last executing test programs: 32.052790467s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x4}]}}}}}) 31.964808936s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 31.835643549s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 31.772950399s ago: executing program 2: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x0, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 31.61215158s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6346773d959bad5f, 0x18, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r0, 0x0, 0x17, 0xfffffffffffffffe}, 0x16) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x0) 31.482128955s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 31.465210724s ago: executing program 2: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 31.345216294s ago: executing program 4: socket(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 31.276643393s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/100, 0x64}}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 31.128199803s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x24, &(0x7f0000005840)=""/158, &(0x7f0000005900)=0x9e) 31.079394325s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6, 0xb, 0x0, &(0x7f0000000040)) 31.011511265s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000fffc0000000000000a00", @ANYRES32=0x0], 0xb8}}, 0x0) 30.964329146s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)=@ipv4_newroute={0x24, 0x18, 0xca7e823985834c9d, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xff, 0x0, 0x200}, [@RTA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x0) 30.93640135s ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) 30.930781785s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 30.929074512s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 30.855383243s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 30.820045548s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x41}]}}}]}, 0x44}}, 0x0) 30.808124861s ago: executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYRES16], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0) 30.754219831s ago: executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="a232f841f46835098da2a3f5", 0xc}], 0x1}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 30.699404463s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x0) 30.578468057s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000f0000000000003490f82bf77b2a82a671c1209e6e873b9a19135d607149c68d0daa96906e4da3c227a9acb2c3375c46c0ba56dc4f8d9d38b589d9186011473191ed5f2a8ed07eeacc55e3f2ab18e97b0ec7bf5ba59d120dc6aa8139383d1a56ae44e6f30032482a4f1160b92532ba84de32848e8944e29e7ff15ad8901a8d04"], 0x0, 0x85}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) 30.1480598s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440), 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}]}}}]}, 0x38}}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x4) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09040000f63e"], 0x3f00}], 0x1}, 0x0) 30.039992312s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 30.018844154s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 785.390458ms ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000fffc0000000000000a00", @ANYRES32=0x0], 0xb8}}, 0x0) 561.56021ms ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="89fe4b9df660", 0x6}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0xfffffffffffffdfd) 123.583002ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$kcm(0x10, 0x0, 0x10) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5700030007"], 0xd) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 21.663626ms ago: executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x14, 0x1a, 0x305}, 0x14}}, 0x0) 0s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xbe}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): 7][ T6892] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.108401][ T6875] syz-executor.1 (6875) used greatest stack depth: 9464 bytes left [ 119.190016][ T6899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.328883][ T29] audit: type=1804 audit(1718908712.286:11): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3277579037/syzkaller.c2AjWA/98/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 119.414844][ T6895] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 120.122292][ T6933] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.137551][ T6933] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.324310][ T6945] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.446006][ T6950] Bluetooth: MGMT ver 1.22 [ 120.461294][ T29] audit: type=1804 audit(1718908713.416:12): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/100/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 120.540703][ T29] audit: type=1804 audit(1718908713.496:13): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/100/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 120.612465][ T6951] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 120.747849][ T6951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.972130][ T6968] batadv0: entered promiscuous mode [ 120.987703][ T6968] batadv0: left promiscuous mode [ 121.882581][ T7010] __nla_validate_parse: 1 callbacks suppressed [ 121.882601][ T7010] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.048762][ T7018] Dead loop on virtual device ipvlan1, fix it urgently! [ 122.087603][ T7018] syz-executor.1 (7018) used greatest stack depth: 8344 bytes left [ 122.088717][ T7020] Dead loop on virtual device ipvlan1, fix it urgently! [ 122.106426][ T7015] batadv0: entered promiscuous mode [ 122.128697][ T7015] batadv0: left promiscuous mode [ 122.456759][ T7038] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 122.657559][ T7047] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.994230][ T7063] : renamed from bond0 [ 123.056886][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.137035][ T7067] batadv0: entered promiscuous mode [ 123.149021][ T7067] batadv0: left promiscuous mode [ 123.212478][ T7074] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 123.536330][ T7088] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.811932][ T7105] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 124.149225][ T29] audit: type=1804 audit(1718908717.106:14): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4269336090/syzkaller.PT2quG/117/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 124.171816][ T7129] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.181194][ T7122] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.329664][ T29] audit: type=1800 audit(1718908717.286:15): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 124.503205][ T7146] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 124.608990][ T7153] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.774047][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.800927][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.947853][ T7165] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.316072][ T7177] Illegal XDP return value 2016218251 on prog (id 216) dev N/A, expect packet loss! [ 125.542441][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.564511][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.573667][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.581373][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.602211][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.617016][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 125.627148][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.702314][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.846700][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.981913][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.218188][ T61] bridge_slave_1: left allmulticast mode [ 126.230829][ T61] bridge_slave_1: left promiscuous mode [ 126.253977][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.272643][ T61] bridge_slave_0: left allmulticast mode [ 126.278951][ T61] bridge_slave_0: left promiscuous mode [ 126.290269][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.792993][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.807928][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.819034][ T61] bond0 (unregistering): Released all slaves [ 126.898210][ T61] bond1 (unregistering): Released all slaves [ 127.048830][ T61] tipc: Disabling bearer [ 127.069199][ T61] tipc: Left network mode [ 127.092144][ T7231] __nla_validate_parse: 2 callbacks suppressed [ 127.092159][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.157719][ T7188] chnl_net:caif_netlink_parms(): no params data found [ 127.303179][ T7245] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.357932][ T7243] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 127.399247][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.416288][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.616513][ T7262] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 127.704373][ T5130] Bluetooth: hci0: command tx timeout [ 127.721038][ T61] hsr_slave_0: left promiscuous mode [ 127.751632][ T61] hsr_slave_1: left promiscuous mode [ 127.773841][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.788615][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.810872][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.840837][ T61] veth0_macvtap: left promiscuous mode [ 127.850003][ T61] veth1_vlan: left promiscuous mode [ 127.856964][ T61] veth0_vlan: left promiscuous mode [ 128.317727][ T7275] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.803558][ T7268] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 128.820274][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.846398][ T7268] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 128.918280][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.930746][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.938390][ T7188] bridge_slave_0: entered