last executing test programs: 3.434392658s ago: executing program 1: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000002000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 3.214825491s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x3a, 0x0, &(0x7f0000004e00)) 3.056547543s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 3.047069345s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000070a0101"], 0x14}}, 0x0) 2.898524811s ago: executing program 4: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x7ffeecc2, 0x0) 2.897525903s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000ac0)="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"}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "f3"}]}, 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000130000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="0800050009"], 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r15, 0xfffffffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0xec, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 2.483282477s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000040)={&(0x7f0000000200)={0x78, r2, 0x5, 0x0, 0x0, {0x4, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x4}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2.354482374s ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x200000008000004]}}, @subvolid}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) 946.24548ms ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000900) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x5, 0x4}, &(0x7f0000000180)=0x90) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000022000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) 946.132119ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0) 944.688353ms ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) 940.497899ms ago: executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000130001002abd7000fedbdf2563626328626c6f776669736829"], 0xf8}}, 0x0) 938.53896ms ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000300000002000000ff7f0000000000000000000105000000200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x20) 938.317237ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006", 0x2b}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 938.218445ms ago: executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x4, 0x0, 0x20000000) 865.4382ms ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x0, 0x8b, 0x7f, {{0x4a, 0x4, 0x3, 0x5, 0x128, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x59, 0x0, [{0x6, 0x3, 'u'}, {0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x17, 0x0, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0x3, 0x97}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x44, 0x92, 0x3, 0xe, [{@broadcast, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}]}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0x7, [0x0, 0x9, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) sendfile(r3, r1, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRES8=r0], 0xd8}, 0x1, 0x0, 0x0, 0x44890}, 0x2000c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x2f0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@local, @private2, [], [], 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x100000001, 0x3, 0x5}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0414f9f407000904000200000001000000000000000800040001000000", 0x24) writev(r6, &(0x7f0000000d00)=[{&(0x7f0000000440)="57fde3ca7f9a92302ccc21e716ca36f5640a8c10f7b9e8356196f0d9332918dc6081b846a4d668f8cd86fbe22e556f7b8feb9741fed76e5054e0574954cdf1cd51f9d6a4feaed2e220937effb72fcc19af8792644ab6", 0x56}, {&(0x7f0000000700)="60fbea0deebfe89fd34476e54071ef5f5567f0d770d864e862c9a8a60d7109d4611be15a88180bea4c1eb315d795014859b422bff48798e59e3ea4cd2da6278bf8bb1cf5664ccf7e74c3f228811b6ef427b209a0f34b403020e410825dfad147012441e35b9ba2511ea2d76875d07f97bef6c69025f1c8493703d2f1d492c13ce09787f2203341edc2cc7e3287fe6a2b3109fb8f275772f54877c3ff59068704ffb2c949ccccbaf1c047569bb65c54876491200af4154586fce4d9b8d9e55853603ba82baeef46a8465dfeabdd2391550ee8", 0xd2}, {&(0x7f00000004c0)="f2a7505dbd756b060141cfc90f52aceb73c4c4ad0315d06ff576df6f645ba70be34e9065809181dd5295e5e32b1d58875e40bd93d57169d9bfb3044d5eff1604bae1ebd5f767da43c00cec8133ed1c2a7675a32083f526f60983", 0x5a}, {&(0x7f0000000800)="a2d9729557860bce77eab4c40b245f2e32ab4364558542114226fdfc95f986ebbf25b2402b44e877dae599f411b5dd113711d523ac1c4cc245431ab0fd08a7dccdd6006079f0a58a9c514a674fe4275085bed7ec0bdd21dcf655102959ab044524e694e8d9ca00a6d536f5adc2607ab4148b4b2693f577c47df1dd3fc907f3281dfa39bd7e4f58599fd0ad07a717e89e275d975b6eb5dc3974416f484b0afc75dfe15f95400ae6ffabc69f0c79ba216d42a6fcef2790613b4c7330002c130e7e6207cb42e88e7cc24a49a4cd2a520f2149f42791292fe11a62a41c9b3e423b8d92e76461428ca606613a6281", 0xec}, {&(0x7f0000000900)="5e641e9a68d7a3b71c0d68343266063861ce18ddb4dabdd86fad6a1292fc8ba7284d9ec48083166faaa2bb609a047c13be849a9b1ad52de92a730ccea40a06035a4cdb060cc8", 0x46}, {&(0x7f0000000c00)="c3f998aecca6b7256beb34941833b4326083e7e7dea42f33d488f2f5c6c6c024ff5f4473e86a531c7837c878df571d52fddb659386547c4c4648287744746d51c4780e5e2392e012720b52dc4b84bdc0fb81c3cf135bc93008b4822cddb191461c6b4ee08fa58213cf30582783c628d182ec056ea15291007591aba9620cc5d7c0f31c3ac3d60ea9d2d4c707e33dd6e837314de8da116c62df9daff7f1d7d52508a8484faa4de3642f320d71081bd632781f1a87a23f840b57a23a104db5506ab3655032f1c20c26cdc9794173baf248828efa", 0xd3}], 0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r8, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) sendto$inet(r8, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x19, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) 789.207076ms ago: executing program 0: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)=@gcm_128={{}, "3b29d9648e80e905", "86a21e3e39368b237f0e3864667d0bd8", "1b598634", "6eaef0fc24de6e61"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x48000) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000000c0)={0x0, @adiantum, 0x0, @desc2}) close(r2) ioctl$int_in(r3, 0x541b, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}, {&(0x7f00000002c0)="68f541365c6e24f4b7d5c9aa2f9b2c4c52595b25d20630fd08f13268f411acb0c11d69ec1130bed0dd819226c2af8da6dbb3f755b9069c1e0c2cb4a0b2ad06ca0b253b8a72e00ef9944bc9580d631ea0189b570ce789ad89024b28ce02b77a283928600689df24d1ba7c9416b5fa2de38be3e22f5f5fbcd16d452622373bcc9990af422c2e6de6b1feefd1013a54b25b54818eed58480eb329add61bb10f5fa995ddc6d7f6dad5a2c3cbf08bb6ef83184b333e671556508fab9215c5cdf70523505f4d8fe481c95ae9474f0b56410c8b1d119adeaee914773690addd9bdb059fa8c7075b40715349e11c7fcd0830000000", 0xf1}, {&(0x7f00000003c0)="ff94c27bc1f1b6d3354c224bba1b7d981623361e264febad94e6dd45ab3802e4cd2fa54fbd6fa9c29f441969875b5b6dff52d252d3749b3a8645929eb47f0e8b4e8427eaadd73307a786aa36c167052f7d39fd70d3a3660a05502026f48ddc6b4a5e17bb9b2a2783052fbf9347b36d4b6410dfb7a44e3665d1fc020a91ff66b757178cafcd14b8a6a1fa9ece56c6d81b3948a31ab92262270638dec275f6da9689450b588511019848665657f6140bb0cffd61cdb296460e0500000000000000b1d0b1", 0xc3}], 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x58}}, 0x2000c0c4) 781.040198ms ago: executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) 540.763405ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2}}, 0x1c}}, 0x0) 483.85502ms ago: executing program 3: r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}}], 0x2, 0x0) 402.188718ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x330, 0x20a, 0x278, 0x330, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @loopback, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @dev]}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800aa720085100000fd08000000100000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000002c00000000000000180000000000000000000000000000009500000000000000a600000000000000180100002020782500000000002020207b12f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xb}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r3, &(0x7f0000000080)="0500030001003f", 0x7) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f00000001c0), &(0x7f0000000280)=r4}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0xd01, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 393.455507ms ago: executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000000130001002abd7000fedbdf2563626328626c6f776669736829"], 0xf8}}, 0x0) 349.851369ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="db", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) close(r0) 252.699411ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000d90000040000000000000000850000004100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 226.998448ms ago: executing program 0: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000010c0), 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x310) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x29a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x80000001}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x100001}, 0x48) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES16], 0x1c}, 0x4, 0x700000000000000}, 0x0) socket(0x10, 0x803, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "6a1c4569c0569ab6a434922455d01a231b3cbe316c1a4ba3230ab965bb484240816c2bc1b11a3adc9eb3e82d1cb12b01b607e69d396133fba338c0d46e8b1d37df2cb06f993cda4b88e14e82ef70"}, 0x59) 173.735925ms ago: executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) 170.948087ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r1 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r1, 0x2}, 0x20) 91.708436ms ago: executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x4, 0x0, 0x20000000) 70.452947ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) close(r0) 0s ago: executing program 2: unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) kernel console output (not intermixed with test programs): etooth: hci3: command tx timeout [ 62.850465][ T53] Bluetooth: hci4: command tx timeout [ 62.856022][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.856149][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.901340][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.946083][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.020270][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.070117][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.086773][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.093942][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.104141][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.111389][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.200368][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.207595][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.252331][ T5117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.264989][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.280610][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.287843][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.339935][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.459020][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.567288][ T5113] veth0_vlan: entered promiscuous mode [ 63.604180][ T5108] veth0_vlan: entered promiscuous mode [ 63.679091][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.689824][ T5113] veth1_vlan: entered promiscuous mode [ 63.703144][ T5108] veth1_vlan: entered promiscuous mode [ 63.793276][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.830659][ T5113] veth0_macvtap: entered promiscuous mode [ 63.910524][ T5116] veth0_vlan: entered promiscuous mode [ 63.918279][ T5113] veth1_macvtap: entered promiscuous mode [ 63.931701][ T5108] veth0_macvtap: entered promiscuous mode [ 63.942519][ T5108] veth1_macvtap: entered promiscuous mode [ 63.956350][ T5117] veth0_vlan: entered promiscuous mode [ 63.970956][ T5116] veth1_vlan: entered promiscuous mode [ 63.989429][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.018747][ T5117] veth1_vlan: entered promiscuous mode [ 64.037805][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.057084][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.090523][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.103310][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.116624][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.126552][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.145042][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.157670][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.171538][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.230398][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.242887][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.254596][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.269046][ T5116] veth0_macvtap: entered promiscuous mode [ 64.312123][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.327622][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.344048][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.353205][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.372721][ T5117] veth0_macvtap: entered promiscuous mode [ 64.393388][ T5116] veth1_macvtap: entered promiscuous mode [ 64.403458][ T5117] veth1_macvtap: entered promiscuous mode [ 64.542867][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.555256][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.565653][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.576334][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.587776][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.625812][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.628111][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.633833][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.638435][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.650612][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.666561][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.675266][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.688313][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.698512][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.709617][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.721062][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.738586][ T5109] veth0_vlan: entered promiscuous mode [ 