last executing test programs: 3.865222462s ago: executing program 2: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc88ca968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 3.778101589s ago: executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}]}}]}, 0x4c}}, 0x0) 3.577556058s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x38}}, 0x0) 3.334013727s ago: executing program 2: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc88ca968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 3.219205482s ago: executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000005, 0xf) write$binfmt_misc(r3, 0x0, 0x99) write(0xffffffffffffffff, 0x0, 0x0) 1.830410747s ago: executing program 1: r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.552546704s ago: executing program 1: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)="ef831dc56dc3a0a4089fdc66", 0xc}], 0x2}, 0x0) 1.398771049s ago: executing program 1: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0x4, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 1.343721314s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x6000, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x2e) 1.305968337s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffff788}}}}}}}, 0x46) 939.38892ms ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe4a}, 0x90) 904.212775ms ago: executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 871.944978ms ago: executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000280)="ef831dc56dc3a0a4089fdc66", 0xc}], 0x2}, 0x0) 856.10644ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000200095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000001000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x19, 0x0, &(0x7f0000000080)) 715.296855ms ago: executing program 4: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0x4, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 706.45481ms ago: executing program 0: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000000000000008"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc88ca968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 683.14394ms ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x8f0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x85c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x470, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x3c8, 0x6, [@m_ctinfo={0x38, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3ff}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0x11c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0xa4, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd34278777199f7793bcc30f7c7b74cd6eded8934fa327e1541339075fdc86a745c472c9477faee71092d6a0a50cd377c521c047f0c8b2f4314876961ef4214903d7cb9ade598b7023384c5c8f726e342e8"}, {0xc}, {0xc}}}, @m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x8c, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{}, {}, {}]}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x19, 0x6, "41be356e964e7745f9a57571dce1c50c2bf05086e1"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x8f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x924}, {&(0x7f00000007c0)=""/154, 0xc8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 587.543787ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x86}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 567.479539ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x4}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0) 560.883707ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffff788}}}}}}}, 0x46) 453.649772ms ago: executing program 4: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}, 0x10) 423.844218ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x3, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 375.169843ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 282.160091ms ago: executing program 0: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000016481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) 205.040028ms ago: executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000003800128008000100736974002c00028006000f000000000008000200ac14140006000f0001000000060011004e24000008000100", @ANYRES32], 0x58}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 144.173939ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x228, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x20c, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x7}}}, [{0xdd, 0x95, "8b7668a21729e4ad77e366ae9e66d671f8bb54784e373e2223fde04977365429048047ad806c438142ae7889f37bbd41e50a26612ce77fcf71400d7c1e0a34b043fbb4ca6b6e5ecb7c8169982fe3f1261537a3b4467e0db0ca915ec1964c56db466602eed1b321bfab5c5b2ab6d6e1ffff58b596e2cfca04801aae25adb2b4b53aa135a66ae836452cff03af5ed4b78b2f98cb570d"}, {0xdd, 0xa5, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd528566752ef4090016895d45162f023cde71dbd618a52517986b705c5e653ee0e7edda93407e44be1c203b816d0181c08d"}, {0xdd, 0x8c, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a52"}]}}]}, 0x228}}, 0x0) 140.502912ms ago: executing program 0: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000280)="ef831dc56dc3a0a4089fdc66", 0xc}], 0x2}, 0x0) 91.021238ms ago: executing program 2: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc88ca968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 39.9167ms ago: executing program 0: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty=0x4, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 0s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000ad00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.790968][T22490] netlink: 69 bytes leftover after parsing attributes in process `syz-executor.1'. [ 475.154641][T22511] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 475.422129][T22522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.498493][T22525] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 475.542575][T22525] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 475.627442][T22534] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 475.825033][T22544] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 475.881238][T22545] syz-executor.2[22545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.881595][T22545] syz-executor.2[22545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.244385][T22562] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 476.278741][T22565] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.326164][T22562] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 476.561900][T22577] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.613763][T22577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.783938][T22588] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 476.943818][T22597] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 477.013883][T22591] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 477.289890][T22612] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.378596][T22619] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 477.667007][T22636] tipc: Started in network mode [ 477.690301][T22636] tipc: Node identity ac1414aa, cluster identity 4711 [ 477.704453][T22636] tipc: Enabled bearer , priority 10 [ 478.165844][ T35] wlan1: Trigger new scan to find an IBSS to join [ 478.818187][ T8] tipc: Node number set to 2886997162 [ 478.855971][T22690] syz-executor.0[22690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.856326][T22690] syz-executor.0[22690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.105218][T22704] __nla_validate_parse: 1 callbacks suppressed [ 479.105240][T22704] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 479.204222][ T35] wlan1: Trigger new scan to find an IBSS to join [ 479.855488][T22731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.942599][T22733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.949918][T22733] IPv6: NLM_F_CREATE should be set when creating new route [ 480.179658][T22740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.501995][T22754] team0: Port device team_slave_0 removed [ 480.566705][T22754] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 481.118719][ T51] wlan1: Trigger new scan to find an IBSS to join [ 481.295542][T22796] team0: Port device team_slave_0 removed [ 481.305412][T22796] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 481.727399][T22820] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.054196][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.076229][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.085149][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.114780][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.129595][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 482.137144][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 482.156856][ T35] wlan1: Trigger new scan to find an IBSS to join [ 482.205576][ T1046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.324208][T22846] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 482.335010][T22846] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 482.357320][ T1046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.529135][ T1046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.575188][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.639391][ T1046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.687618][T22855] team0: Port device bridge1 added [ 482.714182][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 482.838401][T22871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 483.136238][ T1046] bridge_slave_1: left allmulticast mode [ 483.164471][ T1046] bridge_slave_1: left promiscuous mode [ 483.179739][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.244492][ T1046] bridge_slave_0: left allmulticast mode [ 483.270748][ T1046] bridge_slave_0: left promiscuous mode [ 483.296523][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.855787][T22928] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.126470][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.139128][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.150895][ T1046] bond0 (unregistering): Released all slaves [ 484.157587][ T2441] wlan1: Trigger new scan to find an IBSS to join [ 484.179401][ T1046] bond1 (unregistering): Released all slaves [ 484.236331][ T5115] Bluetooth: hci3: command tx timeout [ 484.300093][T22830] chnl_net:caif_netlink_parms(): no params data found [ 484.326753][ T1046] tipc: Disabling bearer [ 484.336711][ T1046] tipc: Left network mode [ 484.711108][T22830] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.736288][T22830] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.743584][T22830] bridge_slave_0: entered allmulticast mode [ 484.768299][T22830] bridge_slave_0: entered promiscuous mode [ 484.904773][T22830] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.914939][T22965] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.928528][T22830] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.943665][T22830] bridge_slave_1: entered allmulticast mode [ 484.965056][T22830] bridge_slave_1: entered promiscuous mode [ 485.080616][ T1046] hsr_slave_0: left promiscuous mode [ 485.109219][ T2424] wlan1: Creating new IBSS network, BSSID 46:21:2b:d8:2b:2e [ 485.131867][ T1046] hsr_slave_1: left promiscuous mode [ 485.151471][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.170223][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.191459][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.200070][ T2441] wlan1: Trigger new scan to find an IBSS to join [ 485.235873][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.301546][ T1046] veth1_macvtap: left promiscuous mode [ 485.316935][ T1046] veth0_macvtap: left promiscuous mode [ 485.327741][ T1046] veth1_vlan: left promiscuous mode [ 485.338320][ T1046] veth0_vlan: left promiscuous mode [ 485.708140][ T1046] pimreg (unregistering): left allmulticast mode [ 486.146308][ T2453] wlan1: Creating new IBSS network, BSSID 1a:19:45:13:6b:90 [ 486.240849][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 486.283379][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 486.325959][ T5115] Bluetooth: hci3: command tx timeout [ 486.749634][T22971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.790988][T22980] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 486.813261][T22976] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 486.834498][T22830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.877867][T22830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.141252][T22830] team0: Port device team_slave_0 added [ 487.158292][T22996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 487.182128][T22996] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 487.207364][T22830] team0: Port device team_slave_1 added [ 487.279838][T22830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.297181][T22830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.354233][T22830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.418939][T22830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.446574][T22830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.500531][T22830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.541324][ T1046] IPVS: stop unused estimator thread 0... [ 487.754228][T22830] hsr_slave_0: entered promiscuous mode [ 487.789725][T22830] hsr_slave_1: entered promiscuous mode [ 487.819275][T22830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.828482][T22830] Cannot create hsr debugfs directory [ 487.913103][T23027] openvswitch: netlink: Message has 16 unknown bytes. [ 