last executing test programs: 35.665011981s ago: executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) accept(r0, 0x0, 0x0) 35.545324287s ago: executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005700)={'ip6tnl0\x00', &(0x7f0000001800)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r1, 0x0, 0xf00, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001140)=""/109, 0x6d}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f00000012c0)=""/87, 0x57}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000001500)=""/4083, 0xff3}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000080)=""/214, 0xd6}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000107, 0x0, 0x0) 35.080490654s ago: executing program 2: socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x400000000006) 34.963036018s ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb"], 0x0, 0x34}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 34.903674677s ago: executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 34.864152148s ago: executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) 34.836225924s ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="82", 0x1}, {&(0x7f0000000600)="345dc9", 0x3}], 0x2}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) 34.730381646s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) 34.596318176s ago: executing program 1: getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xfffffffffffffffc, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03a0005) sendfile(r1, r0, 0x0, 0x8000000000002) 34.030739568s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="84", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000380)='s', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000000a84bfc6fc"], 0x58}}, 0x0) 33.860852685s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@local, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@updsa={0x1d4, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2, {0x0, 0xcdc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2}, [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, 0x4e24, 0x0, 0x0, 0x2, 0xa, 0x20, 0x1a0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x4d4}, @in=@multicast1, {0x2, 0x7, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0xb8}, {0x6, 0x0, 0x3, 0x8001}, {0x3, 0x0, 0x372}, 0x70bd25, 0x0, 0x2, 0x2, 0x8}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 33.760363313s ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005700)={'ip6tnl0\x00', &(0x7f0000001800)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast1}}) r1 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r1, 0x0, 0xf00, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001140)=""/109, 0x6d}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f00000012c0)=""/87, 0x57}, {&(0x7f0000000600)=""/218, 0xda}, {&(0x7f0000001500)=""/4083, 0xff3}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000080)=""/214, 0xd6}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000107, 0x0, 0x0) 33.705280279s ago: executing program 0: socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, &(0x7f0000000300)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) 33.70430535s ago: executing program 3: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x8a}}, 0x10) 33.609327022s ago: executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x4004000) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)='F', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 33.543966502s ago: executing program 0: socket$rds(0x15, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000540), 0x4c, 0x0, 0x2) r6 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, &(0x7f00000003c0)=0x1c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x2b8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x2a4, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0xffffffd1}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_bpf={0x16c, 0x1b, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffff001, 0x9, 0x0, 0x7fff, 0x75}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x7, 0x0, 0xf6e6}, {0x7fff, 0x7, 0x20, 0x7f}, {0x1, 0x8, 0xcd, 0x2}, {0x8, 0x1, 0x8, 0x2}, {0x20, 0x9, 0x0, 0xbc52}, {0x6, 0x4, 0x81, 0xffff8760}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xdd, 0x6, "dc7349ab6782f3044133d16071f0ad5f17e35b3240d24eaa9714ad808c891f422f25ee0b0d5ac521e0241a25ef670b5fc8614f5adc8ddca98c0708e576e86163add4cbbab8232829bb826743713211558b6f3cb42fa6b787c26186338665dc8c678cc3360bd56936dd8648034601cacc8e6fd0809f07c47b515f76a2308b4a8362223971dee82fd8227bfd08bbfea113034d72df5a8e11542ba24005c933cbb920f60f52763c32f4c9965e3e26c5bc0f11613d5a45971e2b73fc4c3d6fe40401ec9d58e9a8de555dac24638bf94a6c413714ad066a3c6b90df"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xec, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x2, 0x7ff}, 0x5}}]}, {0x9f, 0x6, "77f66bdafd379ffab7794744d0c545ae2b1a2622e08a4929dc379bb87f60178256d20b018794e3063cdf2ff6b39c657225e4976b3fb0bf9e9aa8467b7f3f49db5e3e33d28a7107d92bf7020db13c52c8a3ff610daa499febe7cab96ae07b8e5b33ba10423a15a3c6296ed005d088e283b161d14e87bf19b029a9a82b6a1616ac83e81617a02b507a03a968648aecb9b3beba41525fd90e7cbd91c3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2b8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0xd, 0x0, 0x20000001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6tnl0\x00', 0x100}) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000240)={0x1d, r10}, 0x18) close(r7) 33.446220239s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb"], 0x0, 0x34}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 33.419596543s ago: executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "869388", 0x0, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 33.29971818s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f0000001980)={0x2, 0x2, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) 33.175278943s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 32.888224925s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 32.317426641s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@local, @broadcast}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@updsa={0x1d4, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2, {0x0, 0xcdc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2}, [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, 0x4e24, 0x0, 0x0, 0x2, 0xa, 0x20, 0x1a0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x4d4}, @in=@multicast1, {0x2, 0x7, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0xb8}, {0x6, 0x0, 0x3, 0x8001}, {0x3, 0x0, 0x372}, 0x70bd25, 0x0, 0x2, 0x2, 0x8}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1}, 0x14}}, 0x0) 32.124337202s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) 31.079941334s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="84", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000380)='s', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001400010627bd7000000000000a84bfc6fc"], 0x58}}, 0x0) 30.015009792s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000f00)=""/229, 0xe5}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000c00)=""/217, 0xd9}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000b00)=""/220, 0xdc}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000240)=""/228, 0xe4}], 0xb}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 3.739996912s ago: executing program 2: getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xfffffffffffffffc, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03a0005) sendfile(r1, r0, 0x0, 0x8000000000002) 3.527646985s ago: executing program 0: getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0xfffffffffffffffc, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03a0005) sendfile(r1, r0, 0x0, 0x8000000000002) 3.387363738s ago: executing program 1: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 2.871360358s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) 0s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb"], 0x0, 0x34}, 0x20) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) kernel console output (not intermixed with test programs): [ 75.732879][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.740460][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.767186][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.767883][ T5131] Bluetooth: hci0: command tx timeout [ 75.813707][ T5113] team0: Port device team_slave_0 added [ 75.823580][ T5113] team0: Port device team_slave_1 added [ 75.843400][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.850608][ T5131] Bluetooth: hci2: command tx timeout [ 75.856051][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.856821][ T5131] Bluetooth: hci4: command tx timeout [ 75.882174][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.891239][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.905474][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.932995][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.936070][ T5131] Bluetooth: hci3: command tx timeout [ 75.947422][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.955494][ T5116] Bluetooth: hci1: command tx timeout [ 75.956343][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.987851][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.002331][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.033075][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.040355][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.066573][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.099085][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.152184][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.159815][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.186731][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.219857][ T5115] team0: Port device team_slave_0 added [ 76.240099][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.247730][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.273938][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.287343][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.294314][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.320870][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.347938][ T5112] hsr_slave_0: entered promiscuous mode [ 76.354500][ T5112] hsr_slave_1: entered promiscuous mode [ 76.364433][ T5115] team0: Port device team_slave_1 added [ 76.390290][ T5123] hsr_slave_0: entered promiscuous mode [ 76.397624][ T5123] hsr_slave_1: entered promiscuous mode [ 76.403843][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.411832][ T5123] Cannot create hsr debugfs directory [ 76.513416][ T5126] hsr_slave_0: entered promiscuous mode [ 76.520113][ T5126] hsr_slave_1: entered promiscuous mode [ 76.526316][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.534583][ T5126] Cannot create hsr debugfs directory [ 76.540981][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.548604][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.574777][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.588506][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.595483][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.621496][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.711109][ T5113] hsr_slave_0: entered promiscuous mode [ 76.718338][ T5113] hsr_slave_1: entered promiscuous mode [ 76.724638][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.732706][ T5113] Cannot create hsr debugfs directory [ 76.933333][ T5115] hsr_slave_0: entered promiscuous mode [ 76.940457][ T5115] hsr_slave_1: entered promiscuous mode [ 76.948964][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.956732][ T5115] Cannot create hsr debugfs directory [ 77.344948][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.369276][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.382515][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.405367][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.471674][ T5123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.488171][ T5123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.500668][ T5123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.511170][ T5123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.586808][ T5126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.614887][ T5126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.628438][ T5126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.642113][ T5126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.810285][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.840048][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.847163][ T5131] Bluetooth: hci0: command tx timeout [ 77.889150][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.900231][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.927979][ T5116] Bluetooth: hci2: command tx timeout [ 77.933721][ T5131] Bluetooth: hci4: command tx timeout [ 77.947078][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.985696][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.998985][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.007101][ T5116] Bluetooth: hci1: command tx timeout [ 78.012776][ T5131] Bluetooth: hci3: command tx timeout [ 