allmulticast mode [ 128.956760][ T7188] bridge_slave_0: entered promiscuous mode [ 128.973027][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.981527][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.997615][ T7188] bridge_slave_1: entered allmulticast mode [ 129.006500][ T7188] bridge_slave_1: entered promiscuous mode [ 129.101481][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.145944][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.302166][ T7290] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.306864][ T7188] team0: Port device team_slave_0 added [ 129.336595][ T7188] team0: Port device team_slave_1 added [ 129.447362][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.466390][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.492599][ T7188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.526010][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.531052][ T61] IPVS: stop unused estimator thread 0... [ 129.550111][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.569121][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.630678][ T29] audit: type=1804 audit(1718908722.566:16): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/120/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 129.662991][ T7188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.680792][ T29] audit: type=1804 audit(1718908722.586:17): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/120/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 129.725787][ T29] audit: type=1804 audit(1718908722.616:18): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/120/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 129.775308][ T29] audit: type=1804 audit(1718908722.726:19): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/120/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 129.803913][ T5130] Bluetooth: hci0: command tx timeout [ 129.848441][ T7188] hsr_slave_0: entered promiscuous mode [ 129.855999][ T7188] hsr_slave_1: entered promiscuous mode [ 129.881312][ T7188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.895142][ T7188] Cannot create hsr debugfs directory [ 130.218066][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.269092][ T7327] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.546449][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.880937][ T7188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.913005][ T7188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.946980][ T7188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.995615][ T7188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.216477][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.258235][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 131.319847][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.340203][ T7377] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 131.350758][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.357956][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.386804][ T7377] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 131.408528][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.415739][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.580332][ T7392] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 131.730960][ T7401] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 131.874642][ T5130] Bluetooth: hci0: command tx timeout [ 131.937852][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.375522][ T7424] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 132.409224][ T7424] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 132.447727][ T7419] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 132.524723][ T7188] veth0_vlan: entered promiscuous mode [ 132.669140][ T7435] __nla_validate_parse: 4 callbacks suppressed [ 132.669159][ T7435] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.706902][ T7188] veth1_vlan: entered promiscuous mode [ 132.906961][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 132.916112][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922587][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930332][ T7188] veth0_macvtap: entered promiscuous mode [ 133.026694][ T7188] veth1_macvtap: entered promiscuous mode [ 133.046240][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.191067][ T7452] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.234863][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.238107][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.260865][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.271421][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.301328][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.363597][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.400403][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.448620][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.488331][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.506753][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.568791][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.584315][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.599393][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.631723][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.661545][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.677678][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.689603][ T7188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.709404][ T7188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.732099][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.763010][ T7474] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.770341][ T7188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.802199][ T7188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.827044][ T7188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.846751][ T7188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.894618][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.944677][ T5130] Bluetooth: hci0: command tx timeout [ 134.042434][ T7487] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 134.120231][ T6510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.146475][ T6510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.213568][ T6510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.236092][ T6510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.393578][ T7507] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.455620][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.494499][ T7510] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.074402][ T7549] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.117291][ T7553] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 135.182595][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.217967][ T7553] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 135.489258][ T7582] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 135.498467][ T7582] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 135.571108][ T7583] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 135.727054][ T7591] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 135.880548][ T7599] sit0: entered promiscuous mode [ 135.943654][ T7599] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 136.200795][ T7611] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 136.362908][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 136.369713][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 136.376263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.384119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.392006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.399857][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.407777][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.415643][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.423562][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.431436][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.439391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.447252][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.455205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.463038][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.470985][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.478844][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.486793][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.494650][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.502539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 136.510386][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 136.715035][ T7639] sctp: [Deprecated]: syz-executor.1 (pid 7639) Use of int in maxseg socket option. [ 136.715035][ T7639] Use struct sctp_assoc_value instead [ 136.742149][ T7640] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 136.851637][ T7646] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 136.981642][ T7658] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 137.793107][ T7699] __nla_validate_parse: 8 callbacks suppressed [ 137.793127][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.061647][ T7699] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.090519][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.108614][ T7717] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.130546][ T7720] validate_nla: 2 callbacks suppressed [ 138.130560][ T7720] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 138.215606][ T7720] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.236616][ T7699] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.280701][ T7721] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 138.365203][ T7720] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 138.441254][ T7699] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.500727][ T7720] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 138.593534][ T7699] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.803246][ T7699] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.832311][ T7699] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.882764][ T7699] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.939151][ T7699] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.209412][ T7759] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.272907][ T7763] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 139.372061][ T7766] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 139.489621][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.542390][ T7772] team0: Port device macvlan1 added [ 139.579111][ T7768] team_slave_0: entered promiscuous mode [ 139.585114][ T7768] team_slave_1: entered promiscuous mode [ 139.606820][ T7768] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 140.099812][ T7804] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.193517][ T7813] ip6t_srh: unknown srh invflags 7863 [ 140.223189][ T7812] xt_bpf: check failed: parse error [ 140.826217][ T7848] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.382231][ T7890] ipvlan0: entered promiscuous mode [ 141.485899][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.522336][ T7888] ipvlan0: left promiscuous mode [ 141.622106][ T7902] ip6t_srh: unknown srh invflags 7863 [ 142.505227][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 142.629134][ T7955] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.869006][ T7971] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 142.909995][ T7971] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.954953][ T7971] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 142.970128][ T7971] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.073833][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.158230][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.189264][ T7995] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.203833][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.307806][ T7995] Κό: entered promiscuous mode [ 143.495805][ T8011] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.668425][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.686387][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.866858][ T8043] syzkaller0: entered allmulticast mode [ 144.181230][ T8061] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.401864][ T8069] openvswitch: netlink: Missing key (keys=40, expected=100) [ 145.230093][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.391866][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.408088][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.416922][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.427202][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.435750][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.445061][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.452401][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.495016][ T8111] Bluetooth: MGMT ver 1.22 [ 145.513943][ T8111] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 145.614305][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.647205][ T8111] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221503 (only 8 groups) [ 145.737264][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.594040][ T35]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.606934][ T35]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.621271][ T35]  (unregistering): Released all slaves [ 146.647332][ T8105] chnl_net:caif_netlink_parms(): no params data found [ 146.836313][ T35] tipc: Left network mode [ 146.922571][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.937887][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.947819][ T8105] bridge_slave_0: entered allmulticast mode [ 146.955426][ T8105] bridge_slave_0: entered promiscuous mode [ 146.970405][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.979630][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.997525][ T8105] bridge_slave_1: entered allmulticast mode [ 147.006054][ T8105] bridge_slave_1: entered promiscuous mode [ 147.248436][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.274957][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.423767][ T8178] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 147.494884][ T35] hsr_slave_0: left promiscuous mode [ 147.505949][ T35] hsr_slave_1: left promiscuous mode [ 147.524168][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.540777][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.548666][ T5130] Bluetooth: hci3: command tx timeout [ 147.570684][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.588546][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.668807][ T35] veth1_macvtap: left promiscuous mode [ 147.694360][ T35] veth0_macvtap: left promiscuous mode [ 147.710838][ T35] veth1_vlan: left promiscuous mode [ 147.723551][ T35] veth0_vlan: left promiscuous mode [ 148.362625][ T35] team0 (unregistering): Port device team_slave_1 removed [ 148.399803][ T35] team0 (unregistering): Port device team_slave_0 removed [ 148.722267][ T8105] team0: Port device team_slave_0 added [ 148.731204][ T8105] team0: Port device team_slave_1 added [ 148.896937][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.908090][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.985116][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.015826][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.054570][ T29] audit: type=1804 audit(1718908742.006:20): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/172/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 149.061142][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.183634][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.299580][ T8211] __nla_validate_parse: 11 callbacks suppressed [ 149.299599][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.335736][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.398116][ T8105] hsr_slave_0: entered promiscuous mode [ 149.438836][ T8105] hsr_slave_1: entered promiscuous mode [ 149.460127][ T8105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.489642][ T8105] Cannot create hsr debugfs directory [ 149.620553][ T8216] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 149.628168][ T5130] Bluetooth: hci3: command tx timeout [ 150.296407][ T8236] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.428087][ T8105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.460846][ T8105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.497306][ T8251] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 150.519976][ T8105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.559997][ T8105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.887323][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.932207][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 150.951738][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.960914][ T8277] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 150.974808][ T8277] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.991314][ T8274] batman_adv: batadv1: Adding interface: netdevsim0 [ 150.999786][ T8274] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.032334][ T8274] batman_adv: batadv1: Interface activated: netdevsim0 [ 151.046381][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.102508][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.156296][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.163536][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.240244][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.247470][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.357820][ T8299] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 151.443240][ T8306] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.636045][ T8316] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 151.663130][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.670742][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.703777][ T5130] Bluetooth: hci3: command tx timeout [ 151.710446][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.717919][ T8316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.725543][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.732737][ T8316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.767945][ T8316] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 151.918765][ T8319] syzkaller0: entered allmulticast mode [ 151.946905][ T8317] syzkaller0: left allmulticast mode [ 152.008681][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.112594][ T8346] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 152.212298][ T8105] veth0_vlan: entered promiscuous mode [ 152.272408][ T8105] veth1_vlan: entered promiscuous mode [ 152.308182][ T8354] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.402625][ T8105] veth0_macvtap: entered promiscuous mode [ 152.440184][ T8105] veth1_macvtap: entered promiscuous mode [ 152.483828][ T8360] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 152.513332][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.532310][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.553061][ T8362] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 152.557955][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.582318][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.592636][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.605899][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.616208][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.627189][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.641698][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.654173][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.687783][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.704807][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.714778][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.726030][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.735944][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.746638][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.773484][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.794208][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.812485][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.832611][ T8105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.842228][ T8105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.851309][ T8105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.860649][ T8105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.861802][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.025380][ T6508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.033242][ T6508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.097493][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.117322][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.192524][ T8390] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 153.249673][ T8394] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 153.753728][ T8426] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 153.783502][ T5130] Bluetooth: hci3: command tx timeout [ 153.831000][ T8433] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 153.984387][ T8436] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 154.052142][ T29] audit: type=1804 audit(1718908747.006:21): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3047556165/syzkaller.C650bx/2/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 154.054889][ T8435] Bluetooth: MGMT ver 1.22 [ 154.336943][ T8450] tipc: Enabled bearer , priority 10 [ 154.452788][ T8454] __nla_validate_parse: 1 callbacks suppressed [ 154.452806][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.553064][ T8454] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 154.571576][ T8454] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 154.739064][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.763958][ T8469] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.798147][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.810203][ T8469] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.823869][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.852343][ T8476] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 154.925633][ T8482] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 154.944841][ T8484] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.983237][ T8485] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 156.184262][ T5130] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 156.200772][ T5127] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.294749][ T8542] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 156.310312][ T29] audit: type=1804 audit(1718908749.266:22): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/62/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 156.392001][ T29] audit: type=1804 audit(1718908749.266:23): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/62/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 156.458575][ T29] audit: type=1804 audit(1718908749.266:24): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/62/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 156.544053][ T29] audit: type=1804 audit(1718908749.386:25): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/62/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 156.610166][ T29] audit: type=1804 audit(1718908749.386:26): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/62/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 156.666360][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.677314][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.578785][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.625528][ T8575] gtp0: entered promiscuous mode [ 157.630517][ T8575] gtp0: entered allmulticast mode [ 157.892041][ T8602] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 159.086799][ T8636] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 159.113145][ T8636] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.224494][ T8641] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 159.412080][ T8641] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 159.532537][ T8656] __nla_validate_parse: 6 callbacks suppressed [ 159.532558][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.744598][ T29] audit: type=1800 audit(1718908752.706:27): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 160.180866][ T8679] sch_tbf: peakrate 8 is lower than or equals to rate 14799206064497609713 ! [ 160.275169][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.299873][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.324540][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.651876][ T8714] sch_tbf: peakrate 8 is lower than or equals to rate 14799206064497609713 ! [ 160.835954][ T8721] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 160.883562][ T8721] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.925741][ T8726] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 161.068082][ T8721] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 161.245637][ T8726] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 161.379408][ T8738] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.432596][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.436803][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.196738][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.198035][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.472912][ T29] audit: type=1804 audit(1718908756.426:28): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/84/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 163.564084][ T29] audit: type=1804 audit(1718908756.456:29): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/84/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 163.927471][ T8864] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 164.421741][ T29] audit: type=1804 audit(1718908757.376:30): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/219/cgroup.controllers" dev="sda1" ino=1937 res=1 errno=0 [ 164.456969][ T8896] tipc: Can't bind to reserved service type 0 [ 164.487660][ T29] audit: type=1804 audit(1718908757.376:31): pid=8889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/219/cgroup.controllers" dev="sda1" ino=1937 res=1 errno=0 [ 165.316749][ T8933] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 165.752638][ T8948] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 166.194077][ T8966] __nla_validate_parse: 8 callbacks suppressed [ 166.194096][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.239173][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.254489][ T8965] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 167.458833][ T29] audit: type=1804 audit(1718908760.416:32): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/212/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 167.542855][ T29] audit: type=1804 audit(1718908760.476:33): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/212/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 167.804489][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.948382][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.979110][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.387668][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.416778][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.921536][ T9054] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 169.084609][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.269854][ T9065] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.460351][ T9067] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.165385][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.300176][ T9095] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 171.817531][ T9135] xt_bpf: check failed: parse error [ 171.997990][ T9141] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 172.139784][ T9153] __nla_validate_parse: 5 callbacks suppressed [ 172.139802][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.162485][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.682144][ T9171] Dead loop on virtual device ipvlan1, fix it urgently! [ 172.766732][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.776606][ T9174] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 173.279493][ T9183] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 173.292073][ T9186] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 173.333421][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.424794][ T9191] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.696264][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.870612][ T9221] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 174.080235][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.409228][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.442599][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 174.456026][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.463721][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.466220][ T9253] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 174.557197][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.346309][ T9294] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.815545][ T9319] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 176.732386][ T9362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.844425][ T9361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.996836][ T9378] geneve0: entered allmulticast mode [ 177.716283][ T9410] __nla_validate_parse: 5 callbacks suppressed [ 177.716304][ T9410] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.852882][ T9421] veth0_to_hsr: entered promiscuous mode [ 177.873538][ T9421] vlan2: entered promiscuous mode [ 177.893607][ T9421] veth0_to_hsr: left promiscuous mode [ 178.002059][ T9428] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 178.027924][ T9428] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 178.043424][ T9431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.183853][ T9430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.286657][ T9448] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.337119][ T9448] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.611649][ T9459] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.865252][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.895035][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.920523][ T9473] can: request_module (can-proto-4) failed. [ 179.807901][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.880861][ T9521] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.353025][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.368666][ T9542] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.378293][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.674866][ T9562] siw: device registration error -23 [ 180.990906][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.066103][ T9582] netlink: zone id is out of range [ 181.110385][ T9582] netlink: zone id is out of range [ 181.141672][ T9582] netlink: zone id is out of range [ 181.166760][ T9582] netlink: zone id is out of range [ 181.172163][ T9582] netlink: zone id is out of range [ 181.178297][ T9582] netlink: zone id is out of range [ 181.193438][ T9582] netlink: zone id is out of range [ 181.198589][ T9582] netlink: zone id is out of range [ 181.218865][ T9582] netlink: zone id is out of range [ 181.233421][ T9582] netlink: zone id is out of range [ 181.756339][ T9616] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 181.912677][ T9626] siw: device registration error -23 [ 182.712687][ T9638] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 182.909432][ T9649] xt_hashlimit: overflow, rate too high: 0 [ 183.110022][ T9663] __nla_validate_parse: 2 callbacks suppressed [ 183.110041][ T9663] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.316960][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.676830][ T9719] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 184.692568][ T9719] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.709743][ T9719] NCSI netlink: No device for ifindex 0 [ 184.727483][ T29] audit: type=1800 audit(1718908777.686:34): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 184.768107][ T29] audit: type=1804 audit(1718908777.716:35): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/279/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 184.797372][ T29] audit: type=1804 audit(1718908777.716:36): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/279/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 184.830389][ T29] audit: type=1804 audit(1718908777.716:37): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/279/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 184.863271][ T29] audit: type=1804 audit(1718908777.816:38): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/279/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 184.890512][ T29] audit: type=1804 audit(1718908777.816:39): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1855691621/syzkaller.e0XPOD/279/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 184.991246][ T9735] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 185.053692][ T9740] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.899168][ T9762] sch_tbf: peakrate 60572 is lower than or equals to rate 10941647825891232827 ! [ 186.210211][ T9782] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.685524][ T9805] Bluetooth: MGMT ver 1.22 [ 186.701095][ T9807] sch_tbf: peakrate 60572 is lower than or equals to rate 10941647825891232827 ! [ 187.402407][ T9822] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.837091][ T9840] sch_tbf: peakrate 60572 is lower than or equals to rate 10941647825891232827 ! [ 188.168901][ T9858] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.196627][ T9859] batadv0: entered promiscuous mode [ 188.499660][ T9877] sch_tbf: peakrate 60572 is lower than or equals to rate 10941647825891232827 ! [ 188.856479][ T9891] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.921928][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.260771][ T9915] sch_tbf: peakrate 60572 is lower than or equals to rate 10941647825891232827 ! [ 189.316290][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.380378][ T9922] vlan2: entered promiscuous mode [ 189.389331][ T9922] bridge0: entered promiscuous mode [ 189.409163][ T9922] bridge0: left promiscuous mode [ 189.485817][ T9930] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.879349][ T9924] net_ratelimit: 118 callbacks suppressed [ 189.879367][ T9924] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 189.913961][ T9927] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 190.167319][ T9964] sch_tbf: peakrate 60572 is lower than or equals to rate 10941647825891232827 ! [ 190.177187][ T9970] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 190.186827][ T9970] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 190.745246][ T9997] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.768870][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.797336][ T9997] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.825472][ T9997] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 190.851171][ T9997] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 190.897000][ T9997] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.171890][T10008] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 191.303799][ T5129] Bluetooth: hci2: command 0x0406 tx timeout [ 191.305527][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 191.414608][T10010] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 191.671235][T10023] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.684538][T10021] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 191.767253][T10021] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.013558][T10043] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 192.564928][T10072] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 192.629527][T10072] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.638765][T10072] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.647588][T10072] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.656420][T10072] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.858905][T10080] veth1_macvtap: left promiscuous mode [ 192.873745][T10080] macsec0: entered promiscuous mode [ 192.893129][T10080] macsec0: entered allmulticast mode [ 192.924845][T10084] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 193.660383][T10128] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 193.905476][T10146] __nla_validate_parse: 2 callbacks suppressed [ 193.905496][T10146] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.959600][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.006744][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.347444][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 194.364137][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.370961][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.019598][T10245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.537520][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.574440][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.520799][T10310] netlink: 1956 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.727754][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.185444][T10347] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 198.213510][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.460872][T10368] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.735490][T10384] vlan3: entered promiscuous mode [ 198.753991][T10384] ip6gretap0: entered promiscuous mode [ 198.759613][T10384] vlan3: entered allmulticast mode [ 198.783905][T10384] ip6gretap0: entered allmulticast mode [ 198.821096][T10384] ip6gretap0: left allmulticast mode [ 198.849545][T10384] ip6gretap0: left promiscuous mode [ 199.307529][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.426461][T10422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.700531][T10422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.910864][T10447] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 199.922441][T10422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.071608][T10422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.286540][T10422] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.358310][T10422] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.402627][T10422] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.453185][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.527302][T10422] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.874800][T10483] IPv6: NLM_F_REPLACE set, but no existing node found! [ 201.006438][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.018279][T10489] syz-executor.1[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.018414][T10489] syz-executor.1[10489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.056176][T10498] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 201.136769][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.198422][T10507] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.654536][T10544] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 201.664010][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.913907][T10558] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 201.949670][T10561] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.348905][T10582] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 202.392494][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.424911][T10582] bridge0: port 3(dummy0) entered blocking state [ 202.448458][T10582] bridge0: port 3(dummy0) entered disabled state [ 202.470797][T10582] dummy0: entered allmulticast mode [ 202.508252][T10582] dummy0: entered promiscuous mode [ 202.728327][T10616] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.134524][T10634] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.303958][T10641] sctp: [Deprecated]: syz-executor.4 (pid 10641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.303958][T10641] Use struct sctp_sack_info instead [ 203.383521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.057605][T10672] sctp: [Deprecated]: syz-executor.2 (pid 10672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.057605][T10672] Use struct sctp_sack_info instead [ 205.287966][T10718] __nla_validate_parse: 1 callbacks suppressed [ 205.287984][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.097849][T10751] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.021143][T10782] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.074966][T10786] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 207.122662][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.846544][T10825] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.042805][T10838] Dead loop on virtual device ipvlan1, fix it urgently! [ 208.642990][T10868] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.725142][T10872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.778767][T10878] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.782392][T10881] sctp: [Deprecated]: syz-executor.0 (pid 10881) Use of int in max_burst socket option deprecated. [ 208.782392][T10881] Use struct sctp_assoc_value instead [ 208.852014][T10872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.945851][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.415386][T10918] netlink: set zone limit has 4 unknown bytes [ 209.597106][ T6505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.618557][ T6505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.692629][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.704545][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 209.774810][T10924] bond2: entered promiscuous mode [ 209.850343][ T6505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.913576][ T6505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.000026][T10939] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 210.019642][T10939] macvtap1: entered allmulticast mode [ 210.030716][T10939] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 210.064571][T10939] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 210.083587][T10939] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 210.191414][ T6505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.213659][ T6505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.241956][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.251541][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.259812][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.280414][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.288402][ T5130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.290468][ T6505] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 210.305910][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.359336][ T6505] batman_adv: batadv1: Removing interface: netdevsim0 [ 210.387635][ T6505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.427033][T10958] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 210.443872][ T6505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.866319][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.898409][ T6505] bridge_slave_1: left allmulticast mode [ 210.910905][ T6505] bridge_slave_1: left promiscuous mode [ 210.920186][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.941862][ T6505] bridge_slave_0: left allmulticast mode [ 210.949134][ T6505] bridge_slave_0: left promiscuous mode [ 210.963215][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.382254][ T6505] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 211.606717][ T6505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.619896][ T6505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.631527][ T6505] bond0 (unregistering): Released all slaves [ 211.727901][ T6505] bond1 (unregistering): Released all slaves [ 211.744584][ T6505] bond2 (unregistering): Released all slaves [ 211.766279][T10990] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 211.830231][T10948] chnl_net:caif_netlink_parms(): no params data found [ 212.147431][T11010] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.344379][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.353390][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.361515][T10948] bridge_slave_0: entered allmulticast mode [ 212.369234][T10948] bridge_slave_0: entered promiscuous mode [ 212.402945][ T6505] hsr_slave_0: left promiscuous mode [ 212.413224][ T6505] hsr_slave_1: left promiscuous mode [ 212.424471][ T5130] Bluetooth: hci1: command tx timeout [ 212.431821][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.440709][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.455712][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.463277][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.553611][ T6505] veth0_macvtap: left promiscuous mode [ 212.559680][ T6505] veth1_vlan: left promiscuous mode [ 212.566316][ T6505] veth0_vlan: left promiscuous mode [ 213.351883][ T6505] team0 (unregistering): Port device team_slave_1 removed [ 213.393447][ T6505] team0 (unregistering): Port device team_slave_0 removed [ 213.747151][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.754557][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.763046][T10948] bridge_slave_1: entered allmulticast mode [ 213.772268][T10948] bridge_slave_1: entered promiscuous mode [ 213.870127][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.925136][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.040523][T11050] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.044554][T10948] team0: Port device team_slave_0 added [ 214.079380][T10948] team0: Port device team_slave_1 added [ 214.257364][T10948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.281970][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.362332][T10948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.390589][T10948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.418112][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.483060][T10948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.504078][ T5130] Bluetooth: hci1: command 0x041b tx timeout [ 214.571537][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.604780][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.656930][T10948] hsr_slave_0: entered promiscuous mode [ 214.664837][T10948] hsr_slave_1: entered promiscuous mode [ 214.673133][T10948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.690274][T10948] Cannot create hsr debugfs directory [ 214.910874][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.998004][T11093] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.393938][T11102] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.570424][T10948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.587635][T10948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.607442][T10948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.632586][T10948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.949431][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.018108][T10948] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.059862][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.067062][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.095644][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.102755][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.310769][T11131] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.551798][T11147] hsr0: entered promiscuous mode [ 216.574519][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.594088][T11147] macsec1: entered promiscuous mode [ 216.643394][ T5130] Bluetooth: hci1: command 0x041b tx timeout [ 216.661111][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.706913][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.719618][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.767101][T10948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.952350][T10948] veth0_vlan: entered promiscuous mode [ 216.987004][T10948] veth1_vlan: entered promiscuous mode [ 217.059170][T10948] veth0_macvtap: entered promiscuous mode [ 217.096493][T10948] veth1_macvtap: entered promiscuous mode [ 217.128607][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.153475][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.171148][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.194421][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.216576][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.247920][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.277766][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.306383][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.326538][T10948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.364370][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.380763][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.412481][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.436306][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.451805][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.499355][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.532614][T10948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.566246][T10948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.581239][T10948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.592624][T10948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.601746][T10948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.610936][T10948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.620067][T10948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.633099][T11165] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 217.842285][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.864985][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.899878][T11168] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 