last executing test programs: 46.38841045s ago: executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x1000000000000010, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5}, 0x18) close(r0) 43.677322737s ago: executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x1000000000000010, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r5}, 0x18) close(r0) 43.437599541s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003400)=""/4096, 0xfffffe09}, {&(0x7f0000001180)=""/135, 0x87}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 42.86082168s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) 42.686884804s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0xe5, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) 42.529622886s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 38.72165437s ago: executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) 38.58240236s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0xe5, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000680)='%pB \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) 38.367528205s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 37.674886885s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x8}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x9c) 37.324827316s ago: executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, @none={0x0, 0x300}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="80e6c5", 0x3}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x3}, [@map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @call]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x26, &(0x7f00000001c0)=""/226}, 0x21) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/240, 0xf3}], 0x1, 0x0, 0x0) 33.40654769s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd672ed990c662979) 32.987999492s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 32.844277698s ago: executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000006c0)=ANY=[], 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82951120", 0x4}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) 32.685572919s ago: executing program 4: socket(0x28, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000810000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="0800040002000000"], 0x4c}}, 0x0) 32.254258257s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) shutdown(r1, 0x0) accept$alg(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 32.088286955s ago: executing program 0: r0 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r0, 0x6a, 0x4, 0x0, 0x0) 32.036412298s ago: executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x890b, &(0x7f0000000000)={@private2}) 31.399546933s ago: executing program 4: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.307472196s ago: executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 31.231053016s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_batadv\x00', &(0x7f00000003c0)=@ethtool_stats}) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 30.722027665s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x2) 30.605453556s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000023c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x140}}, 0x0) 30.491675906s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) read(0xffffffffffffffff, &(0x7f0000000140)=""/173, 0xad) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) sendfile(r1, r0, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 30.137692822s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r4}]}, 0x24}}, 0x0) 30.046841997s ago: executing program 3: socket(0x28, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000810000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="0800040002000000"], 0x4c}}, 0x0) 12.512854504s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x0, 0xfffffffa, {{0x49, 0x4, 0x0, 0x34, 0x124, 0x65, 0x0, 0x20, 0x2f, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x24, 0xe3, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x7ff}, {@broadcast, 0x80000000}, {@multicast1}, {@local, 0x4e}]}, @lsrr={0x83, 0xb, 0x4, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2c}}]}, @timestamp={0x44, 0x8, 0x51, 0x0, 0x2, [0x101]}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0x1, [{@local, 0x2}, {@private=0xa010101, 0x7fff}, {@local, 0x6}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x1}, {@rand_addr=0x64010100, 0x20}, {@empty, 0xfffffff8}, {@local}, {@multicast2, 0x9}]}, @ssrr={0x89, 0xf, 0x4, [@remote, @rand_addr=0x64010100, @local]}, @cipso={0x86, 0x2f, 0x2, [{0x0, 0x6, "29648d3c"}, {0x1, 0x12, "b93a3b5712b90a27b88ca8530873f0a3"}, {0x7, 0x11, "f9e3aee3b73f04c61d22bb914bf0df"}]}, @rr={0x7, 0x23, 0xaf, [@dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010101, @broadcast, @broadcast, @empty, @rand_addr=0x64010101, @loopback, @broadcast]}, @timestamp={0x44, 0x1c, 0xea, 0x0, 0x0, [0x4, 0x4, 0x9, 0x80000000, 0x2, 0x9]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@private1, 0x2a, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r6, r5}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r5}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @loopback}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="dd0000eb", @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf252b0000000c00990007000000180000000400440078002a00827201ee0104000000080211000001ff010000ff7f0000541a00000805ffffffffffffff7f000000ffffffffffff00000000010802110000000900000001ffffffffffffff7f0000050802110000000200000000ffffffffffff00000000050802110000010100000004ffffffffffffff7f0000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in6=@mcast2, @in=@multicast2}, {@in, 0x0, 0x32}, @in=@multicast1}}}, 0xf8}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) 1.383457837s ago: executing program 4: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000200), 0x0}, 0x20) 1.206229517s ago: executing program 0: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0xfffffffffffffffe, &(0x7f0000000000)=0x32) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.254' (ED25519) to the list of known hosts. 