64.758296][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.772466][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.782537][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.795724][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.807376][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.822513][ T5117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.833429][ T5117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.842805][ T5117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.852056][ T5117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.852699][ T53] Bluetooth: hci0: command tx timeout [ 64.861795][ T5111] Bluetooth: hci2: command tx timeout [ 64.866729][ T53] Bluetooth: hci1: command tx timeout [ 64.893625][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.906559][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.916559][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.928279][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.929085][ T53] Bluetooth: hci4: command tx timeout [ 64.938861][ T5111] Bluetooth: hci3: command tx timeout [ 64.944793][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.961044][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.972725][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.985117][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.993431][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.020075][ T5116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.029272][ T5116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.038493][ T5116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.051844][ T5116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.070497][ T5109] veth1_vlan: entered promiscuous mode [ 65.103184][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.119403][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.307381][ T5109] veth0_macvtap: entered promiscuous mode [ 65.331873][ T5109] veth1_macvtap: entered promiscuous mode [ 65.380902][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.398726][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.483859][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.518893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.522083][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.561520][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.590723][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.620263][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.640475][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.659462][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.669863][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.680942][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.704528][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.744508][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.764304][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.780599][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.807644][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.819128][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.843849][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.861736][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.877754][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.900896][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.977845][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.001076][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.010626][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.019964][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.096235][ T5218] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 66.148070][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.181486][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.208782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.217827][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.487016][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.510209][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.681168][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.751564][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.917943][ T5248] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 66.938524][ T5111] Bluetooth: hci1: command tx timeout [ 66.941725][ T53] Bluetooth: hci2: command tx timeout [ 66.944131][ T5114] Bluetooth: hci0: command tx timeout [ 67.006176][ T5114] Bluetooth: hci4: command tx timeout [ 67.011668][ T5111] Bluetooth: hci3: command tx timeout [ 67.045659][ T5249] delete_channel: no stack [ 67.451571][ T5272] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.511001][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.697883][ T5283] dccp_invalid_packet: P.Data Offset(144) too large [ 67.743138][ T5282] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.201949][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.663881][ T5317] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.774979][ T5323] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 68.781147][ T5325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.187502][ T5344] delete_channel: no stack [ 69.621923][ T5367] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.928989][ T5384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.335763][ T5400] Bluetooth: MGMT ver 1.22 [ 70.480084][ T5410] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 70.494459][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.599874][ T5440] IPVS: length: 96 != 8 [ 71.654334][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.845838][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.852682][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.423033][ T5452] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 72.705246][ T5460] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.764935][ T5464] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 72.841739][ T5467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.010389][ T5475] tipc: Started in network mode [ 73.024232][ T5475] tipc: Node identity ac1414aa, cluster identity 4711 [ 73.074830][ T5475] tipc: Enabled bearer , priority 10 [ 73.082843][ T5479] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 73.108470][ T5478] tipc: Disabling bearer [ 73.396891][ T5497] dccp_invalid_packet: P.Data Offset(144) too large [ 73.770228][ T5505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.741577][ T5523] team0: Port device virt_wifi0 added [ 75.162773][ T5530] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 75.440631][ T5523] team0 (unregistering): Port device team_slave_0 removed [ 75.463219][ T5523] team0 (unregistering): Port device team_slave_1 removed [ 75.497994][ T5523] team0 (unregistering): Port device virt_wifi0 removed [ 75.538494][ T5521] tipc: Started in network mode [ 75.547389][ T5521] tipc: Node identity ac1414aa, cluster identity 4711 [ 75.556090][ T5521] tipc: Enabled bearer , priority 10 [ 75.562551][ T5526] tipc: Disabling bearer [ 75.650986][ T5546] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.811962][ T5551] Zero length message leads to an empty skb [ 75.874408][ T5554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.181522][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.410178][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.442137][ T5579] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 76.495917][ T5579] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.505289][ T5579] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.515541][ T5579] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.524265][ T5579] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.546915][ T5579] vxlan0: entered promiscuous mode [ 76.590750][ T5587] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 76.625831][ T5587] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 76.708827][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.735005][ T5591] nbd: must specify at least one socket [ 76.991986][ T5614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.070410][ T5616] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 77.141226][ T5620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.520946][ T5635] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.572839][ T5635] No such timeout policy "syz0" [ 77.580627][ T5639] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 77.719625][ T5644] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 77.821600][ T5645] __nla_validate_parse: 1 callbacks suppressed [ 77.821622][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.286476][ T5673] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.345908][ T5673] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 78.365225][ T5678] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 78.383739][ T5678] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.384756][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.710666][ T5700] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.772448][ T5700] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 79.285698][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.917547][ T5774] Bluetooth: hci3: unsupported parameter 64512 [ 79.946449][ T5774] Bluetooth: hci3: invalid length 0, exp 2 for type 2 [ 80.141029][ T5789] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 80.393266][ T5798] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.586593][ T5809] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.629689][ T5809] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.079897][ T5842] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.034961][ T5879] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 82.081101][ T45] cfg80211: failed to load regulatory.db [ 82.097537][ T5879] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 83.275701][ T5913] __nla_validate_parse: 6 callbacks suppressed [ 83.275720][ T5913] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.315488][ T5913] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.071652][ T5966] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 84.136735][ T5973] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 84.441706][ T5988] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.612525][ T6005] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 84.634769][ T29] audit: type=1804 audit(1719013254.676:2): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/63/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 84.702326][ T29] audit: type=1804 audit(1719013254.726:3): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/63/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 84.774881][ T29] audit: type=1804 audit(1719013254.736:4): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/63/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 85.606033][ T6062] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 86.094280][ T6097] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 86.385534][ T6119] Cannot find add_set index 0 as target [ 86.417746][ T6121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.492219][ T29] audit: type=1804 audit(1719013256.536:5): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3564117442/syzkaller.wj5n9X/78/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 86.550019][ T29] audit: type=1804 audit(1719013256.566:6): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3564117442/syzkaller.wj5n9X/78/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 86.592713][ T29] audit: type=1804 audit(1719013256.566:7): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3564117442/syzkaller.wj5n9X/78/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 86.652314][ T6129] bridge0: port 3(vlan2) entered blocking state [ 86.660567][ T6129] bridge0: port 3(vlan2) entered disabled state [ 86.668383][ T6129] vlan2: entered allmulticast mode [ 86.679385][ T6129] vlan2: left allmulticast mode [ 86.775922][ T6134] Illegal XDP return value 688711860 on prog (id 110) dev N/A, expect packet loss! [ 86.949669][ T6140] Bluetooth: MGMT ver 1.22 [ 87.326072][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.514348][ T6178] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.661766][ T6186] Bluetooth: MGMT ver 1.22 [ 87.679752][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.692842][ T6187] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 87.704893][ T6187] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 87.743391][ T6187] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.752794][ T6187] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.761644][ T6187] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.770479][ T6187] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.836028][ T6187] vxlan0: entered promiscuous mode [ 88.180222][ T6214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.289291][ T29] audit: type=1804 audit(1719013258.336:8): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/80/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 88.319826][ T29] audit: type=1804 audit(1719013258.356:9): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/80/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 88.357532][ T29] audit: type=1804 audit(1719013258.356:10): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/80/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 88.515802][ T29] audit: type=1800 audit(1719013258.556:11): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 89.120127][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.007665][ T6312] tipc: Enabled bearer , priority 10 [ 90.258697][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.270961][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.274207][ T6331] openvswitch: netlink: EtherType 0 is less than min 600 [ 90.565513][ T6346] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.601155][ T6346] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.630484][ T6346] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.827882][ T6360] bridge0: port 3(vlan2) entered blocking state [ 90.842980][ T6360] bridge0: port 3(vlan2) entered disabled state [ 90.857217][ T6360] vlan2: entered allmulticast mode [ 90.881443][ T6360] vlan2: left allmulticast mode [ 91.126589][ T8] tipc: Node number set to 2886997162 [ 91.367762][ T6382] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.404821][ T6382] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.430380][ T6382] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.569562][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.715582][ T6399] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.745207][ T6393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.927380][ T6409] openvswitch: netlink: EtherType 0 is less than min 600 [ 91.969855][ T6413] syz-executor.0[6413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.970101][ T6413] syz-executor.0[6413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.007183][ T6413] syz-executor.0[6413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.037627][ T6415] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 92.071626][ T6413] syz-executor.0[6413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.080717][ T6413] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.112765][ T6422] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 1, id = 0 [ 92.246638][ T6427] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 92.628686][ T6457] syz-executor.4[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.628995][ T6457] syz-executor.4[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.703532][ T6457] syz-executor.4[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.716990][ T6457] syz-executor.4[6457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.753859][ T6457] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.363963][ T6538] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 94.500137][ T6544] __nla_validate_parse: 4 callbacks suppressed [ 94.500157][ T6544] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.533365][ T6546] syz-executor.3[6546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.533704][ T6546] syz-executor.3[6546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.549396][ T6544] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 94.643738][ T6546] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.139616][ T6573] vlan3: entered promiscuous mode [ 95.166059][ T6573] bridge0: entered promiscuous mode [ 95.239284][ T6585] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.267722][ T6589] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 95.277608][ T6589] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 96.396157][ T6649] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 96.404449][ T6649] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.442490][ T6650] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 96.511870][ T6650] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.522868][ T6650] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 96.531709][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.787552][ T6663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 96.804807][ T6663] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.254133][ T6686] dvmrp0: entered allmulticast mode [ 98.439913][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 98.439958][ T29] audit: type=1804 audit(1719013268.486:18): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir168308962/syzkaller.cLPbNh/127/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 98.484981][ T6749] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.355820][ T6799] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 99.914161][ T6820] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.931878][ T6825] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 99.988819][ T6822] dvmrp0: entered allmulticast mode [ 100.040292][ T6830] ip6t_srh: unknown srh match flags 4001 [ 100.115111][ T6830] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 100.514374][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.575369][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.626129][ T6862] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.645062][ T6862] openvswitch: netlink: Multiple metadata blocks provided [ 100.671284][ T6864] dccp_invalid_packet: P.Data Offset(6) too small [ 100.845656][ T6854] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 101.031972][ T6854] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.771250][ T6904] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.791509][ T6916] dccp_invalid_packet: P.Data Offset(6) too small [ 101.893293][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.955237][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.264689][ C0] hrtimer: interrupt took 79874 ns [ 102.326249][ T6920] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 102.407460][ T6920] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.289571][ T6988] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 103.309761][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.561162][ T7004] vlan2: entered promiscuous mode [ 103.580950][ T7004] batadv0: entered promiscuous mode [ 103.596276][ T7004] vlan2: entered allmulticast mode [ 103.612352][ T7004] batadv0: entered allmulticast mode [ 103.633910][ T7004] batadv0: left allmulticast mode [ 103.654912][ T7004] batadv0: left promiscuous mode [ 104.246836][ T7032] team_slave_0: entered promiscuous mode [ 104.253073][ T7032] team_slave_1: entered promiscuous mode [ 104.300182][ T7032] vlan2: entered promiscuous mode [ 104.307137][ T7032] team0: entered promiscuous mode [ 104.389152][ T7032] team0: left promiscuous mode [ 104.399067][ T7032] team_slave_0: left promiscuous mode [ 104.404637][ T7032] team_slave_1: left promiscuous mode [ 104.542803][ T7046] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.692151][ T7056] dccp_invalid_packet: P.Data Offset(100) too large [ 104.908818][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.213034][ T7085] dccp_invalid_packet: P.Data Offset(100) too large [ 105.227398][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.264876][ T7083] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.423691][ T7090] vlan4: entered promiscuous mode [ 105.461960][ T7090] team0: Port device vlan4 added [ 105.791472][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.312689][ T7118] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 106.595402][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.765535][ T7135] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.318213][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.436673][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.462662][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.516267][ T7166] xt_l2tp: invalid flags combination: c [ 107.524464][ T7171] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.779918][ T7178] vlan2: entered promiscuous mode [ 107.819050][ T7178] bridge0: entered promiscuous mode [ 107.869774][ T7178] team0: Port device vlan2 added [ 108.485044][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.496032][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.512279][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.534933][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.543634][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.553551][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.783366][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.871914][ T7214] x_tables: duplicate underflow at hook 4 [ 108.883644][ T7215] Cannot find set identified by id 0 to match [ 109.312785][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 109.629258][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.639689][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.663934][ T7193] bridge_slave_0: entered allmulticast mode [ 109.696454][ T7193] bridge_slave_0: entered promiscuous mode [ 109.729002][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.757756][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.795099][ T7193] bridge_slave_1: entered allmulticast mode [ 109.806796][ T7193] bridge_slave_1: entered promiscuous mode [ 109.816706][ T7258] bpf_get_probe_write_proto: 6 callbacks suppressed [ 109.816747][ T7258] syz-executor.1[7258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.847753][ T7258] syz-executor.1[7258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.974531][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.059477][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.236462][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.259526][ T7193] team0: Port device team_slave_0 added [ 110.281035][ T7193] team0: Port device team_slave_1 added [ 110.302568][ T950] wlan1: Trigger new scan to find an IBSS to join [ 110.612804][ T5114] Bluetooth: hci1: command tx timeout [ 110.793147][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.808057][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.852142][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.914937][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.937738][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.986246][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.007538][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.248673][ T7193] hsr_slave_0: entered promiscuous mode [ 111.289665][ T7193] hsr_slave_1: entered promiscuous mode [ 111.319013][ T7193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.338362][ T7193] Cannot create hsr debugfs directory [ 111.351505][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.217586][ T7341] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 112.348538][ T7343] tipc: Started in network mode [ 112.355992][ T7343] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 112.368969][ T7343] tipc: Enabling of bearer rejected, failed to enable media [ 112.414993][ T7341] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 112.464053][ T7345] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 112.504908][ T7346] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 112.669256][ T7193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.685541][ T5114] Bluetooth: hci1: command tx timeout [ 112.732572][ T7347] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 112.808333][ T7360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.947616][ T7193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.090949][ T7193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.131196][ T7375] tipc: Enabling of bearer rejected, failed to enable media [ 113.217540][ T7193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.236167][ T7377] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.315945][ T7384] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 113.324525][ T7384] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 113.374904][ T7384] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 113.415651][ T7384] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 113.459311][ T7384] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 113.581856][ T7193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.601626][ T7193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.628354][ T7193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.683931][ T7193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.772737][ T7397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.979966][ T7414] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.025619][ T7414] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 114.053071][ T7414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.396044][ T7193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.437489][ T7423] hsr0: entered promiscuous mode [ 114.443165][ T7423] macsec1: entered promiscuous mode [ 114.536661][ T7193] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.560709][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.568078][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.617475][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.625519][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.691251][ T7437] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.765002][ T5114] Bluetooth: hci1: command tx timeout [ 114.825663][ T7441] syz-executor.1[7441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.825897][ T7441] syz-executor.1[7441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.045645][ T7452] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.075697][ T7452] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 115.117360][ T7452] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.245413][ T950] wlan1: Trigger new scan to find an IBSS to join [ 115.433648][ T7193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.471361][ T7469] netlink: set zone limit has 8 unknown bytes [ 115.788601][ T7488] vlan2: entered promiscuous mode [ 115.901691][ T7494] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.236206][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.320842][ T7511] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.331803][ T7193] veth0_vlan: entered promiscuous mode [ 116.444593][ T7193] veth1_vlan: entered promiscuous mode [ 116.597948][ T7193] veth0_macvtap: entered promiscuous mode [ 116.630776][ T7193] veth1_macvtap: entered promiscuous mode [ 116.684154][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.703722][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.715591][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.727083][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.738117][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.750481][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.813898][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.825676][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.844967][ T5114] Bluetooth: hci1: command tx timeout [ 116.856163][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.901122][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.949542][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.015621][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.062177][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.089913][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.125576][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.143698][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.174971][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.198227][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.227406][ T7549] validate_nla: 5 