488.395970][ T5115] Bluetooth: hci3: command tx timeout [ 488.686314][T23060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 488.901812][T23066] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 489.309660][T22830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.373267][T23086] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 489.387466][T22830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.415417][T22830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.468139][T22830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.599061][T23093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.743115][T22830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.770622][T23100] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 489.934841][T22830] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.960589][T23111] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 489.994237][T23111] bridge0: port 2(team0) entered disabled state [ 490.010579][T23111] team0: left allmulticast mode [ 490.029297][T23111] team_slave_0: left allmulticast mode [ 490.055295][T23111] team_slave_1: left allmulticast mode [ 490.065447][T23111] macvlan1: left allmulticast mode [ 490.090666][T23111] veth1_vlan: left allmulticast mode [ 490.105285][T23111] macvlan2: left allmulticast mode [ 490.120173][T23111] macvlan3: left allmulticast mode [ 490.125515][T23111] vlan1: left allmulticast mode [ 490.130652][T23111] veth0_vlan: left allmulticast mode [ 490.137169][T23111] team0: left promiscuous mode [ 490.142077][T23111] team_slave_0: left promiscuous mode [ 490.147999][T23111] team_slave_1: left promiscuous mode [ 490.153728][T23111] macvlan1: left promiscuous mode [ 490.159871][T23111] bridge0: port 2(team0) entered disabled state [ 490.178080][T23111] batman_adv: batadv0: Adding interface: team0 [ 490.185414][T23111] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 490.254429][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.261619][T12147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.318520][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.325760][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.475847][ T5115] Bluetooth: hci3: command tx timeout [ 490.957842][T23153] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.073082][T23159] tipc: Enabling of bearer rejected, failed to enable media [ 491.097200][T22830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.221640][T22830] veth0_vlan: entered promiscuous mode [ 491.243056][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.257171][T22830] veth1_vlan: entered promiscuous mode [ 491.356908][T22830] veth0_macvtap: entered promiscuous mode [ 491.402944][T22830] veth1_macvtap: entered promiscuous mode [ 491.467047][T22830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.486525][T22830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.509218][T22830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.529167][T22830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.542704][T22830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.564097][T22830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.600520][T22830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.709002][T22830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.721694][T22830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.733321][T22830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.743980][T22830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.753912][T22830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.771546][T22830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.792784][T22830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.828532][T22830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.850576][T22830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.860260][T22830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.869143][T22830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.069908][ T2441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.097946][ T2441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.143968][ T2424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.157421][ T2424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.108053][T23296] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.041301][T23341] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 495.520253][T23370] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 495.528858][T23370] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 495.538158][T23370] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 495.547142][T23370] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 495.570312][T23370] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 495.587887][T23370] netlink: 'syz-executor.3': attribute type 37 has an invalid length. [ 495.604624][T23370] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 495.628350][T23370] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.469550][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.481753][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.494871][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.512198][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.520716][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 496.529991][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.778601][ T2441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.912042][ T2441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.000809][ T2441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.019340][T23405] chnl_net:caif_netlink_parms(): no params data found [ 497.174662][ T2441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.341382][T23405] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.349262][T23405] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.363438][T23405] bridge_slave_0: entered allmulticast mode [ 497.371564][T23405] bridge_slave_0: entered promiscuous mode [ 497.380380][T23405] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.389821][T23405] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.397862][T23405] bridge_slave_1: entered allmulticast mode [ 497.413997][T23405] bridge_slave_1: entered promiscuous mode [ 497.537348][T23405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.588238][T23405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.725132][ T2441] bridge_slave_1: left allmulticast mode [ 497.744111][ T2441] bridge_slave_1: left promiscuous mode [ 497.756682][ T2441] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.784115][ T2441] bridge_slave_0: left allmulticast mode [ 497.791997][ T2441] bridge_slave_0: left promiscuous mode [ 497.805448][ T2441] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.093800][ T2441] batman_adv: batadv0: Removing interface: vlan2 [ 498.284340][ T2441] team0: Port device bridge1 removed [ 498.453371][ T2441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.465226][ T2441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.482544][ T2441] bond0 (unregistering): Released all slaves [ 498.501313][T23405] team0: Port device team_slave_0 added [ 498.556226][ T5115] Bluetooth: hci5: command tx timeout [ 498.578644][T23405] team0: Port device team_slave_1 added [ 498.769297][T23405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.795987][T23405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.863931][T23405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.903517][T23405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.911097][T23405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.960838][ T29] audit: type=1804 audit(1719081571.137:46): pid=23501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir164502546/syzkaller.SsI2ef/22/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 [ 498.997128][T23405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.074767][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 499.188066][T23405] hsr_slave_0: entered promiscuous mode [ 499.202002][T23405] hsr_slave_1: entered promiscuous mode [ 499.225234][T23405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.235723][T23405] Cannot create hsr debugfs directory [ 499.268997][ T2441] hsr_slave_0: left promiscuous mode [ 499.289218][ T2441] hsr_slave_1: left promiscuous mode [ 499.295263][ T2441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.303656][ T2441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.320834][ T2441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.329542][ T2441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.371252][ T2441] veth1_vlan: left promiscuous mode [ 499.378833][ T2441] veth0_vlan: left promiscuous mode [ 499.866097][ T2441] team0 (unregistering): Port device team_slave_1 removed [ 500.405053][T23542] openvswitch: netlink: Message has 4 unknown bytes. [ 500.606376][T23511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.635900][ T5115] Bluetooth: hci5: command tx timeout [ 501.000928][T23556] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.293042][T23572] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 501.379706][T23575] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 501.408624][ T29] audit: type=1804 audit(1719081573.587:47): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir847534219/syzkaller.kFu9as/991/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 501.458447][T23405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 501.471187][T23405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 501.481664][T23405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 501.494290][T23405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 501.620867][T23405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.652737][T23405] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.669271][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.676482][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.712614][T11989] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.719847][T11989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.830423][T23405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.226710][T23405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.361754][T23405] veth0_vlan: entered promiscuous mode [ 502.392388][T23405] veth1_vlan: entered promiscuous mode [ 502.464618][T23405] veth0_macvtap: entered promiscuous mode [ 502.480569][T23405] veth1_macvtap: entered promiscuous mode [ 502.544724][T23405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.557600][T23405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.569944][T23405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.605809][T23405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.630353][T23405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.665980][T23405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.683489][T23405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.717568][T23405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.728728][ T5115] Bluetooth: hci5: command tx timeout [ 502.778126][T23405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.824085][T23405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.856731][T23405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.885840][T23405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.920931][T23405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.942710][T23405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.984663][T23405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.004004][T23405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.024012][T23405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.043663][T23405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.199891][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.214974][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.246994][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.262970][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.550929][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 503.626254][T23635] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 503.861216][ T11] tipc: Subscription rejected, illegal request [ 504.058448][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 504.279290][T23668] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.764663][ T11] tipc: Subscription rejected, illegal request [ 504.796005][ T5115] Bluetooth: hci5: command tx timeout [ 504.876734][T23694] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 504.986183][T23700] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 505.009312][T23700] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 505.025110][T23700] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 505.359727][T23719] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.409080][T23720] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 505.500519][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.673703][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.790311][T23751] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 507.193231][T23793] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 507.601222][T23813] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 507.846207][T23825] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 507.866484][T23825] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 507.889188][T23827] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 507.916517][T23828] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 508.136432][T23838] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 