last executing test programs: 34.277861187s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x58, 0x0}}], 0x6c00, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0xa4}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a49b377f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}, {&(0x7f0000000b80)="5e87b031fe712e8de6bb10501abd040060cf15164380fca4eec08f765031d040208cf6f3b5cc", 0x26}], 0x7, &(0x7f0000002700)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX=r4, @ANYRES64, @ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="0047b1d19bec420fd311bb340000001cf8fe961a0000000000000000000000fa044b2c5e7c3a0b065800af3c89e24cfc0318ca42b01a2f329923aa3d89753fcb54", @ANYRES32=0x0, @ANYRES8=r5, @ANYRESDEC, @ANYRESOCT=r6], 0xffffffa1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x66000) 33.692877993s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 33.588486366s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x57, "6254b217d9902abd40736c46d39c1f259d41f7fda4ee617ac47247056b81f064c351032a61de694ef639de0d0eb05c2c861dc2c27f1ed7bdd1c3d882089707ba8e9975de1c588f5a3ab909e5a501b9129e7c88114c12b4"}, &(0x7f0000000100)=0x5f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x6c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x53, @local, 0x722}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}]}, &(0x7f0000000380)=0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7ff}]}}}]}, 0x40}}, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 33.41617316s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100004002) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) connect$vsock_stream(r6, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg$unix(r6, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) 32.359868146s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r5, r0, 0x2, 0x0, 0x4000}, 0x10) 32.236143703s ago: executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 32.195081983s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x58, 0x0}}], 0x6c00, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0xa4}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a49b377f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}, {&(0x7f0000000b80)="5e87b031fe712e8de6bb10501abd040060cf15164380fca4eec08f765031d040208cf6f3b5cc", 0x26}], 0x7, &(0x7f0000002700)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX=r4, @ANYRES64, @ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="0047b1d19bec420fd311bb340000001cf8fe961a0000000000000000000000fa044b2c5e7c3a0b065800af3c89e24cfc0318ca42b01a2f329923aa3d89753fcb54", @ANYRES32=0x0, @ANYRES8=r5, @ANYRESDEC, @ANYRESOCT=r6], 0xffffffa1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x66000) 31.20345135s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000000)=0xbebee5725ef3f015) 31.131299778s ago: executing program 0: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @multicast1}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) 31.079453295s ago: executing program 0: unshare(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x2, 0x0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) read(r0, &(0x7f0000000140)=""/13, 0xd) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @sack_perm, @sack_perm, @window, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 30.83410012s ago: executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x200000, 0x0, 0x12, r2, 0x0) 30.772675392s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="4a00ffff07"], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000956334832b98c5bf7e14453f622c27bd4d8211f00363ca5eee02b4c8a6e0b52122a92e76276135b9943cd34e210fa46c474be8a2fd5f2c49d99237922e305c696a4c4fea1c33c22740d1c8f6b988c9b94e4fd421ea9f15252f06e0523d7153700a36a6d15ec1b42c24d2a969aec3c9eb4f8d109c1f0ccfb92abc54d617f930f4d748e742dc5877eba97c5f1849391617404e96e3ab512a716e2eec3535f3b5a85a587a16db5d156d11dcd06af2"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="f1250000000001fcffff000000d400feff00000000950300"/40], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34ea7411}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8034000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x0, &(0x7f0000000300), &(0x7f0000000340)='GPL\x00', 0x5f1, 0x0, &(0x7f0000000400), 0x40f00, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)=[r2], &(0x7f0000000740)=[{0x0, 0x1, 0xe}, {0x0, 0x4, 0x1, 0xa}, {0x0, 0x4, 0x2, 0x2}, {0x4, 0x5, 0x3, 0xc}, {0x5, 0x2}, {0x1, 0x4, 0xa, 0xb}, {0x2, 0x1, 0xe, 0xc}, {0x2, 0x9, 0xb, 0x7}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4000004, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffffe, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e657400000014000780080008400000009008000640"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 30.682968551s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 30.656624164s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 30.528118736s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r1}, &(0x7f0000000540), &(0x7f0000001800)}, 0x20) 30.4871491s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0xfffffffffffffffd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90d24fc60040005000a000200053582c137153e37000c0980fc0b10000300", 0xfe63}], 0x1, 0x0, 0xfffffffffffffe29}, 0x40110) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x100002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5f0b3}]}, 0x50}}, 0x0) 30.437622188s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x30000007, 0xe0}) write$cgroup_subtree(r2, 0x0, 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) listen(r4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) socket$nl_xfrm(0x10, 0x3, 0x6) 30.344665717s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x8, 0x2}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_team\x00'}]}, 0x4c}}, 0x0) 30.343874636s ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x130, 0x4c, 0x1a, 0x0, 0x2d, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 30.274658982s ago: executing program 4: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.22806191s ago: executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x110, 0x2, 0x40000}}], 0x28, 0x4c00}, 0x0) 30.173213321s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4493}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}]}, 0x40}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) epoll_create1(0x0) 30.140109469s ago: executing program 1: pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10000, r0}, 0x38) 30.112907289s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001800dd8d0000000000000000020000000000000600000000060015000a000000100016"], 0x34}}, 0x0) 30.065010996s ago: executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000001140)={@local, @random="e362a0fb1300", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @rand_addr, @dev, @local}}}}, 0x0) 30.015911069s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 255.266305ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_DELSETELEM={0x14}], {0x14}}, 0x3c}}, 0x0) 149.741703ms ago: executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000004d00)=""/4097, 0x1001}, {0x0}, {0x0}], 0x4, &(0x7f0000000b80)=""/54, 0x36}, 0x4}], 0x3, 0x40010143, 0x0) 95.909692ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0xfffffffffffffffd, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90d24fc60040005000a000200053582c137153e37000c0980fc0b10000300", 0xfe63}], 0x1, 0x0, 0xfffffffffffffe29}, 0x40110) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x100002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5f0b3}]}, 0x50}}, 0x0) 0s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000002100010028bd7000fcdbdf250a10800104000003020000b9080010000800000008000d0000000080080017004e244e201400020000000000000000000000000000000001140001"], 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. 2024/06/10 14:39:19 fuzzer started 2024/06/10 14:39:19 dialing manager at 10.128.0.169:30016 [ 54.387879][ T5088] cgroup: Unknown subsys name 'net' [ 54.546395][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/10 14:39:20 starting 5 executor processes [ 55.640726][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.653315][ T5097] syz-executor (5097) used greatest stack depth: 18832 bytes left [ 56.301889][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.310559][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.318322][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.325707][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.335115][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.343672][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.345563][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.351887][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.358951][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.373317][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.383499][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.391227][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.399226][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.399697][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.414935][ T5121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.415517][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.423160][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.429894][ T5117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.444243][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.444364][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.458948][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.460983][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.466885][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.475166][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.483452][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.489033][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.502886][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.517619][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.524980][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.532598][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.049911][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 57.161189][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 57.180818][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 57.267558][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 57.302155][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.310122][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.318513][ T5109] bridge_slave_0: entered allmulticast mode [ 57.325516][ T5109] bridge_slave_0: entered promiscuous mode [ 57.363986][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.371196][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.378513][ T5109] bridge_slave_1: entered allmulticast mode [ 57.386091][ T5109] bridge_slave_1: entered promiscuous mode [ 57.433755][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 57.470598][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.477918][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.485585][ T5120] bridge_slave_0: entered allmulticast mode [ 57.492515][ T5120] bridge_slave_0: entered promiscuous mode [ 57.515488][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.528512][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.547971][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.555166][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.562620][ T5120] bridge_slave_1: entered allmulticast mode [ 57.569498][ T5120] bridge_slave_1: entered promiscuous mode [ 