callbacks suppressed [ 117.227425][ T7549] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.241954][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.268970][ T7193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.290073][ T7193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.315826][ T7193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.326573][ T7540] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.385721][ T7193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.419966][ T7193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.450477][ T7193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.468052][ T7193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.837141][ T7571] Cannot find del_set index 0 as target [ 117.933650][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.961753][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.107963][ T7583] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 118.120972][ T7587] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 118.159761][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.199465][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.473918][ T29] audit: type=1804 audit(1719013289.516:19): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2690757139/syzkaller.61ju8t/217/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 120.144966][ T7674] hsr0: entered promiscuous mode [ 120.160596][ T7674] macsec2: entered promiscuous mode [ 120.228684][ T7675] sch_fq: defrate 0 ignored. [ 120.791832][ T950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.117562][ T950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.448823][ T950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.697593][ T950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.708285][ T7699] Cannot find del_set index 0 as target [ 122.116882][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.127821][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.145926][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.153800][ T950] bridge_slave_1: left allmulticast mode [ 122.156825][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.170406][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.175050][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.182285][ T950] bridge_slave_1: left promiscuous mode [ 122.190744][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.190900][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 122.206683][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.238569][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.253798][ T950] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.264469][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.273173][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.323923][ T950] bridge_slave_0: left allmulticast mode [ 122.336764][ T950] bridge_slave_0: left promiscuous mode [ 122.343358][ T950] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.411806][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 122.422588][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 122.431889][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 122.442149][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.454318][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 122.463294][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.471699][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.485346][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.502553][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.525075][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.544948][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 122.555419][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.840576][ T950] dvmrp0 (unregistering): left allmulticast mode [ 123.056721][ T950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.069577][ T950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.082781][ T950] bond0 (unregistering): Released all slaves [ 123.098967][ T950] bond1 (unregistering): Released all slaves [ 123.117423][ T950] bond2 (unregistering): Released all slaves [ 123.778275][ T950] hsr_slave_0: left promiscuous mode [ 123.784535][ T950] hsr_slave_1: left promiscuous mode [ 123.792357][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.801743][ T950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.813859][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.827204][ T950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.850469][ T950] veth1_macvtap: left promiscuous mode [ 123.857795][ T950] veth0_macvtap: left promiscuous mode [ 123.863469][ T950] veth1_vlan: left promiscuous mode [ 123.869267][ T950] veth0_vlan: left promiscuous mode [ 124.289372][ T5114] Bluetooth: hci0: command tx timeout [ 124.365151][ T5114] Bluetooth: hci1: command tx timeout [ 124.441356][ T950] team0 (unregistering): Port device team_slave_1 removed [ 124.498106][ T950] team0 (unregistering): Port device team_slave_0 removed [ 124.526241][ T5114] Bluetooth: hci2: command tx timeout [ 124.606178][ T5114] Bluetooth: hci3: command tx timeout [ 125.026135][ T7734] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 125.035958][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.358713][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 125.471393][ T7704] chnl_net:caif_netlink_parms(): no params data found [ 125.641505][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 125.729539][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 125.910934][ T7765] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 125.986997][ T7704] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.994326][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.002484][ T7704] bridge_slave_0: entered allmulticast mode [ 126.010088][ T7704] bridge_slave_0: entered promiscuous mode [ 126.018512][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.026725][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.034157][ T7710] bridge_slave_0: entered allmulticast mode [ 126.042571][ T7710] bridge_slave_0: entered promiscuous mode [ 126.051669][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.058941][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.066254][ T7710] bridge_slave_1: entered allmulticast mode [ 126.075812][ T7710] bridge_slave_1: entered promiscuous mode [ 126.098553][ T7704] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.106050][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.113357][ T7704] bridge_slave_1: entered allmulticast mode [ 126.120907][ T7704] bridge_slave_1: entered promiscuous mode [ 126.219832][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.316497][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.360300][ T7704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.374992][ T5114] Bluetooth: hci0: command tx timeout [ 126.399368][ T7704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.445214][ T5114] Bluetooth: hci1: command tx timeout [ 126.450612][ T7778] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.464198][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.482839][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.502630][ T7709] bridge_slave_0: entered allmulticast mode [ 126.523540][ T7709] bridge_slave_0: entered promiscuous mode [ 126.546682][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.553855][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.574958][ T7706] bridge_slave_0: entered allmulticast mode [ 126.582354][ T7706] bridge_slave_0: entered promiscuous mode [ 126.600429][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.609043][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.616314][ T5114] Bluetooth: hci2: command tx timeout [ 126.623189][ T7706] bridge_slave_1: entered allmulticast mode [ 126.632163][ T7706] bridge_slave_1: entered promiscuous mode [ 126.667878][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.675449][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.682756][ T7709] bridge_slave_1: entered allmulticast mode [ 126.686555][ T5114] Bluetooth: hci3: command tx timeout [ 126.692232][ T7709] bridge_slave_1: entered promiscuous mode [ 126.759136][ T7704] team0: Port device team_slave_0 added [ 126.780474][ T7704] team0: Port device team_slave_1 added [ 126.795779][ T7710] team0: Port device team_slave_0 added [ 126.862331][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.921351][ T7710] team0: Port device team_slave_1 added [ 127.002449][ T950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.014164][ T950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.034502][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.051918][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.068901][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.099102][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.107830][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.136061][ T7704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.195190][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.214804][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.253726][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.347009][ T950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.365137][ T950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.445450][ T7706] team0: Port device team_slave_0 added [ 127.453006][ T7704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.460702][ T7704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.497111][ T7704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.537130][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.544217][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.582769][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.601785][ T7709] team0: Port device team_slave_0 added [ 127.614512][ T7709] team0: Port device team_slave_1 added [ 127.639559][ T950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.652633][ T950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.672948][ T7706] team0: Port device team_slave_1 added [ 127.770978][ T7704] hsr_slave_0: entered promiscuous mode [ 127.778235][ T7704] hsr_slave_1: entered promiscuous mode [ 127.785705][ T7704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.793294][ T7704] Cannot create hsr debugfs directory [ 127.814945][ T950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.825771][ T950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.921754][ T7710] hsr_slave_0: entered promiscuous mode [ 127.931209][ T7710] hsr_slave_1: entered promiscuous mode [ 127.938133][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.945934][ T7710] Cannot create hsr debugfs directory [ 127.952242][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.959342][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.987687][ T7709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.000102][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.013970][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.047690][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.061324][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.069176][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.096928][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.143706][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.155321][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.181993][ T7709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.406976][ T7802] sit0: entered promiscuous mode [ 128.411975][ T7802] sit0: entered allmulticast mode [ 128.445092][ T5114] Bluetooth: hci0: command tx timeout [ 128.472540][ T7709] hsr_slave_0: entered promiscuous mode [ 128.493960][ T7709] hsr_slave_1: entered promiscuous mode [ 128.504984][ T7709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.512599][ T7709] Cannot create hsr debugfs directory [ 128.524967][ T5114] Bluetooth: hci1: command tx timeout [ 128.563455][ T7806] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 128.643594][ T7706] hsr_slave_0: entered promiscuous mode [ 128.651900][ T7706] hsr_slave_1: entered promiscuous mode [ 128.659362][ T7706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.674835][ T7706] Cannot create hsr debugfs directory [ 128.684933][ T5114] Bluetooth: hci2: command tx timeout [ 128.769778][ T5114] Bluetooth: hci3: command tx timeout [ 128.808024][ T950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.900046][ T7812] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.005738][ T950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.014543][ T7814] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 129.146675][ T950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.273305][ T950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.288830][ T7818] IPv6: NLM_F_REPLACE set, but no existing node found! [ 129.722988][ T950] bridge_slave_1: left allmulticast mode [ 129.732749][ T950] bridge_slave_1: left promiscuous mode [ 129.738658][ T950] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.748195][ T950] bridge_slave_0: left allmulticast mode [ 129.753872][ T950] bridge_slave_0: left promiscuous mode [ 129.769696][ T950] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.813356][ T950] bridge_slave_1: left allmulticast mode [ 129.823611][ T950] bridge_slave_1: left promiscuous mode [ 129.835105][ T950] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.858124][ T950] bridge_slave_0: left allmulticast mode [ 129.874864][ T950] bridge_slave_0: left promiscuous mode [ 129.880651][ T950] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.126599][ T950] bridge0: left promiscuous mode [ 130.519263][ T950] team0: Port device vlan2 removed [ 130.525681][ T5114] Bluetooth: hci0: command tx timeout [ 130.604905][ T5114] Bluetooth: hci1: command tx timeout [ 130.736291][ T950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.752318][ T950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.763879][ T950] bond0 (unregistering): Released all slaves [ 130.770785][ T5114] Bluetooth: hci2: command tx timeout [ 130.848518][ T5114] Bluetooth: hci3: command tx timeout [ 130.876685][ T950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.890907][ T950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.902521][ T950] bond0 (unregistering): Released