78.039098][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.054734][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.062854][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.075682][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.138059][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.145362][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.161480][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.168676][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.218648][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.233139][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.281303][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.288594][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.331646][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.351404][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.358613][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.393803][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.404726][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.445566][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.452891][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.518804][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.526017][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.671917][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.825356][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.844259][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.872016][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.879337][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.925254][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.951654][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.958889][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.085994][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.164184][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.171529][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.182993][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.190200][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.241505][ T5112] veth0_vlan: entered promiscuous mode [ 79.272602][ T5112] veth1_vlan: entered promiscuous mode [ 79.323460][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.347801][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.524028][ T5112] veth0_macvtap: entered promiscuous mode [ 79.539742][ T5112] veth1_macvtap: entered promiscuous mode [ 79.590881][ T5126] veth0_vlan: entered promiscuous mode [ 79.633079][ T5123] veth0_vlan: entered promiscuous mode [ 79.689171][ T5126] veth1_vlan: entered promiscuous mode [ 79.703000][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.719440][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.744973][ T5123] veth1_vlan: entered promiscuous mode [ 79.759836][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.772366][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.796131][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807313][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.817758][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.827266][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.927283][ T5131] Bluetooth: hci0: command tx timeout [ 79.940102][ T5126] veth0_macvtap: entered promiscuous mode [ 79.992844][ T5126] veth1_macvtap: entered promiscuous mode [ 80.007338][ T5116] Bluetooth: hci2: command tx timeout [ 80.012966][ T5131] Bluetooth: hci4: command tx timeout [ 80.027786][ T5123] veth0_macvtap: entered promiscuous mode [ 80.085945][ T5123] veth1_macvtap: entered promiscuous mode [ 80.088156][ T5131] Bluetooth: hci3: command tx timeout [ 80.097725][ T5116] Bluetooth: hci1: command tx timeout [ 80.119337][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.139175][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.153549][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.202164][ T5115] veth0_vlan: entered promiscuous mode [ 80.229610][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.241719][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.252797][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.265124][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.277835][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.285610][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.296291][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.308596][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.324837][ T5126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.335407][ T5126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.344678][ T5126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.353692][ T5126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.403472][ T5166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.408668][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.423729][ T5166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.424518][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.441192][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.451904][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.463113][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.474078][ T5115] veth1_vlan: entered promiscuous mode [ 80.505686][ T5123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.515235][ T5123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.525734][ T5123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.534601][ T5123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.585641][ T5113] veth0_vlan: entered promiscuous mode [ 80.615492][ T5115] veth0_macvtap: entered promiscuous mode [ 80.636361][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.663440][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.666550][ T5115] veth1_macvtap: entered promiscuous mode [ 80.702557][ T5113] veth1_vlan: entered promiscuous mode [ 80.787386][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.800135][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.884389][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.896397][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.906842][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.917852][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.931500][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.943607][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.955058][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.962793][ T5200] netlink: 798 bytes leftover after parsing attributes in process `syz-executor.1'. [ 80.992751][ T5200] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.996379][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.019233][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.029870][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.043404][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.055293][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.065839][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.079622][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.099229][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.103665][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.115355][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.117364][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.124804][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.151118][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.221083][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.230617][ T5113] veth0_macvtap: entered promiscuous mode [ 81.235787][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.306039][ T5113] veth1_macvtap: entered promiscuous mode [ 81.445147][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.486528][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.502240][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.533561][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.547936][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.559571][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.569934][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.592012][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.603681][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.614765][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.629031][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.756396][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.769781][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.781591][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.792395][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.802323][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.814525][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.824510][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.835008][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.857088][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.933824][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.958332][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.981136][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.007842][ T5131] Bluetooth: hci0: command tx timeout [ 82.031748][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.085416][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.094304][ T5131] Bluetooth: hci4: command tx timeout [ 82.102503][ T5116] Bluetooth: hci2: command tx timeout [ 82.131724][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.166919][ T5116] Bluetooth: hci3: command tx timeout [ 82.166996][ T5131] Bluetooth: hci1: command tx timeout [ 82.215437][ T5224] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 82.255891][ T5224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.466954][ T5171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.526825][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.602859][ T5230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.616751][ T5230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.717165][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.725042][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.760282][ T5252] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.903246][ T5254] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 83.938286][ T5254] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.967502][ T5257] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 84.110502][ T5259] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 84.140130][ T5259] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 84.165956][ T5259] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 84.215594][ T5266] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 84.595687][ T29] audit: type=1804 audit(1716850647.320:2): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3814994317/syzkaller.J3aHsq/3/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 84.874778][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.103416][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.159485][ T5290] can: request_module (can-proto-0) failed. [ 85.212806][ T5300] team0: entered promiscuous mode [ 85.231064][ T5300] team_slave_0: entered promiscuous mode [ 85.250569][ T5300] team_slave_1: entered promiscuous mode [ 85.274412][ T5300] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.325519][ T5300] team0: left promiscuous mode [ 85.348602][ T5300] team_slave_0: left promiscuous mode [ 85.364672][ T5300] team_slave_1: left promiscuous mode [ 85.471442][ T5310] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.726227][ T5322] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 85.809074][ T5326] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 85.846086][ T5326] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 85.875733][ T5326] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 85.972264][ T5332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.026104][ T5333] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 86.210490][ T5335] Bluetooth: MGMT ver 1.22 [ 86.232646][ T5335] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 86.685841][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.690422][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.734985][ T5344] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.971701][ T57] cfg80211: failed to load regulatory.db [ 87.087876][ T5354] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.207695][ T5357] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 87.359145][ T5359] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 87.429394][ T5359] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 87.461857][ T5359] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 87.595924][ T5374] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 87.730007][ T5382] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 87.834466][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.846376][ T5385] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.916108][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.120898][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.162357][ T29] audit: type=1804 audit(1716850650.890:3): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3814994317/syzkaller.J3aHsq/15/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 88.276241][ T5390] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 