217.923375][T11168] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 217.982735][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.999720][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.125990][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.160207][T11178] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 218.182167][T11180] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.447123][T11184] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.663906][ T5130] Bluetooth: hci1: command 0x041b tx timeout [ 218.793636][T11199] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 218.956403][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.998276][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.166940][T11227] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 219.830946][T11249] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 220.729531][T11294] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 221.067660][T11305] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 221.079198][T11305] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 221.373767][T11314] __nla_validate_parse: 2 callbacks suppressed [ 221.373803][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.585003][T11323] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 221.619330][T11322] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 221.900084][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.928916][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.998338][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.747730][T11361] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 222.990923][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.001350][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.552316][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.737949][T11402] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 224.266907][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.335026][T11432] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.475980][T11438] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 224.600657][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.070105][T11465] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 225.089261][T11465] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 225.163079][T11468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.520272][T11476] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 225.912988][T11493] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 226.064769][T11500] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.090757][T11500] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 226.103134][ T6510] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.125081][T11493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.138349][T11503] bridge0: port 4(bond0) entered blocking state [ 226.153163][T11503] bridge0: port 4(bond0) entered disabled state [ 226.194693][T11503] bond0: entered allmulticast mode [ 226.199846][T11503] bond_slave_0: entered allmulticast mode [ 226.211636][T11503] bond_slave_1: entered allmulticast mode [ 226.224810][T11503] batadv0: entered allmulticast mode [ 226.230868][T11503] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 226.244139][T11500] ipt_REJECT: TCP_RESET invalid for non-tcp [ 226.246249][ T6510] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.256509][T11503] bond0: entered promiscuous mode [ 226.268620][T11503] bond_slave_0: entered promiscuous mode [ 226.274780][T11503] bond_slave_1: entered promiscuous mode [ 226.280669][T11503] batadv0: entered promiscuous mode [ 226.288556][T11503] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 226.341464][ T5169] IPVS: starting estimator thread 0... [ 226.347790][ T6512] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 226.357464][ T6512] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 226.473462][T11519] IPVS: using max 17 ests per chain, 40800 per kthread [ 226.554120][T11493] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 226.570396][T11493] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 226.582883][T11528] __nla_validate_parse: 5 callbacks suppressed [ 226.582968][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.591896][T11493] bond1 (unregistering): Released all slaves [ 226.611056][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.638802][T11508] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 226.683134][T11508] dummy0: left allmulticast mode [ 226.690777][T11508] dummy0: left promiscuous mode [ 226.714511][T11508] bridge0: port 3(dummy0) entered disabled state [ 226.762779][T11508] dummy0: entered promiscuous mode [ 226.778194][T11508] dummy0: entered allmulticast mode [ 226.797962][T11508] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 226.822378][T11510] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 226.979975][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.022186][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.575863][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.950224][T11565] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 227.983605][T11568] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 228.191202][T11572] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 228.226435][T11572] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 228.367499][T11572] ipt_REJECT: TCP_RESET invalid for non-tcp [ 228.411471][T11568] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 228.521746][T11568] bond3 (unregistering): Released all slaves [ 228.789270][T11597] sit0: entered allmulticast mode [ 228.963053][T11611] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 229.402844][T11645] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 229.464517][T11645] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.481023][T11645] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 229.535079][ T6505] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 229.536128][T11645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.656372][T11653] ipt_REJECT: TCP_RESET invalid for non-tcp [ 229.741471][T11660] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 229.838618][T11645] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 229.848909][T11645] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 229.871206][T11645] bond1 (unregistering): Released all slaves [ 229.890019][T11665] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 230.113658][T11678] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 230.151028][T11678] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.410065][T11694] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.430530][T11696] sit0: entered allmulticast mode [ 230.857993][T11714] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 231.174774][T11728] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.263982][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.275685][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.890720][T11769] __nla_validate_parse: 3 callbacks suppressed [ 231.890740][T11769] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.294119][T11786] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.464871][T11795] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 232.567286][T11799] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.876332][T11825] No such timeout policy "syz0" [ 232.897050][T11824] openvswitch: netlink: Message has 4 unknown bytes. [ 233.038181][T11834] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 233.117773][T11838] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.380883][T11859] Bluetooth: MGMT ver 1.22 [ 233.508972][T11862] batadv_slave_1: entered promiscuous mode [ 233.590631][T11865] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.847994][T11876] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 233.903473][T11879] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.130054][T11897] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.197454][T11856] batadv_slave_1: left promiscuous mode [ 234.381974][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.415717][T11916] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 234.479461][T11921] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.683783][T11935] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.020326][T11954] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 235.967413][T12011] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 237.384025][ T5128] Bluetooth: hci4: command 0x0405 tx timeout [ 237.420308][T12083] xt_time: unknown flags 0x4 [ 237.529797][T12087] __nla_validate_parse: 2 callbacks suppressed [ 237.529815][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.565251][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.874442][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.453982][T12122] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.635032][T12130] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.095630][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.122117][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.170418][T12161] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.354151][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.027429][T12216] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.057191][ T25] IPVS: starting estimator thread 0... [ 240.153676][T12221] IPVS: using max 21 ests per chain, 50400 per kthread [ 240.293167][T12224] bridge0: mtu less than device minimum [ 241.650693][T12294] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 241.757584][T12297] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 242.034214][T12307] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 242.583908][T12333] team0 (unregistering): Port device team_slave_0 removed [ 242.617232][T12333] team0 (unregistering): Port device team_slave_1 removed [ 242.623741][T12344] __nla_validate_parse: 10 callbacks suppressed [ 