670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.482271][ T8919] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 182.889152][ T8670] veth0_vlan: entered promiscuous mode [ 182.961671][ T8670] veth1_vlan: entered promiscuous mode [ 182.967849][ T8934] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 183.110169][ T8670] veth0_macvtap: entered promiscuous mode [ 183.147310][ T8670] veth1_macvtap: entered promiscuous mode [ 183.232808][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.252415][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.270572][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.281545][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.317189][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.338521][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.368010][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.422662][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.463896][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.484560][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.504280][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.516618][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.532373][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.542591][ T8670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.554641][ T8670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.569778][ T8670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.604757][ T8670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.619712][ T8670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.630231][ T8670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.639395][ T8670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.763185][ T5119] Bluetooth: hci3: command 0x041b tx timeout [ 183.886303][ T8970] __nla_validate_parse: 5 callbacks suppressed [ 183.886326][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.910694][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.082804][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.110861][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.170176][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.191342][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.380782][ T8976] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 184.418501][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.439579][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.846617][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.902056][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.937617][ T9009] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.019058][ T9011] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 185.033318][ T9011] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.131370][ T9011] sctp: [Deprecated]: syz-executor.2 (pid 9011) Use of int in max_burst socket option. [ 185.131370][ T9011] Use struct sctp_assoc_value instead [ 185.469826][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.579302][ T9032] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 185.592843][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.843700][ T5123] Bluetooth: hci3: command 0x041b tx timeout [ 185.986444][ T9051] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 186.054846][ T9051] sctp: [Deprecated]: syz-executor.2 (pid 9051) Use of int in max_burst socket option. [ 186.054846][ T9051] Use struct sctp_assoc_value instead [ 186.314053][ T9070] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.321218][ T9070] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.328146][ T9070] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.335708][ T9070] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.342310][ T9070] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.348853][ T9070] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.355483][ T9070] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.362101][ T9070] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.368911][ T9070] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.375603][ T9070] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 187.161252][ T9096] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 187.272400][ T9099] batadv0: entered promiscuous mode [ 187.291136][ T9099] macsec1: entered promiscuous mode [ 187.311772][ T9099] macsec1: entered allmulticast mode [ 187.337444][ T9102] sctp: [Deprecated]: syz-executor.3 (pid 9102) Use of int in max_burst socket option. [ 187.337444][ T9102] Use struct sctp_assoc_value instead [ 187.357361][ T9099] batadv0: entered allmulticast mode [ 187.434175][ T9099] batadv0: left allmulticast mode [ 187.478991][ T9099] batadv0: left promiscuous mode [ 188.445849][ T9137] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 188.505350][ T9137] sctp: [Deprecated]: syz-executor.0 (pid 9137) Use of int in max_burst socket option. [ 188.505350][ T9137] Use struct sctp_assoc_value instead [ 189.073594][ T9149] __nla_validate_parse: 15 callbacks suppressed [ 189.073618][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.103175][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.301815][ T9164] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.528148][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.678823][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.790127][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.811702][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.852560][ T9186] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.922369][ T9186] 8021q: VLANs not supported on lo [ 190.232814][ T9222] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 190.269347][ T9222] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 190.314025][ T9222] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 