88.795379][ T5404] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 89.296764][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.307856][ T5416] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 89.352871][ T5420] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.414217][ T5421] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 89.475898][ T5421] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 89.485228][ T5421] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 89.671620][ T29] audit: type=1804 audit(1716850652.400:4): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2565271854/syzkaller.obYBI6/11/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 89.760578][ T5426] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 89.802342][ T5426] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 90.126856][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.594278][ T5444] Zero length message leads to an empty skb [ 90.638645][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.656915][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.676689][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.686754][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.700071][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.708615][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.754762][ T5448] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 90.773087][ T5453] tipc: Started in network mode [ 90.778648][ T5453] tipc: Node identity , cluster identity 4711 [ 90.796957][ T5453] tipc: Failed to set node id, please configure manually [ 90.846551][ T5453] tipc: Enabling of bearer rejected, failed to enable media [ 90.944657][ T5112] syz-executor.1 (5112) used greatest stack depth: 18672 bytes left [ 91.292080][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.393939][ T5473] __nla_validate_parse: 3 callbacks suppressed [ 91.393963][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.550352][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.712661][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.713619][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.827550][ T5478] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.893027][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.018734][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.156296][ T5450] chnl_net:caif_netlink_parms(): no params data found [ 92.223700][ T35] bridge_slave_1: left allmulticast mode [ 92.235843][ T35] bridge_slave_1: left promiscuous mode [ 92.246146][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.276265][ T35] bridge_slave_0: left allmulticast mode [ 92.312963][ T35] bridge_slave_0: left promiscuous mode [ 92.320422][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.806792][ T5116] Bluetooth: hci0: command tx timeout [ 93.242678][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.258704][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.274191][ T35] bond0 (unregistering): Released all slaves [ 93.339534][ T5496] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 93.387028][ T5511] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 93.467303][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.514758][ T5514] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 93.608758][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.719487][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.773990][ T5531] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.877258][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.899944][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.915277][ T5450] bridge_slave_0: entered allmulticast mode [ 93.952636][ T5450] bridge_slave_0: entered promiscuous mode [ 94.000206][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.050600][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.067622][ T5450] bridge_slave_1: entered allmulticast mode [ 94.084772][ T5450] bridge_slave_1: entered promiscuous mode [ 94.120285][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.262168][ T5539] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 94.488880][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.512044][ T5552] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.523068][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.555513][ T5551] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 94.634536][ T35] hsr_slave_0: left promiscuous mode [ 94.644400][ T35] hsr_slave_1: left promiscuous mode [ 94.659059][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.666793][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.677325][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.684871][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.717369][ T35] veth1_macvtap: left promiscuous mode [ 94.723515][ T35] veth0_macvtap: left promiscuous mode [ 94.729580][ T35] veth1_vlan: left promiscuous mode [ 94.736132][ T35] veth0_vlan: left promiscuous mode [ 94.886700][ T5116] Bluetooth: hci0: command tx timeout [ 95.555475][ T35] team0 (unregistering): Port device team_slave_1 removed [ 95.593196][ T35] team0 (unregistering): Port device team_slave_0 removed [ 95.959229][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.969613][ T5555] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 96.002068][ T5558] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 96.050058][ T5558] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 96.081522][ T5558] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 96.142548][ T5450] team0: Port device team_slave_0 added [ 96.174750][ T5450] team0: Port device team_slave_1 added [ 96.243943][ T5571] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 96.329049][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.356996][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.400349][ T5450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.432836][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.446700][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.523669][ T5450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.645916][ T5581] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 96.735217][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.792388][ T5450] hsr_slave_0: entered promiscuous mode [ 96.801222][ T5583] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.811519][ T5450] hsr_slave_1: entered promiscuous mode [ 96.969623][ T5116] Bluetooth: hci0: command tx timeout [ 97.272205][ T5594] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 97.352195][ T5597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.362914][ T5598] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 97.403817][ T5597] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.454463][ T5598] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 97.509907][ T5598] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 97.540035][ T5598] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 97.748505][ T5450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.769902][ T5450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.812745][ T5450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.842948][ T5450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.964601][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.017836][ T5611] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.140807][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.170986][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.213373][ T5613] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.220716][ T5450] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.282978][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.290228][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.342086][ T5619] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 98.386428][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.393756][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.423771][ T5623] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 98.493650][ T5622] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 98.495127][ T5626] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 98.548561][ T5626] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 98.599481][ T5626] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 98.996422][ T5638] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 99.040208][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.047842][ T5116] Bluetooth: hci0: command tx timeout [ 99.264698][ T5640] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.291346][ T5450] veth0_vlan: entered promiscuous mode [ 99.315638][ T5450] veth1_vlan: entered promiscuous mode [ 99.440166][ T5450] veth0_macvtap: entered promiscuous mode [ 99.510171][ T5450] veth1_macvtap: entered promiscuous mode [ 99.715853][ T5651] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 99.847981][ T5652] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 99.856229][ T5652] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 99.906880][ T5652] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 99.995804][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.025615][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.052550][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.095805][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.138586][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.186635][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.202754][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.213865][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.233096][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.314033][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.325221][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.335631][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.349144][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.359272][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.370026][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.380201][ T5450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.392896][ T5450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.425985][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.462554][ T5450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.524066][ T5450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.555569][ T5450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.587890][ T5450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.646263][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.739462][ T5663] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.090960][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.121905][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.152223][ T5672] dccp_invalid_packet: P.Data Offset(6) too small [ 101.181079][ T5674] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 101.213511][ T5171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.239293][ T5171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.407496][ T29] audit: type=1804 audit(1716850664.120:5): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2921248642/syzkaller.V3bT1T/39/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 101.486108][ T29] audit: type=1804 audit(1716850664.120:6): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2921248642/syzkaller.V3bT1T/39/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 101.556618][ T5686] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 101.653505][ T5688] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 101.678911][ T5688] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 101.718514][ T5688] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 102.377114][ T5712] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 102.449470][ T5717] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 102.474228][ T5717] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 102.496538][ T5717] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 102.594201][ T5722] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.640433][ T5725] macsec1: entered promiscuous mode [ 102.651607][ T5725] macvlan1: entered promiscuous mode [ 102.663247][ T5725] macsec1: entered allmulticast mode [ 102.670415][ T5725] macvlan1: entered allmulticast mode [ 102.676307][ T5725] veth1_vlan: entered allmulticast mode [ 102.702752][ T5725] macvlan1: left allmulticast mode [ 102.709985][ T5725] veth1_vlan: left allmulticast mode [ 102.728999][ T5725] macvlan1: left promiscuous mode [ 102.792070][ T5730] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 102.797762][ T5729] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.805065][ T5730] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.959102][ T5735] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.750722][ T5772] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.865391][ T5776] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 103.970745][ T5778] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 104.093544][ T5780] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 104.114220][ T5782] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 104.131876][ T5782] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 104.143622][ T5782] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 