508.159097][T23838] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 508.442479][T23857] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 509.344754][T23915] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.393452][T23915] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 509.494320][T23924] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 509.934731][T23952] xt_bpf: check failed: parse error [ 510.003133][T23956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.463962][T24032] vcan0: tx drop: invalid da for name 0x0200000000000003 [ 511.515862][ T5223] page_pool_release_retry() stalled pool shutdown: id 147, 1 inflight 60 sec [ 511.694590][T24037] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.706256][T24037] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.716416][T24037] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.741768][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 513.063295][T24116] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.660013][T24147] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 513.883547][T24152] netlink: 4580 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.893957][T24152] netlink: 4580 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.907745][T24152] netlink: 69 bytes leftover after parsing attributes in process `syz-executor.1'. [ 514.530101][T24169] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 514.671012][ T29] audit: type=1804 audit(1719081586.847:48): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3805770483/syzkaller.33c8uy/372/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 514.950306][T24184] sctp: [Deprecated]: syz-executor.0 (pid 24184) Use of int in max_burst socket option. [ 514.950306][T24184] Use struct sctp_assoc_value instead [ 515.046385][ T29] audit: type=1804 audit(1719081587.217:49): pid=24188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3805770483/syzkaller.33c8uy/378/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 515.057312][ T5167] IPVS: starting estimator thread 0... [ 515.197004][T24191] IPVS: using max 18 ests per chain, 43200 per kthread [ 515.338616][ T29] audit: type=1804 audit(1719081587.517:50): pid=24197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir847534219/syzkaller.kFu9as/1046/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 515.459482][T24215] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.470341][T24215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 515.664774][T24227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 515.688034][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 515.690707][T24230] ipt_REJECT: TCP_RESET invalid for non-tcp [ 515.842669][T24237] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 515.855144][T24237] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.4'. [ 515.989006][T24246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 516.215458][T24258] tipc: Started in network mode [ 516.225935][T24258] tipc: Node identity ac1414aa, cluster identity 4711 [ 516.233332][T24258] tipc: Enabled bearer , priority 10 [ 516.344464][T24266] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 516.647190][T24286] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 516.751100][T24293] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 516.778348][T24295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.783515][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 516.917063][T24305] dccp_invalid_packet: P.Data Offset(68) too large [ 516.958242][T24308] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.960844][T24306] macvlan3: entered promiscuous mode [ 517.004004][T24306] vlan1: entered promiscuous mode [ 517.021787][T24306] team0: Port device macvlan3 added [ 517.024726][T24310] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 517.141440][T24318] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 517.233828][T24322] vlan2: entered allmulticast mode [ 517.353678][ T5167] tipc: Node number set to 2886997162 [ 517.370634][T24333] dccp_invalid_packet: P.Data Offset(68) too large [ 517.392951][T24334] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 517.926629][T24370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.933876][T24370] IPv6: NLM_F_CREATE should be set when creating new route [ 519.154656][T24450] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 519.192626][T24450] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 519.779705][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.798641][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.812779][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.842789][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.870954][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 519.886989][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.364586][T24470] __nla_validate_parse: 7 callbacks suppressed [ 521.364605][T24470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 521.406766][T24473] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 521.455527][T24470] team0: Port device bridge4 added [ 521.567263][T24480] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 521.587481][T24480] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 521.662950][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.722360][T24492] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 521.731870][T24492] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 521.799581][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.834638][T24464] chnl_net:caif_netlink_parms(): no params data found [ 521.916370][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.996555][ T5115] Bluetooth: hci1: command tx timeout [ 522.145269][T24464] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.177829][T24464] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.212461][T24464] bridge_slave_0: entered allmulticast mode [ 522.232002][T24464] bridge_slave_0: entered promiscuous mode [ 522.258073][T24464] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.280991][T24464] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.299301][T24464] bridge_slave_1: entered allmulticast mode [ 522.314953][T24464] bridge_slave_1: entered promiscuous mode [ 522.449495][T24464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.482970][T24464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.571214][ T62] bridge_slave_1: left allmulticast mode [ 522.585993][ T62] bridge_slave_1: left promiscuous mode [ 522.591808][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.640278][ T62] bridge_slave_0: left promiscuous mode [ 522.646446][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.354606][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.372293][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.382892][ T62] bond0 (unregistering): Released all slaves [ 523.401940][T24464] team0: Port device team_slave_0 added [ 523.410556][T24524] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 523.431472][T24524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.468956][T24524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.512775][T24524] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 523.546935][T24464] team0: Port device team_slave_1 added [ 523.609258][ T62] tipc: Left network mode [ 523.625218][ T29] audit: type=1804 audit(1719081595.797:51): pid=24530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir572689606/syzkaller.zKdfLV/505/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 523.681145][T24464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.701816][T24464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.732821][T24464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.753166][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 523.763711][T24537] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 523.772825][T24537] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 523.781821][T24464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.796234][T24464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.874288][T24464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.905001][T24541] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.912419][T24541] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.076783][ T5115] Bluetooth: hci1: command tx timeout [ 524.178190][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 524.227481][T24464] hsr_slave_0: entered promiscuous mode [ 524.237798][T24464] hsr_slave_1: entered promiscuous mode [ 524.246769][ T29] audit: type=1107 audit(1719081596.417:52): pid=24547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 524.246769][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 524.275744][T24464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.293935][T24464] Cannot create hsr debugfs directory [ 524.592375][ T62] hsr_slave_0: left promiscuous mode [ 524.633794][ T62] hsr_slave_1: left promiscuous mode [ 524.682679][T24568] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 524.691581][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.707084][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.720646][T24568] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 524.726082][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.747511][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.829034][ T62] bridge_slave_0: left allmulticast mode [ 524.834898][ T62] veth1_vlan: left promiscuous mode [ 524.851779][ T62] veth0_vlan: left promiscuous mode [ 525.038067][T24579] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.389522][ T62] team0 (unregistering): Port device team_slave_1 removed [ 525.438909][ T62] team0 (unregistering): Port device team_slave_0 removed [ 525.920564][T24579] Êü: entered promiscuous mode [ 526.024519][T24584] syzkaller1: entered promiscuous mode [ 526.052209][T24584] syzkaller1: entered allmulticast mode [ 526.156016][ T5115] Bluetooth: hci1: command tx timeout [ 526.202466][ T29] audit: type=1107 audit(1719081598.377:53): pid=24588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 526.202466][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 526.319698][ T62] IPVS: stop unused estimator thread 0... [ 526.455217][T24602] xt_hashlimit: size too large, truncated to 1048576 [ 526.479427][T24602] xt_hashlimit: max too large, truncated to 1048576 [ 526.494287][T24602] xt_hashlimit: overflow, try lower: 0/0 [ 526.827446][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 526.902044][T24464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 526.959623][T24464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 527.017001][T24464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.042511][T24464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 527.306493][T24464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.354698][T24464] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.424964][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.432184][ T5223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.452601][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.459825][ T5223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.745292][ T29] audit: type=1804 audit(1719081599.917:54): pid=24631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3953854370/syzkaller.CADsmq/121/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 527.823017][T24464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.850605][T24633] dvmrp0: left allmulticast mode [ 527.919382][T24636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.126973][T24464] veth0_vlan: entered promiscuous mode [ 528.167721][T24464] veth1_vlan: entered promiscuous mode [ 528.222395][T24464] veth0_macvtap: entered promiscuous mode [ 528.236195][ T5115] Bluetooth: hci1: command tx timeout [ 528.242100][T24464] veth1_macvtap: entered promiscuous mode [ 528.290922][T24464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.306979][T24464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.307237][ T29] audit: type=1107 audit(1719081600.487:55): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<|KÏüÑ,÷íÂ-øÐ"5³)ÛõK©XÎ骵$âý‚÷‚}« R¾˜…¹,¼`’ [ 528.307237][ T29] =õ·¤˜°J,PV"’«÷%öøa›]ØŽZ”îTe¤¡u­Mûz˜;ÑXëd­ò²bÚÔráP¤z›ýa±ù׌ðg$W©pk)Ï' [ 528.317617][T24464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.361209][T24464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.373348][T24464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.404142][T24464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.423519][T24464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.437026][T24464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.452262][T24464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.462450][T24464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.475380][T24464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.487823][T24464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.508145][T24464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.524409][T24464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.534031][T24464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.544904][T24464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.710126][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.755847][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.823553][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.829723][T24658] bridge0: port 3(team0) entered blocking state [ 528.844523][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.853375][T24658] bridge0: port 3(team0) entered disabled state [ 528.865050][T24658] team0: entered allmulticast mode [ 