2024/06/11 10:40:08 fuzzer started 2024/06/11 10:40:08 dialing manager at 10.128.0.169:30016 [ 53.842699][ T5092] cgroup: Unknown subsys name 'net' [ 54.022600][ T5092] cgroup: Unknown subsys name 'rlimit' 2024/06/11 10:40:09 starting 5 executor processes [ 55.135763][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.937852][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.951086][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.984583][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.993567][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.003587][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.004395][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.011825][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.019700][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.028080][ T5131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.033914][ T5129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.040133][ T5131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.048060][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.061491][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.061791][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.069550][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.076440][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.083912][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.090830][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.098057][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.111966][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.112355][ T4494] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.120063][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.127306][ T4494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.133417][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.140394][ T4494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.148231][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.162422][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.170826][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.179729][ T5129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.189195][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.552587][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 56.758371][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.766904][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.774546][ T5111] bridge_slave_0: entered allmulticast mode [ 56.782747][ T5111] bridge_slave_0: entered promiscuous mode [ 56.808481][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 56.828650][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.835942][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.843102][ T5111] bridge_slave_1: entered allmulticast mode [ 56.850180][ T5111] bridge_slave_1: entered promiscuous mode [ 56.889174][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 57.014335][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.042513][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 57.055380][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.074616][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.082393][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.090073][ T5115] bridge_slave_0: entered allmulticast mode [ 57.097457][ T5115] bridge_slave_0: entered promiscuous mode [ 57.131529][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.138925][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.146493][ T5115] bridge_slave_1: entered allmulticast mode [ 57.153737][ T5115] bridge_slave_1: entered promiscuous mode [ 57.160701][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 57.246879][ T5111] team0: Port device team_slave_0 added [ 57.253078][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.260359][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.267746][ T5112] bridge_slave_0: entered allmulticast mode [ 57.274553][ T5112] bridge_slave_0: entered promiscuous mode [ 57.302194][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.324140][ T5111] team0: Port device team_slave_1 added [ 57.330914][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.338243][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.345714][ T5112] bridge_slave_1: entered allmulticast mode [ 57.352382][ T5112] bridge_slave_1: entered promiscuous mode [ 57.382757][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.468161][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.475134][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.501580][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.519776][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.534100][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.561105][ T5115] team0: Port device team_slave_0 added [ 57.570248][ T5115] team0: Port device team_slave_1 added [ 57.592525][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.601298][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.627620][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.664534][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.672233][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.679543][ T5116] bridge_slave_0: entered allmulticast mode [ 57.686569][ T5116] bridge_slave_0: entered promiscuous mode [ 57.699684][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.707224][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.714413][ T5116] bridge_slave_1: entered allmulticast mode [ 57.722581][ T5116] bridge_slave_1: entered promiscuous mode [ 57.781251][ T5112] team0: Port device team_slave_0 added [ 57.790649][ T5112] team0: Port device team_slave_1 added [ 57.806782][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.813940][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.821478][ T5117] bridge_slave_0: entered allmulticast mode [ 57.828745][ T5117] bridge_slave_0: entered promiscuous mode [ 57.836770][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.843864][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.869916][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.883930][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.890947][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.916905][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.966937][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.973919][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.000266][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.012231][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.019881][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.027840][ T5117] bridge_slave_1: entered allmulticast mode [ 58.034615][ T5117] bridge_slave_1: entered promiscuous mode [ 58.070182][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.083309][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.093071][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.100405][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.126400][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.160523][ T5111] hsr_slave_0: entered promiscuous mode [ 58.167649][ T5111] hsr_slave_1: entered promiscuous mode [ 58.196179][ T5119] Bluetooth: hci2: command tx timeout [ 58.207848][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.221583][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.234299][ T5116] team0: Port device team_slave_0 added [ 58.246544][ T5116] team0: Port device team_slave_1 added [ 58.278091][ T5119] Bluetooth: hci0: command tx timeout [ 58.285683][ T4494] Bluetooth: hci1: command tx timeout [ 58.285789][ T5129] Bluetooth: hci4: command tx timeout [ 58.291353][ T5119] Bluetooth: hci3: command tx timeout [ 58.341783][ T5115] hsr_slave_0: entered promiscuous mode [ 58.348525][ T5115] hsr_slave_1: entered promiscuous mode [ 58.355029][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.363256][ T5115] Cannot create hsr debugfs directory [ 58.388169][ T5117] team0: Port device team_slave_0 added [ 58.399587][ T5112] hsr_slave_0: entered promiscuous mode [ 58.405995][ T5112] hsr_slave_1: entered promiscuous mode [ 58.412188][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.420109][ T5112] Cannot create hsr debugfs directory [ 58.426357][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.433314][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.459305][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.472301][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.479359][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.505294][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.538718][ T5117] team0: Port device team_slave_1 added [ 58.602755][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.609923][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.637423][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.701747][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.708833][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.735826][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.804153][ T5116] hsr_slave_0: entered promiscuous mode [ 58.811001][ T5116] hsr_slave_1: entered promiscuous mode [ 58.817344][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.824898][ T5116] Cannot create hsr debugfs directory [ 58.891490][ T5117] hsr_slave_0: entered promiscuous mode [ 58.898732][ T5117] hsr_slave_1: entered promiscuous mode [ 58.905381][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.912957][ T5117] Cannot create hsr debugfs directory [ 59.093502][ T5111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.139234][ T5111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.166911][ T5111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.182143][ T5111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.321095][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.334236][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.343978][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.371930][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.421186][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.431132][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.450971][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.473560][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.540953][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.550723][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.581341][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.613873][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.689285][ T5116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.701875][ T5116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.712733][ T5116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.741278][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.759770][ T5116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.788682][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.818299][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.825619][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.834727][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.841921][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.924869][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.950383][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.022093][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.047301][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.054640][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.111830][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.119161][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.227274][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.250207][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.275946][ T5119] Bluetooth: hci2: command tx timeout [ 60.281997][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.314536][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.342390][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.358438][ T5119] Bluetooth: hci3: command tx timeout [ 60.358459][ T5129] Bluetooth: hci1: command tx timeout [ 60.363862][ T5119] Bluetooth: hci4: command tx timeout [ 60.370837][ T5129] Bluetooth: hci0: command tx timeout [ 60.389000][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.402778][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.431785][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.438989][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.476868][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.499116][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.506292][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.517160][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.524280][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.562610][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.569816][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.583253][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.590454][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.623912][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.631132][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.713662][ T5116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.725151][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.771257][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.793434][ T5111] veth0_vlan: entered promiscuous mode [ 60.852537][ T5111] veth1_vlan: entered promiscuous mode [ 60.882233][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.968282][ T5111] veth0_macvtap: entered promiscuous mode [ 61.019125][ T5111] veth1_macvtap: entered promiscuous mode [ 61.058827][ T5115] veth0_vlan: entered promiscuous mode [ 61.121238][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.169923][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.191502][ T5115] veth1_vlan: entered promiscuous mode [ 61.220737][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.232173][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.244605][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.254408][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.279879][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.304212][ T5115] veth0_macvtap: entered promiscuous mode [ 61.355055][ T5115] veth1_macvtap: entered promiscuous mode [ 