104.414781][ T5794] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 104.439215][ T5794] hsr0: entered promiscuous mode [ 104.470087][ T5794] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 104.520498][ T5794] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 104.535112][ T5794] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 104.555701][ T5794] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 104.585260][ T5799] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 104.604178][ T5798] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.725348][ T5805] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 104.810628][ T5807] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.766697][ T5116] Bluetooth: hci0: command 0x080f tx timeout [ 105.849844][ T5834] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 105.892734][ T5834] hsr0: entered promiscuous mode [ 105.902836][ T5834] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 105.948962][ T5834] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 105.960048][ T5834] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 105.987675][ T5834] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 106.048127][ T5839] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 106.070511][ T5839] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.590023][ T5843] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 106.643654][ T5854] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 106.663724][ T5848] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 106.687071][ T5848] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 106.705151][ T5848] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 106.850176][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.013956][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.085957][ T5872] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.095768][ T5872] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.104844][ T5872] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.113732][ T5872] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.167167][ T5880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.180702][ T5872] vxlan0: entered promiscuous mode [ 107.250892][ T5879] macvlan2: entered promiscuous mode [ 107.263233][ T5879] macvlan2: entered allmulticast mode [ 107.288070][ T5879] bridge0: entered promiscuous mode [ 107.296677][ T5879] bridge0: entered allmulticast mode [ 107.329570][ T5879] team0: Port device macvlan2 added [ 107.728249][ T5894] syz-executor.3 (5894) used greatest stack depth: 17808 bytes left [ 107.821352][ T5908] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 107.895118][ T5911] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 107.951084][ T5913] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 107.986884][ T5913] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 108.010218][ T5913] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 108.171334][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.372422][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.382456][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.392168][ T5932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.450422][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.924054][ T5952] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 109.390175][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.538083][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.565396][ T5967] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.618662][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.667673][ T5975] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 109.676007][ T5975] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 109.716826][ T5975] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 109.758478][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.933273][ T5982] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 109.986661][ T5986] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 110.269104][ T5994] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 110.372781][ T5997] xt_ecn: cannot match TCP bits for non-tcp packets [ 111.178601][ T6043] pim6reg1: entered promiscuous mode [ 111.193145][ T6043] pim6reg1: entered allmulticast mode [ 111.295510][ T6053] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 111.304299][ T6049] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 111.313155][ T6049] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 111.326726][ T6049] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 111.450905][ T6060] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 112.130006][ T6088] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 112.799235][ T6110] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 112.965491][ T6117] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 112.997695][ T6117] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 113.016690][ T6117] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 113.033514][ T6114] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 113.230662][ T6121] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 113.511617][ T6138] sctp: [Deprecated]: syz-executor.4 (pid 6138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.511617][ T6138] Use struct sctp_sack_info instead [ 113.560864][ T6144] __nla_validate_parse: 12 callbacks suppressed [ 113.560886][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.752918][ T6155] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 113.768373][ T6155] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.791430][ T6155] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 113.826423][ T6155] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.980784][ T6161] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 114.107186][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.145216][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.177688][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.197128][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.219969][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.258278][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.278465][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.295911][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.343234][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.370032][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.425657][ T6163] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 114.730280][ T6177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.810048][ T6177] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 114.858216][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.938582][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.965070][ T6181] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.999868][ T6177] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 115.041470][ T6181] caif0 speed is unknown, defaulting to 1000 [ 115.074827][ T6181] caif0 speed is unknown, defaulting to 1000 [ 115.109504][ T6181] caif0 speed is unknown, defaulting to 1000 [ 115.255480][ T6186] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 115.259002][ T6192] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 115.317103][ T6192] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 115.339292][ T6192] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 115.361476][ T6192] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 115.600867][ T6198] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 115.644392][ T6200] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 115.663104][ T6181] infiniband syz1: set down [ 115.669767][ T6181] infiniband syz1: added caif0 [ 115.699590][ T5171] caif0 speed is unknown, defaulting to 1000 [ 115.794548][ T6181] RDS/IB: syz1: added [ 115.801604][ T6181] smc: adding ib device syz1 with port count 1 [ 115.808180][ T6181] smc: ib device syz1 port 1 has pnetid [ 115.818090][ T5171] caif0 speed is unknown, defaulting to 1000 [ 115.831070][ T6181] caif0 speed is unknown, defaulting to 1000 [ 115.963469][ T6209] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.059636][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.233069][ T6181] caif0 speed is unknown, defaulting to 1000 [ 116.414173][ T6224] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 116.475823][ T6229] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.668962][ T6235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.702494][ T6235] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 116.722062][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.775214][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.801795][ T6235] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 116.820748][ T6181] caif0 speed is unknown, defaulting to 1000 [ 116.855437][ T6238] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 116.967348][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.210972][ T6253] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 117.238911][ T6253] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 117.247416][ T6253] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 117.256000][ T6253] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 117.441356][ T6260] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 117.446319][ T6181] caif0 speed is unknown, defaulting to 1000 [ 117.643662][ T6262] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 117.833736][ T6181] caif0 speed is unknown, defaulting to 1000 [ 118.217834][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.350527][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.443652][ T6288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.512546][ T6292] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 118.553050][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.597978][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.634106][ T6292] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 118.766225][ T6297] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 118.849809][ T6310] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 118.953948][ T6314] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.064727][ T6315] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 119.096606][ T6315] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 119.113742][ T6315] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 119.164087][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.298776][ T6332] bond2 (unregistering): Released all slaves [ 119.401843][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.482311][ T6341] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 119.493076][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.533263][ T6341] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.982845][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.984555][ T6365] : entered promiscuous mode [ 119.993068][ T6362] unsupported nla_type 768 [ 120.005237][ T6364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.054098][ T6364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.103353][ T6364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.144204][ T6364] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 120.602033][ T6384] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 120.661250][ T6390] validate_nla: 3 callbacks suppressed [ 120.661271][ T6390] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 120.767700][ T6393] netem: change failed [ 121.252061][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.299038][ T6381] dccp_close: ABORT with 5344 bytes unread [ 121.593930][ T6425] team0: Port device macvlan0 added [ 121.665757][ T6429] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 121.787932][ T6433] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 121.899102][ T6439] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 121.921621][ T6439] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 121.993843][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.172611][ T6447] bond1 (unregistering): Released all slaves [ 122.260626][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.551146][ T6477] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 122.555609][ T6476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.635808][ T6476] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.817810][ T6488] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 123.154732][ T6507] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 123.175099][ T6506] syz-executor.1[6506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.175462][ T6506] syz-executor.1[6506] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.244821][ T6507] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 123.295839][ T6507] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 123.329729][ T6504] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 123.339561][ T6471] dccp_close: ABORT with 5344 bytes unread [ 123.344030][ T6507] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 123.367345][ T6504] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 123.440116][ T6504] hsr_slave_0: left promiscuous mode [ 123.455411][ T6504] hsr_slave_1: left promiscuous mode [ 124.204153][ T6541] __nla_validate_parse: 6 