all slaves [ 130.923401][ T7838] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.954755][ T7704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.010822][ T7704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.107926][ T7710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.144144][ T7704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.151501][ T950] tipc: Left network mode [ 131.200665][ T7704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.271158][ T7710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.449587][ T7710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.568524][ T7710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.034860][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.042343][ T950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.052394][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.062145][ T950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.078253][ T950] hsr_slave_0: left promiscuous mode [ 132.085485][ T950] hsr_slave_1: left promiscuous mode [ 132.092748][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.101862][ T950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.112013][ T950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.137778][ T950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.220396][ T950] veth1_macvtap: left promiscuous mode [ 132.235184][ T950] veth0_macvtap: left promiscuous mode [ 132.241341][ T950] veth1_vlan: left promiscuous mode [ 132.249146][ T950] veth0_vlan: left promiscuous mode [ 132.283003][ T950] veth1_macvtap: left promiscuous mode [ 132.290433][ T950] veth0_macvtap: left promiscuous mode [ 132.297146][ T950] veth1_vlan: left promiscuous mode [ 132.303249][ T950] veth0_vlan: left promiscuous mode [ 133.249603][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.262010][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.419330][ T950] team0 (unregistering): Port device team_slave_1 removed [ 133.472455][ T950] team0 (unregistering): Port device team_slave_0 removed [ 134.319305][ T950] team0 (unregistering): Port device team_slave_1 removed [ 134.364092][ T950] team0 (unregistering): Port device team_slave_0 removed [ 134.817416][ T7866] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.878379][ T7704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.961647][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.996778][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.004780][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.053695][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.061556][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.224323][ T7704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.517931][ T7704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.699349][ T7706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.740517][ T7704] veth0_vlan: entered promiscuous mode [ 135.760255][ T7706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.771356][ T7706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.824208][ T7704] veth1_vlan: entered promiscuous mode [ 135.861094][ T7706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.018144][ T7704] veth0_macvtap: entered promiscuous mode [ 136.085486][ T7710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 136.107793][ T7710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 136.135629][ T7704] veth1_macvtap: entered promiscuous mode [ 136.158873][ T7710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 136.182125][ T7710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 136.320775][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.337599][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.352737][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.367351][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.384491][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.396733][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.416239][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.441604][ T7882] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.500735][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.513871][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.527796][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.541297][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.552516][ T7704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.564315][ T7704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.581267][ T7704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.597240][ T7709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.648663][ T7704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.659386][ T7704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.669468][ T7704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.678563][ T7704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.692351][ T7709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.712736][ T7709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.748959][ T7709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.013508][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.100754][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.170474][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.178206][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.186943][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.215230][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.223090][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.241125][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.288821][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.296645][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.308570][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.316407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.399012][ T7867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.423148][ T7867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.458461][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.466318][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.640126][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.684600][ T7906] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.737433][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.842901][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.927988][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.936969][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.019104][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.027016][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.069161][ T7913] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.400153][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.464044][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.651156][ T7926] lo speed is unknown, defaulting to 1000 [ 138.682571][ T7710] veth0_vlan: entered promiscuous mode [ 138.891971][ T7710] veth1_vlan: entered promiscuous mode [ 138.937926][ T7926] lo speed is unknown, defaulting to 1000 [ 139.003838][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.060855][ T7926] lo speed is unknown, defaulting to 1000 [ 139.120625][ T7710] veth0_macvtap: entered promiscuous mode [ 139.198998][ T7710] veth1_macvtap: entered promiscuous mode [ 139.362539][ T7709] veth0_vlan: entered promiscuous mode [ 139.379517][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.405261][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.434448][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.467176][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.496515][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.515395][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.535021][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.556057][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.571407][ T7926] infiniband syz0: set active [ 139.580724][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.599182][ T7926] infiniband syz0: added lo [ 139.624157][ T7926] syz0: rxe_create_cq: returned err = -12 [ 139.648191][ T7709] veth1_vlan: entered promiscuous mode [ 139.654918][ T7926] infiniband syz0: Couldn't create ib_mad CQ [ 139.662727][ T5162] lo speed is unknown, defaulting to 1000 [ 139.675300][ T7926] infiniband syz0: Couldn't open port 1 [ 139.691716][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.713813][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.740428][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.764838][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.776865][ T7926] RDS/IB: syz0: added [ 139.781557][ T7926] smc: adding ib device syz0 with port count 1 [ 139.794109][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.810785][ T7926] smc: ib device syz0 port 1 has pnetid [ 139.817061][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.833373][ T7710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.845865][ T7710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.870692][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.912625][ T7706] veth0_vlan: entered promiscuous mode [ 139.934094][ T5162] lo speed is unknown, defaulting to 1000 [ 139.969988][ T7710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.999291][ T7710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.009320][ T7710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.018204][ T7710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.056376][ T7709] veth0_macvtap: entered promiscuous mode [ 140.069691][ T7926] lo speed is unknown, defaulting to 1000 [ 140.084375][ T7706] veth1_vlan: entered promiscuous mode [ 140.110108][ T7709] veth1_macvtap: entered promiscuous mode [ 140.273821][ T7706] veth0_macvtap: entered promiscuous mode [ 140.294118][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.318378][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.329338][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.340977][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.351880][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.363775][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.376503][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.388554][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.402737][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.423834][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.437971][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.451788][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.463456][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.477163][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.488911][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.499835][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.515187][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.529612][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.541262][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.552588][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.564140][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.577032][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.590780][ T7709] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.599659][ T7709] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.610313][ T7709] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.621377][ T7709] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.649539][ T7926] lo speed is unknown, defaulting to 1000 [ 140.650946][ T7706] veth1_macvtap: entered promiscuous mode [ 140.802165][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.832746][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.847245][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.875375][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.894385][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.916932][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.932569][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.944518][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.956883][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.971379][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.982500][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.993983][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.004437][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.019034][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.031926][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.065463][ T7926] lo speed is unknown, defaulting to 1000 [ 141.111624][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.132005][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.143032][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.156633][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.169190][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.180236][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.190240][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.210538][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.224296][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.250177][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.270282][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.284314][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.301095][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.336869][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.346299][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.367805][ T7706] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.389294][ T7706] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.402732][ T7706] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.421967][ T7706] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.553313][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.584114][ T7956] sch_fq: defrate 0 ignored. [ 141.585173][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.606265][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.610717][ T7926] lo speed is unknown, defaulting to 1000 [ 141.619475][ T7954] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.638549][ T7954] tipc: Invalid UDP bearer configuration [ 141.638650][ T7954] tipc: Enabling of bearer rejected, failed to enable media [ 