57.658946][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.666903][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.674926][ T5110] bridge_slave_0: entered allmulticast mode [ 57.681596][ T5110] bridge_slave_0: entered promiscuous mode [ 57.690648][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.697956][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.705198][ T5110] bridge_slave_1: entered allmulticast mode [ 57.711852][ T5110] bridge_slave_1: entered promiscuous mode [ 57.721910][ T5109] team0: Port device team_slave_0 added [ 57.741364][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.753505][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.779887][ T5109] team0: Port device team_slave_1 added [ 57.843055][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.864582][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.871559][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.897525][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.909664][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.917533][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.925178][ T5112] bridge_slave_0: entered allmulticast mode [ 57.931874][ T5112] bridge_slave_0: entered promiscuous mode [ 57.941550][ T5120] team0: Port device team_slave_0 added [ 57.953577][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.963318][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.970265][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.996714][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.014519][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.021637][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.028977][ T5112] bridge_slave_1: entered allmulticast mode [ 58.036359][ T5112] bridge_slave_1: entered promiscuous mode [ 58.053937][ T5120] team0: Port device team_slave_1 added [ 58.139000][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.151809][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.174521][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.181701][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.189355][ T5124] bridge_slave_0: entered allmulticast mode [ 58.196952][ T5124] bridge_slave_0: entered promiscuous mode [ 58.207511][ T5110] team0: Port device team_slave_0 added [ 58.231732][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.239164][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.265176][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.279053][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.286080][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.312634][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.324044][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.331154][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.338731][ T5124] bridge_slave_1: entered allmulticast mode [ 58.345465][ T5124] bridge_slave_1: entered promiscuous mode [ 58.365505][ T5110] team0: Port device team_slave_1 added [ 58.374979][ T5109] hsr_slave_0: entered promiscuous mode [ 58.381388][ T5109] hsr_slave_1: entered promiscuous mode [ 58.404538][ T5112] team0: Port device team_slave_0 added [ 58.449883][ T5112] team0: Port device team_slave_1 added [ 58.463141][ T5122] Bluetooth: hci0: command tx timeout [ 58.472912][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.486470][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.508133][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.515213][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.541368][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.552167][ T5119] Bluetooth: hci1: command tx timeout [ 58.557900][ T5122] Bluetooth: hci2: command tx timeout [ 58.560693][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.570343][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.596765][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.622201][ T5119] Bluetooth: hci3: command tx timeout [ 58.622603][ T5122] Bluetooth: hci4: command tx timeout [ 58.687200][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.697083][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.723979][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.738953][ T5124] team0: Port device team_slave_0 added [ 58.748297][ T5124] team0: Port device team_slave_1 added [ 58.769184][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.776546][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.802654][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.853074][ T5120] hsr_slave_0: entered promiscuous mode [ 58.859501][ T5120] hsr_slave_1: entered promiscuous mode [ 58.866233][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.874343][ T5120] Cannot create hsr debugfs directory [ 58.929393][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.937024][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.963161][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.976226][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.983295][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.009344][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.026147][ T5110] hsr_slave_0: entered promiscuous mode [ 59.032674][ T5110] hsr_slave_1: entered promiscuous mode [ 59.038930][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.046687][ T5110] Cannot create hsr debugfs directory [ 59.159829][ T5112] hsr_slave_0: entered promiscuous mode [ 59.166721][ T5112] hsr_slave_1: entered promiscuous mode [ 59.173714][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.181278][ T5112] Cannot create hsr debugfs directory [ 59.277967][ T5124] hsr_slave_0: entered promiscuous mode [ 59.284374][ T5124] hsr_slave_1: entered promiscuous mode [ 59.290418][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.298306][ T5124] Cannot create hsr debugfs directory [ 59.486565][ T5109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.544621][ T5109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.565369][ T5109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.575026][ T5109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.667281][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.681548][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.691346][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.707322][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.798364][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.811745][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.849172][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.859232][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.913827][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.982710][ T5124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.000313][ T5124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.016288][ T5124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.046935][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.057418][ T5124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.072767][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.084051][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.115630][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.123381][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.180703][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.202066][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.209402][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.237044][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.244215][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.301464][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.323405][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.330481][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.367804][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.374985][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.449796][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.501614][ T5120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.514149][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.542483][ T5122] Bluetooth: hci0: command tx timeout [ 60.573818][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.610525][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.623893][ T5122] Bluetooth: hci2: command tx timeout [ 60.626862][ T5119] Bluetooth: hci1: command tx timeout [ 60.674233][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.681367][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.693054][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.700758][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.710252][ T5119] Bluetooth: hci4: command tx timeout [ 60.710269][ T5122] Bluetooth: hci3: command tx timeout [ 60.828927][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.868450][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.903457][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.910607][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.963553][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.972530][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.979658][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.016220][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.046937][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.054115][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.090604][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.119504][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.126875][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.201112][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.357684][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.391690][ T5109] veth0_vlan: entered promiscuous mode [ 61.418170][ T5120] veth0_vlan: entered promiscuous mode [ 61.480927][ T5109] veth1_vlan: entered promiscuous mode [ 61.498893][ T5120] veth1_vlan: entered promiscuous mode [ 61.531964][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.621451][ T5120] veth0_macvtap: entered promiscuous mode [ 61.634369][ T5120] veth1_macvtap: entered promiscuous mode [ 61.654630][ T5109] veth0_macvtap: entered promiscuous mode [ 61.665612][ T5109] veth1_macvtap: entered promiscuous mode [ 61.688014][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.730426][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.767989][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.780287][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.793801][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.805643][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.825991][ T5109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835781][ T5109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.845120][ T5109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.854559][ T5109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.865399][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.876356][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.887434][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.918594][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.929212][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.939048][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.947909][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.961164][ T5124] veth0_vlan: entered promiscuous mode [ 61.981776][ T5124] veth1_vlan: entered promiscuous mode [ 62.031000][ T5110] veth0_vlan: entered promiscuous mode [ 62.117905][ T5110] veth1_vlan: entered promiscuous mode [ 62.134431][ T5124] veth0_macvtap: entered promiscuous mode [ 62.155283][ T5112] veth0_vlan: entered promiscuous mode [ 62.209747][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.218481][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.236925][ T5124] veth1_macvtap: entered promiscuous mode [ 62.275487][ T5112] veth1_vlan: entered promiscuous mode [ 62.282738][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.284836][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.290547][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.305431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.325521][ T5110] veth0_macvtap: entered promiscuous mode [ 62.348725][ T5110] veth1_macvtap: entered promiscuous mode [ 62.411134][ T5112] veth0_macvtap: entered promiscuous mode [ 62.419631][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.428882][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.444145][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.460368][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.500197][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.514371][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.526498][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.538390][ T5112] veth1_macvtap: entered promiscuous mode [ 62.556493][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.568422][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.579243][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.590106][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.600031][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.612362][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.622434][ T5122] Bluetooth: hci0: command tx timeout [ 62.630083][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.644838][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.655812][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.665950][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.692054][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.702158][ T5122] Bluetooth: hci2: command tx timeout [ 62.702564][ T5119] Bluetooth: hci1: command tx timeout [ 62.721638][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.731440][ T5195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.751553][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.763581][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.774725][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.786398][ T5119] Bluetooth: hci3: command tx timeout [ 62.790134][ T5122] Bluetooth: hci4: command tx timeout [ 62.809499][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.830014][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.841290][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.869619][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.898772][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.915776][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.928408][ T5124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.950885][ T5124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.971635][ T5124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.981116][ T5124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.038193][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.067570][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.098371][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.123016][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.138303][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.150181][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.169510][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.181071][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.195632][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.206428][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.224178][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.262227][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.273331][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.296070][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.312089][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.327270][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.338157][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.354798][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.372626][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.385004][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.439495][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.442414][ T5209] Zero length message leads to an empty skb [ 63.449266][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.463039][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.471741][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.718603][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.786238][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.795494][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.815377][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.953539][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.970533][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.020086][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.031384][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.047306][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.163950][ T2819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.177969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.199078][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.213645][ T2819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.703051][ T5122] Bluetooth: hci0: command tx timeout [ 64.786305][ T5122] Bluetooth: hci2: command tx timeout [ 64.796246][ T5122] Bluetooth: hci1: command tx timeout [ 64.862663][ T5122] Bluetooth: hci4: command tx timeout [ 64.872318][ T5122] Bluetooth: hci3: command tx timeout [ 65.122810][ T5273] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.643533][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.903283][ T5306] Bluetooth: MGMT ver 1.22 [ 66.149034][ T5315] x_tables: unsorted entry at hook 2 [ 66.224777][ T5317] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.560160][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.629580][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.645004][ T5341] v: renamed from veth1_macvtap (while UP) [ 67.060311][ T5362] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.497120][ T5378] net_ratelimit: 2 callbacks suppressed [ 67.497138][ T5378] netlink: set zone limit has 8 unknown bytes [ 68.097871][ T5408] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 68.263022][ T5413] x_tables: unsorted entry at hook 2 [ 68.583631][ T5428] sctp: [Deprecated]: syz-executor.3 (pid 5428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.583631][ T5428] Use struct sctp_sack_info instead [ 69.019848][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.077521][ T5450] vlan2: entered promiscuous mode [ 69.098245][ T5450] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 69.152875][ T5450] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 69.432213][ T5474] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 70.318268][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.327332][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.335528][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.369712][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.381240][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.395196][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.645360][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.780087][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.909013][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.008011][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.321506][ T5497] chnl_net:caif_netlink_parms(): no params data found [ 71.371936][ T61] bridge_slave_1: left allmulticast mode [ 71.378306][ T61] bridge_slave_1: left promiscuous mode [ 71.423477][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.502565][ T61] bridge_slave_0: left allmulticast mode [ 71.529948][ T61] bridge_slave_0: left promiscuous mode [ 71.541340][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.681243][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.692471][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.208029][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.224589][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.239840][ T61] bond0 (unregistering): Released all slaves [ 72.282375][ T5551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.334034][ T5551] vlan2: entered promiscuous mode [ 72.344037][ T5551] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 72.358933][ T5551] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 72.408470][ T5556] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.469194][ T5119] Bluetooth: hci2: command tx timeout [ 72.551846][ T5566] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.567408][ T5566] xt_l2tp: missing protocol rule (udp|l2tpip) [ 72.969908][ T5568] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 73.219174][ T5599] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 73.578379][ T5497] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.600804][ T5497] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.608975][ T5497] bridge_slave_0: entered allmulticast mode [ 73.620342][ T5497] bridge_slave_0: entered promiscuous mode [ 73.697448][ T5497] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.742570][ T5497] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.749799][ T5497] bridge_slave_1: entered allmulticast mode [ 73.794050][ T5497] bridge_slave_1: entered promiscuous mode [ 73.883934][ T5629] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.034837][ T61] hsr_slave_0: left promiscuous mode [ 74.100183][ T61] hsr_slave_1: left promiscuous mode [ 74.143195][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.160007][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.203145][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.227004][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.252951][ T61] veth0_macvtap: left promiscuous mode [ 74.258925][ T61] veth1_vlan: left promiscuous mode [ 74.275674][ T61] veth0_vlan: left promiscuous mode [ 74.544768][ T5119] Bluetooth: hci2: command tx timeout [ 74.685225][ T61] team0 (unregistering): Port device team_slave_1 removed [ 74.715000][ T61] team0 (unregistering): Port device team_slave_0 removed [ 75.198399][ T5497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.238576][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.251324][ T5644] vlan2: entered promiscuous mode [ 75.256618][ T5644] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 75.265873][ T5644] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 75.485578][ T5497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.637014][ T5497] team0: Port device team_slave_0 added [ 75.702493][ T5497] team0: Port device team_slave_1 added [ 75.723550][ T5674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.919558][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.944382][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.043932][ T5497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.070722][ T5497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.087799][ T5497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.137255][ T5497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.434078][ T5497] hsr_slave_0: entered promiscuous mode [ 76.477144][ T5497] hsr_slave_1: entered promiscuous mode [ 76.482984][ T5709] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.569040][ T5497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.596274][ T5497] Cannot create hsr debugfs directory [ 76.632700][ T5119] Bluetooth: hci2: command tx timeout [ 76.805483][ T929] cfg80211: failed to load regulatory.db [ 76.836019][ T5729] syz-executor.3[5729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.850709][ T5732] x_tables: ip_tables: ah match: only valid for protocol 51 [ 77.175288][ T5745] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.193573][ T5743] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 77.202345][ T5743] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.893577][ T5777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.913063][ T5777] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 77.930919][ T5777] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 77.970015][ T5777] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.979115][ T5777] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.988099][ T5777] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.996890][ T5777] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.011472][ T5777] vxlan0: entered promiscuous mode [ 78.216119][ T5497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.252715][ T5497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.289796][ T5497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.319052][ T5497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.639146][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.703824][ T5119] Bluetooth: hci2: command tx timeout [ 78.727715][ T5497] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.741475][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.749210][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.797236][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.804420][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.854334][ T5807] syz-executor.2[5807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.907027][ T5497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.966104][ T5497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.056780][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.076188][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.127356][ T5813] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 79.617960][ T5497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.110105][ T5868] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 80.192292][ T5868] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.205682][ T5866] syzkaller1: entered promiscuous mode [ 80.211186][ T5866] syzkaller1: entered allmulticast mode [ 80.347801][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.362349][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.375196][ T5875] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 80.549910][ T5497] veth0_vlan: entered promiscuous mode [ 80.652909][ T5497] veth1_vlan: entered promiscuous mode [ 80.764831][ T5497] veth0_macvtap: entered promiscuous mode [ 80.776436][ T5497] veth1_macvtap: entered promiscuous mode [ 80.824443][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.855824][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.876530][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.911052][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.972892][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.019971][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.064036][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.105852][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.140565][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.150888][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.170342][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.180981][ T5497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.201669][ T5497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.239551][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.261089][ T5497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.302166][ T5497] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.328989][ T5497] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.341512][ T5497] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.538085][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.575168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.646396][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.684560][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.896526][ T5932] Bluetooth: MGMT ver 1.22 [ 82.125639][ T5943] macvlan2: entered allmulticast mode [ 82.168570][ T5943] veth1_vlan: entered allmulticast mode [ 82.191388][ T5947] Cannot find set identified by id 0 to match [ 82.200699][ T5943] team0: Port device macvlan2 added [ 82.614601][ T5959] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.713357][ T5959] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 82.767964][ T5959] Illegal XDP return value 4294967294 on prog (id 59) dev N/A, expect packet loss! [ 83.457691][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 83.514206][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 83.541649][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 84.099618][ T5984] infiniband syz2: set active [ 84.105883][ T784] tunl0 speed is unknown, defaulting to 1000 [ 84.142595][ T5984] infiniband syz2: added tunl0 [ 84.194227][ T5984] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 84.230992][ T5984] infiniband syz2: Couldn't open port 1 [ 84.370482][ T5984] RDS/IB: syz2: added [ 84.388840][ T5984] smc: adding ib device syz2 with port count 1 [ 84.395264][ T6013] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.402734][ T5984] smc: ib device syz2 port 1 has pnetid [ 84.425575][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 84.435373][ T5162] tunl0 speed is unknown, defaulting to 1000 [ 84.566324][ T6017] xt_socket: unknown flags 0x50 [ 84.907567][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 85.304206][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 85.712915][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 85.965887][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.094360][ T6042] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.123014][ T5984] tunl0 speed is unknown, defaulting to 1000 [ 86.417384][ T6046] macvlan3: entered allmulticast mode [ 86.468110][ T6046] team0: Port device macvlan3 added [ 86.555748][ T6013] lo speed is unknown, defaulting to 1000 [ 86.563672][ T6013] lo speed is unknown, defaulting to 1000 [ 86.592989][ T6013] lo speed is unknown, defaulting to 1000 [ 86.721049][ T6048] Bluetooth: MGMT ver 1.22 [ 87.228729][ T6013] infiniband syz1: set active [ 87.233550][ T9] lo speed is unknown, defaulting to 1000 [ 87.262454][ T6013] infiniband syz1: added lo [ 87.267739][ T6013] syz1: rxe_create_cq: returned err = -12 [ 87.302128][ T6013] infiniband syz1: Couldn't create ib_mad CQ [ 87.308454][ T6013] infiniband syz1: Couldn't open port 1 [ 87.373342][ T6013] RDS/IB: syz1: added [ 87.377414][ T6013] smc: adding ib device syz1 with port count 1 [ 87.394515][ T6013] smc: ib device syz1 port 1 has pnetid [ 87.404634][ T9] lo speed is unknown, defaulting to 1000 [ 87.424576][ T6013] lo speed is unknown, defaulting to 1000 [ 87.805413][ T6071] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 87.829324][ T6013] lo speed is unknown, defaulting to 1000 [ 87.829766][ T6071] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 87.908465][ T6071] : entered promiscuous mode [ 88.329764][ T6013] lo speed is unknown, defaulting to 1000 [ 88.977053][ T6013] lo speed is unknown, defaulting to 1000 [ 89.044408][ T6095] batadv0: entered promiscuous mode [ 89.049996][ T6095] macvlan2: entered allmulticast mode [ 89.076849][ T6095] batadv0: entered allmulticast mode [ 89.103325][ T6095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.130334][ T6095] batadv0: left allmulticast mode [ 89.167901][ T6095] batadv0: left promiscuous mode [ 89.425799][ T6013] lo speed is unknown, defaulting to 1000 [ 91.357036][ T6146] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.433991][ T6173] x_tables: duplicate entry at hook 1 [ 93.312747][ T6195] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.910538][ T6265] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.944537][ T6265] rdma_rxe: rxe_newlink: failed to add lo [ 96.464588][ T6284] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 96.489576][ T6284] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 96.521334][ T6284] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.526694][ T6322] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 97.562418][ T6322] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 97.570537][ T6322] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.256992][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.402159][ T6351] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 98.410273][ T6351] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 98.442076][ T6351] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.314737][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.227272][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.346534][ T6455] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 101.401186][ T6455] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 102.193113][ T6490] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 102.316637][ T784] IPVS: starting estimator thread 0... [ 102.356867][ T6492] bridge0: port 3(team0) entered blocking state [ 102.382883][ T6492] bridge0: port 3(team0) entered disabled state [ 102.389516][ T6492] team0: entered allmulticast mode [ 102.410344][ T6492] team_slave_0: entered allmulticast mode [ 102.430120][ T6492] team_slave_1: entered allmulticast mode [ 102.442156][ T6494] IPVS: using max 17 ests per chain, 40800 per kthread [ 102.495584][ T6492] team0: entered promiscuous mode [ 102.512528][ T6492] team_slave_0: entered promiscuous mode [ 102.529144][ T6492] team_slave_1: entered promiscuous mode [ 102.553149][ T6492] bridge0: port 3(team0) entered blocking state [ 102.559793][ T6492] bridge0: port 3(team0) entered forwarding state [ 102.642895][ T6500] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 102.670667][ T6500] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 103.753205][ T6539] x_tables: duplicate underflow at hook 4 [ 104.081166][ T6553] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.154102][ T6552] veth0_vlan: left promiscuous mode [ 104.518979][ T6565] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 104.925083][ T5109] syz-executor.1 (5109) used greatest stack depth: 18448 bytes left [ 105.082147][ T6582] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.091575][ T6582] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.185656][ T2819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.220007][ T2819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.404660][ T2819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.444772][ T2819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.651584][ T2819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.697959][ T2819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.888684][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.898480][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.919606][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.933208][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.947964][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.957494][ T2819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.970293][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.992656][ T2819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.157046][ T6598] tunl0 speed is unknown, defaulting to 1000 [ 106.193766][ T6609] x_tables: duplicate underflow at hook 4 [ 106.225399][ T6607] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 106.250179][ T6607] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 106.354055][ T6615] sch_fq: defrate 0 ignored. [ 106.425893][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.556002][ T2819] bridge_slave_1: left allmulticast mode [ 106.561688][ T2819] bridge_slave_1: left promiscuous mode [ 106.601031][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.705116][ T2819] bridge_slave_0: left allmulticast mode [ 106.735097][ T2819] bridge_slave_0: left promiscuous mode [ 106.759592][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.826963][ T6631] openvswitch: netlink: Message has 16 unknown bytes. [ 107.574839][ T2819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.588454][ T2819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.599895][ T2819] bond0 (unregistering): Released all slaves [ 107.614852][ T6598] lo speed is unknown, defaulting to 1000 [ 107.920963][ T6642] veth0_vlan: left promiscuous mode [ 108.062245][ T5119] Bluetooth: hci0: command tx timeout [ 108.210328][ T6663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.298474][ T6666] sch_fq: defrate 0 ignored. [ 108.510826][ T6671] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.916078][ T6698] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.942911][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.952136][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.961852][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.974251][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.982577][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.990236][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.239959][ T6705] IPv6: sit1: Disabled Multicast RS [ 109.354681][ T2819] hsr_slave_0: left promiscuous mode [ 109.379725][ T2819] hsr_slave_1: left promiscuous mode [ 109.386286][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.402630][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.412405][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.419864][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.446241][ T2819] veth1_macvtap: left promiscuous mode [ 109.451910][ T2819] veth0_macvtap: left promiscuous mode [ 109.457737][ T2819] veth1_vlan: left promiscuous mode [ 109.464456][ T2819] veth0_vlan: left promiscuous mode [ 109.929846][ T2819] team0 (unregistering): Port device team_slave_1 removed [ 109.963575][ T2819] team0 (unregistering): Port device team_slave_0 removed [ 110.142122][ T5119] Bluetooth: hci0: command tx timeout [ 110.301090][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.402975][ T6724] tipc: Failed to remove unknown binding: 66,1,1/0:2258316716/2258316718 [ 110.417341][ T6598] chnl_net:caif_netlink_parms(): no params data found [ 110.427248][ T6724] tipc: Failed to remove unknown binding: 66,1,1/0:2258316716/2258316718 [ 110.462009][ T6691] tunl0 speed is unknown, defaulting to 1000 [ 110.472214][ T6724] tipc: Failed to remove unknown binding: 66,1,1/0:2258316716/2258316718 [ 110.535952][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.721707][ T6737] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 110.730880][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.948028][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.974938][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.022146][ T5119] Bluetooth: hci4: command tx timeout [ 111.028278][ T6598] bridge_slave_0: entered allmulticast mode [ 111.053492][ T6598] bridge_slave_0: entered promiscuous mode [ 111.132324][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.147473][ T6753] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.169927][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.197375][ T6598] bridge_slave_1: entered allmulticast mode [ 111.226531][ T6598] bridge_slave_1: entered promiscuous mode [ 111.282165][ T6691] lo speed is unknown, defaulting to 1000 [ 111.428374][ T6598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.534403][ T6598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.599628][ T6770] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 111.840686][ T6598] team0: Port device team_slave_0 added [ 111.879349][ T6598] team0: Port device team_slave_1 added [ 112.031065][ T2819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.091368][ T6792] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.100148][ T6794] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.226004][ T5119] Bluetooth: hci0: command tx timeout [ 112.255970][ T2819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.273154][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.280192][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.306549][ T6598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.322291][ T6598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.329360][ T6598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.362582][ T6598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.401190][ T2819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.447640][ T6801] openvswitch: netlink: Message has 16 unknown bytes. [ 112.469451][ T6598] hsr_slave_0: entered promiscuous mode [ 112.477114][ T6598] hsr_slave_1: entered promiscuous mode [ 112.503377][ T2819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.064392][ T2819] bridge_slave_1: left allmulticast mode [ 113.070079][ T2819] bridge_slave_1: left promiscuous mode [ 113.084190][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.100025][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.110108][ T5119] Bluetooth: hci4: command tx timeout [ 113.132384][ T2819] bridge_slave_0: left allmulticast mode [ 113.157424][ T2819] bridge_slave_0: left promiscuous mode [ 113.179625][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.304524][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.717060][ T2819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.734289][ T2819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.747042][ T2819] bond0 (unregistering): Released all slaves [ 113.815682][ T6833] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 113.831008][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.042549][ T6691] chnl_net:caif_netlink_parms(): no params data found [ 114.309174][ T5119] Bluetooth: hci0: command tx timeout [ 114.378347][ T6852] veth0_vlan: left promiscuous mode [ 114.665613][ T6871] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.703594][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.894140][ T6871] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 114.913577][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.066025][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.101186][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.126436][ T6691] bridge_slave_0: entered allmulticast mode [ 115.163226][ T6691] bridge_slave_0: entered promiscuous mode [ 115.182384][ T5119] Bluetooth: hci4: command tx timeout [ 115.198720][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.241493][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.261761][ T6691] bridge_slave_1: entered allmulticast mode [ 115.280335][ T6691] bridge_slave_1: entered promiscuous mode [ 115.320690][ T2819] hsr_slave_0: left promiscuous mode [ 115.332484][ T2819] hsr_slave_1: left promiscuous mode [ 115.348176][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.360129][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.394924][ T2819] veth1_macvtap: left promiscuous mode [ 115.401081][ T2819] veth0_macvtap: left promiscuous mode [ 115.407493][ T2819] veth1_vlan: left promiscuous mode [ 115.413245][ T2819] veth0_vlan: left promiscuous mode [ 115.858728][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.937564][ T2819] team0 (unregistering): Port device team_slave_1 removed [ 115.973908][ T2819] team0 (unregistering): Port device team_slave_0 removed [ 116.293123][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.338612][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.384382][ T6908] Cannot find add_set index 0 as target [ 116.512753][ T6910] tipc: Enabling of bearer rejected, failed to enable media [ 116.529434][ T6691] team0: Port device team_slave_0 added [ 116.548933][ T6691] team0: Port device team_slave_1 added [ 116.610249][ T6598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.635459][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.657437][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.686989][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.706536][ T6598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.724220][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.731327][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.760265][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.783067][ T6598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.808745][ T6598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.885713][ T6691] hsr_slave_0: entered promiscuous mode [ 116.893258][ T6691] hsr_slave_1: entered promiscuous mode [ 116.899540][ T6691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.908270][ T6691] Cannot create hsr debugfs directory [ 117.158307][ T6598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.217507][ T6931] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 117.240596][ T6931] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 117.272317][ T5119] Bluetooth: hci4: command tx timeout [ 117.280294][ T6931] tc_dump_action: action bad kind [ 117.288799][ T6598] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.323210][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.330337][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.339174][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.346316][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.669906][ T6691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.709187][ T6691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.739798][ T6691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.918185][ T6598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.943394][ T6691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.994644][ T6956] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 118.041009][ T6959] batman_adv: batadv0: Adding interface: macsec1 [ 118.082264][ T6959] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.094189][ T6966] Cannot find add_set index 0 as target [ 118.124182][ T6959] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 118.185140][ T6964] __nla_validate_parse: 2 callbacks suppressed [ 118.185157][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.205043][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.219227][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.237674][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.247624][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.278680][ T6964] batman_adv: batadv0: Removing interface: macsec1 [ 118.560590][ T6598] veth0_vlan: entered promiscuous mode [ 118.669580][ T6691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.731218][ T6598] veth1_vlan: entered promiscuous mode [ 118.807176][ T6691] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.876182][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.883381][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.913902][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.921051][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.058486][ T6598] veth0_macvtap: entered promiscuous mode [ 119.118772][ T6598] veth1_macvtap: entered promiscuous mode [ 119.131563][ T7006] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.176423][ T7010] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 119.211683][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.240912][ T7010] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 119.249292][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.301728][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.326644][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.369237][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.382991][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.411421][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.450669][ T6598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.461707][ T6598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.477767][ T6598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.498724][ T7020] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 119.515525][ T7023] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 119.559834][ T6598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.582161][ T6598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.590882][ T6598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.604489][ T6598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.632137][ T7018] tc_dump_action: action bad kind [ 119.869331][ T7038] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 119.972776][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.980623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.995455][ T6691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.070227][ T2819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.098754][ T2819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.113653][ T7049] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 120.176376][ T6691] veth0_vlan: entered promiscuous mode [ 120.255353][ T6691] veth1_vlan: entered promiscuous mode [ 120.373614][ T7056] GUP no longer grows the stack in syz-executor.4 (7056): 20006000-2000a000 (20005000) [ 120.397455][ T6691] veth0_macvtap: entered promiscuous mode [ 120.426916][ T7056] CPU: 0 PID: 7056 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 120.437369][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 120.447448][ T7056] Call Trace: [ 120.450745][ T7056] [ 120.453698][ T7056] dump_stack_lvl+0x241/0x360 [ 120.458423][ T7056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.463645][ T7056] ? __pfx__printk+0x10/0x10 [ 120.468256][ T7056] ? find_vma+0xf9/0x170 [ 120.472537][ T7056] __get_user_pages+0x10e3/0x1590 [ 120.477610][ T7056] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 120.483269][ T7056] ? __pfx___get_user_pages+0x10/0x10 [ 120.488680][ T7056] ? __lock_acquire+0x1346/0x1fd0 [ 120.493733][ T7056] __gup_longterm_locked+0x1ff6/0x2a80 [ 120.499241][ T7056] ? __pfx___gup_longterm_locked+0x10/0x10 [ 120.504175][ T6691] veth1_macvtap: entered promiscuous mode [ 120.505048][ T7056] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.516744][ T7056] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 120.522762][ T7056] gup_fast_fallback+0x2732/0x2b40 [ 120.527931][ T7056] ? __pfx_gup_fast_fallback+0x10/0x10 [ 120.533413][ T7056] ? __pfx_validate_chain+0x10/0x10 [ 120.535349][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.538616][ T7056] ? unwind_get_return_address+0x91/0xc0 [ 120.538646][ T7056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.538673][ T7056] ? arch_stack_walk+0x16d/0x1b0 [ 120.550301][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.554670][ T7056] ? __lock_acquire+0x1346/0x1fd0 [ 120.554703][ T7056] ? is_valid_gup_args+0x124/0x200 [ 120.554727][ T7056] pin_user_pages_fast+0xcc/0x160 [ 120.554751][ T7056] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 120.554781][ T7056] iov_iter_extract_pages+0x3db/0x720 [ 120.563932][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.565746][ T7056] bio_iov_iter_get_pages+0x541/0x1930 [ 120.576124][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.580539][ T7056] ? bio_associate_blkg+0x6c/0x230 [ 120.580578][ T7056] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 120.589871][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.590664][ T7056] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 120.590700][ T7056] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 120.615176][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.617491][ T7056] ? bio_alloc_bioset+0x6d7/0x1130 [ 120.617533][ T7056] iomap_dio_bio_iter+0xc8e/0x1670 [ 120.644656][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.645578][ T7056] __iomap_dio_rw+0x1295/0x2370 [ 120.658925][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.667674][ T7056] ? do_syscall_64+0xf3/0x230 [ 120.667703][ T7056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.667759][ T7056] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.667788][ T7056] ? __pfx___iomap_dio_rw+0x10/0x10 [ 120.667835][ T7056] ? jbd2_journal_stop+0x902/0xd80 [ 120.727341][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.729978][ T7056] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 120.745416][ T7056] ? __pfx_ext4_orphan_add+0x10/0x10 [ 120.750735][ T7056] iomap_dio_rw+0x46/0xa0 [ 120.755095][ T7056] ext4_file_write_iter+0x15e5/0x1a10 [ 120.760510][ T7056] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 120.763146][ T6691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.766239][ T7056] vfs_write+0xa72/0xc90 [ 120.766273][ T7056] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 120.786610][ T7056] ? __pfx_vfs_write+0x10/0x10 [ 120.791390][ T7056] ? do_futex+0x33b/0x560 [ 120.795763][ T7056] ksys_write+0x1a0/0x2c0 [ 120.800123][ T7056] ? __pfx_ksys_write+0x10/0x10 [ 120.804997][ T7056] ? do_syscall_64+0x100/0x230 [ 120.809788][ T7056] ? do_syscall_64+0xb6/0x230 [ 120.809902][ T6691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.814467][ T7056] do_syscall_64+0xf3/0x230 [ 120.814494][ T7056] ? clear_bhb_loop+0x35/0x90 [ 120.814520][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.814553][ T7056] RIP: 0033:0x7f38e327cf69 [ 120.814576][ T7056] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 120.814592][ T7056] RSP: 002b:00007f38e40720c8 EFLAGS: 00000246 [ 120.848741][ T6691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.863543][ T7056] ORIG_RAX: 0000000000000001 [ 120.863566][ T7056] RAX: ffffffffffffffda RBX: 00007f38e33b3f80 RCX: 00007f38e327cf69 [ 120.863582][ T7056] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 0000000000000005 [ 120.863594][ T7056] RBP: 00007f38e32da6fe R08: 0000000000000000 R09: 0000000000000000 [ 120.863606][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.863618][ T7056] R13: 000000000000004d R14: 00007f38e33b3f80 R15: 00007ffdee522428 [ 120.863652][ T7056] [ 120.988776][ T7072] batman_adv: batadv0: Adding interface: macsec1 [ 121.003419][ T7072] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.078318][ T7072] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 121.099025][ T6691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.129322][ T6691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.160621][ T6691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.178833][ T6691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.301011][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.474398][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.543443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.633430][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.671653][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.041047][ T7128] IPVS: length: 4096 != 8 [ 122.121492][ T7133] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 122.200117][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.468721][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.581355][ T7163] team0: Device ip6tnl0 is of different type [ 122.632199][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.069318][ T7183] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 123.438010][ T7206] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.608537][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.772349][ T7229] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 123.804505][ T7229] infiniband syz1: set down [ 123.810949][ T7228] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 123.852024][ T7228] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.878830][ T7221] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 123.895295][ T7221] infiniband syz1: set active [ 123.917750][ T7231] team0: Port device bridge2 added [ 123.928598][ T9] lo speed is unknown, defaulting to 1000 [ 123.934540][ T7229] tc_dump_action: action bad kind [ 123.965245][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.026471][ T8] lo speed is unknown, defaulting to 1000 [ 124.073577][ T9] lo speed is unknown, defaulting to 1000 [ 124.211076][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.703114][ T5119] Bluetooth: hci0: command tx timeout [ 125.600081][ T7267] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 125.612926][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.689729][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.744580][ T7267] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 125.763074][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.887313][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.954773][ T7283] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 126.024713][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.051023][ T7287] netlink: 340 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.189623][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.249865][ T7298] batman_adv: batadv0: Adding interface: macsec1 [ 126.256535][ T7298] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.288605][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.297854][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.305794][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.308179][ T7298] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 126.338710][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.350748][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.362283][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.555615][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.102280][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.109737][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.486975][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.743814][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.771660][ T7305] batman_adv: batadv0: Removing interface: macsec1 [ 128.078018][ T3521] bridge_slave_1: left allmulticast mode [ 128.095262][ T3521] bridge_slave_1: left promiscuous mode [ 128.101027][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.160724][ T3521] bridge_slave_0: left allmulticast mode [ 128.182058][ T3521] bridge_slave_0: left promiscuous mode [ 128.187807][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.235170][ T7322] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 128.375168][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.390862][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.403670][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.427608][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.436820][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.456229][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.258941][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.271817][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.282922][ T3521] bond0 (unregistering): Released all slaves [ 130.294302][ T7333] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.304146][ T7333] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.325508][ T7357] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.341785][ T7357] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.352181][ T7357] IPv6: Can't replace route, no match found [ 130.428619][ T7331] tunl0 speed is unknown, defaulting to 1000 [ 130.503489][ T7366] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 130.543956][ T5119] Bluetooth: hci4: command tx timeout [ 130.605825][ T7370] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.649377][ T7372] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 130.676611][ T7370] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.700976][ T7372] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.722087][ T7370] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.750815][ T7331] lo speed is unknown, defaulting to 1000 [ 131.086210][ T7387] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.124294][ T7387] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.288158][ T7387] IPv6: Can't replace route, no match found [ 132.356483][ T7404] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 132.387671][ T7404] netlink: 157116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.589828][ T3521] hsr_slave_0: left promiscuous mode [ 132.602992][ T3521] hsr_slave_1: left promiscuous mode [ 132.613163][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.624906][ T5119] Bluetooth: hci4: command tx timeout [ 132.649605][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.658039][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.672076][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.712761][ T3521] veth1_macvtap: left promiscuous mode [ 132.725660][ T3521] veth0_macvtap: left promiscuous mode [ 132.742894][ T3521] veth1_vlan: left promiscuous mode [ 132.748266][ T3521] veth0_vlan: left promiscuous mode [ 133.104638][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.110976][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.041840][ T7438] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.438646][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 134.473066][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 134.713561][ T5119] Bluetooth: hci4: command tx timeout [ 134.774179][ T7420] IPv6: Can't replace route, no match found [ 134.895767][ T7441] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 135.030286][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 135.365600][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.375318][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.386841][ T7480] __nla_validate_parse: 4 callbacks suppressed [ 135.386858][ T7480] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.412220][ T7331] bridge_slave_0: entered allmulticast mode [ 135.420218][ T7331] bridge_slave_0: entered promiscuous mode [ 135.443276][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.454950][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.463921][ T7331] bridge_slave_1: entered allmulticast mode [ 135.471166][ T7331] bridge_slave_1: entered promiscuous mode [ 135.494717][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.530735][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.615216][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.648793][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.756817][ T7331] team0: Port device team_slave_0 added [ 135.792648][ T7331] team0: Port device team_slave_1 added [ 135.853647][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.860703][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.925671][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.956900][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.978976][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.040045][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.101896][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.172153][ T7331] hsr_slave_0: entered promiscuous mode [ 136.188713][ T7331] hsr_slave_1: entered promiscuous mode [ 136.201696][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.220214][ T7529] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.221352][ T7331] Cannot create hsr debugfs directory [ 136.321434][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.782306][ T5119] Bluetooth: hci4: command tx timeout [ 136.949204][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.997414][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.077042][ T7331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.081245][ T7568] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.122693][ T7331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.148452][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.158260][ T7331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.181143][ T7331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.377625][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.420912][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.465065][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.472259][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.513800][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.521122][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.821909][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.485604][ T7331] veth0_vlan: entered promiscuous mode [ 139.540330][ T7331] veth1_vlan: entered promiscuous mode [ 139.631743][ T7331] veth0_macvtap: entered promiscuous mode [ 139.654783][ T7331] veth1_macvtap: entered promiscuous mode [ 139.699438][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.735408][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.764008][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.812181][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.827820][ T7630] sctp: [Deprecated]: syz-executor.3 (pid 7630) Use of int in max_burst socket option deprecated. [ 139.827820][ T7630] Use struct sctp_assoc_value instead [ 139.850027][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.873181][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.907324][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.932941][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.959686][ T7331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.986786][ T7331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.004131][ T7331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.019622][ T7331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.220265][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.255374][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.338427][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.361624][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.674240][ T7680] __nla_validate_parse: 9 callbacks suppressed [ 140.674259][ T7680] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.819498][ T7695] tap0: tun_chr_ioctl cmd 1074025677 [ 140.833613][ T7695] tap0: linktype set to 769 [ 140.876140][ T7699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.133374][ T7701] syz-executor.0 (7701) used obsolete PPPIOCDETACH ioctl [ 141.317167][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.334482][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.454701][ T7727] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.538378][ T7735] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 141.629997][ T7735] infiniband syz2: set down [ 141.809434][ T7735] bridge0: port 3(team0) entered disabled state [ 141.817277][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.825497][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.197310][ T7735] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.206765][ T7735] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.220784][ T7735] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.240022][ T7735] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.340391][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.365984][ T5113] tunl0 speed is unknown, defaulting to 1000 [ 142.384688][ T7752] tunl0 speed is unknown, defaulting to 1000 [ 142.385452][ T7762] tap0: tun_chr_ioctl cmd 1074025677 [ 142.435936][ T7762] tap0: linktype set to 769 [ 142.444608][ T7735] syz-executor.0 (7735) used greatest stack depth: 17904 bytes left [ 142.490544][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.501330][ T7781] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.777687][ T7802] openvswitch: netlink: Key type 9220 is out of range max 32 [ 142.779331][ T7799] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 142.824796][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.842742][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.037249][ T7815] tap0: tun_chr_ioctl cmd 1074025677 [ 143.055725][ T7815] tap0: linktype set to 769 [ 143.286773][ T7833] sctp: [Deprecated]: syz-executor.0 (pid 7833) Use of int in max_burst socket option deprecated. [ 143.286773][ T7833] Use struct sctp_assoc_value instead [ 143.327594][ T7835] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 143.571325][ T7855] tap0: tun_chr_ioctl cmd 1074025677 [ 143.579916][ T7855] tap0: linktype set to 769 [ 144.197490][ T7896] tap0: tun_chr_ioctl cmd 1074025677 [ 144.216352][ T7896] tap0: linktype set to 769 [ 144.486285][ T7917] Cannot find add_set index 0 as target [ 144.833282][ T7941] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.834842][ T7943] tap0: tun_chr_ioctl cmd 1074025677 [ 144.850306][ T7943] tap0: linktype set to 769 [ 145.267593][ T7967] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 145.446973][ T7982] tap0: tun_chr_ioctl cmd 1074025677 [ 145.461716][ T7982] tap0: linktype set to 769 [ 145.715620][ T8001] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 145.744498][ T8001] __nla_validate_parse: 13 callbacks suppressed [ 145.744516][ T8001] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.802262][ T29] audit: type=1804 audit(1718030450.855:2): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1967611617/syzkaller.HtXAQd/27/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 145.861579][ T8011] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.002583][ T8020] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 146.192338][ T8027] tap0: tun_chr_ioctl cmd 1074025677 [ 146.197971][ T8027] tap0: linktype set to 769 [ 146.356833][ T8039] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.391982][ T8039] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 146.418445][ T8039] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.464604][ T8046] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.793986][ T8052] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 146.921124][ T8073] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 146.941558][ T8073] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.032049][ T8077] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.085389][ T8077] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 147.102158][ T8077] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.158497][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.166296][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.461193][ T8085] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.503041][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.567138][ T8052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.786659][ T8052] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.802807][ T8052] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.811705][ T8052] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.842228][ T8052] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.997703][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.158799][ T8103] Cannot find add_set index 0 as target [ 148.280144][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.441300][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.472130][ T8118] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 148.565876][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.663850][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.715504][ T8130] Cannot find del_set index 2 as target [ 148.729944][ T8132] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 149.048939][ T8149] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 149.072005][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.081363][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.089253][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.098695][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.113273][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.121445][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.182345][ T5119] Bluetooth: hci4: command tx timeout [ 153.262286][ T5119] Bluetooth: hci4: command tx timeout [ 155.342308][ T5119] Bluetooth: hci4: command tx timeout [ 157.422185][ T5119] Bluetooth: hci4: command tx timeout [ 179.337005][ T4489] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.354903][ T4489] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.382335][ T4489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.412986][ T4489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.420642][ T4489] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.435294][ T4489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.486729][ T4489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.498667][ T4489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.506965][ T4489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.543572][ T4489] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.565050][ T4489] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 179.572892][ T4489] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.619224][ T4489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.632174][ T4489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 179.642529][ T4489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 179.650894][ T4489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 179.658891][ T4489] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 179.666757][ T4489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.717744][ T4489] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 179.727797][ T4489] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 179.735765][ T4489] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 179.744023][ T4489] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 179.752229][ T4489] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 179.759568][ T4489] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 181.273887][ T5119] Bluetooth: hci1: command 0x0406 tx timeout [ 181.279946][ T5119] Bluetooth: hci3: command 0x0406 tx timeout [ 181.502174][ T5122] Bluetooth: hci5: command tx timeout [ 181.662126][ T5122] Bluetooth: hci6: command tx timeout [ 181.746247][ T5122] Bluetooth: hci7: command tx timeout [ 181.822084][ T5122] Bluetooth: hci8: command tx timeout [ 183.582745][ T5122] Bluetooth: hci5: command tx timeout [ 183.744578][ T5122] Bluetooth: hci6: command tx timeout [ 183.822200][ T5122] Bluetooth: hci7: command tx timeout [ 183.904124][ T5122] Bluetooth: hci8: command tx timeout [ 185.662145][ T5122] Bluetooth: hci5: command tx timeout [ 185.822062][ T5122] Bluetooth: hci6: command tx timeout [ 185.902149][ T5122] Bluetooth: hci7: command tx timeout [ 185.982134][ T5122] Bluetooth: hci8: command tx timeout [ 187.742092][ T5122] Bluetooth: hci5: command tx timeout [ 187.902096][ T5122] Bluetooth: hci6: command tx timeout [ 187.982077][ T5122] Bluetooth: hci7: command tx timeout [ 188.062106][ T5122] Bluetooth: hci8: command tx timeout [ 194.544942][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.551276][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.924857][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 213.937457][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 213.945692][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 213.957420][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 213.965711][ T5119] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 213.975125][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 216.062161][ T5119] Bluetooth: hci9: command tx timeout [ 218.142126][ T5119] Bluetooth: hci9: command tx timeout [ 220.232258][ T5119] Bluetooth: hci9: command tx timeout [ 222.222050][ T5119] Bluetooth: hci2: command 0x0405 tx timeout [ 222.302144][ T5122] Bluetooth: hci9: command tx timeout [ 244.572663][ T5119] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 244.582057][ T5119] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 244.590414][ T5119] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 244.598922][ T5119] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 244.606774][ T5119] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 244.614710][ T5119] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 244.686836][ T5119] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 244.703045][ T4489] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 244.710506][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 244.719467][ T5126] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 244.727085][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 244.735696][ T5126] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 244.736617][ T4489] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 244.752253][ T5126] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 244.759612][ T5126] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 244.769476][ T5126] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 244.770467][ T4489] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 244.778694][ T5126] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 244.785254][ T4489] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 244.798577][ T4489] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 244.799335][ T5126] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 244.807551][ T4489] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 244.813427][ T5126] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 244.820406][ T4489] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 246.712023][ T5119] Bluetooth: hci10: command tx timeout [ 246.862180][ T5119] Bluetooth: hci11: command tx timeout [ 246.862204][ T4489] Bluetooth: hci12: command tx timeout [ 246.942180][ T5119] Bluetooth: hci13: command tx timeout [ 248.782132][ T5119] Bluetooth: hci10: command tx timeout [ 248.942540][ T5119] Bluetooth: hci12: command tx timeout [ 248.942658][ T4489] Bluetooth: hci11: command tx timeout [ 249.022110][ T4489] Bluetooth: hci13: command tx timeout [ 250.863738][ T5119] Bluetooth: hci10: command tx timeout [ 251.022051][ T5119] Bluetooth: hci12: command tx timeout [ 251.022084][ T5122] Bluetooth: hci11: command tx timeout [ 251.102116][ T5122] Bluetooth: hci13: command tx timeout [ 252.942005][ T5122] Bluetooth: hci0: command 0x0406 tx timeout [ 252.946628][ T5119] Bluetooth: hci10: command tx timeout [ 253.102114][ T5119] Bluetooth: hci12: command tx timeout [ 253.107656][ T4489] Bluetooth: hci11: command tx timeout [ 253.182122][ T4489] Bluetooth: hci13: command tx timeout [ 255.985009][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991388][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.432310][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 279.020750][ T5119] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 279.029884][ T5119] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 279.038169][ T5119] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 279.047891][ T5119] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 279.055806][ T5119] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 279.064048][ T5119] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 281.102219][ T4489] Bluetooth: hci14: command tx timeout [ 283.182024][ T4489] Bluetooth: hci14: command tx timeout [ 285.262076][ T4489] Bluetooth: hci14: command tx timeout [ 287.342391][ T4489] Bluetooth: hci14: command tx timeout [ 300.152088][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 300.159764][ T30] Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 300.170845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.181819][ T30] task:kworker/u8:3 state:D stack:22040 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 300.195623][ T30] Workqueue: netns cleanup_net 2024/06/10 14:43:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 300.200415][ T30] Call Trace: [ 300.205582][ T30] [ 300.208530][ T30] __schedule+0x17e8/0x4a20 [ 300.271935][ T30] ? __pfx___schedule+0x10/0x10 [ 300.276845][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.291930][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 300.297426][ T30] ? kthread_data+0x52/0xd0 [ 300.311941][ T30] ? schedule+0x90/0x320 [ 300.316215][ T30] ? wq_worker_sleeping+0x66/0x240 [ 300.321337][ T30] ? schedule+0x90/0x320 [ 300.341968][ T30] schedule+0x14b/0x320 [ 300.346193][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.352534][ T30] __mutex_lock+0x6a4/0xd70 [ 300.357054][ T30] ? __mutex_lock+0x527/0xd70 [ 300.361741][ T30] ? nsim_create+0x408/0x890 [ 300.366451][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.371499][ T30] ? kmemdup_noprof+0x45/0x60 [ 300.376210][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 300.382397][ T30] nsim_create+0x408/0x890 [ 300.386835][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 300.398226][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 300.403502][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 300.408992][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 300.418054][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 300.424001][ T30] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 300.429833][ T30] ? nsim_dev_hwstats_init+0x3c2/0x3d0 [ 300.435530][ T30] nsim_dev_reload_up+0x69b/0x8e0 [ 300.440590][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 300.451190][ T30] devlink_reload+0x478/0x870 [ 300.455953][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 300.461179][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 300.470244][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 300.476363][ T30] ? class_remove_file_ns+0x121/0x160 [ 300.491895][ T30] cleanup_net+0x615/0xcc0 [ 300.496352][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 300.501399][ T30] ? process_scheduled_works+0x945/0x1830 [ 300.525935][ T30] process_scheduled_works+0xa2c/0x1830 [ 300.531564][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.537614][ T30] ? assign_work+0x364/0x3d0 [ 300.545754][ T30] worker_thread+0x86d/0xd70 [ 300.550375][ T30] ? __kthread_parkme+0x169/0x1d0 [ 300.557130][ T30] ? __pfx_worker_thread+0x10/0x10 [ 300.565719][ T30] kthread+0x2f0/0x390 [ 300.569803][ T30] ? __pfx_worker_thread+0x10/0x10 [ 300.574970][ T30] ? __pfx_kthread+0x10/0x10 [ 300.579574][ T30] ret_from_fork+0x4b/0x80 [ 300.587429][ T30] ? __pfx_kthread+0x10/0x10 [ 300.592108][ T30] ret_from_fork_asm+0x1a/0x30 [ 300.596915][ T30] [ 300.600104][ T30] INFO: task kworker/1:15:7776 blocked for more than 143 seconds. [ 300.611891][ T30] Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 300.619542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disable