callbacks suppressed [ 124.204178][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.506899][ T6548] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.526320][ T6550] xt_limit: Overflow, try lower: 262144/524288 [ 124.587732][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.003676][ T6564] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 125.038647][ T6564] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 125.076928][ T6564] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 125.178958][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.526919][ T5116] Bluetooth: hci0: command 0x080f tx timeout [ 125.735364][ T6577] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 126.089950][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.098818][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.178256][ T6591] bridge_slave_1: left allmulticast mode [ 126.216788][ T6591] bridge_slave_1: left promiscuous mode [ 126.293533][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.327954][ T6591] bridge_slave_0: left allmulticast mode [ 126.333671][ T6591] bridge_slave_0: left promiscuous mode [ 126.377818][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.484444][ T6591] bridge0 (unregistering): left allmulticast mode [ 126.605156][ T6591] team0: Port device macvlan2 removed [ 126.705073][ T6589] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.734580][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.997638][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.033858][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.366199][ T6620] validate_nla: 2 callbacks suppressed [ 127.366219][ T6620] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 127.444751][ T6623] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 127.479513][ T6623] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 127.488749][ T6623] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 127.512894][ T6625] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 128.293932][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.501746][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.515766][ T6654] tun0: tun_chr_ioctl cmd 1074025673 [ 128.521339][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.530316][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.547292][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.555546][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.576736][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.961285][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.320382][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.553260][ T6674] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 129.723409][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.747850][ T6677] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 129.756187][ T6676] team_slave_0: entered promiscuous mode [ 129.768614][ T6677] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 129.800534][ T6676] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.810239][ T6677] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 129.863324][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.889695][ T6685] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.955276][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.969325][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.977014][ T6675] team_slave_0: left promiscuous mode [ 129.993869][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.015598][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.024579][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.036850][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.284426][ T6691] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.488605][ T6695] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.125025][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.155266][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.180307][ T6026] bond0 (unregistering): Released all slaves [ 131.215645][ T6026] bond1 (unregistering): Released all slaves [ 131.346527][ T6686] caif0 speed is unknown, defaulting to 1000 [ 131.918634][ T6707] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.945333][ T6705] dvmrp0: entered allmulticast mode [ 132.086972][ T5116] Bluetooth: hci3: command tx timeout [ 132.103527][ T6716] SET target dimension over the limit! [ 132.431972][ T6026] hsr_slave_0: left promiscuous mode [ 132.447779][ T6026] hsr_slave_1: left promiscuous mode [ 132.466844][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.474745][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.484509][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.493439][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.527197][ T6026] veth1_macvtap: left promiscuous mode [ 132.533355][ T6026] veth0_macvtap: left promiscuous mode [ 132.540783][ T6026] veth1_vlan: left promiscuous mode [ 132.546558][ T6026] veth0_vlan: left promiscuous mode [ 133.052311][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.229253][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 133.282117][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 133.781193][ T6726] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 133.835410][ T6740] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 133.851802][ T6727] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 133.886640][ T6727] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 133.895233][ T6727] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 134.006012][ T6748] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 134.163079][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 134.182362][ T5116] Bluetooth: hci3: command tx timeout [ 134.216216][ T6749] tun0: tun_chr_ioctl cmd 1074025673 [ 134.230758][ T6756] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 134.246921][ T6756] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 134.269256][ T6756] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 134.503902][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.531789][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.560671][ T6686] bridge_slave_0: entered allmulticast mode [ 134.584622][ T6686] bridge_slave_0: entered promiscuous mode [ 134.623772][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.638068][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.645806][ T6686] bridge_slave_1: entered allmulticast mode [ 134.672010][ T6686] bridge_slave_1: entered promiscuous mode [ 134.761203][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.797608][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.876207][ T6780] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 134.938945][ T6686] team0: Port device team_slave_0 added [ 134.955133][ T6781] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 134.987555][ T6686] team0: Port device team_slave_1 added [ 135.107916][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.114917][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.170989][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.190718][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.202099][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.246559][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.286114][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.328411][ T6795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.336121][ T6795] IPv6: NLM_F_CREATE should be set when creating new route [ 135.365755][ T6789] tun0: tun_chr_ioctl cmd 1074025673 [ 135.392555][ T6797] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.525211][ T6686] hsr_slave_0: entered promiscuous mode [ 135.566961][ T6686] hsr_slave_1: entered promiscuous mode [ 135.601076][ T6686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.632762][ T6686] Cannot create hsr debugfs directory [ 135.719960][ T6805] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 135.823818][ T6810] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 135.836759][ T6810] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 135.866892][ T6810] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 135.957080][ T6812] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 136.034592][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.065852][ T6814] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.249167][ T5116] Bluetooth: hci3: command tx timeout [ 136.517077][ T6686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.539534][ T6686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.552357][ T6686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.571219][ T6686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.601111][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.914561][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.075639][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.075860][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.133416][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.140654][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.168703][ T6844] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.175806][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.185402][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.453882][ T6854] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 137.485656][ T6854] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 137.507662][ T6854] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 137.531988][ T6859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.716053][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.843827][ T6686] veth0_vlan: entered promiscuous mode [ 137.864894][ T6686] veth1_vlan: entered promiscuous mode [ 137.924831][ T6686] veth0_macvtap: entered promiscuous mode [ 137.945926][ T6686] veth1_macvtap: entered promiscuous mode [ 137.953820][ T6867] x_tables: duplicate underflow at hook 1 [ 137.996350][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.028387][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.046210][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.076649][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.119005][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.138196][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.162589][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.188913][ T6686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.202983][ T6686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.229602][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.248039][ T6872] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 138.256276][ T6872] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 138.256278][ T6686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.256316][ T6686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.293595][ T6686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.301932][ T6872] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 138.302786][ T6686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.330899][ T5116] Bluetooth: hci3: command tx timeout [ 138.444866][ T6876] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 138.512903][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.557495][ T6880] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.666949][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.682017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.698464][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.778646][ T5169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.799816][ T5169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.913825][ T6893] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 138.970438][ T6895] netem: unknown loss type 0 [ 138.977171][ T6895] netem: change failed [ 139.130267][ T6902] bridge0: entered allmulticast mode [ 139.149224][ T6904] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 139.161598][ T6904] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 139.180036][ T6904] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 139.196228][ T6902] pim6reg: entered allmulticast mode [ 139.404867][ T6914] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 139.542680][ T6916] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 139.797083][ T6926] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 139.833284][ T6929] IPVS: Unknown mcast interface: [ 139.840658][ T6928] IPVS: Unknown mcast interface: [ 140.406857][ T5116] Bluetooth: hci3: command tx timeout [ 140.712678][ T6951] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 140.812146][ T6953] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 140.818909][ T6957] Driver unsupported XDP return value 0 on prog (id 333) dev N/A, expect packet loss! [ 140.854599][ T6961] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 140.867382][ T6959] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 140.883176][ T6961] __nla_validate_parse: 4 callbacks suppressed [ 140.883196][ T6961] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.894473][ T6959] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 140.955795][ T6959] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 141.319246][ T6978] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 141.350731][ T6979] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 141.611438][ T29] audit: type=1804 audit(1716850704.340:7): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir969400908/syzkaller.OmBq6r/7/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 141.639253][ T6992] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 141.674185][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.814967][ T6999] geneve2: entered promiscuous mode [ 141.839312][ T6999] geneve2: entered allmulticast mode [ 141.874544][ T7002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.953219][ T6992] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.985830][ T7008] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 142.012488][ T7008] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.136879][ T7013] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.668844][ T7026] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 146.693855][ T7021] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 146.739849][ T7033] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 146.765808][ T7033] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 146.788494][ T7033] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 147.172106][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.247986][ T29] audit: type=1804 audit(1716850709.980:8): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2565271854/syzkaller.obYBI6/156/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 147.311965][ T7053] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.405992][ T7059] geneve3: entered promiscuous mode [ 147.411808][ T7059] geneve3: entered allmulticast mode [ 147.536408][ T7060] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 147.682832][ T29] audit: type=1800 audit(1716850710.410:9): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1957 res=0 errno=0 [ 147.717767][ T7064] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.733637][ T7064] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.761582][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.801241][ T7066] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 147.856285][ T7071] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.189066][ T7090] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 148.201088][ T7091] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.224034][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.322780][ T7097] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 148.348603][ T7097] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 148.368118][ T7097] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 148.523149][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.553687][ T7107] batman_adv: batadv1: Adding interface: netdevsim0 [ 148.560725][ T7107] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.588179][ T7107] batman_adv: batadv1: Interface activated: netdevsim0 [ 148.691625][ T7112] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 148.833759][ T7114] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 148.962855][ T7116] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 149.376568][ T7133] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.436774][ T7133] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 149.678719][ T7147] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 149.794405][ T7151] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 149.855394][ T7156] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 149.897275][ T7156] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 149.925975][ T7156] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 151.053795][ T7203] Bluetooth: MGMT ver 1.22 [ 151.321463][ T7219] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 151.336760][ T7219] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 151.356634][ T7219] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 151.514572][ T7227] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.231093][ T7240] __nla_validate_parse: 6 callbacks suppressed [ 152.231113][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.805767][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.035048][ T7279] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.243916][ T7283] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 153.265492][ T7283] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 153.293254][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.306565][ T7283] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 153.642909][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.661011][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.695986][ T7304] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.041975][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.379980][ T7325] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 154.865150][ T7327] net_ratelimit: 1 callbacks suppressed [ 154.865173][ T7327] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 155.235992][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.352155][ T7339] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.396722][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.492875][ T7344] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 155.505857][ T7344] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 155.531355][ T7344] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 156.106341][ T7359] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 156.464171][ T7386] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 156.568654][ T7389] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 157.519731][ T7421] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 157.556783][ T7421] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 157.584765][ T7421] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 157.722481][ T7429] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 157.751235][ T7431] __nla_validate_parse: 6 callbacks suppressed [ 157.751254][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.982416][ T7437] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 158.494488][ T7445] xt_NFQUEUE: number of total queues is 0 [ 158.507495][ T7445] IPv6: addrconf: prefix option has invalid lifetime [ 158.885977][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.926078][ T7463] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 158.965060][ T7463] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 159.006588][ T7463] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 159.476198][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.609850][ T7499] sch_tbf: peakrate 1 is lower than or equals to rate 4294901759 ! [ 159.622706][ T7499] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 160.142067][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.225680][ T7525] hsr0: entered promiscuous mode [ 160.242509][ T7525] hsr0: left promiscuous mode [ 160.302805][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.303545][ T7527] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 160.320863][ T7527] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 160.335078][ T7527] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 160.472973][ T7535] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.518238][ T7535] 0ªX¹¦D: renamed from gretap0 (while UP) [ 160.553269][ T7535] 0ªX¹¦D: entered allmulticast mode [ 160.567240][ T7535] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 160.654241][ T29] audit: type=1804 audit(1716850723.380:10): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2921248642/syzkaller.V3bT1T/154/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 161.211421][ T7545] dccp_close: ABORT with 32 bytes unread [ 161.255986][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.274088][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.301773][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.418735][ T7551] Bluetooth: MGMT ver 1.22 [ 161.729599][ T7563] caif0: Master is either lo or non-ether device [ 161.799948][ T7571] macvlan2: entered promiscuous mode [ 161.805792][ T7571] macvlan2: entered allmulticast mode [ 161.815432][ T7571] bridge0: entered promiscuous mode [ 161.836627][ T7571] bridge0: entered allmulticast mode [ 161.865767][ T7571] team0: Port device macvlan2 added [ 161.972553][ T7576] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 161.990626][ T7576] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 162.017498][ T7576] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 162.154173][ T7579] dccp_close: ABORT with 32 bytes unread [ 162.759305][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.775389][ T29] audit: type=1804 audit(1716850725.500:11): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir308062386/syzkaller.W0N4Hb/137/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 162.809184][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.746853][ T7621] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 163.755824][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.771828][ T7621] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 163.791889][ T7621] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 163.806537][ T7624] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 163.918492][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.961308][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.070118][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.228585][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.276854][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.359653][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.494962][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.524533][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.535121][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.543746][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.552974][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.570542][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.583643][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.806896][ T7632] caif0 speed is unknown, defaulting to 1000 [ 164.867312][ T6026] bridge_slave_1: left allmulticast mode [ 164.878143][ T6026] bridge_slave_1: left promiscuous mode [ 164.926800][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.990199][ T7652] dccp_close: ABORT with 32 bytes unread [ 164.999078][ T6026] bridge_slave_0: left allmulticast mode [ 165.016611][ T6026] bridge_slave_0: left promiscuous mode [ 165.022537][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.779252][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.795039][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.806356][ T6026] bond0 (unregistering): Released all slaves [ 165.825447][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.861962][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.914162][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.965698][ T7671] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 165.998027][ T7671] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 165.998880][ T7676] syz-executor.0: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 166.025631][ T7671] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 166.052415][ T7676] CPU: 1 PID: 7676 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12071-g66ad4829ddd0 #0 [ 166.062529][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 166.072654][ T7676] Call Trace: [ 166.075967][ T7676] [ 166.078933][ T7676] dump_stack_lvl+0x241/0x360 [ 166.083683][ T7676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.088927][ T7676] ? __pfx__printk+0x10/0x10 [ 166.093580][ T7676] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 166.100044][ T7676] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 166.106592][ T7676] warn_alloc+0x278/0x410 [ 166.110948][ T7676] ? stack_depot_save_flags+0x29/0x830 [ 166.116438][ T7676] ? __vmalloc_node_range_noprof+0x106/0x1490 [ 166.122556][ T7676] ? __pfx_warn_alloc+0x10/0x10 [ 166.127471][ T7676] ? kasan_save_track+0x3f/0x80 [ 166.132424][ T7676] ? __kasan_kmalloc+0x98/0xb0 [ 166.137211][ T7676] ? xsk_setsockopt+0x598/0x950 [ 166.142077][ T7676] ? do_sock_setsockopt+0x3af/0x720 [ 166.147311][ T7676] ? __sys_setsockopt+0x1ae/0x250 [ 166.152351][ T7676] ? __x64_sys_setsockopt+0xb5/0xd0 [ 166.157568][ T7676] ? do_syscall_64+0xf3/0x230 [ 166.162251][ T7676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.168333][ T7676] __vmalloc_node_range_noprof+0x126/0x1490 [ 166.174281][ T7676] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.180711][ T7676] ? __kasan_kmalloc+0x98/0xb0 [ 166.185487][ T7676] ? xskq_create+0x54/0x170 [ 166.190016][ T7676] vmalloc_user_noprof+0x74/0x80 [ 166.194962][ T7676] ? xskq_create+0xb6/0x170 [ 166.199482][ T7676] xskq_create+0xb6/0x170 [ 166.203829][ T7676] xsk_init_queue+0xa1/0x100 [ 166.208441][ T7676] xsk_setsockopt+0x598/0x950 [ 166.213138][ T7676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.218353][ T7676] ? __pfx_lock_acquire+0x10/0x10 [ 166.223397][ T7676] ? aa_sock_opt_perm+0x79/0x120 [ 166.228361][ T7676] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 166.233915][ T7676] ? security_socket_setsockopt+0x87/0xb0 [ 166.239678][ T7676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.244976][ T7676] do_sock_setsockopt+0x3af/0x720 [ 166.250111][ T7676] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.255848][ T7676] ? __fget_files+0x29/0x470 [ 166.260468][ T7676] ? __fget_files+0x3f6/0x470 [ 166.265177][ T7676] __sys_setsockopt+0x1ae/0x250 [ 166.270049][ T7676] __x64_sys_setsockopt+0xb5/0xd0 [ 166.275090][ T7676] do_syscall_64+0xf3/0x230 [ 166.279807][ T7676] ? clear_bhb_loop+0x35/0x90 [ 166.284509][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.290437][ T7676] RIP: 0033:0x7f842c27cee9 [ 166.294866][ T7676] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 166.314496][ T7676] RSP: 002b:00007f842d0570c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.322930][ T7676] RAX: ffffffffffffffda RBX: 00007f842c3b3f80 RCX: 00007f842c27cee9 [ 166.330944][ T7676] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 166.338927][ T7676] RBP: 00007f842c2c947f R08: 0000000000000020 R09: 0000000000000000 [ 166.346915][ T7676] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 166.354922][ T7676] R13: 000000000000000b R14: 00007f842c3b3f80 R15: 00007ffe61ed3518 [ 166.362937][ T7676] [ 166.376874][ T7676] Mem-Info: [ 166.380041][ T7676] active_anon:13134 inactive_anon:0 isolated_anon:0 [ 166.380041][ T7676] active_file:0 inactive_file:46710 isolated_file:0 [ 166.380041][ T7676] unevictable:768 dirty:63 writeback:0 [ 166.380041][ T7676] slab_reclaimable:10471 slab_unreclaimable:98377 [ 166.380041][ T7676] mapped:18490 shmem:1684 pagetables:596 [ 166.380041][ T7676] sec_pagetables:0 bounce:0 [ 166.380041][ T7676] kernel_misc_reclaimable:0 [ 166.380041][ T7676] free:1385680 free_pcp:383 free_cma:0 [ 166.528115][ T7676] Node 0 active_anon:52536kB inactive_anon:0kB active_file:0kB inactive_file:186772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73960kB dirty:248kB writeback:0kB shmem:5200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10600kB pagetables:2484kB sec_pagetables:0kB all_unreclaimable? no [ 166.629675][ T7676] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 166.668110][ T5131] Bluetooth: hci3: command tx timeout [ 166.685890][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.790762][ T7676] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.853935][ T7676] lowmem_reserve[]: 0 2571 2571 0 0 [ 166.860773][ T7676] Node 0 DMA32 free:1576872kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:52592kB inactive_anon:0kB active_file:0kB inactive_file:186456kB unevictable:1536kB writepending:244kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1596kB local_pcp:748kB free_cma:0kB [ 166.924586][ T7676] lowmem_reserve[]: 0 0 0 0 0 [ 166.929552][ T7676] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.957358][ T7676] lowmem_reserve[]: 0 0 0 0 0 [ 166.962155][ T7676] Node 1 Normal free:3951636kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.993116][ T7676] lowmem_reserve[]: 0 0 0 0 0 [ 166.998040][ T7676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.011095][ T7676] Node 0 DMA32: 1*4kB (E) 131*8kB (UME) 322*16kB (UME) 171*32kB (UME) 306*64kB (UME) 255*128kB (UME) 131*256kB (UM) 70*512kB (UME) 24*1024kB (UME) 3*2048kB (UM) 345*4096kB (ME) = 1577116kB [ 167.051642][ T7676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.063329][ T7676] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 6*16kB (UM) 6*32kB (UM) 5*64kB (U) 3*128kB (U) 6*256kB (UM) 3*512kB (UM) 5*1024kB (U) 5*2048kB (U) 960*4096kB (M) = 3951636kB [ 167.080681][ T7676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.090310][ T7676] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.099702][ T7676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.131141][ T7676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.156622][ T7676] 48394 total pagecache pages [ 167.161375][ T7676] 0 pages in swap cache [ 167.176543][ T7676] Free swap = 124996kB [ 167.180763][ T7676] Total swap = 124996kB [ 167.185032][ T7676] 2097051 pages RAM [ 167.192041][ T7676] 0 pages HighMem/MovableOnly [ 167.209737][ T6026] hsr_slave_0: left promiscuous mode [ 167.216413][ T7676] 400871 pages reserved [ 167.220932][ T7676] 0 pages cma reserved [ 167.239184][ T6026] hsr_slave_1: left promiscuous mode [ 167.254291][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.273796][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.296047][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.333559][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.417110][ T6026] veth1_macvtap: left promiscuous mode [ 167.429677][ T6026] veth0_macvtap: left promiscuous mode [ 167.446004][ T6026] veth1_vlan: left promiscuous mode [ 167.469996][ T6026] veth0_vlan: left promiscuous mode [ 167.554618][ T29] audit: type=1804 audit(1716850730.280:12): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2921248642/syzkaller.V3bT1T/168/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 167.665613][ T7710] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 167.772749][ T7711] __nla_validate_parse: 1 callbacks suppressed [ 167.772774][ T7711] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.292486][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 168.353524][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 168.727879][ T5131] Bluetooth: hci3: command tx timeout [ 168.830180][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.853361][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.939622][ T7719] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 168.959899][ T7719] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 168.969415][ T7719] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 168.987968][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 169.154318][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.184755][ T7728] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.311897][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.330686][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.338393][ T7632] bridge_slave_0: entered allmulticast mode [ 169.349992][ T7632] bridge_slave_0: entered promiscuous mode [ 169.372792][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.417107][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.432439][ T7632] bridge_slave_1: entered allmulticast mode [ 169.448346][ T7632] bridge_slave_1: entered promiscuous mode [ 169.593368][ T29] audit: type=1804 audit(1716850732.310:13): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2921248642/syzkaller.V3bT1T/171/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 169.602621][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.672132][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.687829][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.844346][ T7632] team0: Port device team_slave_0 added [ 169.887783][ T7632] team0: Port device team_slave_1 added [ 170.000638][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.017352][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.060072][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.099219][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.111431][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.126628][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.185091][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.246192][ T7761] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 170.267010][ T7761] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 170.291691][ T7761] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 170.337914][ T7632] hsr_slave_0: entered promiscuous mode [ 170.346209][ T7632] hsr_slave_1: entered promiscuous mode [ 170.356162][ T7632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.366791][ T7632] Cannot create hsr debugfs directory [ 170.647530][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.697512][ T7777] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.807366][ T5131] Bluetooth: hci3: command tx timeout [ 171.075142][ T7632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.098877][ T7632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 171.124346][ T7632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.159565][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.185717][ T7632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 171.537956][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.662470][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.713476][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.720725][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.795383][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.802681][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.870728][ T7797] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 171.925250][ T7801] tipc: Started in network mode [ 171.936063][ T7801] tipc: Node identity 6, cluster identity 4711 [ 171.943326][ T7801] tipc: Node number set to 6 [ 172.068614][ T7806] bond0: (slave batadv_slave_0): Releasing backup interface [ 172.333446][ T7818] bond0: (slave bond_slave_0): Releasing backup interface [ 172.468573][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.582745][ T7632] veth0_vlan: entered promiscuous mode [ 172.642338][ T7632] veth1_vlan: entered promiscuous mode [ 172.819507][ T7632] veth0_macvtap: entered promiscuous mode [ 172.886948][ T5116] Bluetooth: hci3: command tx timeout [ 172.889094][ T7632] veth1_macvtap: entered promiscuous mode [ 173.045128][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.084924][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.123347][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.139507][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.170434][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.192340][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.210084][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.225436][ T7849] __nla_validate_parse: 1 callbacks suppressed [ 173.225455][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.241413][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.252495][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.263702][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.277613][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.289255][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.312965][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.349840][ T7632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.360112][ T7632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.371173][ T7632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.395955][ T7632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.649402][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.671098][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.793961][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.812261][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.835298][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.065820][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.093041][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.127748][ T7873] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.281105][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.967257][ T5116] Bluetooth: hci3: command 0x0405 tx timeout [ 175.037022][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.112344][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.119640][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.134626][ T7920] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.169102][ T7921] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 175.192904][ T7921] team0: Device ipvlan1 failed to register rx_handler [ 175.714554][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.806750][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.819668][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.833898][ T7955] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 175.844468][ T7955] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 175.871794][ T7955] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 175.935563][ T7955] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.272969][ T7969] bridge0: port 3(syz_tun) entered blocking state [ 176.302494][ T7969] bridge0: port 3(syz_tun) entered disabled state [ 176.322336][ T7969] syz_tun: entered allmulticast mode [ 176.350993][ T7969] syz_tun: entered promiscuous mode [ 176.370407][ T7969] bridge0: port 3(syz_tun) entered blocking state [ 176.377062][ T7969] bridge0: port 3(syz_tun) entered forwarding state [ 176.781006][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.922797][ T7987] caif0 speed is unknown, defaulting to 1000 [ 176.985617][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 177.047848][ T5116] Bluetooth: hci3: command 0x0405 tx timeout [ 177.118316][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 177.290007][ T8010] bridge0: port 3(syz_tun) entered blocking state [ 177.350707][ T8010] bridge0: port 3(syz_tun) entered disabled state [ 177.357964][ T8010] syz_tun: entered allmulticast mode [ 177.365737][ T8010] syz_tun: entered promiscuous mode [ 177.373100][ T8010] bridge0: port 3(syz_tun) entered blocking state [ 177.379877][ T8010] bridge0: port 3(syz_tun) entered forwarding state [ 179.677533][ T8064] pim6reg1: entered promiscuous mode [ 179.682929][ T8064] pim6reg1: entered allmulticast mode [ 181.174606][ T8123] __nla_validate_parse: 1 callbacks suppressed [ 