61.384248][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.399663][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.455728][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.470602][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.483565][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.516432][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.533281][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.544759][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.564342][ T5116] veth0_vlan: entered promiscuous mode [ 61.593712][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.603792][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.613288][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.623844][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.651441][ T2831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.667399][ T2831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.683239][ T5116] veth1_vlan: entered promiscuous mode [ 61.783233][ T2859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.793131][ T2859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.823713][ T5116] veth0_macvtap: entered promiscuous mode [ 61.871268][ T5117] veth0_vlan: entered promiscuous mode [ 61.897078][ T5116] veth1_macvtap: entered promiscuous mode [ 61.932428][ T5117] veth1_vlan: entered promiscuous mode [ 61.973588][ T5112] veth0_vlan: entered promiscuous mode [ 62.014590][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.026466][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.038140][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.048752][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.061433][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.083674][ T2859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.083791][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.107954][ T2859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.112519][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.127846][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.138500][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.149902][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.163610][ T5112] veth1_vlan: entered promiscuous mode [ 62.196896][ T5116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.205946][ T5116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.214648][ T5116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.223424][ T5116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.238815][ T5200] syzkaller0: entered promiscuous mode [ 62.244342][ T5200] syzkaller0: entered allmulticast mode [ 62.309869][ T2859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.318335][ T2859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.334163][ T5117] veth0_macvtap: entered promiscuous mode [ 62.357244][ T5129] Bluetooth: hci2: command tx timeout [ 62.369112][ T5112] veth0_macvtap: entered promiscuous mode [ 62.394916][ T5117] veth1_macvtap: entered promiscuous mode [ 62.429552][ T5112] veth1_macvtap: entered promiscuous mode [ 62.437767][ T5129] Bluetooth: hci0: command tx timeout [ 62.437790][ T4494] Bluetooth: hci4: command tx timeout [ 62.443178][ T5129] Bluetooth: hci1: command tx timeout [ 62.449062][ T4494] Bluetooth: hci3: command tx timeout [ 62.522050][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.561730][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.594566][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.606479][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.618017][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.628590][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.641818][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.676562][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.718755][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.728842][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.739519][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.751117][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.763666][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.783359][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.802466][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.815634][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.854519][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.869540][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.905293][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.930547][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.951480][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.963189][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.973405][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.993256][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.012300][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.037926][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.053427][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.063721][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.072821][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.088102][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.101712][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.111864][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.123346][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.133222][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.143851][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.153690][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.165587][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.176567][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.197963][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.205950][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.226988][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238289][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.249406][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.258473][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.438025][ T2831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.456081][ T2831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.486109][ T2859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.510365][ T2859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.513749][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.529711][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.619204][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.634107][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.054777][ T5230] openvswitch: netlink: EtherType 20a is less than min 600 [ 64.198169][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.247939][ T5236] vlan2: entered allmulticast mode [ 64.254852][ T5236] bridge0: port 3(vlan2) entered blocking state [ 64.268360][ T5236] bridge0: port 3(vlan2) entered disabled state [ 64.351921][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.446409][ T4494] Bluetooth: hci2: command tx timeout [ 64.517104][ T53] Bluetooth: hci1: command tx timeout [ 64.518505][ T5129] Bluetooth: hci4: command tx timeout [ 64.523184][ T53] Bluetooth: hci0: command tx timeout [ 64.533674][ T4494] Bluetooth: hci3: command tx timeout [ 64.892471][ T5270] openvswitch: netlink: EtherType 20a is less than min 600 [ 65.269497][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.319217][ T5282] vlan2: entered allmulticast mode [ 65.343687][ T5282] bridge0: port 3(vlan2) entered blocking state [ 65.370887][ T5282] bridge0: port 3(vlan2) entered disabled state [ 65.440530][ T5287] Zero length message leads to an empty skb [ 65.463044][ T5292] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.909906][ T5312] openvswitch: netlink: EtherType 20a is less than min 600 [ 66.199189][ T5324] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.305483][ T5328] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 66.324394][ T5328] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 66.353191][ T5328] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.362534][ T5324] syz-executor.2 (5324) used greatest stack depth: 18896 bytes left [ 66.370887][ T5329] syzkaller0: entered promiscuous mode [ 66.370966][ T5329] syzkaller0: entered allmulticast mode [ 66.379659][ T5328] NCSI netlink: No device for ifindex 32770 [ 67.318879][ T5357] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.336892][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.379404][ T5366] IPv6: NLM_F_REPLACE set, but no existing node found! [ 67.557487][ T5372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.633486][ T5372] vlan2: entered allmulticast mode [ 67.681923][ T5372] bridge0: port 3(vlan2) entered blocking state [ 67.717163][ T5372] bridge0: port 3(vlan2) entered disabled state [ 67.826855][ T5384] tipc: Started in network mode [ 67.839171][ T5384] tipc: Node identity ype_len:, cluster identity 4711 [ 67.870038][ T5384] tipc: Enabling of bearer rejected, failed to enable media [ 68.065893][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.239186][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.269585][ T5403] IPv6: NLM_F_REPLACE set, but no existing node found! [ 68.946418][ T5427] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.974793][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.015177][ T5431] IPv6: NLM_F_REPLACE set, but no existing node found! [ 69.065206][ T5426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.817052][ T5456] tipc: Enabling of bearer rejected, failed to enable media [ 70.138616][ T5473] Illegal XDP return value 4294967294 on prog (id 38) dev N/A, expect packet loss! [ 70.142374][ T5475] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 70.174189][ T5467] __nla_validate_parse: 1 callbacks suppressed [ 70.174208][ T5467] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.196346][ T5475] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.444408][ T5483] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.516740][ T5483] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.587150][ T5480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.211755][ T5504] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.581704][ T5521] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 71.610443][ T5521] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.723984][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.732954][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.846405][ T5528] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.900952][ T5528] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.993453][ T5526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.423090][ T5562] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 72.794988][ T5579] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 72.820060][ T5579] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 73.077439][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.112784][ T5594] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.151307][ T5590] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.456673][ T5607] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 73.601780][ T5615] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 74.051648][ T5630] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 74.131896][ T5634] sock: sock_timestamping_bind_phc: sock not bind to device [ 74.861132][ T5667] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 75.071466][ T5673] sock: sock_timestamping_bind_phc: sock not bind to device [ 75.473568][ T5681] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 75.512279][ T5681] bond0: option mode: unable to set because the bond device has slaves [ 75.716140][ T5691] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 75.724564][ T5691] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 75.996971][ T5702] sock: sock_timestamping_bind_phc: sock not bind to device [ 76.467318][ T5718] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 76.508805][ T5724] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 76.536336][ T5724] bond0: option mode: unable to set because the bond device has slaves [ 76.733442][ T5731] __nla_validate_parse: 6 callbacks suppressed [ 76.733460][ T5731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.859527][ T9] cfg80211: failed to load regulatory.db [ 77.081332][ T5742] sock: sock_timestamping_bind_phc: sock not bind to device [ 77.486997][ T5756] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 77.526460][ T5756] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 77.734743][ T5769] syz-executor.1[5769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.734899][ T5769] syz-executor.1[5769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.821684][ T5769] syz-executor.1[5769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.899702][ T5774] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 77.975965][ T5769] syz-executor.1[5769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.468741][ T5793] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 78.535741][ T5793] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 79.000037][ T5811] syz-executor.1[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.000194][ T5811] syz-executor.1[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.048416][ T5811] syz-executor.1[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.117530][ T5816] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 79.206160][ T5811] syz-executor.1[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.633698][ T4494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.676033][ T4494] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.684452][ T4494] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.693214][ T4494] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.707269][ T4494] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.715994][ T4494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.473596][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 80.522973][ T5872] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.834284][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.865420][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.872699][ T5829] bridge_slave_0: entered allmulticast mode [ 80.942246][ T5829] bridge_slave_0: entered promiscuous mode [ 80.955744][ T5891] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 80.974658][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.997734][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.029722][ T5829] bridge_slave_1: entered allmulticast mode [ 81.053059][ T5829] bridge_slave_1: entered promiscuous mode [ 81.170009][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.216612][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.248907][ T5903] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.336071][ T5906] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 81.369414][ T5829] team0: Port device team_slave_0 added [ 81.408995][ T5829] team0: Port device team_slave_1 added [ 81.588337][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.590868][ T5914] sctp: [Deprecated]: syz-executor.3 (pid 5914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.590868][ T5914] Use struct sctp_sack_info instead [ 81.613099][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.628144][ T5921] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 81.661353][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.692661][ T5921] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 81.720439][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.742968][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.795825][ T4494] Bluetooth: hci4: command tx timeout [ 81.808450][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.848444][ T5922] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 81.893728][ T5922] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 81.951263][ T5921] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 82.171485][ T5829] hsr_slave_0: entered promiscuous mode [ 82.179632][ T5933] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 82.189446][ T29] audit: type=1804 audit(1718102436.798:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3248109335/syzkaller.BRU2hT/69/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 82.232397][ T5829] hsr_slave_1: entered promiscuous mode [ 82.244027][ T5935] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 82.259127][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.270831][ T5829] Cannot create hsr debugfs directory [ 82.281129][ T5936] smc: net device wg0 applied user defined pnetid SYZ0 [ 82.778539][ T5829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.863735][ T5955] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 82.938250][ T5829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.098969][ T5829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.273966][ T5829] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.633687][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.662361][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.701523][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.756591][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.770102][ T5979] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 83.873597][ T5981] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 83.883016][ T4494] Bluetooth: hci4: command tx timeout [ 83.974941][ T5986] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.056392][ T5989] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.112522][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.158569][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.183461][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.191427][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.249599][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.256864][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.779282][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.838853][ T6012] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.869657][ T6016] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 84.889251][ T6016] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 84.940523][ T6016] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 84.966180][ T6016] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 84.998069][ T6016] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.055190][ T5829] veth0_vlan: entered promiscuous mode [ 85.114532][ T5829] veth1_vlan: entered promiscuous mode [ 85.198696][ T5829] veth0_macvtap: entered promiscuous mode [ 85.238709][ T5829] veth1_macvtap: entered promiscuous mode [ 85.307716][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.343192][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.354245][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.377642][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.413616][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.436019][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.455894][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.468317][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.487776][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.502213][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.527040][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.567452][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.592805][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.623562][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.645684][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.662057][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.672741][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.690085][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.717012][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.737725][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.754915][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.778217][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.810676][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.832204][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846463][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857276][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.955981][ T4494] Bluetooth: hci4: command tx timeout [ 86.041064][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.085518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.159044][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.205339][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.864586][ T29] audit: type=1800 