last executing test programs: 1m24.784452921s ago: executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0), 0x0, 0x0}, 0x40) 1m24.695237343s ago: executing program 3: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x2) 1m11.502041952s ago: executing program 3: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x2) 55.259902065s ago: executing program 3: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x2) 43.046244173s ago: executing program 3: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x2) 31.00274437s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e41f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x18, 0x0, 0x2000e881) 30.960277661s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x3c}}, 0x0) 30.943748066s ago: executing program 3: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_opts(r0, 0x0, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x2) 30.815930981s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0xfffffffffffffda7, 0x0, 0x0}, 0x40) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000001500)=0x1, 0x4) 30.813434432s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010010000000000900020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sendmsg$key(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000a80)='br_fdb_add\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001d0c0101030000000000005ce8265b859a6e1f"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x2a, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xff0f}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) 30.769972195s ago: executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x12}}) 30.697073041s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001100010400eeff0200ffff1650fcc7e5", @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003"], 0x58}}, 0x0) 30.601439199s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x80, r2, 0x135, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {0x0, 0x1}, {}], "e6c081531bbdee5d"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {0x0, 0x1}], "1856690a2bf8cbd6"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x1}, {0x40, 0x2}, {0xd, 0x4}, {0x5, 0x3}, {0x9, 0x4}], "3354fc30b6a44086"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x81}, {0xb4, 0x1}, {0x2, 0x5}, {0xfd, 0x4}, {0x1, 0x2}, {0xb1}, {}, {}, {0x0, 0x3}, {}, {0x7}], "6034ad44b7a8a4d1"}}]}, 0x80}}, 0x0) 30.59526258s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 30.589743353s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="08009e009eab"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2}, 0x18) 30.526637895s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 30.465463559s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000190001002abd7000fbdbdf2500000000000000000000ffff00000000000000000000000000000000000000014e2300004e21c8b8020080"], 0xd4}}, 0x0) 30.433560175s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 30.431395354s ago: executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) 30.338214515s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.321508598s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e41f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x18, 0x0, 0x2000e881) 30.281246583s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}}, 0x0) 30.153223495s ago: executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000080)) 30.143433811s ago: executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x12}}) 30.139581096s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f00000003c0)="b18a9b8e49633aebbf67c8a0b6a377fbddb383e708b89228047f390be962c96899698b96b7bda3606454a634fbc22cde7d4fe8ccdbb108be1c6cd596ff16782ad9ee5a8e24c95397af6c5aa138ca6286780b219909aee64790f6e0a0ad44ead9442be8a75ec885bcfb2f229bcf465f2c5fedad7596eeedc40af2dcc65637b6c2dfa805a80ec4f77384941fce773d38dd5d51a50c31d731f41ca5dac6f71c73cfb1d1f8926d288628c38896befa2c239efaa7456f6b3f6e9aad69dbeda16c8813ff77924eabac037b6e0e5c7b61a2b333", &(0x7f0000000000)=""/120, 0x4}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6608da882c920e7c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}]}}}]}, 0x38}}, 0x0) 30.03038967s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001100010400eeff0200ffff1650fcc7e5", @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003"], 0x58}}, 0x0) 302.624856ms ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010010000000000900020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sendmsg$key(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000a80)='br_fdb_add\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001d0c0101030000000000005ce8265b859a6e1f"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x2a, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xff0f}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) 118.902758ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="08009e009eab"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2}, 0x18) 110.699129ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 0s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010010000000000900020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sendmsg$key(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000a80)='br_fdb_add\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001d0c0101030000000000005ce8265b859a6e1f"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x2a, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xff0f}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): net_device) (uninitialized): option all_slaves_active: invalid value (129) [ 346.559205][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 346.943500][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.074256][T17273] pimreg: entered allmulticast mode [ 347.122948][T17273] pimreg: left allmulticast mode [ 347.261261][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.848237][T17293] sctp: [Deprecated]: syz-executor.1 (pid 17293) Use of int in max_burst socket option deprecated. [ 347.848237][T17293] Use struct sctp_assoc_value instead [ 348.176182][T17324] xt_l2tp: missing protocol rule (udp|l2tpip) [ 348.509364][T17331] pimreg: entered allmulticast mode [ 348.561797][T17331] pimreg: left allmulticast mode [ 349.207724][T17357] pimreg: entered allmulticast mode [ 349.276570][T17357] pimreg: left allmulticast mode [ 349.577134][T17367] pimreg: entered allmulticast mode [ 349.603520][T17367] pimreg: left allmulticast mode [ 349.775213][T17371] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 350.156937][T17386] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.343901][T17424] xt_l2tp: missing protocol rule (udp|l2tpip) [ 351.426504][T17425] tap0: tun_chr_ioctl cmd 1074025677 [ 351.469363][T17425] tap0: linktype set to 270 [ 351.786132][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.840425][T17440] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.857907][T17436] ip6gretap0: entered promiscuous mode [ 352.752456][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.039170][T17465] tap0: tun_chr_ioctl cmd 1074025677 [ 353.056337][T17465] tap0: linktype set to 270 [ 353.238851][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.330555][T17479] dccp_close: ABORT with 32 bytes unread [ 354.510829][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.765031][T17501] validate_nla: 2 callbacks suppressed [ 354.765052][T17501] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 354.795364][T17501] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.083711][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.363463][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.399303][T17529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.628992][T17537] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 355.650567][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.549702][T14889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.575207][T14889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.763125][T14889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.796677][T14889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.862534][T17569] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 356.998269][T14889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.017402][T14889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.056193][T17575] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 357.468483][T17590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.545329][T17590] team_slave_0: entered promiscuous mode [ 357.551473][T17590] team_slave_1: entered promiscuous mode [ 357.575314][T17590] macvtap1: entered promiscuous mode [ 357.595397][T17590] team0: entered promiscuous mode [ 357.601096][T17590] macvtap1: entered allmulticast mode [ 357.605726][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.619215][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.627552][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.637284][T17590] team0: entered allmulticast mode [ 357.642751][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.650528][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.650870][T17590] team_slave_0: entered allmulticast mode [ 357.663927][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.697660][T17590] team_slave_1: entered allmulticast mode [ 357.726497][T17590] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 357.868656][T17593] caif0 speed is unknown, defaulting to 1000 [ 357.885490][T14889] bridge_slave_0: left allmulticast mode [ 357.891183][T14889] bridge_slave_0: left promiscuous mode [ 357.941089][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.979577][T14889] tipc: Resetting bearer [ 358.308515][T17606] Bluetooth: MGMT ver 1.22 [ 358.338175][T17606] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 358.950764][T14889] tipc: Disabling bearer [ 359.209325][T14889]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.232448][T14889]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.258997][T14889]  (unregistering): (slave team0): Releasing backup interface [ 359.310244][T14889]  (unregistering): Released all slaves [ 359.357565][T17606] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 359.426470][T14889] tipc: Left network mode [ 359.522249][T17611] xt_NFQUEUE: number of total queues is 0 [ 359.744688][ T5117] Bluetooth: hci3: command tx timeout [ 360.339071][T17593] chnl_net:caif_netlink_parms(): no params data found [ 360.488924][T14889] hsr_slave_0: left promiscuous mode [ 360.503087][T14889] hsr_slave_1: left promiscuous mode [ 360.517595][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.533158][T14889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.548845][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.565639][T14889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.616479][T14889] veth1_macvtap: left promiscuous mode [ 360.623658][T14889] veth0_macvtap: left promiscuous mode [ 360.642242][T14889] veth1_vlan: left promiscuous mode [ 360.648230][T14889] veth0_vlan: left promiscuous mode [ 361.588370][T14889] team0 (unregistering): Port device team_slave_1 removed [ 361.651406][T14889] team0 (unregistering): Port device team_slave_0 removed [ 361.837232][ T5117] Bluetooth: hci3: command tx timeout [ 362.311544][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.334586][T17637] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 362.390543][T17639] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 362.408786][T17641] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 362.459789][T17642] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 362.602694][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.623421][T17593] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.631679][T17593] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.639896][T17593] bridge_slave_0: entered allmulticast mode [ 362.648390][T17593] bridge_slave_0: entered promiscuous mode [ 362.663752][T17593] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.671451][T17593] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.678890][T17593] bridge_slave_1: entered allmulticast mode [ 362.686562][T17593] bridge_slave_1: entered promiscuous mode [ 362.857501][T17593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.897729][T17593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.991631][T17668] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.087921][T17593] team0: Port device team_slave_0 added [ 363.126643][T17593] team0: Port device team_slave_1 added [ 363.248708][T17593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.260223][T17593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.316341][T17593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.386424][T17680] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 363.400625][T17677] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 363.459946][T17593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.487850][T17593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.573749][T17593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.808073][T17593] hsr_slave_0: entered promiscuous mode [ 363.833084][T17593] hsr_slave_1: entered promiscuous mode [ 363.848011][T17593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.874871][T17593] Cannot create hsr debugfs directory [ 363.914557][ T5117] Bluetooth: hci3: command tx timeout [ 363.927945][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.669621][T17709] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 364.733022][T17709] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 365.000954][T17593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 365.024952][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.038295][T17593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.076243][T17593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.107462][T17593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.191432][T17723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.200258][T17723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.231750][T17723] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 365.265145][T17723] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 365.591528][T17593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.662730][T17593] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.737841][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.745056][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.758078][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.765275][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.783294][T17734] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 365.872490][T17738] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.984644][ T5117] Bluetooth: hci3: command tx timeout [ 366.023351][T17593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.196006][T17745] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.344318][T17750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.481475][T17593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.609234][T17593] veth0_vlan: entered promiscuous mode [ 366.655098][T17593] veth1_vlan: entered promiscuous mode [ 366.757659][T17593] veth0_macvtap: entered promiscuous mode [ 366.792134][T17593] veth1_macvtap: entered promiscuous mode [ 366.859204][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.894471][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.904322][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.925391][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.946882][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.974706][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.994979][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.015687][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.036941][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.059269][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.082426][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.104108][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.128310][T17593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.183476][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.206794][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.226835][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.248474][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.270382][T17766] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.282118][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.306809][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.327926][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.360143][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.384899][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.434602][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.454542][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.474617][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.513741][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.538276][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.558004][T17593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.582361][T17593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.607803][T17593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.698115][T17593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.725915][T17593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.737028][T17593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.757843][T17593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.810811][T17774] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.055558][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.067830][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.108232][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.277085][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.334586][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.807493][T17800] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.017439][T17808] syz-executor.0[17808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.017592][T17808] syz-executor.0[17808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.107335][T17810] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.166220][T17810] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 369.214879][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.465723][T17804] syzkaller0: entered promiscuous mode [ 369.471248][T17804] syzkaller0: entered allmulticast mode [ 372.576499][T17858] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 372.673320][T17865] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 372.969269][T17884] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 373.108886][T17889] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 373.162488][T17897] Cannot find set identified by id 0 to match [ 373.178058][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.223330][T17900] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.297791][T17904] xt_hashlimit: max too large, truncated to 1048576 [ 373.306972][T17884] syz-executor.4 (17884) used greatest stack depth: 17720 bytes left [ 373.399241][T17897] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 373.696813][T17922] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 373.796702][T17927] Cannot find set identified by id 0 to match [ 373.847348][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 373.890751][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.915449][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec0 [ 373.941350][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.262053][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.462054][T17959] IPv6: addrconf: prefix option has invalid lifetime [ 374.936087][T17988] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 375.060761][T17988] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 375.264249][T18009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 375.303686][T18009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.326127][T18009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec0 [ 375.340492][T18009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.381116][T18013] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.521713][T18023] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.547184][T18024] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 375.563348][T18023] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.827003][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.838682][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.907390][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 375.931414][T18042] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.000754][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.070132][T18043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.077457][T18043] IPv6: NLM_F_CREATE should be set when creating new route [ 376.702815][T18084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 376.754659][T18084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.805825][T18084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec0 [ 376.818038][T18084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.104913][ T5117] Bluetooth: hci0: command 0x0401 tx timeout [ 378.298417][T18172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.343322][T18181] validate_nla: 3 callbacks suppressed [ 378.343344][T18181] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 378.366689][T18182] __nla_validate_parse: 9 callbacks suppressed [ 378.366710][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 378.455163][T18183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.462482][T18183] IPv6: NLM_F_CREATE should be set when creating new route [ 378.550092][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 378.913061][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.103887][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.230410][ T29] audit: type=1800 audit(1717288302.370:31): pid=18215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 379.305937][ T29] audit: type=1804 audit(1717288302.410:32): pid=18215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2109195327/syzkaller.zBIiuV/552/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 379.450232][T18223] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.504153][T18208] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.505459][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.767661][T18228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.995818][T18236] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 380.059359][ T29] audit: type=1804 audit(1717288303.200:33): pid=18236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2109195327/syzkaller.zBIiuV/555/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 380.408260][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.428876][T18251] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 380.503602][T18252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.510969][T18252] IPv6: NLM_F_CREATE should be set when creating new route [ 380.557356][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.729404][T18263] vlan2: entered allmulticast mode [ 380.747883][T18263] bond0: entered allmulticast mode [ 380.772895][T18263] bond_slave_0: entered allmulticast mode [ 380.797297][T18263] bond_slave_1: entered allmulticast mode [ 380.811132][T18263] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 380.843998][T18271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.908979][T18263] bond0: left allmulticast mode [ 380.913889][T18263] bond_slave_0: left allmulticast mode [ 380.981101][T18263] bond_slave_1: left allmulticast mode [ 381.010801][T18263] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 381.096365][T18278] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 381.401621][T18298] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 381.442074][ T29] audit: type=1804 audit(1717288304.580:34): pid=18298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1497349380/syzkaller.KGkOzM/370/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 381.545416][T18304] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 381.598176][T18308] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 381.690892][T18313] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 381.850539][T18319] lo: entered allmulticast mode [ 381.881144][T18319] pimreg: entered allmulticast mode [ 381.894740][T18319] lo: left allmulticast mode [ 381.902899][T18319] pimreg: left allmulticast mode [ 382.145880][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 382.260811][T18336] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.781918][T18368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.907673][T18367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.537351][T18395] __nla_validate_parse: 8 callbacks suppressed [ 383.537372][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 383.647022][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.656071][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.665759][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 383.679028][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 383.692490][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 383.700073][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.786114][T18401] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.797600][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.807115][T18401] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.898747][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.921468][ T1089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.031764][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.078353][T18396] caif0 speed is unknown, defaulting to 1000 [ 384.175721][ T1089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.379768][T18430] Bluetooth: hci3: unsupported parameter 64512 [ 384.402070][T18430] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 384.507285][ T1089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.732539][ T1089] bond0: (slave netdevsim0): Releasing backup interface [ 385.079728][ T45] IPVS: starting estimator thread 0... [ 385.110602][T18396] chnl_net:caif_netlink_parms(): no params data found [ 