141.799828][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.816149][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.865686][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.894072][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.000281][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.000755][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.017056][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.209889][ T7926] lo speed is unknown, defaulting to 1000 [ 142.243509][ T7976] hsr_slave_0: left promiscuous mode [ 142.305713][ T7976] hsr_slave_1: left promiscuous mode [ 142.609156][ T29] audit: type=1804 audit(1719013312.646:20): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1948930900/syzkaller.fpYU93/1/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 142.736877][ T7988] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.770642][ T7988] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.794540][ T7988] tipc: Invalid UDP bearer configuration [ 142.794599][ T7988] tipc: Enabling of bearer rejected, failed to enable media [ 142.903305][ T7926] lo speed is unknown, defaulting to 1000 [ 143.444351][ T8015] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 1, id = 0 [ 143.540819][ T7926] lo speed is unknown, defaulting to 1000 [ 143.899870][ T8034] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 144.273338][ T8044] lo speed is unknown, defaulting to 1000 [ 144.620935][ T8066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.628945][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 144.636929][ T8066] IPv6: NLM_F_CREATE should be set when creating new route [ 144.938637][ T8074] tc_dump_action: action bad kind [ 145.110510][ T29] audit: type=1804 audit(1719013315.156:21): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir810276771/syzkaller.x1JyD1/9/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 145.361730][ T8094] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 145.489495][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.517672][ T8097] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 145.564487][ T8097] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.574490][ T8097] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.583996][ T8097] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.593369][ T8097] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.656094][ T8097] vxlan0: entered promiscuous mode [ 145.718549][ T8100] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 145.766315][ T8100] batman_adv: batadv0: Adding interface: team0 [ 145.783934][ T8100] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.811531][ T8108] xt_TCPMSS: Only works on TCP SYN packets [ 145.820728][ T8100] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 145.832649][ T8104] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 145.855094][ T8104] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.866173][ T8104] team0: entered promiscuous mode [ 145.871372][ T8104] team_slave_0: entered promiscuous mode [ 145.877543][ T8104] team_slave_1: entered promiscuous mode [ 145.886322][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.902208][ T8104] batman_adv: batadv0: Interface activated: team0 [ 145.914944][ T8104] batman_adv: batadv0: Interface deactivated: team0 [ 145.921770][ T8104] batman_adv: batadv0: Removing interface: team0 [ 145.947480][ T8104] bridge0: port 3(team0) entered blocking state [ 145.954992][ T8104] bridge0: port 3(team0) entered disabled state [ 145.962340][ T8104] team0: entered allmulticast mode [ 145.968350][ T8104] team_slave_0: entered allmulticast mode [ 145.974608][ T8104] team_slave_1: entered allmulticast mode [ 145.991252][ T8104] bridge0: port 3(team0) entered blocking state [ 145.997979][ T8104] bridge0: port 3(team0) entered forwarding state [ 146.065595][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.178990][ T8114] tc_dump_action: action bad kind [ 146.447872][ T29] audit: type=1804 audit(1719013316.486:22): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3564117442/syzkaller.wj5n9X/327/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 146.566997][ T8136] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 146.618574][ T8136] batman_adv: batadv0: Adding interface: team0 [ 146.642803][ T8136] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.681646][ T8136] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.727284][ T8140] tc_dump_action: action bad kind [ 146.748052][ T8141] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 146.775257][ T8141] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.807588][ T8141] team0: entered promiscuous mode [ 146.812675][ T8141] team_slave_0: entered promiscuous mode [ 146.849138][ T8141] team_slave_1: entered promiscuous mode [ 146.882026][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.926989][ T8141] batman_adv: batadv0: Interface activated: team0 [ 146.952930][ T8141] batman_adv: batadv0: Interface deactivated: team0 [ 146.973242][ T8141] batman_adv: batadv0: Removing interface: team0 [ 146.997067][ T8141] bridge0: port 3(team0) entered blocking state [ 147.017480][ T8141] bridge0: port 3(team0) entered disabled state [ 147.034314][ T8141] team0: entered allmulticast mode [ 147.042675][ T8141] team_slave_0: entered allmulticast mode [ 147.055950][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.078204][ T8141] team_slave_1: entered allmulticast mode [ 147.092820][ T8141] bridge0: port 3(team0) entered blocking state [ 147.099280][ T8141] bridge0: port 3(team0) entered forwarding state [ 147.264329][ T8160] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 147.626600][ T8176] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 147.641054][ T8176] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 147.652058][ T8176] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 147.663725][ T8176] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 148.289265][ T29] audit: type=1804 audit(1719013318.336:23): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir749710876/syzkaller.ScLowf/15/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 148.960598][ T8241] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 149.534521][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.212350][ T8283] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.114902][ T8368] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 153.239062][ T8409] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 153.980120][ T8437] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 154.046661][ T8443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.586995][ T8465] lo speed is unknown, defaulting to 1000 [ 154.653786][ T8470] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.791767][ T8477] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 154.946222][ T8483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.056112][ T8508] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 156.136568][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.159207][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.168420][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.182745][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.200520][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.211454][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.489392][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.583307][ T8509] lo speed is unknown, defaulting to 1000 [ 156.693683][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.909652][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.948901][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.180201][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.183132][ T8546] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.412479][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.444591][ T8550] sit0: left promiscuous mode [ 157.451825][ T8550] sit0: left allmulticast mode [ 157.495341][ T8557] Bluetooth: MGMT ver 1.22 [ 157.530781][ T8550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.546866][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.797662][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 157.830168][ T35] team0: left allmulticast mode [ 157.855171][ T35] team_slave_0: left allmulticast mode [ 157.861117][ T35] team_slave_1: left allmulticast mode [ 157.903769][ T35] bridge0: port 3(team0) entered disabled state [ 157.966162][ T35] bridge_slave_1: left allmulticast mode [ 157.971863][ T35] bridge_slave_1: left promiscuous mode [ 158.011349][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.042752][ T35] bridge_slave_0: left allmulticast mode [ 158.063224][ T35] bridge_slave_0: left promiscuous mode [ 158.084179][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.285078][ T5114] Bluetooth: hci0: command tx timeout [ 158.355893][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.631413][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.647296][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.660136][ T35] bond0 (unregistering): Released all slaves [ 158.864114][ T8509] chnl_net:caif_netlink_parms(): no params data found [ 159.281475][ T8605] gre1: entered promiscuous mode [ 159.286827][ T8605] gre1: entered allmulticast mode [ 159.563003][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.828473][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.854112][ T8509] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.886705][ T8509] bridge_slave_0: entered allmulticast mode [ 159.909046][ T8509] bridge_slave_0: entered promiscuous mode [ 159.932357][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.950592][ T8509] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.987964][ T8509] bridge_slave_1: entered allmulticast mode [ 160.007477][ T8509] bridge_slave_1: entered promiscuous mode [ 160.249135][ T8509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.331450][ T8509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.364982][ T5114] Bluetooth: hci0: command tx timeout [ 160.465890][ T8652] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.476462][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.560634][ T35] hsr_slave_0: left promiscuous mode [ 160.593322][ T35] hsr_slave_1: left promiscuous mode [ 160.626208][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.643914][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.663213][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.683562][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.729385][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.779099][ T35] veth1_macvtap: left promiscuous mode [ 160.817684][ T35] veth0_macvtap: left promiscuous mode [ 160.836265][ T35] veth1_vlan: left promiscuous mode [ 160.852451][ T35] veth0_vlan: left promiscuous mode [ 161.277921][ T8683] xt_l2tp: invalid flags combination: 0 [ 161.287743][ T35] infiniband syz0: set down [ 161.717756][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 162.027809][ T35] team_slave_1 (unregistering): left promiscuous mode [ 162.044072][ T35] team0 (unregistering): Port device team_slave_1 removed [ 162.093526][ T35] team_slave_0 (unregistering): left promiscuous mode [ 162.105235][ T35] team0 (unregistering): Port device team_slave_0 removed [ 162.445217][ T5114] Bluetooth: hci0: command tx timeout [ 162.606556][ T62] smc: removing ib device syz0 [ 162.632361][ T8509] team0: Port device team_slave_0 added [ 162.652588][ T5160] lo speed is unknown, defaulting to 1000 [ 162.684411][ T8509] team0: Port device team_slave_1 added [ 162.881655][ T8707] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 162.912478][ T8707] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.940734][ T8707] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 163.063648][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.108171][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.175435][ T8703] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.217846][ T8509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.312406][ T8509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.348745][ T8509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.467073][ T8509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.520519][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.707426][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 163.710026][ T8734] ebt_among: dst integrity fail: 100 [ 163.813554][ T8509] hsr_slave_0: entered promiscuous mode [ 163.854451][ T8509] hsr_slave_1: entered promiscuous mode [ 164.024516][ T8741] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 164.531870][ T5114] Bluetooth: hci0: command tx timeout [ 164.592063][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.890243][ T8761] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 164.909796][ T8761] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.126929][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.143951][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.215309][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.229471][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.237536][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.248430][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.105024][ T8789] Bluetooth: MGMT ver 1.22 [ 166.810227][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 166.900446][ T8509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.969581][ T8509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.078873][ T8509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.182156][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.201418][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.222965][ T8767] bridge_slave_0: entered allmulticast mode [ 167.237400][ T8767] bridge_slave_0: entered promiscuous mode [ 167.258031][ T8509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.300905][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.312471][ T8840] gretap0: entered promiscuous mode [ 167.317897][ T8840] gretap0: entered allmulticast mode [ 167.326655][ T5114] Bluetooth: hci3: command tx timeout [ 167.332462][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.332576][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.332793][ T8767] bridge_slave_1: entered allmulticast mode [ 167.334113][ T8767] bridge_slave_1: entered