audit(1718102442.488:3): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 88.387767][ T6091] Bluetooth: MGMT ver 1.22 [ 88.392568][ T6091] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 88.504422][ T6097] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.301173][ T6124] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 89.482837][ T6130] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.630512][ T2831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.911842][ T2831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.128443][ T2831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.158430][ T6140] syzkaller1: entered promiscuous mode [ 90.163947][ T6140] syzkaller1: entered allmulticast mode [ 90.326022][ T2831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.386366][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.396260][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.399586][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.433631][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.444919][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.454007][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.463761][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.753101][ T2831] bridge_slave_1: left allmulticast mode [ 90.769517][ T2831] bridge_slave_1: left promiscuous mode [ 90.783723][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.816746][ T2831] bridge_slave_0: left allmulticast mode [ 90.822610][ T2831] bridge_slave_0: left promiscuous mode [ 90.843431][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.318187][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.335040][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.358156][ T2831] bond0 (unregistering): Released all slaves [ 91.680276][ T29] audit: type=1800 audit(1718102446.298:4): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 92.180388][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 92.373314][ T2831] hsr_slave_0: left promiscuous mode [ 92.428619][ T2831] hsr_slave_1: left promiscuous mode [ 92.466169][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.485448][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.523475][ T53] Bluetooth: hci4: command tx timeout [ 92.530473][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.551692][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.597540][ T2831] veth1_macvtap: left promiscuous mode [ 92.603767][ T2831] veth0_macvtap: left promiscuous mode [ 92.609847][ T2831] veth1_vlan: left promiscuous mode [ 92.616767][ T2831] veth0_vlan: left promiscuous mode [ 92.802068][ T29] audit: type=1804 audit(1718102447.428:5): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2378844525/syzkaller.bme07R/49/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 93.202835][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 93.238324][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 94.073583][ T6226] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.193956][ T6232] Bluetooth: MGMT ver 1.22 [ 94.596521][ T29] audit: type=1804 audit(1718102449.228:6): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3248109335/syzkaller.BRU2hT/98/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 94.625525][ T53] Bluetooth: hci4: command tx timeout [ 94.652520][ T29] audit: type=1804 audit(1718102449.258:7): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3248109335/syzkaller.BRU2hT/98/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 94.678143][ T29] audit: type=1804 audit(1718102449.258:8): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3248109335/syzkaller.BRU2hT/98/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 96.675957][ T53] Bluetooth: hci4: command tx timeout [ 98.756272][ T53] Bluetooth: hci4: command tx timeout [ 112.851466][ T4494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.860850][ T4494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.874579][ T4494] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.885112][ T4494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.893965][ T4494] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 112.901473][ T4494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.995618][ T53] Bluetooth: hci5: command tx timeout [ 117.075457][ T53] Bluetooth: hci5: command tx timeout [ 119.163025][ T53] Bluetooth: hci5: command tx timeout [ 121.245985][ T53] Bluetooth: hci5: command tx timeout [ 123.943147][ T4494] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.957708][ T4494] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.966478][ T4494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.978213][ T4494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.986190][ T4494] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.993581][ T4494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.153397][ T4494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.162368][ T4494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.171356][ T4494] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.183268][ T4494] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.196439][ T4494] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 124.203848][ T4494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.275888][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 125.285856][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 125.294777][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 125.303790][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 125.317467][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 125.325798][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 126.045403][ T4494] Bluetooth: hci6: command tx timeout [ 126.275569][ T4494] Bluetooth: hci7: command tx timeout [ 127.396900][ T4494] Bluetooth: hci8: command tx timeout [ 128.115428][ T4494] Bluetooth: hci6: command tx timeout [ 128.355482][ T4494] Bluetooth: hci7: command tx timeout [ 129.475489][ T4494] Bluetooth: hci8: command tx timeout [ 130.195429][ T4494] Bluetooth: hci6: command tx timeout [ 130.435411][ T4494] Bluetooth: hci7: command tx timeout [ 131.555538][ T4494] Bluetooth: hci8: command tx timeout [ 132.285401][ T4494] Bluetooth: hci6: command tx timeout [ 132.525864][ T4494] Bluetooth: hci7: command tx timeout [ 133.161113][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.167703][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.635783][ T4494] Bluetooth: hci8: command tx timeout [ 155.265956][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 155.275108][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 155.283839][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 155.291944][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 155.300667][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 155.309105][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 