385.204666][T18470] IPVS: using max 21 ests per chain, 50400 per kthread [ 385.220980][ T1089] bridge_slave_1: left allmulticast mode [ 385.234588][ T1089] bridge_slave_1: left promiscuous mode [ 385.240715][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.272557][ T1089] bridge_slave_0: left allmulticast mode [ 385.296839][ T1089] bridge_slave_0: left promiscuous mode [ 385.302652][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.734725][ T29] audit: type=1804 audit(1717288308.870:35): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1366476477/syzkaller.hSJvzY/153/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 385.768549][ T5117] Bluetooth: hci2: command tx timeout [ 386.241294][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.270505][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.292717][ T1089] bond0 (unregistering): Released all slaves [ 386.373873][T18520] tipc: Invalid UDP bearer configuration [ 386.373928][T18520] tipc: Enabling of bearer rejected, failed to enable media [ 386.463242][ T1089] tipc: Disabling bearer [ 386.514757][ T1089] tipc: Left network mode [ 386.678773][T18548] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 386.705767][T18396] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.720885][T18396] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.736630][T18396] bridge_slave_0: entered allmulticast mode [ 386.752544][T18396] bridge_slave_0: entered promiscuous mode [ 386.877063][T18396] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.906663][T18396] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.918931][T18396] bridge_slave_1: entered allmulticast mode [ 386.927590][T18396] bridge_slave_1: entered promiscuous mode [ 387.086326][T18573] ip6t_srh: unknown srh match flags 5294 [ 387.141283][T18396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.163988][T18396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.392302][T18396] team0: Port device team_slave_0 added [ 387.413516][T18584] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.519233][T18396] team0: Port device team_slave_1 added [ 387.540169][T18593] tipc: Invalid UDP bearer configuration [ 387.540221][T18593] tipc: Enabling of bearer rejected, failed to enable media [ 387.656930][ T1089] hsr_slave_0: left promiscuous mode [ 387.684708][ T1089] hsr_slave_1: left promiscuous mode [ 387.693947][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.714984][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.723865][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.745707][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.814088][ T1089] team0: left allmulticast mode [ 387.821764][ T1089] team_slave_0: left allmulticast mode [ 387.829049][ T1089] team_slave_1: left allmulticast mode [ 387.835513][ T5117] Bluetooth: hci2: command tx timeout [ 387.835513][ T1089] team0: left promiscuous mode [ 387.852322][ T1089] team_slave_0: left promiscuous mode [ 387.858360][ T1089] team_slave_1: left promiscuous mode [ 387.868757][ T1089] veth1_macvtap: left promiscuous mode [ 387.882576][ T1089] veth0_macvtap: left promiscuous mode [ 387.897575][ T1089] veth1_vlan: left promiscuous mode [ 387.914968][ T1089] veth0_vlan: left promiscuous mode [ 387.946482][ T29] audit: type=1800 audit(1717288311.090:36): pid=18611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 387.997256][ T29] audit: type=1804 audit(1717288311.120:37): pid=18611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1364992727/syzkaller.hbfg86/395/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 388.714094][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 388.762240][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 389.306705][T18396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.313701][T18396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.370050][T18396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.435589][T18396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.442647][T18396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.544746][T18396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.676917][T18645] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.773903][T18396] hsr_slave_0: entered promiscuous mode [ 389.792225][T18396] hsr_slave_1: entered promiscuous mode [ 389.808293][T18396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.823824][T18396] Cannot create hsr debugfs directory [ 389.905440][ T5117] Bluetooth: hci2: command tx timeout [ 389.916834][ T1089] IPVS: stop unused estimator thread 0... [ 390.398699][T18677] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 390.512709][T18686] syz-executor.1[18686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.512851][T18686] syz-executor.1[18686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.664532][ T29] audit: type=1804 audit(1717288313.800:38): pid=18694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1366476477/syzkaller.hSJvzY/187/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 390.717203][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.730662][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.781013][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.813550][ T29] audit: type=1800 audit(1717288313.800:39): pid=18694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 390.817048][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.877169][T18396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.905555][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.919731][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.931705][T18396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.959684][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.985275][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.989435][T18396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.000257][ T29] audit: type=1804 audit(1717288314.100:40): pid=18711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1366476477/syzkaller.hSJvzY/188/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 391.017609][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.046443][T18699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.073148][T18396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 391.075354][T18713] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 391.310723][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.355632][T18396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.392895][T18396] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.429899][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.437143][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.483136][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.490352][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.607606][T18396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.714228][T18739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 391.829746][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.985562][ T5117] Bluetooth: hci2: command tx timeout [ 391.995226][T18396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.142280][T18396] veth0_vlan: entered promiscuous mode [ 392.161105][T18762] xt_nfacct: accounting object `syz1' does not exists [ 392.183185][T18396] veth1_vlan: entered promiscuous mode [ 392.276095][T18396] veth0_macvtap: entered promiscuous mode [ 392.296925][T18396] veth1_macvtap: entered promiscuous mode [ 392.321610][T18770] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.447349][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.481235][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.496850][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.539447][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.564357][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.576246][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.587719][T18780] syz-executor.0 (18780) used greatest stack depth: 9624 bytes left [ 392.603828][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.625221][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.644212][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.673543][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.686141][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.703566][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.717528][T18396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.742275][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.773708][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.830023][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.852723][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.876750][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.901810][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.915514][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.940537][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.963506][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.990724][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.020357][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.043786][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.054292][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.070964][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.121238][T18396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.142382][T18396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.166754][T18396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.202053][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.302923][T18396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.336898][T18396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.367251][T18396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.414136][T18396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.838506][ T5156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.871055][ T5156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.935322][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.946417][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.954489][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.963986][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.972149][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 393.980662][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.171080][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.237422][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.266673][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.408719][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.456488][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.474635][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.528682][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.575648][T18828] caif0 speed is unknown, defaulting to 1000 [ 395.129137][ T51] bridge_slave_1: left allmulticast mode [ 395.137610][ T51] bridge_slave_1: left promiscuous mode [ 395.156724][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.186046][ T51] bridge_slave_0: left allmulticast mode [ 395.191823][ T51] bridge_slave_0: left promiscuous mode [ 395.211260][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.079136][ T53] Bluetooth: hci4: command tx timeout [ 396.270306][ T51]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.285627][T18946] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 396.295448][ T51]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.313572][ T51]  (unregistering): (slave team0): Releasing backup interface [ 396.329124][ T51]  (unregistering): Released all slaves [ 396.425226][ T51] tipc: Disabling bearer [ 396.467784][ T51] tipc: Left network mode [ 396.909208][T18828] chnl_net:caif_netlink_parms(): no params data found [ 396.932186][T18979] net_ratelimit: 110 callbacks suppressed [ 396.932206][T18979] Dead loop on virtual device ipvlan1, fix it urgently! [ 396.960218][T18980] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.986701][T18981] Dead loop on virtual device ipvlan1, fix it urgently! [ 397.424004][ T51] hsr_slave_0: left promiscuous mode [ 397.433317][ T51] hsr_slave_1: left promiscuous mode [ 397.464777][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.483256][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.495789][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.503455][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.505185][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 397.552321][ T51] veth1_macvtap: left promiscuous mode [ 397.563235][ T51] veth0_macvtap: left promiscuous mode [ 397.570517][ T51] veth1_vlan: left promiscuous mode [ 397.576136][ T51] veth0_vlan: left promiscuous mode [ 397.769105][T18979] syz-executor.0 (18979) used greatest stack depth: 9240 bytes left [ 398.150736][ T53] Bluetooth: hci4: command tx timeout [ 398.380381][ T51] team0 (unregistering): Port device team_slave_1 removed [ 398.431329][ T51] team0 (unregistering): Port device team_slave_0 removed [ 398.891805][T18828] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.911481][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.934819][T18828] bridge_slave_0: entered allmulticast mode [ 