528.871118][T24656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.881202][T24658] team_slave_1: entered allmulticast mode [ 528.888611][T24658] bridge3: entered allmulticast mode [ 528.894524][T24658] macvlan3: entered allmulticast mode [ 528.901615][T24658] vlan1: entered allmulticast mode [ 528.909345][T24658] veth0_vlan: entered allmulticast mode [ 528.932575][T24658] team0: entered promiscuous mode [ 528.938280][T24658] team_slave_1: entered promiscuous mode [ 528.948115][T24658] bridge3: entered promiscuous mode [ 528.971073][T24662] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 529.137375][T24671] Bluetooth: MGMT ver 1.22 [ 529.153469][T24671] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 529.257062][T24685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.867749][T24701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.666824][T24703] geneve0: entered promiscuous mode [ 531.672190][T24703] geneve0: entered allmulticast mode [ 532.169864][T24722] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 532.719816][T24742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.741553][T24744] sctp: [Deprecated]: syz-executor.2 (pid 24744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.741553][T24744] Use struct sctp_sack_info instead [ 532.742646][T24746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.795502][T24744] netlink: 876 bytes leftover after parsing attributes in process `syz-executor.2'. [ 532.870308][T24749] Cannot find add_set index 0 as target [ 532.886510][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 532.897316][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 532.907198][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 532.917429][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 532.930253][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 532.939357][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 533.123652][T24758] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 533.419831][T24755] geneve0: entered promiscuous mode [ 533.425102][T24755] geneve0: entered allmulticast mode [ 533.906979][T24770] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.941177][T24750] chnl_net:caif_netlink_parms(): no params data found [ 533.987556][T24766] bridge0: port 3(team0) entered blocking state [ 533.993938][T24766] bridge0: port 3(team0) entered disabled state [ 534.033498][T24766] team0: entered allmulticast mode [ 534.045760][T24766] team_slave_0: entered allmulticast mode [ 534.067955][T24766] team_slave_1: entered allmulticast mode [ 534.078147][T24766] team0: entered promiscuous mode [ 534.083203][T24766] team_slave_0: entered promiscuous mode [ 534.089775][T24766] team_slave_1: entered promiscuous mode [ 534.100259][T24766] bridge0: port 3(team0) entered blocking state [ 534.107138][T24766] bridge0: port 3(team0) entered forwarding state [ 534.242226][T24779] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 534.359132][T24779] bond3: entered promiscuous mode [ 534.366241][T24779] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.565292][T24785] bond3: (slave bridge5): making interface the new active one [ 534.575995][T24785] bridge5: entered promiscuous mode [ 534.587753][T24785] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 534.601571][T24750] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.612062][T24750] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.620786][T24750] bridge_slave_0: entered allmulticast mode [ 534.628700][T24750] bridge_slave_0: entered promiscuous mode [ 534.649103][T24750] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.664812][T24750] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.680330][T24750] bridge_slave_1: entered allmulticast mode [ 534.693815][T24750] bridge_slave_1: entered promiscuous mode [ 534.755472][T24797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.831317][T24750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.861167][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.909296][T24750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.038962][ T5115] Bluetooth: hci6: command tx timeout [ 535.072307][T24750] team0: Port device team_slave_0 added [ 535.142522][T24750] team0: Port device team_slave_1 added [ 535.302671][T24750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.321409][T24750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.403142][T24750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.440791][T24750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.461221][T24750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.508467][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 535.533943][T24750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.611472][T24817] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 535.687117][T24750] hsr_slave_0: entered promiscuous mode [ 535.715273][T24750] hsr_slave_1: entered promiscuous mode [ 535.732902][T24819] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 536.275051][T24750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.335485][T24833] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 536.351102][T24833] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 536.366285][T24836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.373562][T24836] IPv6: NLM_F_CREATE should be set when creating new route [ 536.460950][T24750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.536943][T24843] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 536.607971][T24750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.632206][T24840] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 536.698637][T24840] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 536.716337][T24840] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 536.735977][T24840] team0: Port device netdevsim0 added [ 536.738103][T24848] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 536.741912][T24843] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 536.844408][T24750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.873084][T24843] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 537.047587][T24750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 537.088362][T24750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 537.109464][T24750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 537.117204][ T5115] Bluetooth: hci6: command tx timeout [ 537.128297][T24750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 537.208693][T24852] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 537.253273][T24750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.352534][T24750] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.368379][T12605] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.375604][T12605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.443020][T12605] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.450284][T12605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.686142][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.109242][T24750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.186613][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.198032][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.216803][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.225141][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.233870][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 538.244306][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.257554][T24750] veth0_vlan: entered promiscuous mode [ 538.307393][T24750] veth1_vlan: entered promiscuous mode [ 538.422043][T24750] veth0_macvtap: entered promiscuous mode [ 538.460529][T24750] veth1_macvtap: entered promiscuous mode [ 538.527651][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.542606][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.558545][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.569200][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.584758][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.603007][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.615032][T24750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.693697][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.707697][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.718322][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.730078][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.740599][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.758062][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.768375][T24750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.779652][T24750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.792355][T24750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.805545][T24750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.823511][T24750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.832685][T24750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.841741][T24750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.893728][T24883] syzkaller0: entered promiscuous mode [ 538.900250][T24883] syzkaller0: entered allmulticast mode [ 538.907593][T24887] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 538.921011][T24887] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 539.148611][T24891] Bluetooth: hci3: unsupported parameter 28 [ 539.154612][T24891] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 539.201692][ T5115] Bluetooth: hci6: command tx timeout [ 540.320976][ T5115] Bluetooth: hci0: command tx timeout [ 540.973704][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.236601][T24868] chnl_net:caif_netlink_parms(): no params data found [ 541.264873][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.276304][ T5115] Bluetooth: hci6: command tx timeout [ 541.283668][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.405398][T24917] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.458761][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.468375][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.584610][T24920] openvswitch: netlink: ct_state flags 0000d2dc unsupported [ 541.619301][T24927] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 541.650010][T24868] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.665861][T24868] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.666175][T24927] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 541.673088][T24868] bridge_slave_0: entered allmulticast mode [ 541.692106][T24868] bridge_slave_0: entered promiscuous mode [ 541.708001][T24868] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.716669][T24868] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.723893][T24868] bridge_slave_1: entered allmulticast mode [ 541.739531][T24868] bridge_slave_1: entered promiscuous mode [ 541.802186][T24868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.858816][T24868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.900328][T24931] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 541.943882][T24931] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 541.997862][T24868] team0: Port device team_slave_0 added [ 542.030055][T24868] team0: Port device team_slave_1 added [ 542.323599][T24868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.360402][T24868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.406734][ T5115] Bluetooth: hci0: command tx timeout [ 542.416986][T24868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.442511][T24868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.449740][T24868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.478483][T24868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.643049][T24868] hsr_slave_0: entered promiscuous mode [ 542.667602][T24868] hsr_slave_1: entered promiscuous mode [ 542.688722][T24868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.714522][T24868] Cannot create hsr debugfs directory [ 542.741707][ T2441] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.967497][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.995385][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.049171][T24953] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.227237][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.239237][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.440746][T24955] syzkaller0: entered promiscuous mode [ 543.457028][T24955] syzkaller0: entered allmulticast mode [ 543.504030][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.508321][T24975] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 543.537974][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.577652][T24964] veth0_vlan: left promiscuous mode [ 543.754186][T24978] TCP: TCP_TX_DELAY enabled [ 543.970682][T24985] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 544.019950][T24986] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 544.479042][ T5124] Bluetooth: hci0: command tx timeout [ 545.725155][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.737010][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.126408][ T12] team0: left allmulticast mode [ 546.131313][ T12] team_slave_1: left allmulticast mode [ 546.134993][T25002] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 546.154938][ T12] bridge3: left allmulticast mode [ 546.158424][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 546.169522][ T12] macvlan3: left allmulticast mode [ 546.169658][T25002] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.187461][ T12] vlan1: left allmulticast mode [ 546.192341][ T12] veth0_vlan: left allmulticast mode [ 546.226474][ T12] team0: left promiscuous mode [ 546.231380][ T12] team_slave_1: left promiscuous mode [ 546.256526][ T12] bridge3: left promiscuous mode [ 546.269004][ T12] bridge0: port 3(team0) entered disabled state [ 546.302345][ T12] bridge_slave_1: left allmulticast mode [ 546.317893][ T12] bridge_slave_1: left promiscuous mode [ 546.333899][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.359725][ T12] bridge_slave_0: left promiscuous mode [ 546.377049][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.400552][ T12] gretap1: left allmulticast mode [ 546.406008][ T12] gretap1: left promiscuous mode [ 546.411141][ T12] bridge1: port 1(gretap1) entered disabled state [ 546.502690][T25013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 546.567494][ T5124] Bluetooth: hci0: command 0x0419 tx timeout [ 546.885388][ T12] team0: Port device bridge3 removed [ 546.961481][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.975047][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.988836][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 546.999600][ T12] bond0 (unregistering): Released all slaves [ 547.213849][ T12] tipc: Left network mode [ 547.332429][T25034] IPv6: Can't replace route, no match found [ 547.416227][T25025] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 547.428020][ T12] IPVS: stopping backup sync thread 23341 ... [ 547.594749][T25043] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 547.616149][T25043] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 547.634720][T25042] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 547.657236][T25042] ip6gretap0: entered promiscuous mode [ 547.667410][T25042] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 547.761425][T25050] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 547.765096][T25048] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 547.794371][T25050] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 547.803938][T24868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 547.815595][T24868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 547.853991][T24868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 547.873689][T25053] netlink: zone id is out of range [ 547.879813][T25053] netlink: zone id is out of range [ 547.883511][T24868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 547.887744][T25053] netlink: zone id is out of range [ 547.898959][T25053] netlink: zone id is out of range [ 547.904101][T25053] netlink: zone id is out of range [ 547.911856][T25053] netlink: zone id is out of range [ 547.945826][T25053] netlink: zone id is out of range [ 547.971991][T25053] netlink: zone id is out of range [ 547.999126][T25053] netlink: zone id is out of range [ 548.004269][T25053] netlink: zone id is out of range [ 548.159151][ T12] hsr_slave_0: left promiscuous mode [ 548.193151][ T12] hsr_slave_1: left promiscuous mode [ 548.248833][ T12] bridge_slave_0: left allmulticast mode [ 548.265194][ T12] vlan1: left promiscuous mode [ 548.277425][ T12] veth0_macvtap: left promiscuous mode [ 548.294301][ T12] veth1_vlan: left promiscuous mode [ 548.309726][ T12] veth0_vlan: left promiscuous mode [ 548.540415][ T12] team0 (unregistering): Port device macvlan3 removed [ 548.642287][ T5124] Bluetooth: hci0: command 0x0419 tx timeout [ 549.078474][ T12] team0 (unregistering): Port device team_slave_1 removed [ 549.493976][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.771934][T24868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.861416][T24868] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.894496][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.901689][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.970650][T12025] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.977830][T12025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.137217][ T12] IPVS: stop unused estimator thread 0... [ 550.172079][T24868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.335832][T25098] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 550.355486][T25098] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 550.583841][T25103] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 550.600578][T24868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.748537][T24868] veth0_vlan: entered promiscuous mode [ 550.775255][T24868] veth1_vlan: entered promiscuous mode [ 550.831181][T24868] veth0_macvtap: entered promiscuous mode [ 550.843916][T24868] veth1_macvtap: entered promiscuous mode [ 550.878056][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.897043][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.915057][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.926388][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.936568][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.947314][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.957521][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.969349][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.981574][T24868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.992810][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.003349][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.013498][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.025300][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.035444][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.059827][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.071761][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.082575][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.092752][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.103608][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.115563][T24868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.138670][T24868] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.148289][T24868] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.157182][T24868] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.176770][T24868] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.350349][ T2441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.379147][ T2441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.390023][T25118] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 551.417860][T25118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 551.464878][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.477464][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.681472][T25122] Bluetooth: hci3: unsupported parameter 255 [ 551.700161][T25122] Bluetooth: hci3: unsupported parameter 255 [ 551.991741][ T5163] IPVS: starting estimator thread 0... [ 552.107225][T25135] IPVS: using max 20 ests per chain, 48000 per kthread [ 552.321110][T25142] veth0_vlan: left promiscuous mode [ 552.383610][T25142] vlan1 (unregistering): left promiscuous mode [ 552.522126][T25142] team0: Port device macvlan2 removed [ 552.575425][T25142] team0: Port device macvlan3 removed [ 552.917908][T25154] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 553.100448][T25156] vlan2: entered promiscuous mode [ 553.140264][T25156] bond0: entered promiscuous mode [ 553.150803][T25156] bond_slave_0: entered promiscuous mode [ 553.169642][T25156] bond_slave_1: entered promiscuous mode [ 553.182916][T25156] bond0: left promiscuous mode [ 553.189767][T25156] bond_slave_0: left promiscuous mode [ 553.195561][T25156] bond_slave_1: left promiscuous mode [ 553.271806][T25168] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 553.301988][T25168] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.319893][T25168] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.539966][T25184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.787203][T25195] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 554.301219][T25198] IPVS: set_ctl: invalid protocol: 58 172.20.20.45:20003 [ 554.646157][T25204] vlan2: entered promiscuous mode [ 554.654731][T25206] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 554.662209][T25204] bond0: entered promiscuous mode [ 554.673984][T25204] bond_slave_0: entered promiscuous mode [ 554.682376][T25204] bond_slave_1: entered promiscuous mode [ 554.683014][T25206] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.708392][T25204] bond0: left promiscuous mode [ 554.718529][T25204] bond_slave_0: left promiscuous mode [ 554.728302][T25204] bond_slave_1: left promiscuous mode [ 554.733868][T25206] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.018713][T25220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.069613][T12605] IPVS: starting estimator thread 0... [ 555.175954][T25226] IPVS: using max 20 ests per chain, 48000 per kthread [ 555.342644][T25243] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 555.354170][T25243] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 555.375140][T25244] netlink: 1272 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.386327][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 555.497810][T25247] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 555.932223][T25254] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 555.951389][T25254] Êü: entered promiscuous mode [ 555.958084][T25254] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 556.095149][T25258] bridge0: entered allmulticast mode [ 556.101583][T25258] bridge0: left allmulticast mode [ 556.233638][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 556.348131][T25270] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 556.402670][T25277] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 557.709820][T25315] vlan0: entered promiscuous mode [ 557.721488][T25315] veth0_to_hsr: entered promiscuous mode [ 557.731747][T25315] veth0_to_hsr: left promiscuous mode [ 557.799546][T25314] syzkaller0: entered promiscuous mode [ 557.805157][T25314] syzkaller0: entered allmulticast mode [ 558.565781][ T29] audit: type=1804 audit(1719081630.737:56): pid=25325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3953854370/syzkaller.CADsmq/179/cgroup.controllers" dev="sda1" ino=1929 res=1 errno=0 [ 558.919137][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.942499][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 558.953433][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 558.968712][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.984374][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 558.992961][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.945555][T25323] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 560.096730][T25333] __nla_validate_parse: 4 callbacks suppressed [ 560.096749][T25333] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.138937][T25333] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.172408][T25333] Êü: entered promiscuous mode [ 560.234081][T25336] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 560.249607][T25336] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.318703][ T2441] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.420610][T25347] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.472342][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.473085][ T2441] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.589241][ T2441] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.604783][T25352] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.613358][T25326] chnl_net:caif_netlink_parms(): no params data found [ 560.703502][ T2441] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.794538][T25326] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.820473][T25326] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.830058][T25326] bridge_slave_0: entered allmulticast mode [ 560.837725][T25326] bridge_slave_0: entered promiscuous mode [ 560.875104][T25326] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.894301][T25326] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.905030][T25326] bridge_slave_1: entered allmulticast mode [ 560.920630][T25326] bridge_slave_1: entered promiscuous mode [ 560.985305][ T2441] bridge_slave_1: left allmulticast mode [ 560.992016][ T2441] bridge_slave_1: left promiscuous mode [ 560.999096][ T2441] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.011010][ T2441] bridge_slave_0: left allmulticast mode [ 561.018069][ T2441] bridge_slave_0: left promiscuous mode [ 561.023795][ T2441] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.116292][ T5115] Bluetooth: hci0: command tx timeout [ 561.306449][ T29] audit: type=1804 audit(1719081633.477:57): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir847534219/syzkaller.kFu9as/1152/memory.numa_stat" dev="sda1" ino=1966 res=1 errno=0 [ 561.656849][ T2441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.672814][ T2441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.688517][ T2441] bond0 (unregistering): Released all slaves [ 561.721469][T25326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.775058][T25326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.876635][T25326] team0: Port device team_slave_0 added [ 561.887143][ T2441] Êü: left promiscuous mode [ 561.938077][T25326] team0: Port device team_slave_1 added [ 562.022543][T25326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.033584][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.060780][T25326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.135894][T25326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.145885][T25326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.197379][T25326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.304790][T25326] hsr_slave_0: entered promiscuous mode [ 562.326526][T25326] hsr_slave_1: entered promiscuous mode [ 562.354500][T25326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.374428][T25326] Cannot create hsr debugfs directory [ 562.682350][ T2441] hsr_slave_0: left promiscuous mode [ 562.714783][ T2441] hsr_slave_1: left promiscuous mode [ 562.750437][ T2441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.770257][ T2441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.800688][ T2441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.831156][ T2441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.872800][ T2441] veth1_macvtap: left promiscuous mode [ 562.878759][ T2441] veth0_macvtap: left promiscuous mode [ 562.898302][ T2441] veth1_vlan: left promiscuous mode [ 562.908669][ T2441] veth0_vlan: left promiscuous mode [ 563.204863][ T5115] Bluetooth: hci0: command tx timeout [ 563.543129][T25387] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 563.870902][ T2441] team0 (unregistering): Port device team_slave_1 removed [ 563.920695][ T2441] team0 (unregistering): Port device team_slave_0 removed [ 564.903497][T25429] sctp: [Deprecated]: syz-executor.0 (pid 25429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.903497][T25429] Use struct sctp_sack_info instead [ 565.162928][T25437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.275823][ T5115] Bluetooth: hci0: command tx timeout [ 565.559823][T25326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.599846][T25326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 565.624327][T25326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 565.659437][T25326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.864895][T25326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.925579][T25326] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.967797][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.974984][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.041923][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.049108][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.120058][T25477] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.153913][T25326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 566.215253][ T11] tipc: Subscription rejected, illegal request [ 566.429123][T25326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.452835][T25497] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 566.509601][T25326] veth0_vlan: entered promiscuous mode [ 566.549145][T25326] veth1_vlan: entered promiscuous mode [ 566.571869][T25499] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 566.601614][T25502] dvmrp0: entered allmulticast mode [ 566.614949][T25503] bridge0: entered allmulticast mode [ 566.675313][T25326] veth0_macvtap: entered promiscuous mode [ 566.689378][T25326] veth1_macvtap: entered promiscuous mode [ 566.739323][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.763272][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.800873][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.823174][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.834547][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.865871][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.896002][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.910472][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.922557][T25326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.937698][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.948421][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.975453][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.995148][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.005200][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.016088][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.034799][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.055757][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.065586][T25326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.084220][T25326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.097944][T25326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.169769][T25326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.188046][T25326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.197338][T25326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.214593][T25326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.356087][ T5115] Bluetooth: hci0: command tx timeout [ 567.562379][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.574679][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.629545][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.640065][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.285751][T25573] net_ratelimit: 662 callbacks suppressed [ 568.285770][T25573] dccp_invalid_packet: P.Data Offset(0) too small [ 568.927660][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 568.967299][T25604] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 569.055987][T25610] netlink: 1192 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.250363][T25692] netlink: 105092 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.261248][T25692] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 570.270689][T25692] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.649462][T25721] netlink: 105092 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.668113][T25721] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 570.683593][T25721] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.045390][T25748] netlink: 105092 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.064270][T25748] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 571.072715][T25748] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.293572][T25762] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.502972][T25781] pim6reg1: entered promiscuous mode [ 571.517511][T25781] pim6reg1: entered allmulticast mode [ 571.943011][T25797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 572.362448][T25824] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 572.394201][T25824] team0: Port device netdevsim0 added [ 573.151787][T25882] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.211771][T25884] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 573.229825][T25884] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.250506][T25884] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 573.263862][T25884] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 573.287642][T25885] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 573.302441][T25885] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 573.520055][T25901] syz-executor.4[25901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.520305][T25901] syz-executor.4[25901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.110398][T25942] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 574.806329][T25975] can: request_module (can-proto-0) failed. [ 574.826053][T25975] batman_adv: batadv0: Adding interface: macsec1 [ 574.832564][T25975] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.862566][T25975] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 574.883747][T25981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.891394][T25981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.906025][T25981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.913580][T25981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.924831][T25981] batman_adv: batadv0: Removing interface: macsec1 [ 575.697040][T26028] __nla_validate_parse: 5 callbacks suppressed [ 575.697058][T26028] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 575.928748][ T29] audit: type=1800 audit(1719081648.107:58): pid=26042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 575.961194][ T29] audit: type=1804 audit(1719081648.137:59): pid=26042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2980654856/syzkaller.IQRyYP/55/memory.events" dev="sda1" ino=1974 res=1 errno=0 [ 575.990494][ T29] audit: type=1804 audit(1719081648.167:60): pid=26042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2980654856/syzkaller.IQRyYP/55/memory.events" dev="sda1" ino=1974 res=1 errno=0 [ 576.125262][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.224286][T26059] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 576.232717][T26059] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.0'. [ 576.245291][T26059] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 576.258168][T26059] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 576.414874][T26071] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 576.423498][T26071] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.433348][T26071] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 576.442694][T26071] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 576.450923][T26071] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.557050][T26077] syz-executor.1[26077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.557276][T26077] syz-executor.1[26077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.618982][T26083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 576.643178][T26083] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 576.774231][T26091] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 576.895007][T26098] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 576.920582][T26098] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.074684][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 577.701248][T26151] validate_nla: 7 callbacks suppressed [ 577.701267][T26151] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 577.728609][T26151] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 577.852748][ T1046] tipc: Subscription rejected, illegal request [ 578.632912][T26214] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 579.044203][T26241] syz-executor.0[26241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.044476][T26241] syz-executor.0[26241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.473246][T26276] syz-executor.1[26276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.489809][T26276] syz-executor.1[26276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.821296][T26300] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 580.323905][T26331] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 580.507434][T26339] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 580.577583][ T5124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 580.590051][ T5124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 580.600254][ T5124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 580.611963][ T5124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 580.620607][ T5124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 580.628273][ T5124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 580.705256][T26353] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 580.752191][T26356] __nla_validate_parse: 10 callbacks suppressed [ 580.752210][T26356] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 580.990706][T26368] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.176038][T26345] chnl_net:caif_netlink_parms(): no params data found [ 581.329477][T26345] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.341027][T26345] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.348754][T26345] bridge_slave_0: entered allmulticast mode [ 581.359109][T26345] bridge_slave_0: entered promiscuous mode [ 581.368439][T26345] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.377140][T26345] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.384335][T26345] bridge_slave_1: entered allmulticast mode [ 581.391739][T26345] bridge_slave_1: entered promiscuous mode [ 581.445242][T26345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.471404][T26345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.598676][T26345] team0: Port device team_slave_0 added [ 581.647003][T26345] team0: Port device team_slave_1 added [ 581.765133][T26416] syz-executor.0[26416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.765366][T26416] syz-executor.0[26416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.793612][T26419] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 581.815379][T26345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.869103][T26345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.923805][T26345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.959559][T26345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.971252][T26431] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 581.973011][T26345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.998272][T26431] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.013028][T26345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.028764][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 582.200134][T26345] hsr_slave_0: entered promiscuous mode [ 582.245081][T26345] hsr_slave_1: entered promiscuous mode [ 582.261065][T26345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.272361][T26345] Cannot create hsr debugfs directory [ 582.381524][T26456] syz-executor.2[26456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.381764][T26456] syz-executor.2[26456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.716401][ T5115] Bluetooth: hci7: command tx timeout [ 582.799245][T26482] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.853334][T26345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.030020][T26345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.056593][T26495] 8021q: VLANs not supported on ipvlan1 [ 