190.579396][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.716894][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.137465][ T9267] batadv0: entered promiscuous mode [ 191.173567][ T9267] macsec1: entered promiscuous mode [ 191.215378][ T9267] macsec1: entered allmulticast mode [ 191.236503][ T9267] batadv0: entered allmulticast mode [ 191.306948][ T9267] batadv0: left allmulticast mode [ 191.374159][ T9267] batadv0: left promiscuous mode [ 192.171705][ T9282] team1: Mode changed to "broadcast" [ 193.028058][ T9322] veth0_virt_wifi: entered promiscuous mode [ 193.040726][ T9322] macsec1: entered promiscuous mode [ 193.062016][ T9322] macsec1: entered allmulticast mode [ 193.077065][ T9322] veth0_virt_wifi: entered allmulticast mode [ 193.089618][ T9322] veth0_virt_wifi: left allmulticast mode [ 193.099975][ T9322] veth0_virt_wifi: left promiscuous mode [ 193.292962][ T11] net_ratelimit: 46 callbacks suppressed [ 193.292988][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.360154][ T29] audit: type=1804 audit(1717517751.922:10): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir906822595/syzkaller.Jc8cgK/279/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 193.529093][ T9339] tipc: Enabling of bearer rejected, failed to enable media [ 193.565250][ T9339] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 193.703394][ T9354] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 193.728818][ T9354] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 193.820469][ T9346] bridge_slave_1: left allmulticast mode [ 193.838642][ T9346] bridge_slave_1: left promiscuous mode [ 193.860892][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.909337][ T9346] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 194.167006][ T9377] __nla_validate_parse: 18 callbacks suppressed [ 194.167032][ T9377] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.272117][ T9381] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 194.292817][ T9381] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.405799][ T2419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.444658][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.482092][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.571604][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.593501][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.710587][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.769549][ T9400] tipc: Enabling of bearer rejected, failed to enable media [ 194.808905][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.835514][ T9400] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 194.871630][ T9400] netlink: 162500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.020235][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.118596][ T9418] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 195.252485][ T9424] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 195.328992][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.445970][ T2399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.731804][ T9444] tipc: Enabling of bearer rejected, failed to enable media [ 195.760028][ T9455] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 195.775556][ T9454] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 195.790897][ T9454] macvlan4: entered promiscuous mode [ 195.821818][ T9454] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 196.096681][ T9471] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 196.180214][ T9474] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 196.330325][ T9472] batadv0: entered promiscuous mode [ 196.369469][ T9472] macsec1: entered promiscuous mode [ 196.378284][ T9472] macsec1: entered allmulticast mode [ 196.408357][ T9472] batadv0: entered allmulticast mode [ 196.429430][ T9472] batadv0: left allmulticast mode [ 196.443150][ T9472] batadv0: left promiscuous mode [ 196.487213][ T2419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.847666][ T9495] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 197.092637][ T9499] tipc: Enabling of bearer rejected, failed to enable media [ 197.115074][ T9499] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 197.272733][ T9507] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 197.355910][ T9507] pimreg: entered allmulticast mode [ 197.399958][ T9507] pimreg: left allmulticast mode [ 197.606821][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.039858][ T2419] tipc: Subscription rejected, illegal request [ 198.440165][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.636443][ T9566] validate_nla: 3 callbacks suppressed [ 198.636470][ T9566] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 198.648669][ T2399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.661398][ T9566] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.671542][ T9566] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.680584][ T9566] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.690010][ T9566] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.714491][ T9566] vxlan0: entered promiscuous mode [ 199.000395][ T9576] 8021q: VLANs not supported on lo [ 199.072326][ T9583] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 199.204959][ T9586] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 199.245571][ T9586] __nla_validate_parse: 30 callbacks suppressed [ 199.245598][ T9586] netlink: 162500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.352662][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.486471][ T9607] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.524775][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.606419][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.689089][ T2419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.025941][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.115980][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.138845][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.325697][ T9637] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.361068][ T9636] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 200.375318][ T9636] netlink: 162500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.397507][ T9638] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.574088][ T5164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.810083][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.880468][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.252687][ T9680] tipc: Enabling of bearer rejected, failed to enable media [ 201.279009][ T9680] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 201.604155][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.939915][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.018792][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 202.027112][ T5125] Bluetooth: hci1: command 0x0406 tx timeout [ 202.028212][ T5121] Bluetooth: hci4: command 0x0406 tx timeout [ 202.644622][ T5189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.749399][ T9737] tipc: Enabling of bearer rejected, failed to enable media [ 202.776196][ T9737] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 203.057139][ T9747] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 203.481128][ T9761] veth3: entered promiscuous mode [ 203.510969][ T9761] veth3: entered allmulticast mode [ 203.685132][ T46] net_ratelimit: 2 callbacks suppressed [ 203.685161][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.754063][ T9773] tipc: Enabling of bearer rejected, failed to enable media [ 203.771575][ T9773] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 204.085494][ T2419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.331652][ T9800] __nla_validate_parse: 11 callbacks suppressed [ 204.331675][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.366603][ T9800] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 204.388036][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.395964][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.443388][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.450704][ T9800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.458471][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.465764][ T9800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.490748][ T9807] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.542056][ T9800] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 204.730400][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.829283][ T9818] tipc: Enabling of bearer rejected, failed to enable media [ 204.851555][ T9823] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 204.872235][ T9823] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.207646][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.243167][ T9833] syz_tun: mtu greater than device maximum [ 205.254495][ T9833] syzkaller0: entered allmulticast mode [ 205.262559][ T9837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.563534][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.655646][ T9844] veth5: entered promiscuous mode [ 205.661260][ T9844] veth5: entered allmulticast mode [ 205.778929][ T9852] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 205.984936][ T9866] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.013873][ T9866] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.104840][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.249188][ T2399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.377528][ T9880] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.551200][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.601455][ T9889] veth3: entered promiscuous mode [ 206.612397][ T9889] veth3: entered allmulticast mode [ 206.796938][ T9894] hsr0: entered promiscuous mode [ 206.846759][ T9882] syz-executor.2 (9882) used greatest stack depth: 18192 bytes left [ 207.377223][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.439935][ T9920] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 208.412334][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.572556][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.769950][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.920848][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.039553][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.119973][ T9982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.270248][ T9985] sch_fq: defrate 0 ignored. [ 209.461145][ T12] bridge_slave_1: left allmulticast mode [ 209.475152][ T12] bridge_slave_1: left promiscuous mode [ 209.499841][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.538040][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.565198][ T12] bridge_slave_0: left allmulticast mode [ 209.571046][ T12] bridge_slave_0: left promiscuous mode [ 209.592052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.629260][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.640389][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.650127][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.664076][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.674076][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.682171][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.164458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.579806][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.294478][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.310692][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.324966][ T12] bond0 (unregistering): Released all slaves [ 211.342345][ T9993] __nla_validate_parse: 15 callbacks suppressed [ 211.342371][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.461453][ T12] JR³xRË: left promiscuous mode [ 211.612310][ T2419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.644806][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.681267][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.767460][ T5119] Bluetooth: hci2: command tx timeout [ 211.814081][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.993472][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.017572][ T12] hsr_slave_0: left promiscuous mode [ 212.030651][T10034] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 212.049778][ T12] hsr_slave_1: left promiscuous mode [ 212.078642][ T12] batman_adv: batadv0: Interface deactivated: team0 [ 212.099067][ T12] batman_adv: batadv0: Removing interface: team0 [ 212.117486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.127257][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.138220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.155630][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.239325][ T12] team_slave_0: left allmulticast mode [ 212.249106][ T12] team_slave_0: left promiscuous mode [ 212.261926][ T12] veth1_macvtap: left promiscuous mode [ 212.273583][ T12] veth0_macvtap: left promiscuous mode [ 212.282229][ T12] veth1_vlan: left promiscuous mode [ 212.293003][ T12] veth0_vlan: left promiscuous mode [ 212.733963][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.836906][ T12] team0 (unregistering): Port device virt_wifi0 removed [ 213.102802][ T12] team0 (unregistering): Port device team_slave_1 removed [ 213.159895][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.697219][T10043] lo: mtu less than device minimum [ 213.765505][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.843815][ T5119] Bluetooth: hci2: command tx timeout [ 213.940233][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 214.107635][ T9996] chnl_net:caif_netlink_parms(): no params data found [ 214.577529][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.602388][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.622754][ T9996] bridge_slave_0: entered allmulticast mode [ 214.637510][ T9996] bridge_slave_0: entered promiscuous mode [ 214.688828][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.721949][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.742993][ T9996] bridge_slave_1: entered allmulticast mode [ 214.751282][ T9996] bridge_slave_1: entered promiscuous mode [ 214.909171][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.966550][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.088696][ T9996] team0: Port device team_slave_0 added [ 215.115879][ T9996] team0: Port device team_slave_1 added [ 215.241399][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.259805][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.324549][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.340032][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.347637][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.393525][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.508212][ T9996] hsr_slave_0: entered promiscuous mode [ 215.518758][ T9996] hsr_slave_1: entered promiscuous mode [ 215.532501][ T9996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.556540][ T9996] Cannot create hsr debugfs directory [ 215.924922][ T5119] Bluetooth: hci2: command tx timeout [ 216.435105][T10148] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 218.003920][ T5119] Bluetooth: hci2: command tx timeout [ 246.907578][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.925584][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.942951][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.961274][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.975603][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 246.994736][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.149233][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 247.159953][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 247.183823][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 247.193910][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 247.201893][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 247.210985][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 247.254805][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 247.265335][ T5115] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 247.293942][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.311284][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.320528][ T5115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 247.328563][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.414397][ T5115] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 247.427992][ T5115] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 247.441992][ T5115] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 247.452049][ T5115] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 247.460822][ T5115] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 247.469334][ T5115] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 249.133824][ T5123] Bluetooth: hci5: command tx timeout [ 249.284126][ T5123] Bluetooth: hci6: command tx timeout [ 249.363476][ T5123] Bluetooth: hci7: command tx timeout [ 249.527516][ T5123] Bluetooth: hci8: command tx timeout [ 251.203737][ T5123] Bluetooth: hci5: command tx timeout [ 251.369056][ T5123] Bluetooth: hci6: command tx timeout [ 251.453818][ T5123] Bluetooth: hci7: command tx timeout [ 251.606702][ T5123] Bluetooth: hci8: command tx timeout [ 253.283832][ T5123] Bluetooth: hci5: command tx timeout [ 253.463703][ T5123] Bluetooth: hci6: command tx timeout [ 253.523859][ T5123] Bluetooth: hci7: command tx timeout [ 253.684019][ T5123] Bluetooth: hci8: command tx timeout [ 255.366626][ T5123] Bluetooth: hci5: command tx timeout [ 255.525062][ T5123] Bluetooth: hci6: command tx timeout [ 