398.945242][T18828] bridge_slave_0: entered promiscuous mode [ 398.962592][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.009898][T19025] syz_tun: entered promiscuous mode [ 399.046323][T19025] macsec1: entered promiscuous mode [ 399.051766][T19025] macsec1: entered allmulticast mode [ 399.074968][T19025] syz_tun: entered allmulticast mode [ 399.084652][T18828] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.112744][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.138916][T18828] bridge_slave_1: entered allmulticast mode [ 399.165297][T18828] bridge_slave_1: entered promiscuous mode [ 399.213746][T19037] Dead loop on virtual device ipvlan1, fix it urgently! [ 399.226163][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.265766][T19040] Dead loop on virtual device ipvlan1, fix it urgently! [ 399.285673][T18828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.306762][T18828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.481368][T18828] team0: Port device team_slave_0 added [ 399.502646][T18828] team0: Port device team_slave_1 added [ 399.609312][T19055] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 399.609664][T18828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.638785][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.667220][T18828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.683508][T18828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.727633][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.764845][T18828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.786754][T19059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.802866][T19059] syz_tun: entered promiscuous mode [ 399.809479][T19059] macsec2: entered promiscuous mode [ 399.815359][T19059] macsec2: entered allmulticast mode [ 399.820853][T19059] syz_tun: entered allmulticast mode [ 399.831625][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.990157][T18828] hsr_slave_0: entered promiscuous mode [ 400.016661][T18828] hsr_slave_1: entered promiscuous mode [ 400.034263][T18828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.065815][T18828] Cannot create hsr debugfs directory [ 400.133957][T19077] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 400.224775][ T53] Bluetooth: hci4: command tx timeout [ 400.300678][T19083] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.311015][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.359754][T19090] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.088510][T19124] x_tables: duplicate underflow at hook 1 [ 401.173121][T19121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.317324][T18828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.337331][T18828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.375489][T18828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.468013][T18828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.739850][T18828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.809529][T18828] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.855536][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.862733][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.913568][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.920771][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.001958][T19156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.306318][ T53] Bluetooth: hci4: command tx timeout [ 402.418847][T18828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.587852][T18828] veth0_vlan: entered promiscuous mode [ 402.611831][T18828] veth1_vlan: entered promiscuous mode [ 402.650629][T19196] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 402.672504][T19196] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.702523][T18828] veth0_macvtap: entered promiscuous mode [ 402.751150][T18828] veth1_macvtap: entered promiscuous mode [ 402.818047][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.854656][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.875443][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.904787][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.929269][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.950259][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.984504][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.003233][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.013502][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.024354][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.038046][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.049077][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.062181][T18828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.089047][T19199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.146791][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.177843][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.212138][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.226110][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.236262][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.254844][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.294009][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.315671][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.326091][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.345710][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.355955][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.369904][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.387826][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.399262][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.410137][T18828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.420812][T18828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.452110][T18828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.559363][T18828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.573343][T18828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.599023][T18828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.612315][T18828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.862540][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.879083][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.922157][T19247] x_tables: duplicate underflow at hook 1 [ 403.941664][T19240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.992439][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.018941][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.473257][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.290782][T19278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.670483][T19307] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.731544][T19312] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.777024][T19312] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 405.814141][T19316] lo: Caught tx_queue_len zero misconfig [ 406.325264][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.505159][T19353] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 406.743375][T19373] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 406.793048][T19368] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 407.021840][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.037387][T19387] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.055825][T19387] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.073972][T19387] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.114912][T19391] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.144295][T19393] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483648 (only 8 groups) [ 407.612245][T19408] tun0: tun_chr_ioctl cmd 1074025677 [ 407.630233][T19408] tun0: linktype set to 6 [ 407.819251][T19423] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483648 (only 8 groups) [ 407.928755][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.278698][T19449] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 408.299295][T19449] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.734860][T19473] syz-executor.4[19473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.735011][T19473] syz-executor.4[19473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.912810][T19513] tipc: Started in network mode [ 409.954863][T19513] tipc: Node identity aaaaaaaaaa3c, cluster identity 4711 [ 409.971695][T19515] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 409.977978][T19513] tipc: Enabled bearer , priority 0 [ 409.988290][T19515] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 411.055264][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.079090][T19536] xt_hashlimit: Unknown mode mask 242, kernel too old? [ 411.083382][T19533] nbd: nbd0 already in use [ 411.104843][ T45] tipc: Node number set to 9874090 [ 411.277734][T19547] tipc: Enabling of bearer rejected, already enabled [ 411.305724][T19550] tipc: Started in network mode [ 411.314599][T19550] tipc: Node identity aaaaaaaaaa3c, cluster identity 4711 [ 411.338059][T19550] tipc: Enabled bearer , priority 0 [ 411.608767][T19560] Dead loop on virtual device ipvlan1, fix it urgently! [ 411.812729][T19560] syz-executor.0 (19560) used greatest stack depth: 8976 bytes left [ 411.819990][T19574] IPVS: length: 215 != 24 [ 411.971523][T19584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.978864][T19584] IPv6: NLM_F_CREATE should be set when creating new route [ 411.986153][T19584] IPv6: NLM_F_CREATE should be set when creating new route [ 412.024669][T19580] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.051978][T19580] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.176794][T19592] tipc: Started in network mode [ 412.195601][T19592] tipc: Node identity aaaaaaaaaa3c, cluster identity 4711 [ 412.202971][T19592] tipc: Enabled bearer , priority 0 [ 412.379015][T19601] IPVS: length: 215 != 24 [ 412.453440][T19605] IPVS: length: 215 != 24 [ 412.458064][ T8] tipc: Node number set to 9874090 [ 412.737151][T19623] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.782107][T19623] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.962923][T19633] IPVS: length: 215 != 24 [ 412.998318][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.015649][T19640] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 413.116756][T19642] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 413.149672][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.160467][T19647] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.324780][ T5234] tipc: Node number set to 9874090 [ 413.335145][T19658] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.491995][T19658] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.922271][ T2453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.982683][T19674] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 414.006866][T19674] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.034841][T19674] ipvlan1: entered promiscuous mode [ 414.065286][T19674] ipvlan1: entered allmulticast mode [ 414.085659][T19674] veth0_vlan: entered allmulticast mode [ 414.177234][T19674] bridge0: port 3(ipvlan1) entered blocking state [ 414.189951][T19674] bridge0: port 3(ipvlan1) entered disabled state [ 414.227559][T19674] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 414.467685][ T2453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.505221][T19697] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 414.530226][T19699] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 414.636964][ T2453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.675110][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.692299][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.715719][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.727596][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.738719][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 414.747240][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.796521][ T2453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.895371][T19712] caif0 speed is unknown, defaulting to 1000 [ 415.076385][ T2453] bridge_slave_1: left allmulticast mode [ 415.090159][ T2453] bridge_slave_1: left promiscuous mode [ 415.102990][ T2453] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.118886][ T2453] bridge_slave_0: left allmulticast mode [ 415.125082][ T2453] bridge_slave_0: left promiscuous mode [ 415.132183][ T2453] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.170865][ T29] audit: type=1804 audit(1717288338.310:41): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1985176939/syzkaller.ADpIux/37/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 415.835489][ T2453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.853783][ T2453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.868430][ T2453] bond0 (unregistering): Released all slaves [ 415.946166][T19739] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.985038][T19740] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.690763][T19712] chnl_net:caif_netlink_parms(): no params data found [ 416.786782][ T53] Bluetooth: hci2: command tx timeout [ 416.867397][T19778] bond0: option arp_all_targets: invalid value (3) [ 417.242790][ T2453] hsr_slave_0: left promiscuous mode [ 417.268130][ T2453] hsr_slave_1: left promiscuous mode [ 417.292488][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.304692][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.333135][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.342642][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.389997][ T2453] veth1_macvtap: left promiscuous mode [ 417.397295][ T2453] veth0_macvtap: left promiscuous mode [ 417.408173][ T2453] veth1_vlan: left promiscuous mode [ 417.419158][ T2453] veth0_vlan: left promiscuous mode [ 418.533238][ T2453] team0 (unregistering): Port device team_slave_1 removed [ 418.601460][ T2453] team0 (unregistering): Port device team_slave_0 removed [ 418.864608][ T53] Bluetooth: hci2: command tx timeout [ 419.229549][T19712] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.248285][T19712] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.262528][T19712] bridge_slave_0: entered allmulticast mode [ 419.283856][T19712] bridge_slave_0: entered promiscuous mode [ 419.304192][T19712] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.313642][T19712] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.321362][T19712] bridge_slave_1: entered allmulticast mode [ 419.329192][T19712] bridge_slave_1: entered promiscuous mode [ 419.361658][T19822] bond0: option arp_all_targets: invalid value (3) [ 419.447461][T19712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.496156][T19712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.608017][T19712] team0: Port device team_slave_0 added [ 419.639417][T19712] team0: Port device team_slave_1 added [ 419.772614][T19712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.790783][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.852215][T19712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.926543][T19866] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 420.067775][T19712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.068775][T19869] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 420.114295][T19712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.165643][T19712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.236763][T19712] hsr_slave_0: entered promiscuous mode [ 420.244292][T19712] hsr_slave_1: entered promiscuous mode [ 420.256474][T19712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.264183][T19712] Cannot create hsr debugfs directory [ 420.568075][T19883] __nla_validate_parse: 1 callbacks suppressed [ 420.568095][T19883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 420.944683][ T53] Bluetooth: hci2: command tx timeout [ 421.134080][T19712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.163487][T19712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.210805][T19712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.212946][T19913] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 421.251989][T19712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.268123][T19918] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 421.459368][T19712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.594572][T19712] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.673727][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.681097][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.732328][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.740847][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.844228][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.862757][T19943] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 422.001417][T19712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.429004][T19712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.608668][T19712] veth0_vlan: entered promiscuous mode [ 422.647359][T19712] veth1_vlan: entered promiscuous mode [ 422.685783][T19985] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 422.696092][ T29] audit: type=1804 audit(1717288345.820:42): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1364992727/syzkaller.hbfg86/535/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 422.758630][T19991] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 422.790535][T19712] veth0_macvtap: entered promiscuous mode [ 422.841767][T19712] veth1_macvtap: entered promiscuous mode [ 422.947337][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.985624][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.996306][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.014096][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.025034][ T53] Bluetooth: hci2: command tx timeout [ 423.035892][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.056382][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.129100][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.157883][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.182101][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.210082][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.221322][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.235673][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.263714][ T29] audit: type=1804 audit(1717288346.400:43): pid=20021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1364992727/syzkaller.hbfg86/538/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 423.266420][T19712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.386729][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.402602][T20020] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 423.426499][T20020] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.435916][T20020] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.445009][T20020] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.454314][T20020] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.466146][T20020] vxlan0: entered promiscuous mode [ 423.508529][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.545051][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.559077][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.571040][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.582809][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.594285][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.605054][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.616510][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.637749][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.662733][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.679179][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.691752][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.701908][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.713222][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.728464][T19712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.745431][T19712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.765447][T19712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.799013][T20038] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.818397][T19712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.838466][T19712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.850583][T19712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.884678][T19712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.067088][ T29] audit: type=1804 audit(1717288347.210:44): pid=20048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1364992727/syzkaller.hbfg86/543/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 424.151713][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.191163][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.246229][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.269847][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.934960][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 425.001963][T20102] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 425.203895][T20121] sctp: [Deprecated]: syz-executor.1 (pid 20121) Use of int in max_burst socket option. [ 425.203895][T20121] Use struct sctp_assoc_value instead [ 425.563712][T20134] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 425.613400][T20142] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 425.785195][T20150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.905149][T20150] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 426.124936][T20170] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 426.714500][T20204] sctp: [Deprecated]: syz-executor.2 (pid 20204) Use of int in max_burst socket option. [ 426.714500][T20204] Use struct sctp_assoc_value instead [ 426.889264][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.177615][T20247] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 428.544337][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.586541][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.599435][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.607675][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.617509][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.628324][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.636627][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.840686][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.865923][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 428.937125][T20250] caif0 speed is unknown, defaulting to 1000 [ 429.018835][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.051002][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 429.080303][T20271] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 429.295514][ T11] bridge_slave_1: left allmulticast mode [ 429.321008][ T11] bridge_slave_1: left promiscuous mode [ 429.335018][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.367107][ T11] bridge_slave_0: left allmulticast mode [ 429.372800][ T11] bridge_slave_0: left promiscuous mode [ 429.427067][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.113710][T20323] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 430.177777][T20327] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 430.266489][T20330] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 430.321869][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.360180][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.376706][ T11] bond0 (unregistering): Released all slaves [ 430.447286][T20327] debugfs: Directory 'netdev:' with parent 'phy40' already present! [ 430.706714][ T53] Bluetooth: hci2: command tx timeout [ 430.980911][T20356] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 431.127749][T20368] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 431.154040][T20369] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 431.228269][T20364] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 431.235718][T20375] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 431.281918][T20364] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 431.309391][T20375] debugfs: Directory 'netdev:' with parent 'phy46' already present! [ 431.376399][T20369] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 431.433877][ T11] hsr_slave_0: left promiscuous mode [ 431.441569][ T11] hsr_slave_1: left promiscuous mode [ 431.452509][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.464300][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.480570][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.495790][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.527335][ T11] veth1_macvtap: left promiscuous mode [ 431.532883][ T11] veth0_macvtap: left promiscuous mode [ 431.544621][ T11] veth1_vlan: left promiscuous mode [ 431.549924][ T11] veth0_vlan: left promiscuous mode [ 432.038589][ T11] team0 (unregistering): Port device team_slave_1 removed [ 432.091592][ T11] team0 (unregistering): Port device team_slave_0 removed [ 432.549866][T20250] chnl_net:caif_netlink_parms(): no params data found [ 432.634188][T20250] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.642908][T20250] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.650372][T20250] bridge_slave_0: entered allmulticast mode [ 432.658464][T20250] bridge_slave_0: entered promiscuous mode [ 432.672135][T20250] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.680304][T20250] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.687773][T20250] bridge_slave_1: entered allmulticast mode [ 432.695539][T20250] bridge_slave_1: entered promiscuous mode [ 432.748176][T20250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.762103][T20250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.784665][ T53] Bluetooth: hci2: command tx timeout [ 432.801292][T20250] team0: Port device team_slave_0 added [ 432.811150][T20250] team0: Port device team_slave_1 added [ 432.921154][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 432.960207][T20250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.984551][T20250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.044259][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.081183][T20250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.131893][T20250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.157157][T20250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.210827][T20250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.390617][T20250] hsr_slave_0: entered promiscuous mode [ 433.416761][T20250] hsr_slave_1: entered promiscuous mode [ 433.434108][T20250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.470453][T20250] Cannot create hsr debugfs directory [ 434.040118][T20448] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.298522][T20467] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 434.635372][T20250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.671236][T20250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.713560][T20250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.745881][T20250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.874825][ T53] Bluetooth: hci2: command tx timeout [ 434.929185][T20250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.967141][T20250] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.975483][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.993220][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.000423][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.051739][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.058949][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.160732][T20250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.430694][T20250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.563383][T20250] veth0_vlan: entered promiscuous mode [ 435.597774][T20250] veth1_vlan: entered promiscuous mode [ 435.708228][T20250] veth0_macvtap: entered promiscuous mode [ 435.729548][T20250] veth1_macvtap: entered promiscuous mode [ 435.789856][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.813385][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.834669][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.864828][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.895588][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.919659][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.931191][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.947852][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.960004][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.988471][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.004689][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.075398][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.082254][T20552] nla_validate_range_unsigned: 2 callbacks suppressed [ 436.082271][T20552] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 436.097308][T20250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.143971][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.151204][T20552] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 436.180196][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.207428][T20555] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 436.207564][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.267598][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.286732][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.307864][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.324504][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.344287][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.363992][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.374844][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.387636][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.405615][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.415571][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.427322][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.439828][T20250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.452678][T20250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.474252][T20250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.490600][T20552] debugfs: Directory 'netdev:' with parent 'phy40' already present! [ 436.552077][T20250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.590167][T20250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.623278][T20566] xt_CT: No such helper "pptp" [ 436.635536][T20250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.656662][T20250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.683841][T20568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.761031][T20566] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 436.782168][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.944947][ T53] Bluetooth: hci2: command tx timeout [ 437.534282][T20566] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.542451][T20566] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.996376][T20566] tipc: Resetting bearer [ 438.018758][T20566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.061619][T20566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.355638][T20566] ipvlan1: left promiscuous mode [ 438.360650][T20566] ipvlan1: left allmulticast mode [ 438.368718][T20566] veth0_vlan: left allmulticast mode [ 438.486251][T20566] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.499921][T20566] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.509415][T20566] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.519833][T20566] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.633680][T20566] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.642883][T20566] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.651934][T20566] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.660993][T20566] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.678292][T20566] vxlan0: left promiscuous mode [ 438.961287][ T5234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.994686][ T5234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.051207][T14889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.074777][T14889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.359468][T20624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.414663][T20619] xt_CT: No such helper "pptp" [ 439.441246][T20624] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 439.482315][T20629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.509567][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.512334][T20620] xt_CT: No such helper "pptp" [ 439.650934][T20635] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 439.661133][T20620] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 439.694618][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.435432][T20663] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 440.487052][T20620] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.495782][T20620] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.300962][T20620] tipc: Resetting bearer [ 441.345004][T20620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.460513][T20620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.096051][T20620] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.111342][T20620] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.121621][T20620] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.130841][T20620] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.215872][T20620] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 442.232175][T20620] syz_tun: left allmulticast mode [ 442.238579][T20620] macsec2: left promiscuous mode [ 442.243556][T20620] macsec2: left allmulticast mode [ 442.276817][T20661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.286445][T20675] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 442.302958][T20675] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 442.347561][T20675] caif0: entered promiscuous mode [ 442.354739][T20675] caif0: entered allmulticast mode [ 442.360216][T20675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.631601][T20714] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 442.789000][T20724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.796824][T20719] xt_CT: No such helper "pptp" [ 442.833796][T20726] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 442.871096][T20721] bond1: entered promiscuous mode [ 442.941743][T20721] bond1: entered allmulticast mode [ 443.014811][T20721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.153194][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.199235][T20719] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 443.215664][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.318003][T20729] bond2: entered promiscuous mode [ 443.323100][T20729] bond2: entered allmulticast mode [ 443.391162][T20729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.611295][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.735454][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.744222][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.758198][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.776258][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.790639][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 443.802288][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.842023][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.997074][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.001159][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.040750][T20750] caif0 speed is unknown, defaulting to 1000 [ 444.157527][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.272360][T20765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.325056][T20762] xt_CT: No such helper "pptp" [ 444.335572][T20765] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 444.370723][T20765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.570298][ T12] bridge_slave_1: left allmulticast mode [ 444.579355][ T12] bridge_slave_1: left promiscuous mode [ 444.594275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.645346][ T12] bridge_slave_0: left allmulticast mode [ 444.651061][ T12] bridge_slave_0: left promiscuous mode [ 444.666197][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.675201][T20780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.693895][T20773] xt_CT: No such helper "pptp" [ 445.165372][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.183283][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.198201][ T12] bond0 (unregistering): Released all slaves [ 445.223351][T20780] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 445.236896][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.351476][T20788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.510955][T20801] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 445.661646][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.889166][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.905678][ T53] Bluetooth: hci2: command tx timeout [ 445.913567][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.955757][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 446.099258][T20826] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 446.194186][T20826] caif0 speed is unknown, defaulting to 1000 [ 446.422834][T20835] bond1: entered promiscuous mode [ 446.467796][T20835] bond1: entered allmulticast mode [ 446.490011][T20835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.512255][T20826] caif0 speed is unknown, defaulting to 1000 [ 446.524184][ T12] hsr_slave_0: left promiscuous mode [ 446.541538][ T12] hsr_slave_1: left promiscuous mode [ 446.566473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.580620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.592322][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.603473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.673227][ T12] veth1_macvtap: left promiscuous mode [ 446.681985][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.688117][ T12] veth0_macvtap: left promiscuous mode [ 446.691889][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.703391][ T12] veth1_vlan: left promiscuous mode [ 446.708249][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.731882][ T12] veth0_vlan: left promiscuous mode [ 447.391541][ T12] team0 (unregistering): Port device team_slave_1 removed [ 447.450552][ T12] team0 (unregistering): Port device team_slave_0 removed [ 447.883399][T20826] caif0 speed is unknown, defaulting to 1000 [ 447.883579][T20750] chnl_net:caif_netlink_parms(): no params data found [ 447.985585][ T53] Bluetooth: hci2: command tx timeout [ 448.239349][T20826] infiniband syz1: set down [ 448.249970][T20826] infiniband syz1: added caif0 [ 448.258229][T20871] bond2: entered promiscuous mode [ 448.263270][T20871] bond2: entered allmulticast mode [ 448.284218][T20826] syz1: rxe_create_cq: returned err = -12 [ 448.303376][T20826] infiniband syz1: Couldn't create ib_mad CQ [ 448.311122][T20826] infiniband syz1: Couldn't open port 1 [ 448.317350][T20871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.372965][T20826] RDS/IB: syz1: added [ 448.386884][T20826] smc: adding ib device syz1 with port count 1 [ 448.404604][ T9] caif0 speed is unknown, defaulting to 1000 [ 448.412656][T20826] smc: ib device syz1 port 1 has pnetid [ 448.469626][ T9] caif0 speed is unknown, defaulting to 1000 [ 448.497349][T20826] caif0 speed is unknown, defaulting to 1000 [ 448.498242][T20750] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.512481][T20750] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.523878][T20750] bridge_slave_0: entered allmulticast mode [ 448.559448][T20750] bridge_slave_0: entered promiscuous mode [ 448.583740][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.598687][T20750] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.606679][T20750] bridge_slave_1: entered allmulticast mode [ 448.615409][T20750] bridge_slave_1: entered promiscuous mode [ 448.681956][T20750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.702694][T20750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.769936][T20750] team0: Port device team_slave_0 added [ 448.794091][T20750] team0: Port device team_slave_1 added [ 448.811062][T20826] caif0 speed is unknown, defaulting to 1000 [ 448.838244][T20750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.845435][T20750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.872881][T20750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.898916][T20750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.906342][T20750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.932679][T20750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.025505][T20750] hsr_slave_0: entered promiscuous mode [ 449.040941][T20750] hsr_slave_1: entered promiscuous mode [ 449.053245][T20750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.062340][T20750] Cannot create hsr debugfs directory [ 449.070666][T20826] caif0 speed is unknown, defaulting to 1000 [ 449.343008][T20898] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 449.474825][T20826] caif0 speed is unknown, defaulting to 1000 [ 449.862035][T20750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.900638][T20750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.919101][T20750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.932102][T20826] caif0 speed is unknown, defaulting to 1000 [ 449.946774][T20750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.064655][ T53] Bluetooth: hci2: command tx timeout [ 450.348812][T20826] caif0 speed is unknown, defaulting to 1000 [ 450.409122][T20750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.471457][T20750] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.502208][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.509405][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.542072][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.549268][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.699668][T20937] __nla_validate_parse: 2 callbacks suppressed [ 450.699687][T20937] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 450.834289][T20826] caif0 speed is unknown, defaulting to 1000 [ 450.991456][T20949] Bluetooth: hci0: load_link_keys: too big key_count value 17408 [ 451.142455][T20750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.286892][T20957] Cannot find del_set index 2048 as target [ 451.298691][T20750] veth0_vlan: entered promiscuous mode [ 451.326102][T20826] caif0 speed is unknown, defaulting to 1000 [ 451.332895][T20750] veth1_vlan: entered promiscuous mode [ 451.425252][T20750] veth0_macvtap: entered promiscuous mode [ 451.452760][T20750] veth1_macvtap: entered promiscuous mode [ 451.502709][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.520857][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.534733][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.546215][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.557489][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.569278][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.580646][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.592132][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.605252][T20750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.689619][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.700356][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.710772][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.722400][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.732546][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.774411][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.784259][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.797330][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.807201][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.817854][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.834594][T20750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.852235][T20750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.868354][T20750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.877304][T20826] caif0 speed is unknown, defaulting to 1000 [ 451.898375][T20750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.914225][T20750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.944127][T20750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.964440][T20750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.144891][ T53] Bluetooth: hci2: command tx timeout [ 452.232301][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.253738][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.264699][T20972] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.406859][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.424857][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.705195][ T53] Bluetooth: hci0: command 0x0401 tx timeout [ 452.940592][T21001] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.957387][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.967488][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.977759][T21001] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.294833][T21012] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.319608][T21012] rdma_rxe: rxe_newlink: failed to add caif0 [ 453.612965][T21026] syz-executor.2[21026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.613109][T21026] syz-executor.2[21026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.677717][T21029] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.069532][ T1089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.484757][T21126] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 455.560022][T21126] batman_adv: batadv0: Adding interface: wlan0 [ 455.579936][T21126] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.633179][T21126] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 455.915826][T21139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 455.947020][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.957065][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.965395][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.974899][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.982695][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.992093][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.103246][T21145] caif0 speed is unknown, defaulting to 1000 [ 456.272285][T21164] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 456.483468][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 456.505331][ T1089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.573474][T21145] caif0 speed is unknown, defaulting to 1000 [ 456.677508][T21183] --map-set only usable from mangle table [ 456.686224][ T1089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.767365][T21188] netlink: 404 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.789859][T21188] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.803004][T21188] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.850895][T21188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.962666][ T1089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.017012][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.315422][ T1089] bridge_slave_1: left allmulticast mode [ 457.327225][ T1089] bridge_slave_1: left promiscuous mode [ 457.333032][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.378226][ T1089] bridge_slave_0: left allmulticast mode [ 457.383917][ T1089] bridge_slave_0: left promiscuous mode [ 457.398174][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.441866][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 457.940621][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.954079][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.968971][ T1089] bond0 (unregistering): Released all slaves [ 458.066231][ T53] Bluetooth: hci2: command tx timeout [ 458.135517][T21145] chnl_net:caif_netlink_parms(): no params data found [ 458.175128][T21229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.206667][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 458.504337][T21252] nbd: socks must be embedded in a SOCK_ITEM attr [ 458.607984][T21258] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 458.636370][T21258] batman_adv: batadv0: Adding interface: wlan0 [ 458.642581][T21258] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.688345][T21258] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 458.775538][T21145] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.806349][T21145] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.813674][T21145] bridge_slave_0: entered allmulticast mode [ 458.833980][T21145] bridge_slave_0: entered promiscuous mode [ 458.873645][T21145] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.905062][T21145] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.913048][T21145] bridge_slave_1: entered allmulticast mode [ 458.934034][T21145] bridge_slave_1: entered promiscuous mode [ 459.346784][T21145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.501223][T21145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.539097][ T1089] hsr_slave_0: left promiscuous mode [ 459.559632][ T1089] hsr_slave_1: left promiscuous mode [ 459.588482][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.599750][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.617407][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.630843][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.707591][ T1089] veth1_macvtap: left promiscuous mode [ 459.713296][ T1089] veth0_macvtap: left promiscuous mode [ 459.716778][T21309] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 459.726422][ T1089] veth1_vlan: left promiscuous mode [ 459.732388][ T1089] veth0_vlan: left promiscuous mode [ 459.733821][T21309] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 460.144848][ T53] Bluetooth: hci2: command tx timeout [ 460.165506][T21323] --map-set only usable from mangle table [ 460.634304][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 460.680816][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 461.180228][T21331] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 461.264244][T21332] syz_tun (unregistering): left allmulticast mode [ 461.304572][T21338] sctp: [Deprecated]: syz-executor.2 (pid 21338) Use of int in maxseg socket option. [ 461.304572][T21338] Use struct sctp_assoc_value instead [ 461.320598][T21339] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 461.334108][T21339] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 461.413205][T21145] team0: Port device team_slave_0 added [ 461.580797][T21145] team0: Port device team_slave_1 added [ 461.705755][T21145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.734549][T21145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.791957][T21145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.807439][T21145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.815953][T21145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.851678][T21145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.966290][T21145] hsr_slave_0: entered promiscuous mode [ 461.981646][T21145] hsr_slave_1: entered promiscuous mode [ 461.991936][T21368] dccp_invalid_packet: P.Data Offset(0) too small [ 461.999607][T21145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.017024][T21145] Cannot create hsr debugfs directory [ 462.225000][ T53] Bluetooth: hci2: command tx timeout [ 462.945792][T21410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.033188][T21145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.059592][T21145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.120716][T21145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.168108][T21145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.400739][T21145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.441135][T21145] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.455302][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.462454][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.497503][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.504745][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.563259][T21438] xt_l2tp: wrong L2TP version: 0 [ 463.773516][T21447] --map-set only usable from mangle table [ 463.847202][T21145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.976167][T21145] veth0_vlan: entered promiscuous mode [ 464.012163][T21145] veth1_vlan: entered promiscuous mode [ 464.106751][T21145] veth0_macvtap: entered promiscuous mode [ 464.128703][T21145] veth1_macvtap: entered promiscuous mode [ 