157.395588][ T53] Bluetooth: hci9: command tx timeout [ 159.485466][ T53] Bluetooth: hci9: command tx timeout [ 161.555537][ T53] Bluetooth: hci9: command tx timeout [ 163.635621][ T53] Bluetooth: hci9: command tx timeout [ 178.052651][ T4494] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 178.070789][ T4494] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 178.091484][ T4494] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 178.107614][ T4494] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 178.116340][ T4494] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 178.124399][ T4494] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 180.205681][ T5129] Bluetooth: hci10: command tx timeout [ 181.327383][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 181.330100][ T5129] Bluetooth: hci2: command 0x0406 tx timeout [ 181.333608][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 182.275819][ T5113] Bluetooth: hci10: command tx timeout [ 184.360800][ T5113] Bluetooth: hci10: command tx timeout [ 186.435364][ T5113] Bluetooth: hci10: command tx timeout [ 188.973950][ T5119] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 188.983311][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 188.992337][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 189.001071][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 189.009538][ T5119] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 189.017523][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 189.322468][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 189.333455][ T5113] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 189.344828][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 189.353254][ T5113] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 189.361355][ T5113] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 189.370063][ T5113] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 190.382022][ T5119] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 190.400988][ T5119] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 190.409615][ T5119] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 190.418796][ T5119] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 190.427864][ T5119] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 190.435543][ T5119] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 191.077090][ T5113] Bluetooth: hci11: command tx timeout [ 191.395687][ T5113] Bluetooth: hci12: command tx timeout [ 192.517233][ T5113] Bluetooth: hci13: command tx timeout [ 193.155586][ T5113] Bluetooth: hci11: command tx timeout [ 193.475750][ T5113] Bluetooth: hci12: command tx timeout [ 194.607052][ T5113] Bluetooth: hci13: command tx timeout [ 194.607260][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.621012][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.235522][ T5113] Bluetooth: hci11: command tx timeout [ 195.555489][ T5113] Bluetooth: hci12: command tx timeout [ 196.675510][ T5113] Bluetooth: hci13: command tx timeout [ 197.315618][ T5113] Bluetooth: hci11: command tx timeout [ 197.636454][ T5113] Bluetooth: hci12: command tx timeout [ 198.755641][ T5113] Bluetooth: hci13: command tx timeout [ 217.155688][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 220.326075][ T5119] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 220.337872][ T5119] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 220.355469][ T5119] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 220.364689][ T5119] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 220.375827][ T5119] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 220.383464][ T5119] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 222.435512][ T5119] Bluetooth: hci14: command tx timeout [ 224.515581][ T5119] Bluetooth: hci14: command tx timeout [ 226.595439][ T5119] Bluetooth: hci14: command tx timeout [ 228.675493][ T5119] Bluetooth: hci14: command tx timeout [ 237.645563][ T5113] Bluetooth: hci5: command 0x0406 tx timeout [ 238.117021][ T30] INFO: task kworker/u8:10:2831 blocked for more than 143 seconds. [ 238.136260][ T30] Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0 [ 238.153962][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/11 10:43:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 238.164037][ T30] task:kworker/u8:10 state:D stack:21176 pid:2831 tgid:2831 ppid:2 flags:0x00004000 [ 238.206642][ T30] Workqueue: netns cleanup_net [ 238.212015][ T30] Call Trace: [ 238.223798][ T30] [ 238.227920][ T30] __schedule+0x17e8/0x4a20 [ 238.232810][ T30] ? __pfx___schedule+0x10/0x10 [ 238.239514][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.244702][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 238.259381][ T30] ? kthread_data+0x52/0xd0 [ 238.264703][ T30] ? schedule+0x90/0x320 [ 238.273668][ T30] ? wq_worker_sleeping+0x66/0x240 [ 238.290316][ T30] ? schedule+0x90/0x320 [ 238.295034][ T30] schedule+0x14b/0x320 [ 238.306145][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.311778][ T30] __mutex_lock+0x6a4/0xd70 [ 238.327734][ T30] ? __mutex_lock+0x527/0xd70 [ 238.332593][ T30] ? wg_destruct+0x25/0x2e0 [ 238.344904][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.350865][ T30] ? __pfx_free_percpu+0x10/0x10 [ 238.365694][ T30] ? kfree+0x149/0x360 [ 238.369921][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 238.383576][ T30] wg_destruct+0x25/0x2e0 [ 238.388501][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 238.396246][ T30] netdev_run_todo+0xe1a/0x1000 [ 238.403615][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 238.419765][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 238.430432][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 238.445405][ T30] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 238.451786][ T30] default_device_exit_batch+0xa14/0xa90 [ 238.466137][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.474592][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 238.491717][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 238.502659][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 238.515441][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 238.522422][ T30] cleanup_net+0x89d/0xcc0 [ 238.538695][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 238.543839][ T30] ? process_scheduled_works+0x945/0x1830 [ 238.555391][ T30] process_scheduled_works+0xa2c/0x1830 [ 238.561526][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.575874][ T30] ? assign_work+0x364/0x3d0 [ 238.580808][ T30] worker_thread+0x86d/0xd70 [ 238.596198][ T30] ? __kthread_parkme+0x169/0x1d0 [ 238.601366][ T30] ? __pfx_worker_thread+0x10/0x10 [ 238.615849][ T30] kthread+0x2f0/0x390 [ 238.620107][ T30] ? __pfx_worker_thread+0x10/0x10 [ 238.635712][ T30] ? __pfx_kthread+0x10/0x10 [ 238.642064][ T30] ret_from_fork+0x4b/0x80