255.604300][ T5123] Bluetooth: hci7: command tx timeout [ 255.763949][ T5123] Bluetooth: hci8: command tx timeout [ 256.247209][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.361848][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 274.379635][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 274.388729][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 274.399194][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 274.414476][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 274.421963][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.492056][ T5115] Bluetooth: hci9: command tx timeout [ 278.564323][ T5115] Bluetooth: hci9: command tx timeout [ 280.645100][ T5115] Bluetooth: hci9: command tx timeout [ 282.723768][ T5115] Bluetooth: hci9: command tx timeout [ 299.295904][ T5115] Bluetooth: hci3: command 0x041b tx timeout [ 312.007323][ T5123] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 312.018525][ T5123] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 312.027524][ T5123] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 312.037071][ T5123] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 312.045636][ T5123] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 312.053346][ T5123] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 312.110268][ T5123] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 312.120851][ T5123] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 312.130375][ T5123] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 312.140569][ T5123] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 312.149764][ T5123] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 312.176348][ T5123] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 312.272396][ T5115] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 312.295327][ T5115] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 312.305794][ T5115] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 312.315415][ T5115] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 312.345349][ T5115] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 312.353669][ T5115] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 312.592126][ T5115] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 312.610587][ T5115] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 312.622332][ T5115] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 312.652742][ T5115] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 312.672379][ T5115] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 312.681762][ T5115] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 314.083833][ T5123] Bluetooth: hci10: command tx timeout [ 314.244090][ T5123] Bluetooth: hci11: command tx timeout [ 314.413675][ T5123] Bluetooth: hci12: command tx timeout [ 314.723504][ T5123] Bluetooth: hci13: command tx timeout [ 316.163218][ T5123] Bluetooth: hci10: command tx timeout [ 316.323184][ T5123] Bluetooth: hci11: command tx timeout [ 316.483281][ T5123] Bluetooth: hci12: command tx timeout [ 316.803233][ T5123] Bluetooth: hci13: command tx timeout [ 317.695267][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.253927][ T5123] Bluetooth: hci10: command tx timeout [ 318.415076][ T5123] Bluetooth: hci11: command tx timeout [ 318.574866][ T5123] Bluetooth: hci12: command tx timeout [ 318.893749][ T5123] Bluetooth: hci13: command tx timeout [ 320.323880][ T5123] Bluetooth: hci10: command tx timeout [ 320.490795][ T5123] Bluetooth: hci11: command tx timeout [ 320.643925][ T5123] Bluetooth: hci12: command tx timeout [ 320.964117][ T5123] Bluetooth: hci13: command tx timeout [ 339.368511][ T5119] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 339.383442][ T5119] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 339.392708][ T5119] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 339.404123][ T5119] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 339.412106][ T5119] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 339.423419][ T5119] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 340.250126][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 341.523944][ T5115] Bluetooth: hci14: command tx timeout [ 343.604084][ T5115] Bluetooth: hci14: command tx timeout [ 345.683978][ T5115] Bluetooth: hci14: command tx timeout [ 347.763280][ T5115] Bluetooth: hci14: command tx timeout [ 370.975192][ T5119] Bluetooth: hci5: command 0x0406 tx timeout [ 370.981301][ T5119] Bluetooth: hci8: command 0x0406 tx timeout [ 370.988425][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 370.993879][ T5123] Bluetooth: hci6: command 0x0406 tx timeout [ 376.974305][ T5121] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 376.993955][ T5121] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 377.008689][ T5121] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 377.029589][ T5121] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 377.039547][ T5123] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 377.051018][ T5123] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 377.061025][ T5123] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 377.075756][ T5123] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 377.084596][ T5123] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 377.094420][ T5123] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 377.103666][ T5123] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 377.112703][ T5123] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 377.237039][ T5123] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 377.249012][ T5123] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 377.259062][ T5123] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 377.269304][ T5123] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 377.285780][ T5123] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 377.294104][ T5123] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 377.581009][ T5123] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 377.591803][ T5123] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 377.605066][ T5123] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 377.613589][ T5123] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 377.621570][ T5123] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 377.629653][ T5123] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 379.134251][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.136482][ T5123] Bluetooth: hci15: command tx timeout [ 379.203641][ T5123] Bluetooth: hci16: command tx timeout [ 379.363361][ T5123] Bluetooth: hci17: command tx timeout [ 379.683964][ T5123] Bluetooth: hci18: command tx timeout [ 379.763957][ T30] INFO: task syz-executor.3:9996 blocked for more than 143 seconds. [ 379.772100][ T30] Not tainted 6.10.0-rc1-syzkaller-00163-gd6301802607b #0 [ 379.790618][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.800046][ T30] task:syz-executor.3 state:D stack:20656 pid:9996 tgid:9996 ppid:1 flags:0x00004006 2024/06/04 16:18:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 379.814728][ T30] Call Trace: [ 379.831345][ T30] [ 379.835036][ T30] __schedule+0x17e8/0x4a20 [ 379.839655][ T30] ? __pfx___schedule+0x10/0x10 [ 379.850001][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.855830][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.861367][ T30] ? schedule+0x90/0x320 [ 379.871401][ T30] schedule+0x14b/0x320 [ 379.877710][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.891300][ T30] __mutex_lock+0x6a4/0xd70 [ 379.897672][ T30] ? __mutex_lock+0x527/0xd70 [ 379.902429][ T30] ? nsim_create+0x408/0x890 [ 379.916375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.921507][ T30] ? kmemdup_noprof+0x45/0x60 [ 379.932555][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 379.939859][ T30] nsim_create+0x408/0x890 [ 379.950734][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 379.956692][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 379.961860][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 379.967813][ T30] ? queue_delayed_work_on+0x267/0x390 [ 379.979409][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 379.985912][ T30] ? init_timer_key+0x197/0x310 [ 379.990903][ T30] nsim_dev_port_add_all+0x33/0xf0 [ 380.004893][ T30] nsim_drv_probe+0x85f/0xb80 [ 380.010444][ T30] ? __pfx_nsim_drv_probe+0x10/0x10 [ 380.025767][ T30] ? kernfs_create_link+0x187/0x1f0 [ 380.031059][ T30] ? sysfs_do_create_link_sd+0xdd/0x110 [ 380.042876][ T30] ? driver_sysfs_add+0x1de/0x1f0 [ 380.048680][ T30] ? really_probe+0x147/0xad0 [ 380.059819][ T30] ? __pfx_nsim_bus_probe+0x10/0x10 [ 380.065696][ T30] really_probe+0x2b8/0xad0 [ 380.070260][ T30] __driver_probe_device+0x1a2/0x390 [ 380.076387][ T30] driver_probe_device+0x50/0x430 [ 380.081476][ T30] __device_attach_driver+0x2d6/0x530 [ 380.094367][ T30] bus_for_each_drv+0x24e/0x2e0 [ 380.099308][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 380.115123][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 380.120585][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 380.131678][ T30] __device_attach+0x333/0x520 [ 380.138418][ T30] ? __pfx___device_attach+0x10/0x10 [ 380.151228][ T30] bus_probe_device+0x189/0x260 [ 380.156837][ T30] device_add+0x856/0xbf0 [ 380.161231][ T30] new_device_store+0x3f3/0x890 [ 380.166964][ T30] ? kernfs_fop_write_iter+0x1eb/0x500 [ 380.172484][ T30] ? __pfx_new_device_store+0x10/0x10 [ 380.184830][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 380.189768][ T30] ? bus_attr_store+0x4f/0xa0 [ 380.198665][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 380.204334][ T30] kernfs_fop_write_iter+0x3a1/0x500 [ 380.209686][ T30] vfs_write+0xa72/0xc90 [ 380.222303][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 380.229715][ T30] ? __pfx_vfs_write+0x10/0x10 [ 380.235453][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.241502][ T30] ksys_write+0x1a0/0x2c0 [ 380.271983][ T30] ? __pfx_ksys_write+0x10/0x10 [ 380.277568][ T30] ? do_syscall_64+0x100/0x230 [ 380.282396][ T30] ? do_syscall_64+0xb6/0x230 [ 380.293593][ T30] do_syscall_64+0xf3/0x230 [ 380.298165][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.302888][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.315774][ T30] RIP: 0033:0x7f8eb607bcaf [ 380.321523][ T30] RSP: 002b:00007ffe9f7aefd0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 380.342608][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8eb607bcaf [ 380.351349][ T30] RDX: 0000000000000003 RSI: 00007ffe9f7af020 RDI: 0000000000000005 [ 380.365086][ T30] RBP: 00007f8eb60da2d6 R08: 0000000000000000 R09: 00007ffe9f7aee27 [ 380.380250][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 380.389045][ T30] R13: 00007ffe9f7af020 R14: 00007f8eb6ce4620 R15: 0000000000000003 [ 380.404354][ T30] [ 380.407526][ T30] INFO: task syz-executor.2:10152 blocked for more than 144 seconds. [ 380.427313][ T30] Not tainted 6.10.0-rc1-syzkaller-00163-gd6301802607b #0 [ 380.438587][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.449594][ T30] task:syz-executor.2 state:D stack:26800 pid:10152 tgid:10145 ppid:8670 flags:0x00000006 [ 380.466171][ T30] Call Trace: [ 380.469562][ T30] [ 380.472526][ T30] __schedule+0x17e8/0x4a20 [ 380.481033][ T30] ? __pfx___schedule+0x10/0x10 [ 380.497270][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.502389][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.509796][ T30] ? schedule+0x90/0x320 [ 380.519331][ T30] schedule+0x14b/0x320 [ 380.525152][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.530679][ T30] __mutex_lock+0x6a4/0xd70 [ 380.542281][ T30] ? __mutex_lock+0x527/0xd70 [