583.178409][T26345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.403099][T26345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.480653][T26522] lo speed is unknown, defaulting to 1000 [ 583.508676][T26522] lo speed is unknown, defaulting to 1000 [ 583.534220][T26522] lo speed is unknown, defaulting to 1000 [ 583.547067][T26525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 583.735514][T26345] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 583.778950][T26345] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 583.803055][T26345] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 583.853903][T26345] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 584.078195][T26522] infiniband syz0: set active [ 584.083317][ T58] lo speed is unknown, defaulting to 1000 [ 584.106041][T26522] infiniband syz0: added lo [ 584.132668][T26345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.193850][T26345] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.222640][T26522] RDS/IB: syz0: added [ 584.227663][ T12] tipc: Subscription rejected, illegal request [ 584.229747][T26522] smc: adding ib device syz0 with port count 1 [ 584.242640][T26522] smc: ib device syz0 port 1 has pnetid [ 584.253099][T12147] lo speed is unknown, defaulting to 1000 [ 584.267472][T26522] lo speed is unknown, defaulting to 1000 [ 584.291937][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.299137][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.381884][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.389078][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.743944][T26522] lo speed is unknown, defaulting to 1000 [ 584.795924][ T5115] Bluetooth: hci7: command tx timeout [ 585.024670][T26345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.143556][ T12] tipc: Subscription rejected, illegal request [ 585.224114][T26522] lo speed is unknown, defaulting to 1000 [ 585.328460][T26345] veth0_vlan: entered promiscuous mode [ 585.358260][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.371986][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.396148][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.408271][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.420404][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 585.436663][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 585.486805][T26345] veth1_vlan: entered promiscuous mode [ 585.628195][ T2424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.779294][ T1046] tipc: Subscription rejected, illegal request [ 585.850280][ T2424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.873023][T26589] lo speed is unknown, defaulting to 1000 [ 585.888743][T26345] veth0_macvtap: entered promiscuous mode [ 585.902104][T26345] veth1_macvtap: entered promiscuous mode [ 585.923480][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.940054][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.960710][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.985782][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.008013][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.028779][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.045703][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.065813][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.098510][T26345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.177011][ T2424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.249934][T26522] lo speed is unknown, defaulting to 1000 [ 586.282601][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.333994][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.354132][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.374948][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.400144][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.421048][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.424100][ T2441] tipc: Subscription rejected, illegal request [ 586.441226][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.460914][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.484365][T26345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.501511][T26345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.524627][T26345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.606645][ T2424] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 586.636263][ T2424] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 586.670804][ T2424] team0: Port device netdevsim0 removed [ 586.682903][ T2424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.746390][T26345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.755130][T26345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.766217][T26345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.775017][T26345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.798524][T26522] lo speed is unknown, defaulting to 1000 [ 586.882870][ T5115] Bluetooth: hci7: command tx timeout [ 587.091458][ T11] tipc: Subscription rejected, illegal request [ 587.208110][T26522] lo speed is unknown, defaulting to 1000 [ 587.338961][ T2424] team0: left allmulticast mode [ 587.343863][ T2424] team_slave_0: left allmulticast mode [ 587.353784][ T2441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.385732][ T2441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.393271][ T2424] team_slave_1: left allmulticast mode [ 587.425876][ T2424] team0: left promiscuous mode [ 587.430722][ T2424] team_slave_0: left promiscuous mode [ 587.445934][ T2424] team_slave_1: left promiscuous mode [ 587.451699][ T2424] bridge0: port 3(team0) entered disabled state [ 587.472249][ T2424] bridge_slave_1: left promiscuous mode [ 587.482682][ T2424] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.510565][ T2424] bridge_slave_0: left allmulticast mode [ 587.526105][ T2424] bridge_slave_0: left promiscuous mode [ 587.526198][ T5115] Bluetooth: hci1: command tx timeout [ 587.537367][ T2424] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.002814][ T2424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.020280][ T2424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.033628][ T2424] bond0 (unregistering): Released all slaves [ 588.055032][T26522] lo speed is unknown, defaulting to 1000 [ 588.191785][T26589] chnl_net:caif_netlink_parms(): no params data found [ 588.234781][ T2453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.254689][ T2453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.470917][T26522] lo speed is unknown, defaulting to 1000 [ 588.583134][T26685] batman_adv: batadv0: Adding interface: wlan1 [ 588.589896][T26685] batman_adv: batadv0: Interface activated: wlan1 [ 588.597537][ T2453] tipc: Subscription rejected, illegal request [ 588.751879][T26589] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.768216][T26589] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.784129][T26589] bridge_slave_0: entered allmulticast mode [ 588.792125][T26589] bridge_slave_0: entered promiscuous mode [ 588.824114][T26589] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.831911][T26589] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.841115][T26589] bridge_slave_1: entered allmulticast mode [ 588.850842][T26589] bridge_slave_1: entered promiscuous mode [ 588.965775][ T5115] Bluetooth: hci7: command tx timeout [ 589.020171][T26589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.128543][T26589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.233414][ T11] tipc: Subscription rejected, illegal request [ 589.416944][ T2424] hsr_slave_0: left promiscuous mode [ 589.423290][ T2424] hsr_slave_1: left promiscuous mode [ 589.430852][ T2424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.439324][ T2424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.447846][ T2424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.455363][ T2424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.494849][ T2424] veth1_macvtap: left promiscuous mode [ 589.501952][ T2424] veth0_macvtap: left promiscuous mode [ 589.507896][ T2424] veth1_vlan: left promiscuous mode [ 589.517030][ T2424] veth0_vlan: left promiscuous mode [ 589.596360][ T5115] Bluetooth: hci1: command tx timeout [ 590.094723][ T2424] team0 (unregistering): Port device team_slave_1 removed [ 590.141219][ T2424] team0 (unregistering): Port device team_slave_0 removed [ 590.265057][ T2424] bridge_slave_1 (unregistering): left allmulticast mode [ 590.609913][T26589] team0: Port device team_slave_0 added [ 590.676035][T26589] team0: Port device team_slave_1 added [ 590.907072][T26589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.914053][T26589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.979525][T26589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.003542][T26589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.011039][T26589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.037416][T26589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.178804][T26764] syzkaller1: entered promiscuous mode [ 591.184319][T26764] syzkaller1: entered allmulticast mode [ 591.342485][T26589] hsr_slave_0: entered promiscuous mode [ 591.349776][T26589] hsr_slave_1: entered promiscuous mode [ 591.366221][T26589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.373919][T26589] Cannot create hsr debugfs directory [ 591.532638][ T2424] IPVS: stop unused estimator thread 0... [ 591.676581][ T5115] Bluetooth: hci1: command tx timeout [ 592.252148][T26807] syzkaller1: entered promiscuous mode [ 592.265835][T26807] syzkaller1: entered allmulticast mode [ 592.545210][T26589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 592.587825][T26589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 592.629646][T26589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 592.667785][T26822] can: request_module (can-proto-0) failed. [ 592.680977][T26589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 593.064324][T26846] bridge7: entered promiscuous mode [ 593.071796][T26846] bridge7: entered allmulticast mode [ 593.091382][T26589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.110483][T26848] syzkaller1: entered promiscuous mode [ 593.118906][T26848] syzkaller1: entered allmulticast mode [ 593.261509][T26589] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.412676][T12025] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.419870][T12025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.497277][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.504467][T12147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.566998][T26865] batman_adv: batadv0: Adding interface: macsec1 [ 593.587218][T26865] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.660387][T26865] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 593.712338][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 593.729192][T26870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.739996][T26870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.750899][T26870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.770736][ T5115] Bluetooth: hci1: command tx timeout [ 593.775903][T26870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.817095][T26870] batman_adv: batadv0: Removing interface: macsec1 [ 593.947044][T26879] syzkaller1: entered promiscuous mode [ 593.952561][T26879] syzkaller1: entered allmulticast mode [ 594.065616][ C0] hrtimer: interrupt took 718188 ns [ 594.946775][T26589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.246022][T26938] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 595.700881][T26957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 595.770588][T26957] vlan0: entered promiscuous mode [ 595.787193][T26957] gretap0: entered promiscuous mode [ 595.835581][T26957] gretap0: left promiscuous mode [ 596.106319][T26589] veth0_vlan: entered promiscuous mode [ 596.180707][T26589] veth1_vlan: entered promiscuous mode [ 596.287270][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 596.335955][T26975] batman_adv: batadv0: Removing interface: team0 [ 596.359487][T26975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.379803][T26975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.392193][T26975] batman_adv: batadv0: Interface deactivated: wlan1 [ 596.415986][T26975] batman_adv: batadv0: Removing interface: wlan1 [ 596.551665][T26589] veth0_macvtap: entered promiscuous mode [ 596.590469][T26589] veth1_macvtap: entered promiscuous mode [ 596.675175][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.695081][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.717157][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.764955][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.786294][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.798274][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.812379][T26589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.851049][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.877023][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.903692][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.943083][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.978192][T26589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.004594][T26589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.028252][T26589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.068714][T26589] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.086320][T26589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.096446][T26589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.141389][T26589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.455968][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.525747][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.624770][T27015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 