464.207164][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.239585][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.266669][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.292425][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.304785][ T53] Bluetooth: hci2: command tx timeout [ 464.324518][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.340918][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.351766][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.362401][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.379309][T21145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.407684][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.421348][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.433890][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.445645][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.457222][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.469318][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.481028][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.493916][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.504835][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.535169][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.547502][T21145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.584600][T21145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.614888][T21145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.637764][T21145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.650112][T21145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.669065][T21145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.680511][T21145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.776102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.793115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.850165][ T5272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.870710][ T5272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.162179][T21503] __nla_validate_parse: 3 callbacks suppressed [ 465.162198][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.193260][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.549355][T21525] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 465.552387][T21529] xt_l2tp: wrong L2TP version: 0 [ 465.563964][T21525] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 465.581969][T21528] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 465.973530][T21556] sch_tbf: peakrate 71 is lower than or equals to rate 13415355817161298577 ! [ 466.080372][T21562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 466.559418][T21596] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 466.958970][T21626] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.265912][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.581983][T21658] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.987552][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.998600][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.007414][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.017589][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.031341][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.040422][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.064540][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 470.068895][ T53] Bluetooth: hci2: command tx timeout [ 472.145008][ T53] Bluetooth: hci2: command tx timeout [ 474.225142][ T53] Bluetooth: hci2: command tx timeout [ 476.304693][ T53] Bluetooth: hci2: command tx timeout [ 498.326462][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.337243][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.345696][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.355777][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.376571][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 498.383910][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.521907][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.531793][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 498.545797][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 498.574578][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 498.594627][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 498.614535][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 498.692634][ T5117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 498.704131][ T5117] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 498.714833][ T5117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 498.725551][ T5117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 498.733571][ T5117] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 498.741663][ T5117] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 498.751328][ T5117] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 498.759927][ T5117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 498.764665][ T5111] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 498.767682][ T5117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 498.781996][ T5117] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 498.789678][ T5117] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 500.465633][ T53] Bluetooth: hci5: command tx timeout [ 500.705427][ T53] Bluetooth: hci6: command tx timeout [ 500.864713][ T53] Bluetooth: hci8: command tx timeout [ 500.870943][ T53] Bluetooth: hci7: command tx timeout [ 502.545747][ T53] Bluetooth: hci5: command tx timeout [ 502.784580][ T53] Bluetooth: hci6: command tx timeout [ 502.944987][ T53] Bluetooth: hci7: command tx timeout [ 502.950437][ T53] Bluetooth: hci8: command tx timeout [ 503.908085][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 504.625687][ T5117] Bluetooth: hci5: command tx timeout [ 504.864843][ T5117] Bluetooth: hci6: command tx timeout [ 505.024726][ T53] Bluetooth: hci8: command tx timeout [ 505.030231][ T5117] Bluetooth: hci7: command tx timeout [ 506.704962][ T5117] Bluetooth: hci5: command tx timeout [ 506.946813][ T5117] Bluetooth: hci6: command tx timeout [ 507.104782][ T5117] Bluetooth: hci7: command tx timeout [ 507.110266][ T5117] Bluetooth: hci8: command tx timeout [ 533.107219][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 533.127017][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 533.144653][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 533.155697][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 533.163382][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 533.182162][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 535.264674][ T53] Bluetooth: hci9: command tx timeout [ 537.344614][ T53] Bluetooth: hci9: command tx timeout [ 539.424560][ T53] Bluetooth: hci9: command tx timeout [ 541.504864][ T53] Bluetooth: hci9: command tx timeout [ 563.585621][ T5117] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 563.617081][ T5117] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 563.636118][ T5117] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 563.664966][ T5117] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 563.682249][ T5117] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 563.689918][ T5117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 563.846146][ T5117] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 563.894759][ T5117] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 563.921328][ T5117] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 563.935356][ T5117] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 563.946161][ T5117] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 563.953586][ T5117] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 564.033284][ T5117] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 564.054625][ T5117] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 564.065049][ T5117] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 564.105042][ T5117] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 564.124655][ T5117] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 564.135715][ T5117] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 564.206688][ T5117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 564.216903][ T5117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 564.226470][ T5117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 564.246083][ T5117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 564.253944][ T5117] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 564.261499][ T5117] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 565.834942][ T53] Bluetooth: hci10: command tx timeout [ 565.994696][ T53] Bluetooth: hci11: command tx timeout [ 566.234792][ T53] Bluetooth: hci12: command tx timeout [ 566.314786][ T53] Bluetooth: hci13: command tx timeout [ 567.914634][ T53] Bluetooth: hci10: command tx timeout [ 568.074607][ T53] Bluetooth: hci11: command tx timeout [ 568.304628][ T53] Bluetooth: hci12: command tx timeout [ 568.387182][ T5117] Bluetooth: hci13: command tx timeout [ 569.984702][ T5117] Bluetooth: hci10: command tx timeout [ 570.145248][ T5117] Bluetooth: hci11: command tx timeout [ 570.394606][ T5117] Bluetooth: hci12: command tx timeout [ 570.464613][ T5117] Bluetooth: hci13: command tx timeout [ 572.064689][ T5117] Bluetooth: hci10: command tx timeout [ 572.224918][ T5117] Bluetooth: hci11: command tx timeout [ 572.464530][ T5117] Bluetooth: hci12: command tx timeout [ 572.544687][ T5117] Bluetooth: hci13: command tx timeout [ 580.704887][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 590.950628][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 598.289810][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 598.314824][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 598.323465][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 598.333165][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 598.341702][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 598.353150][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 600.385307][ T53] Bluetooth: hci14: command tx timeout [ 602.464888][ T53] Bluetooth: hci14: command tx timeout [ 604.544990][ T53] Bluetooth: hci14: command tx timeout [ 606.625314][ T53] Bluetooth: hci14: command tx timeout [ 621.664487][T21724] Bluetooth: hci8: command 0x0406 tx timeout [ 621.674663][T21724] Bluetooth: hci6: command 0x0406 tx timeout [ 621.682603][T21700] Bluetooth: hci5: command 0x0406 tx timeout [ 621.688949][T21700] Bluetooth: hci7: command 0x0406 tx timeout [ 624.706601][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 624.724676][ T30] Not tainted 6.10.0-rc1-syzkaller-00207-g6d9e9c36e1a6 #0 [ 624.732361][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/02 00:35:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 624.752144][ T30] task:kworker/u8:1 state:D stack:19760 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 624.782424][ T30] Workqueue: netns cleanup_net [ 624.803867][ T30] Call Trace: [ 624.814352][ T30] [ 624.817321][ T30] __schedule+0x17e8/0x4a20 [ 624.821867][ T30] ? __pfx___schedule+0x10/0x10 [ 624.864344][ T30] ? __pfx_lock_release+0x10/0x10 [ 624.869425][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 624.894515][ T30] ? kthread_data+0x52/0xd0 [ 624.899921][ T30] ? schedule+0x90/0x320 [ 624.904192][ T30] ? wq_worker_sleeping+0x66/0x240 [ 624.918516][ T30] ? schedule+0x90/0x320 [ 624.922804][ T30] schedule+0x14b/0x320 [ 624.932905][ T30] schedule_preempt_disabled+0x13/0x30 [ 624.942925][ T30] __mutex_lock+0x6a4/0xd70 [ 624.954932][ T30] ? __mutex_lock+0x527/0xd70 [ 624.959646][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 624.973918][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 624.979222][ T30] ? msleep+0xcd/0xe0 [ 624.983249][ T30] netdev_run_todo+0x7b2/0x1000 [ 624.989389][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 625.000422][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 625.011687][ T30] ? nsim_destroy+0x337/0x5c0 [ 625.034500][ T30] ? kfree+0x149/0x360 [ 625.038630][ T30] nsim_destroy+0x361/0x5c0 [ 625.043159][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 625.084388][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 625.089915][ T30] nsim_dev_reload_down+0x98/0xd0 [ 625.114545][ T30] devlink_reload+0x18b/0x870 [ 625.119284][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 625.134844][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 625.140365][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 625.164490][ T30] ? class_remove_file_ns+0x121/0x160 [ 625.169905][ T30] cleanup_net+0x615/0xcc0 [ 625.193937][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 625.205897][ T30] ? process_scheduled_works+0x945/0x1830 [ 625.211659][ T30] process_scheduled_works+0xa2c/0x1830 [ 625.234540][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.240577][ T30] ? assign_work+0x364/0x3d0 [ 625.254620][ T30] worker_thread+0x86d/0xd70 [ 625.259264][ T30] ? __kthread_parkme+0x169/0x1d0 [ 625.274491][ T30] ? __pfx_worker_thread+0x10/0x10 [ 625.279644][ T30] kthread+0x2f0/0x390 [ 625.283733][ T30] ? __pfx_worker_thread+0x10/0x10 [ 625.304469][ T30] ? __pfx_kthread+0x10/0x10 [ 625.310497][ T30] ret_from_fork+0x4b/0x80 [ 625.325525][ T30] ? __pfx_kthread+0x10/0x10 [ 625.330160][ T30] ret_from_fork_asm+0x1a/0x30 [