181.174628][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.998304][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.493454][ T8171] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 182.543179][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.584033][ T8171] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.765734][ T8176] syzkaller0: entered promiscuous mode [ 182.771657][ T8176] syzkaller0: entered allmulticast mode [ 182.834263][ T8181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.862427][ T8181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.940309][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.219920][ T8187] netlink: zone id is out of range [ 183.235766][ T8187] netlink: get zone limit has 4 unknown bytes [ 183.644218][ T8199] x_tables: ip_tables: ah match: only valid for protocol 51 [ 185.013139][ T8181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.026586][ T8181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.044643][ T8202] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 185.112492][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.133972][ T8202] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.301328][ T8181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.320361][ T8181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.460060][ T8181] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.475006][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 185.491371][ T8181] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.609128][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.639217][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.770819][ T8181] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.808137][ T8181] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.824642][ T8238] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 185.871987][ T8238] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.904483][ T8238] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.962153][ T8181] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.988469][ T8181] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.043622][ T8181] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.060351][ T8181] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.101829][ T8181] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.131097][ T8181] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.269315][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 187.036376][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 187.430911][ T8297] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 187.458723][ T8297] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 187.484376][ T8297] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 187.512347][ T8297] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 187.768552][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.309124][ T8340] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 194.493615][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.574233][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 196.581199][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 196.581210][ T5127] Bluetooth: hci1: command 0x0406 tx timeout [ 217.900709][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.910965][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.925740][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.934425][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.943785][ T5131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.952260][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.224474][ T5131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.234221][ T5131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.242782][ T5131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.260101][ T5131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.276800][ T5131] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.284241][ T5131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.506538][ T5131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.516895][ T5131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.524809][ T5131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.547174][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.556503][ T5131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.575318][ T5131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.907008][ T5131] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 218.923200][ T5131] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 218.932320][ T5131] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 218.951583][ T5131] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 218.959667][ T5131] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 218.968766][ T5131] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 220.016609][ T5121] Bluetooth: hci5: command tx timeout [ 220.336742][ T5121] Bluetooth: hci6: command tx timeout [ 220.646773][ T5121] Bluetooth: hci7: command tx timeout [ 221.057090][ T5121] Bluetooth: hci8: command tx timeout [ 221.631041][ T5131] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 221.641653][ T5131] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 221.658988][ T5131] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 221.672640][ T5131] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 221.683029][ T5131] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 221.702369][ T5131] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 222.086843][ T5131] Bluetooth: hci5: command tx timeout [ 222.406855][ T5131] Bluetooth: hci6: command tx timeout [ 222.726811][ T5131] Bluetooth: hci7: command tx timeout [ 223.126805][ T5131] Bluetooth: hci8: command tx timeout [ 223.767157][ T5131] Bluetooth: hci9: command tx timeout [ 224.166573][ T5131] Bluetooth: hci5: command tx timeout [ 224.486806][ T5131] Bluetooth: hci6: command tx timeout [ 224.806759][ T5131] Bluetooth: hci7: command tx timeout [ 225.211795][ T5131] Bluetooth: hci8: command tx timeout [ 225.847416][ T5131] Bluetooth: hci9: command tx timeout [ 226.246619][ T5131] Bluetooth: hci5: command tx timeout [ 226.571330][ T5131] Bluetooth: hci6: command tx timeout [ 226.896555][ T5131] Bluetooth: hci7: command tx timeout [ 227.286568][ T5131] Bluetooth: hci8: command tx timeout [ 227.927642][ T5131] Bluetooth: hci9: command tx timeout [ 230.007042][ T5131] Bluetooth: hci9: command tx timeout [ 252.895159][ T5131] Bluetooth: hci0: command 0x080f tx timeout [ 255.931944][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.033722][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 283.044476][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 283.065571][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 283.092893][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 283.108190][ T5131] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 283.115859][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 283.272542][ T5131] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 283.282469][ T5131] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 283.291224][ T5131] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 283.300524][ T5131] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 283.308589][ T5131] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 283.316093][ T5131] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 283.664738][ T5121] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 283.674932][ T5121] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 283.684394][ T5121] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 283.692943][ T5121] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 283.706179][ T5121] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 283.713776][ T5121] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 283.848219][ T5131] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 283.866701][ T5131] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 283.874603][ T5131] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 283.892101][ T5131] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 283.903328][ T5131] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 283.910994][ T5131] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 285.216338][ T5131] Bluetooth: hci10: command tx timeout [ 285.366823][ T5121] Bluetooth: hci11: command tx timeout [ 285.767874][ T5131] Bluetooth: hci12: command tx timeout [ 285.926662][ T5131] Bluetooth: hci13: command tx timeout [ 286.682963][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 286.696647][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 286.716103][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 286.724908][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 286.737833][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 286.745358][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 287.286821][ T5121] Bluetooth: hci10: command tx timeout [ 287.446735][ T5121] Bluetooth: hci11: command tx timeout [ 287.846499][ T5121] Bluetooth: hci12: command tx timeout [ 288.006531][ T5121] Bluetooth: hci13: command tx timeout [ 288.726499][ T5121] Bluetooth: hci3: command 0x0405 tx timeout [ 288.806926][ T5131] Bluetooth: hci14: command tx timeout [ 289.374957][ T5131] Bluetooth: hci10: command tx timeout [ 289.526564][ T5131] Bluetooth: hci11: command tx timeout [ 289.930447][ T5131] Bluetooth: hci12: command tx timeout [ 290.086534][ T5131] Bluetooth: hci13: command tx timeout [ 290.886620][ T5131] Bluetooth: hci14: command tx timeout [ 291.446559][ T5131] Bluetooth: hci10: command tx timeout [ 291.606624][ T5131] Bluetooth: hci11: command tx timeout [ 292.006719][ T5131] Bluetooth: hci12: command tx timeout [ 292.166617][ T5131] Bluetooth: hci13: command tx timeout [ 292.966754][ T5131] Bluetooth: hci14: command tx timeout [ 295.046735][ T5131] Bluetooth: hci14: command tx timeout [ 317.370411][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.566990][ T30] INFO: task syz-executor.0:8312 blocked for more than 143 seconds. [ 336.575040][ T30] Not tainted 6.9.0-syzkaller-12071-g66ad4829ddd0 #0 [ 336.590145][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.603739][ T30] task:syz-executor.0 state:D stack:27424 pid:8312 tgid:8308 ppid:5115 flags:0x00000006 2024/05/27 23:01:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 336.626694][ T30] Call Trace: [ 336.634031][ T30] [ 336.637205][ T30] __schedule+0x17e8/0x4a20 [ 336.641811][ T30] ? __pfx___schedule+0x10/0x10 [ 336.655066][ T30] ? __pfx_lock_release+0x10/0x10 [ 336.660425][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 336.665942][ T30] ? schedule+0x90/0x320 [ 336.670409][ T30] schedule+0x14b/0x320 [ 336.674604][ T30] schedule_preempt_disabled+0x13/0x30 [ 336.693447][ T30] __mutex_lock+0x6a4/0xd70 [ 336.715426][ T30] ? __mutex_lock+0x527/0xd70 [ 336.726595][ T30] ? ppp_ioctl+0x78b/0x1cd0 [ 336.731168][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 336.736260][ T30] ppp_ioctl+0x78b/0x1cd0 [ 336.756406][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 336.761259][ T30] ? __fget_files+0x3f6/0x470 [ 336.765975][ T30] ? __fget_files+0x29/0x470 [ 336.786426][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 336.791437][ T30] ? security_file_ioctl+0x87/0xb0 [ 336.806394][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 336.811223][ T30] __se_sys_ioctl+0xfc/0x170 [ 336.815859][ T30] do_syscall_64+0xf3/0x230 [ 336.836430][ T30] ? clear_bhb_loop+0x35/0x90 [ 336.841177][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.856406][ T30] RIP: 0033:0x7f842c27cee9 [ 336.860877][ T30] RSP: 002b:00007f842d0360c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.886434][ T30] RAX: ffffffffffffffda RBX: 00007f842c3b4050 RCX: 00007f842c27cee9 [ 336.896403][ T30] RDX: 00000000200000c0 RSI: 00000000c004743e RDI: 000000000000000c [ 336.904414][ T30] RBP: 00007f842c2c947f R08: 0000000000000000 R09: 0000000000000000 [ 336.938430][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.946508][ T30] R13: 000000000000006e R14: 00007f842c3b4050 R15: 00007ffe61ed3518 [ 336.954527][ T30] [ 336.976415][ T30] INFO: task syz-executor.0:8316 blocked for more than 143 seconds. [ 336.984498][ T30] Not tainted 6.9.0-syzkaller-12071-g66ad4829ddd0 #0 [ 337.006410][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.015131][ T30] task:syz-executor.0 state:D stack:26704 pid:8316 tgid:8308 ppid:5115 flags:0x00000006 [ 337.048638][ T30] Call Trace: [ 337.051984][ T30] [ 337.054954][ T30] __schedule+0x17e8/0x4a20 [ 337.066414][ T30] ? __pfx___schedule+0x10/0x10 [ 337.071351][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.086416][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 337.091978][ T30] ? schedule+0x90/0x320 [ 337.096289][ T30] schedule+0x14b/0x320 [ 337.116405][ T30] schedule_preempt_disabled+0x13/0x30 [ 337.121923][ T30] __mutex_lock+0x6a4/0xd70 [ 337.136555][ T30] ? __mutex_lock+0x527/0xd70 [ 337.141469][ T30] ? rtnetlink_rcv_msg+0x842/0x10d0 [ 337.158633][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 337.163817][ T30] rtnetlink_rcv_msg+0x842/0x10d0 [ 337.176404][ T30] ? rtnetlink_rcv_msg+0x208/0x10d0 [ 337.181709][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.206465][ T30] ? lock