597.644787][T27015] vlan2: entered promiscuous mode [ 597.650589][T27015] gretap0: entered promiscuous mode [ 597.675121][T27015] gretap0: left promiscuous mode [ 597.801877][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.833006][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.209025][T27042] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 598.453731][T27051] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 598.480282][T27051] bridge_slave_0: left allmulticast mode [ 598.498893][T27051] bridge_slave_0: left promiscuous mode [ 598.513789][T27051] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.280680][T27085] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 599.752140][T27109] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 599.782556][T27109] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 600.675997][T27118] infiniband syz2: set active [ 600.702215][T27118] infiniband syz2: added bond_slave_0 [ 600.860477][T27118] RDS/IB: syz2: added [ 600.871694][T27118] smc: adding ib device syz2 with port count 1 [ 600.886229][T27118] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 601.242686][T27158] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.0'. [ 606.236468][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 607.173095][T27365] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 608.276261][T27420] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 608.302611][T27420] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 608.696816][T27442] xt_TCPMSS: Only works on TCP SYN packets [ 608.944271][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 609.781975][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 612.067723][T27565] syz-executor.3[27565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.067933][T27565] syz-executor.3[27565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.347380][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 612.670160][T27586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 613.128572][T27593] syzkaller1: entered promiscuous mode [ 613.134586][T27593] syzkaller1: entered allmulticast mode [ 613.696968][T27625] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 613.747422][T27625] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 613.762864][T27625] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 613.790870][T27632] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 613.826726][T27632] bond0: entered allmulticast mode [ 613.832362][T27632] bond_slave_0: entered allmulticast mode [ 613.858951][T27632] bond_slave_1: entered allmulticast mode [ 614.272627][T27649] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 614.304281][T27654] syzkaller1: entered promiscuous mode [ 614.316093][T27654] syzkaller1: entered allmulticast mode [ 614.757341][T27669] pim6reg1: entered promiscuous mode [ 614.788974][T27669] pim6reg1: entered allmulticast mode [ 615.068100][T27676] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 615.107429][T27676] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 615.135986][T27676] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 615.186711][T27683] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 616.022971][T27726] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 616.065499][T27726] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 616.110823][T27726] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.125017][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 616.175004][T27732] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.269616][T27732] bond0: entered allmulticast mode [ 616.275225][T27732] bond_slave_0: entered allmulticast mode [ 616.338921][T27732] bond_slave_1: entered allmulticast mode [ 617.429934][T27782] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 617.446123][T27782] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 617.454931][T27782] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 617.533638][T27782] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 617.554354][T27782] bond0: entered allmulticast mode [ 617.570403][T27782] bond_slave_0: entered allmulticast mode [ 617.590250][T27782] bond_slave_1: entered allmulticast mode [ 618.258673][T27825] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 618.341166][T27831] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 618.410113][T27831] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 618.448244][T27834] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 618.501086][T27834] bond0: entered allmulticast mode [ 618.524777][T27834] bond_slave_1: entered allmulticast mode [ 618.542298][T27834] batadv_slave_0: entered allmulticast mode [ 619.162048][T27856] syz-executor.2 (27856) used greatest stack depth: 16344 bytes left [ 619.327143][T27872] validate_nla: 1 callbacks suppressed [ 619.327162][T27872] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 619.416230][T27872] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 619.486273][T27872] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.3'. [ 619.548546][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 619.580821][T27883] bond0: entered allmulticast mode [ 619.594009][T27883] bond_slave_0: entered allmulticast mode [ 619.612936][T27883] bond_slave_1: entered allmulticast mode [ 619.886886][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 620.909607][T27936] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.645730][ T5124] Bluetooth: hci5: command 0x0406 tx timeout [ 622.136857][T27978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.275011][T27983] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 622.332696][T27983] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.363592][T27983] tunl0: entered promiscuous mode [ 623.889725][T28061] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 623.912450][T28061] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 624.710278][T28098] syzkaller1: entered promiscuous mode [ 624.746060][T28098] syzkaller1: entered allmulticast mode [ 625.677934][T28136] syzkaller1: entered promiscuous mode [ 625.705192][T28136] syzkaller1: entered allmulticast mode [ 626.446080][T28165] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 626.653357][T28173] syzkaller1: entered promiscuous mode [ 626.706062][T28173] syzkaller1: entered allmulticast mode [ 627.592872][T28212] syzkaller1: entered promiscuous mode [ 627.617988][T28212] syzkaller1: entered allmulticast mode [ 628.268952][T28242] syzkaller1: entered promiscuous mode [ 628.297135][T28242] syzkaller1: entered allmulticast mode [ 628.730016][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 628.922561][T28277] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 628.943171][T28277] bridge0: port 3(bond0) entered blocking state [ 628.957227][T28277] bridge0: port 3(bond0) entered disabled state [ 629.034071][T28277] bond0: entered promiscuous mode [ 629.058706][T28277] bond_slave_0: entered promiscuous mode [ 629.073292][T28277] bond_slave_1: entered promiscuous mode [ 629.275505][T28288] syzkaller1: entered promiscuous mode [ 629.284781][T28288] syzkaller1: entered allmulticast mode [ 629.409097][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 629.432104][T28295] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 629.449374][T28295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 630.277252][T28328] syzkaller1: entered promiscuous mode [ 630.292749][T28328] syzkaller1: entered allmulticast mode [ 630.430218][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 630.569244][T28343] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 630.621240][T28343] bond4: (slave gre1): Error -95 calling set_mac_address [ 630.671823][T28337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 630.687881][T28337] bond4 (unregistering): Released all slaves [ 631.092651][T28368] syzkaller1: entered promiscuous mode [ 631.103897][T28368] syzkaller1: entered allmulticast mode [ 631.876836][T28400] syzkaller1: entered promiscuous mode [ 631.884493][T28400] syzkaller1: entered allmulticast mode [ 632.698910][T28437] syzkaller1: entered promiscuous mode [ 632.704886][T28437] syzkaller1: entered allmulticast mode [ 633.242675][T28464] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 633.293205][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 633.533125][T28479] syzkaller1: entered promiscuous mode [ 633.555023][T28479] syzkaller1: entered allmulticast mode [ 634.073932][T28503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 634.694493][T28521] syzkaller1: entered promiscuous mode [ 634.706089][T28521] syzkaller1: entered allmulticast mode [ 635.140685][T28543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.250714][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.628037][T28563] syzkaller1: entered promiscuous mode [ 635.634024][T28563] syzkaller1: entered allmulticast mode [ 636.017255][T28583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.184328][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.584268][T28608] syzkaller1: entered promiscuous mode [ 636.596346][T28608] syzkaller1: entered allmulticast mode [ 636.744176][T28616] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.2'. [ 637.373212][T28647] syzkaller1: entered promiscuous mode [ 637.427748][T28647] syzkaller1: entered allmulticast mode [ 637.963423][T28673] syzkaller1: entered promiscuous mode [ 637.971881][T28673] syzkaller1: entered allmulticast mode [ 638.454899][T28689] syzkaller1: entered promiscuous mode [ 638.471535][T28689] syzkaller1: entered allmulticast mode [ 638.630847][T28703] syzkaller1: entered promiscuous mode [ 638.644740][T28703] syzkaller1: entered allmulticast mode [ 639.243929][T28731] syzkaller1: entered promiscuous mode [ 639.250273][T28731] syzkaller1: entered allmulticast mode [ 639.378237][T28736] syzkaller1: entered promiscuous mode [ 639.384236][T28736] syzkaller1: entered allmulticast mode [ 639.586167][T28741] syzkaller1: entered promiscuous mode [ 639.592313][T28741] syzkaller1: entered allmulticast mode [ 640.404003][T28786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.536244][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.601109][T28793] IPv6: NLM_F_CREATE should be specified when creating new route [ 640.626751][T28793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.634631][T28793] IPv6: NLM_F_CREATE should be set when creating new route [ 640.638720][T28794] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 640.642519][T28793] IPv6: NLM_F_CREATE should be set when creating new route [ 640.660184][T28793] IPv6: NLM_F_CREATE should be set when creating new route [ 640.744436][T28794] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 642.637015][T28899] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 644.199703][T28972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 644.477260][ T30] INFO: task syz-executor.3:23560 blocked for more than 143 seconds. [ 644.515804][ T30] Not tainted 6.10.0-rc4-syzkaller-00168-g49bbeb5719c2 #0 2024/06/22 18:41:56 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 644.532409][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.622586][ T30] task:syz-executor.3 state:D stack:26296 pid:23560 tgid:23559 ppid:22830 flags:0x00000006 [ 644.687235][ T30] Call Trace: [ 644.691439][ T30] [ 644.694688][ T30] __schedule+0x17e8/0x4a20 [ 644.755855][ T30] ? __pfx___schedule+0x10/0x10 [ 644.763295][ T30] ? __pfx_lock_release+0x10/0x10 [ 644.792007][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 644.799082][ T30] ? schedule+0x90/0x320 [ 644.803733][ T30] schedule+0x14b/0x320 [ 644.808393][ T30] schedule_preempt_disabled+0x13/0x30 [ 644.814347][ T30] __mutex_lock+0x6a4/0xd70 [ 644.820797][ T30] ? __mutex_lock+0x527/0xd70 [ 644.826312][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 644.832765][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.838897][ T30] ? net_generic+0x1f/0x240 [ 644.843843][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 644.850221][ T30] genl_start+0x4d6/0x6d0 [ 644.854984][ T30] __netlink_dump_start+0x45c/0x780 [ 644.872630][ T30] genl_rcv_msg+0x88c/0xec0 [ 644.882504][ T30] ? mark_lock+0x9a/0x350 [ 644.887653][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 644.893190][ T30] ? __pfx_genl_start+0x10/0x10 [ 644.909651][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 644.915083][ T30] ? __pfx_genl_done+0x10/0x10 [ 644.925845][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 644.931359][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 644.950221][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 644.965667][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 644.972581][ T30] ? __pfx___might_resched+0x10/0x10 [ 644.986854][ T30] netlink_rcv_skb+0x1e3/0x430 [ 644.992102][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.005593][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.011623][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 645.028686][ T30] genl_rcv+0x28/0x40 [ 645.033071][ T30] netlink_unicast+0x7ea/0x980 [ 645.045096][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 645.052380][ T30] ? __virt_addr_valid+0x183/0x520 [ 645.065691][ T30] ? __check_object_size+0x49c/0x900 [ 645.073444][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 645.087921][ T30] netlink_sendmsg+0x8db/0xcb0 [ 645.093200][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.105212][ T30] ? __import_iovec+0x536/0x820 [ 645.114192][ T30] ? aa_sock_msg_perm+0x91/0x160 [