promiscuous mode [ 167.462045][ T8842] No such timeout policy "syz1" [ 167.523043][ T8844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.582702][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.637681][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.842577][ T8767] team0: Port device team_slave_0 added [ 167.872511][ T8767] team0: Port device team_slave_1 added [ 168.000224][ T8859] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 168.049680][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.075537][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.121498][ T8767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.136526][ T29] audit: type=1804 audit(1719013338.166:24): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1948930900/syzkaller.fpYU93/104/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 168.150250][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.205261][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.262708][ T8767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.349536][ T8872] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 168.358183][ T8872] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.552060][ T8767] hsr_slave_0: entered promiscuous mode [ 168.584448][ T8767] hsr_slave_1: entered promiscuous mode [ 168.601678][ T8767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.622298][ T8767] Cannot create hsr debugfs directory [ 168.762318][ T8509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.908590][ T8509] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.940641][ T8892] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 169.084242][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.091506][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.173148][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.180404][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.404892][ T5114] Bluetooth: hci3: command tx timeout [ 169.408808][ T8767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.450591][ T8916] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 169.619822][ T8767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.821020][ T8767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.873791][ T8928] tipc: Started in network mode [ 169.882675][ T8928] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 169.912858][ T8928] tipc: Enabled bearer , priority 0 [ 170.040861][ T8767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.105961][ T8940] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 170.395893][ T8950] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.459459][ T8767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.490325][ T8767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.542521][ T8509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.558532][ T8767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.576313][ T8767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.724530][ T8509] veth0_vlan: entered promiscuous mode [ 170.768086][ T8509] veth1_vlan: entered promiscuous mode [ 170.949400][ T8509] veth0_macvtap: entered promiscuous mode [ 170.979454][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.001667][ T8509] veth1_macvtap: entered promiscuous mode [ 171.034913][ T57] tipc: Node number set to 15444650 [ 171.105376][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.151665][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.175475][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.204888][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.224811][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.262145][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.292655][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.308907][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.340820][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.351638][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.375926][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.406394][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.425469][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.456429][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.490380][ T5114] Bluetooth: hci3: command tx timeout [ 171.500311][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.525625][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.552563][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.572924][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.582985][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.595670][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.605994][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.616797][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.626960][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.693616][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.718018][ T8994] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.734714][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.754866][ T8994] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 171.757088][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.784419][ T8994] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 171.786546][ T8509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.824577][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.832412][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.931615][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.939536][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.043086][ T8509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.087049][ T8509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.125278][ T8509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.134032][ T8509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.404949][ T29] audit: type=1804 audit(1719013342.446:25): pid=8990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3564117442/syzkaller.wj5n9X/410/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 172.446109][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.467671][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.577321][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.626546][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.981146][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.187128][ T8767] veth0_vlan: entered promiscuous mode [ 173.242573][ T8767] veth1_vlan: entered promiscuous mode [ 173.441741][ T8767] veth0_macvtap: entered promiscuous mode [ 173.508589][ T9037] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 173.535406][ T9037] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 173.558170][ T8767] veth1_macvtap: entered promiscuous mode [ 173.565426][ T5114] Bluetooth: hci3: command tx timeout [ 173.731033][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.787125][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.846062][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.885615][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.928259][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.959326][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.971113][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.985097][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.997960][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.008839][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.019075][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.030485][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.042204][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.057821][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.072032][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.158442][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.192203][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.224730][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.245174][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.283429][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.316127][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.327004][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.338708][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.350041][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.384779][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.401015][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.442213][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.455195][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.466817][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.485635][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.540270][ T8767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.582460][ T8767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.603371][ T8767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.627517][ T8767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.920046][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.960215][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.040835][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.054082][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.212142][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.244389][ T9092] sch_tbf: burst 511 is lower than device gre0 mtu (1500) ! [ 175.272007][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.511421][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.653164][ T9122] bond1: entered promiscuous mode [ 176.696219][ T9127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.737503][ T9127] bond2: entered promiscuous mode [ 176.744104][ T9127] bond1: (slave bond2): Enslaving as an active interface with an up link [ 176.838116][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.901800][ T9122] bond1 (unregistering): (slave bond2): Releasing backup interface [ 176.934244][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.948179][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.950601][ T9122] bond2: left promiscuous mode [ 176.979930][ T9122] bond1 (unregistering): Released all slaves [ 177.037743][ T9130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.060050][ T9137] sch_tbf: burst 511 is lower than device bond_slave_1 mtu (1514) ! [ 177.273152][ T9144] vlan2: entered promiscuous mode [ 177.301594][ T9144] batadv0: entered promiscuous mode [ 177.326443][ T9144] batadv0: left promiscuous mode [ 177.361650][ T9153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.398932][ T9153] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 177.413406][ T9153] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 177.439264][ T9153] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.034555][ T9176] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.217805][ T9275] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 180.265831][ T9277] __nla_validate_parse: 8 callbacks suppressed [ 180.265870][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.506949][ T9281] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.593909][ T9286] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 180.832771][ T9301] vlan2: entered promiscuous mode [ 180.878635][ T9301] syz_tun: entered promiscuous mode [ 180.918962][ T9301] syz_tun: left promiscuous mode [ 181.452786][ T9327] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.174431][ T9365] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.845034][ T9376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.895046][ T9376] bridge_slave_1: left allmulticast mode [ 182.921847][ T9376] bridge_slave_1: left promiscuous mode [ 182.952530][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.056147][ T9376] bridge_slave_0: left allmulticast mode [ 183.106158][ T9376] bridge_slave_0: left promiscuous mode [ 183.138240][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.492252][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.540881][ T9412] bond1: entered promiscuous mode [ 183.689288][ T9412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.698820][ T9412] bond2: entered promiscuous mode [ 183.705295][ T9412] bond1: (slave bond2): Enslaving as an active interface with an up link [ 183.715128][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.786067][ T9423] bond1 (unregistering): (slave bond2): Releasing backup interface [ 183.820250][ T9423] bond2: left promiscuous mode [ 183.863874][ T9423] bond1 (unregistering): Released all slaves [ 183.991235][ T9432] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 184.027573][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.083711][ T9432] : entered promiscuous mode [ 184.122662][ T9435] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 184.248831][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.277086][ T9448] Cannot find add_set index 0 as target [ 184.295352][ T29] audit: type=1800 audit(1719013354.336:26): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 184.393715][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.403747][ T29] audit: type=1804 audit(1719013354.336:27): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1948930900/syzkaller.fpYU93/157/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 184.501746][ T29] audit: type=1804 audit(1719013354.396:28): pid=9444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1948930900/syzkaller.fpYU93/157/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 185.323481][ T9480] __nla_validate_parse: 3 callbacks suppressed [ 185.323501][ T9480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.530136][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.628887][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.174128][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.213167][ T9574] bridge_slave_1: left allmulticast mode [ 187.256564][ T9574] bridge_slave_1: left promiscuous mode [ 187.262436][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.328576][ T9574] bridge_slave_0: left allmulticast mode [ 187.334298][ T9574] bridge_slave_0: left promiscuous mode [ 187.350117][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.222471][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.302374][ T9623] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.424422][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.436722][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.050063][ T9660] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 189.171517][ T9666] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.186963][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.792355][ T9693] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 189.975465][ T9698] team0: left allmulticast mode [ 189.980470][ T9698] team_slave_0: left allmulticast mode [ 190.031411][ T9698] team_slave_1: left allmulticast mode [ 190.054900][ T9698] bridge0: port 3(team0) entered disabled state [ 190.094496][ T9698] bridge_slave_1: left allmulticast mode [ 190.114814][ T9698] bridge_slave_1: left promiscuous mode [ 190.120641][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.170214][ T9698] bridge_slave_0: left allmulticast mode [ 190.194821][ T9698] bridge_slave_0: left promiscuous mode [ 190.201621][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.996326][ T9741] __nla_validate_parse: 1 callbacks suppressed [ 190.996346][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.184095][ T9756] SET target dimension over the limit! [ 191.213100][ T29] audit: type=1804 audit(1719013361.256:29): pid=9757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3564117442/syzkaller.wj5n9X/482/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 191.213553][ T9756] macvtap0: entered promiscuous mode [ 191.304960][ T9756] macvtap0: entered allmulticast mode [ 191.324976][ T9756] veth0_macvtap: entered allmulticast mode [ 191.349860][ T9749] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 191.373172][ T9763] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.579145][ T9772] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.651822][ T9772] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 191.755972][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.498860][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.212603][ T29] audit: type=1800 audit(1719013363.246:30): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 193.336131][ T29] audit: type=1804 audit(1719013363.306:31): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir909225486/syzkaller.abB1CB/63/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 193.473739][ T29] audit: type=1804 audit(1719013363.316:32): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir909225486/syzkaller.abB1CB/63/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 193.785767][ T9858] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.079904][ T9899] IPVS: length: 96 != 8 [ 194.105804][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.129381][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.204017][ T9907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.708421][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720219][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838962][ T9924] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.887231][ T9939] IPVS: length: 96 != 8 [ 195.137144][ T9953] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 195.234195][ T9959] sit0: entered promiscuous mode [ 195.251357][ T9959] sit0: entered allmulticast mode [ 195.414211][ T9969] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 196.558487][ T29] audit: type=1800 audit(1719013366.606:33): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 196.627466][ T29] audit: type=1804 audit(1719013366.656:34): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir909225486/syzkaller.abB1CB/72/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 196.669497][ T29] audit: type=1804 audit(1719013366.666:35): pid=9987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir909225486/syzkaller.abB1CB/72/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 196.691223][ T9993] syz-executor.3[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.696983][ T9993] syz-executor.3[9993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.053933][T10006] __nla_validate_parse: 5 callbacks suppressed [ 197.053953][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.099411][T10008] xt_TCPMSS: Only works on TCP SYN packets [ 197.454811][ T2895] ================================================================== [ 197.462935][ T2895] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 197.471091][ T2895] Read of size 8 at addr ffff888063f118b8 by task kworker/u8:7/2895 [ 197.479084][ T2895] [ 197.481433][ T2895] CPU: 1 PID: 2895 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0 [ 197.491698][ T2895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.501819][ T2895] Workqueue: l2tp l2tp_tunnel_del_work [ 197.507336][ T2895] Call Trace: [ 197.510629][ T2895] [ 197.513577][ T2895] dump_stack_lvl+0x241/0x360 [ 197.518293][ T2895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.523527][ T2895] ? __pfx__printk+0x10/0x10 [ 197.528143][ T2895] ? _printk+0xd5/0x120 [ 197.532405][ T2895] ? __virt_addr_valid+0x183/0x520 [ 197.537539][ T2895] ? __virt_addr_valid+0x183/0x520 [ 197.542662][ T2895] print_report+0x169/0x550 [ 197.547185][ T2895] ? __virt_addr_valid+0x183/0x520 [ 197.552309][ T2895] ? __virt_addr_valid+0x183/0x520 [ 197.557508][ T2895] ? __virt_addr_valid+0x44e/0x520 [ 197.562621][ T2895] ? __phys_addr+0xba/0x170 [ 197.567215][ T2895] ? l2tp_tunnel_del_work+0xe5/0x330 [ 197.572503][ T2895] kasan_report+0x143/0x180 [ 197.577008][ T2895] ? l2tp_tunnel_del_work+0xe5/0x330 [ 197.582304][ T2895] l2tp_tunnel_del_work+0xe5/0x330 [ 197.587413][ T2895] ? process_scheduled_works+0x945/0x1830 [ 197.593126][ T2895] process_scheduled_works+0xa2c/0x1830 [ 197.598676][ T2895] ? __pfx_process_scheduled_works+0x10/0x10 [ 197.604657][ T2895] ? assign_work+0x364/0x3d0 [ 197.609249][ T2895] worker_thread+0x86d/0xd70 [ 197.613836][ T2895] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 197.619730][ T2895] ? __kthread_parkme+0x169/0x1d0 [ 197.624750][ T2895] ? __pfx_worker_thread+0x10/0x10 [ 197.629855][ T2895] kthread+0x2f0/0x390 [ 197.633919][ T2895] ? __pfx_worker_thread+0x10/0x10 [ 197.639023][ T2895] ? __pfx_kthread+0x10/0x10 [ 197.643610][ T2895] ret_from_fork+0x4b/0x80 [ 197.648024][ T2895] ? __pfx_kthread+0x10/0x10 [ 197.652619][ T2895] ret_from_fork_asm+0x1a/0x30 [ 197.657415][ T2895] [ 197.660427][ T2895] [ 197.662733][ T2895] Allocated by task 10024: [ 197.667133][ T2895] kasan_save_track+0x3f/0x80 [ 197.671806][ T2895] __kasan_kmalloc+0x98/0xb0 [ 197.676427][ T2895] __kmalloc_noprof+0x1f9/0x400 [ 197.681280][ T2895] l2tp_session_create+0x3b/0xc20 [ 197.686306][ T2895] pppol2tp_connect+0xca3/0x17a0 [ 197.691250][ T2895] __sys_connect+0x2df/0x310 [ 197.695837][ T2895] __x64_sys_connect+0x7a/0x90 [ 197.700594][ T2895] do_syscall_64+0xf3/0x230 [ 197.705090][ T2895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.710976][ T2895] [ 197.713285][ T2895] Freed by task 10024: [ 197.717340][ T2895] kasan_save_track+0x3f/0x80 [ 197.722008][ T2895] kasan_save_free_info+0x40/0x50 [ 197.727025][ T2895] poison_slab_object+0xe0/0x150 [ 197.731955][ T2895] __kasan_slab_free+0x37/0x60 [ 197.736713][ T2895] kfree+0x149/0x360 [ 197.740600][ T2895] __sk_destruct+0x58/0x5f0 [ 197.745124][ T2895] rcu_core+0xafd/0x1830 [ 197.749366][ T2895] handle_softirqs+0x2c4/0x970 [ 197.754125][ T2895] __irq_exit_rcu+0xf4/0x1c0 [ 197.758715][ T2895] irq_exit_rcu+0x9/0x30 [ 197.762948][ T2895] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 197.768575][ T2895] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 197.774552][ T2895] [ 197.776866][ T2895] Last potentially related work creation: [ 197.782564][ T2895] kasan_save_stack+0x3f/0x60 [ 197.787238][ T2895] __kasan_record_aux_stack+0xac/0xc0 [ 197.792594][ T2895] call_rcu+0x167/0xa70 [ 197.796746][ T2895] pppol2tp_release+0x24b/0x350 [ 197.801592][ T2895] sock_close+0xbc/0x240 [ 197.805830][ T2895] __fput+0x406/0x8b0 [ 197.809805][ T2895] task_work_run+0x24f/0x310 [ 197.814389][ T2895] syscall_exit_to_user_mode+0x168/0x370 [ 197.820019][ T2895] do_syscall_64+0x100/0x230 [ 197.824614][ T2895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.830533][ T2895] [ 197.832858][ T2895] The buggy address belongs to the object at ffff888063f11800 [ 197.832858][ T2895] which belongs to the cache kmalloc-1k of size 1024 [ 197.846912][ T2895] The buggy address is located 184 bytes inside of [ 197.846912][ T2895] freed 1024-byte region [ffff888063f11800, ffff888063f11c00) [ 197.860796][ T2895] [ 197.863111][ T2895] The buggy address belongs to the physical page: [ 197.869517][ T2895] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63f10 [ 197.878377][ T2895] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 197.886882][ T2895] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 197.894442][ T2895] page_type: 0xffffefff(slab) [ 197.899146][ T2895] raw: 00fff00000000040 ffff888015041dc0 ffffea000129aa00 dead000000000002 [ 197.907719][ T2895] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 197.916293][ T2895] head: 00fff00000000040 ffff888015041dc0 ffffea000129aa00 dead000000000002 [ 197.924948][ T2895] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 197.933624][ T2895] head: 00fff00000000003 ffffea00018fc401 ffffffffffffffff 0000000000000000 [ 197.942288][ T2895] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 197.950945][ T2895] page dumped because: kasan: bad access detected [ 197.957357][ T2895] page_owner tracks the page as allocated [ 197.963068][ T2895] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 35, tgid 35 (kworker/u8:2), ts 141740211253, free_ts 141707169666 [ 197.983727][ T2895] post_alloc_hook+0x1f3/0x230 [ 197.988497][ T2895] get_page_from_freelist+0x2e43/0x2f00 [ 197.994121][ T2895] __alloc_pages_noprof+0x256/0x6c0 [ 197.999313][ T2895] alloc_slab_page+0x5f/0x120 [ 198.003994][ T2895] allocate_slab+0x5a/0x2f0 [ 198.008492][ T2895] ___slab_alloc+0xcd1/0x14b0 [ 198.013160][ T2895] __slab_alloc+0x58/0xa0 [ 198.017480][ T2895] __kmalloc_noprof+0x257/0x400 [ 198.022321][ T2895] ieee802_11_parse_elems_full+0xdb/0x2880 [ 198.028116][ T2895] ieee80211_inform_bss+0x15f/0x1080 [ 198.033398][ T2895] cfg80211_inform_single_bss_data+0x1121/0x2360 [ 198.039723][ T2895] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 198.045355][ T2895] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 198.051422][ T2895] ieee80211_bss_info_update+0x8a7/0xbc0 [ 198.057043][ T2895] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 198.063194][ T2895] ieee80211_iface_work+0x8a5/0xf20 [ 198.068392][ T2895] page last free pid 5162 tgid 5162 stack trace: [ 198.074795][ T2895] free_unref_page+0xd22/0xea0 [ 198.079643][ T2895] __slab_free+0x31b/0x3d0 [ 198.084055][ T2895] qlist_free_all+0x9e/0x140 [ 198.088637][ T2895] kasan_quarantine_reduce+0x14f/0x170 [ 198.094089][ T2895] __kasan_slab_alloc+0x23/0x80 [ 198.098933][ T2895] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 198.104824][ T2895] __alloc_skb+0x1c3/0x440 [ 198.109231][ T2895] alloc_skb_with_frags+0xc3/0x770 [ 198.114337][ T2895] sock_alloc_send_pskb+0x91a/0xa60 [ 198.119524][ T2895] mld_newpack+0x1c3/0xa90 [ 198.123932][ T2895] add_grec+0x1492/0x19a0 [ 198.128253][ T2895] mld_send_initial_cr+0x228/0x4b0 [ 198.133357][ T2895] mld_dad_work+0x44/0x500 [ 198.137853][ T2895] process_scheduled_works+0xa2c/0x1830 [ 198.143386][ T2895] worker_thread+0x86d/0xd70 [ 198.147969][ T2895] kthread+0x2f0/0x390 [ 198.152044][ T2895] [ 198.154368][ T2895] Memory state around the buggy address: [ 198.159993][ T2895] ffff888063f11780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 198.168066][ T2895] ffff888063f11800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 198.176132][ T2895] >ffff888063f11880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 198.184187][ T2895] ^ [ 198.190065][ T2895] ffff888063f11900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 198.198115][ T2895] ffff888063f11980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 198.206165][ T2895] ================================================================== [ 198.214325][ T2895] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 198.221634][ T2895] CPU: 1 PID: 2895 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00837-g3226607302ca #0 [ 198.231893][ T2895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 198.241970][ T2895] Workqueue: l2tp l2tp_tunnel_del_work [ 198.247462][ T2895] Call Trace: [ 198.250761][ T2895] [ 198.253697][ T2895] dump_stack_lvl+0x241/0x360 [ 198.258401][ T2895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.263717][ T2895] ? __pfx__printk+0x10/0x10 [ 198.268334][ T2895] ? vscnprintf+0x5d/0x90 [ 198.272680][ T2895] panic+0x349/0x860 [ 198.276586][ T2895] ? check_panic_on_warn+0x21/0xb0 [ 198.281719][ T2895] ? __pfx_panic+0x10/0x10 [ 198.286158][ T2895] ? mark_lock+0x9a/0x350 [ 198.290596][ T2895] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 198.296523][ T2895] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 198.302446][ T2895] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 2024/06/21 23:42:48 SYZFATAL: failed to send *flatrpc.ExecutorMessageRawT: write tcp 10.128.0.35:37834->10.128.0.169:30018: write: broken pipe [ 198.308798][ T2895] ? print_report+0x502/0x550 [ 198.313498][ T2895] check_panic_on_warn+0x86/0xb0 [ 198.318460][ T2895] ? l2tp_tunnel_del_work+0xe5/0x330 [ 198.323769][ T2895] end_report+0x77/0x160 [ 198.328031][ T2895] kasan_report+0x154/0x180 [ 198.332555][ T2895] ? l2tp_tunnel_del_work+0xe5/0x330 [ 198.337960][ T2895] l2tp_tunnel_del_work+0xe5/0x330 [ 198.343100][ T2895] ? process_scheduled_works+0x945/0x1830 [ 198.348849][ T2895] process_scheduled_works+0xa2c/0x1830 [ 198.354431][ T2895] ? __pfx_process_scheduled_works+0x10/0x10 [ 198.360459][ T2895] ? assign_work+0x364/0x3d0 [ 198.365071][ T2895] worker_thread+0x86d/0xd70 [ 198.369683][ T2895] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 198.375601][ T2895] ? __kthread_parkme+0x169/0x1d0 [ 198.380641][ T2895] ? __pfx_worker_thread+0x10/0x10 [ 198.385764][ T2895] kthread+0x2f0/0x390 [ 198.389856][ T2895] ? __pfx_worker_thread+0x10/0x10 [ 198.395155][ T2895] ? __pfx_kthread+0x10/0x10 [ 198.399769][ T2895] ret_from_fork+0x4b/0x80 [ 198.404212][ T2895] ? __pfx_kthread+0x10/0x10 [ 198.408823][ T2895] ret_from_fork_asm+0x1a/0x30 [ 198.413616][ T2895] [ 198.416953][ T2895] Kernel Offset: disabled [ 198.421272][ T2895] Rebooting in 86400 seconds..