242.623758][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.652396][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.768098][T12350] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 242.838647][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.871217][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.883703][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.893331][T12355] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 243.519256][T12374] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.550860][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.171432][T12407] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.324217][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.337856][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.394548][T12422] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 244.786846][T12420] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 245.368820][T12470] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 246.185454][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.208816][T12499] xt_TCPMSS: Only works on TCP SYN packets [ 246.237761][T12499] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 246.293938][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.354945][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.404815][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.484018][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.553706][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.624221][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.692700][T12524] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 246.783692][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.839888][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.873672][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.873789][T12533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.916710][T12533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.954256][T12533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.102266][T12533] bond0: (slave batadv0): Releasing backup interface [ 247.183636][ T5172] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.268962][T12548] xt_TCPMSS: Only works on TCP SYN packets [ 247.314502][T12548] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 247.432536][T12550] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 247.698317][T12556] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 247.728125][T12566] __nla_validate_parse: 18 callbacks suppressed [ 247.728144][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.761942][T12570] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.054589][ T29] audit: type=1804 audit(1718908841.016:40): pid=12578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2624159600/syzkaller.BtXRwP/447/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 248.293198][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.240748][T12611] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.436784][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.484932][T12624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 249.532031][T12624] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.564412][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.577242][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.606313][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.921684][T12664] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 250.950761][T12664] macvlan2: entered promiscuous mode [ 250.996053][T12664] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 251.360621][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.712725][T12696] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 251.742970][T12697] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 253.262263][T12739] __nla_validate_parse: 3 callbacks suppressed [ 253.262284][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.301070][T12739] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.339960][T12748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.373779][T12739] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.459415][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.489283][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.652222][T12759] Dead loop on virtual device ipvlan1, fix it urgently! [ 253.679383][T12759] Dead loop on virtual device ipvlan1, fix it urgently! [ 253.876802][T12765] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 254.228679][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.384447][T12777] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 254.474777][T12777] : entered promiscuous mode [ 254.550108][T12782] pim6reg1: entered promiscuous mode [ 254.561133][T12782] pim6reg1: entered allmulticast mode [ 255.118003][T12801] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.140573][T12800] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 255.544989][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.575436][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.787124][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.798653][T12840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.840016][T12836] xt_CT: No such helper "pptp" [ 256.220921][T12858] IPVS: stopping backup sync thread 12859 ... [ 256.221436][T12859] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 256.723656][T12871] vlan2: entered promiscuous mode [ 257.502561][T12898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 258.009902][T12929] IPVS: length: 183 != 8 [ 258.460385][T12937] __nla_validate_parse: 9 callbacks suppressed [ 258.460953][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.517227][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.831562][T12950] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 258.862578][T12950] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 260.190180][T13017] pim6reg: entered allmulticast mode [ 260.209071][T13017] pim6reg: left allmulticast mode [ 260.258174][T13015] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.464583][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.477922][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.203796][T13040] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.561081][T13053] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 261.595758][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.637628][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.673747][T13055] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.706555][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.833056][T13062] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 262.208895][T13082] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 263.165950][T13104] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.340805][T13104] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.370620][T13110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.373265][T13110] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.926625][T13104] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.092034][T13104] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.340958][T13104] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.413206][T13104] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.469669][T13104] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.518152][T13104] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.623749][T13146] __nla_validate_parse: 8 callbacks suppressed [ 264.623768][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.634409][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.661369][T13146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.705191][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.934198][T13153] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 265.106222][T13164] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 265.336810][T13169] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 265.353794][T13169] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.914493][T13180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.504141][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.516681][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.637954][T13188] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 266.745931][T13188] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 266.918838][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.930354][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.947617][T13215] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.042653][T13215] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.160483][T13215] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.241876][T13215] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.434175][T13244] tipc: Invalid UDP bearer configuration [ 267.434227][T13244] tipc: Enabling of bearer rejected, failed to enable media [ 267.491403][T13246] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 268.103590][ T5127] Bluetooth: hci3: command 0x0405 tx timeout [ 268.892326][T13288] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 49729 - 0 [ 268.953363][T13288] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 49729 - 0 [ 268.961815][T13288] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 49729 - 0 [ 268.982070][T13288] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 49729 - 0 [ 269.574657][T13326] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 269.602460][ T29] audit: type=1804 audit(1718908862.556:41): pid=13324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1274535887/syzkaller.Nq80s7/132/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 269.670015][T13329] lo speed is unknown, defaulting to 1000 [ 269.677701][T13329] lo speed is unknown, defaulting to 1000 [ 269.690893][T13329] lo speed is unknown, defaulting to 1000 [ 269.732062][T13332] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 269.732677][T13329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.759107][T13333] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 269.787643][T13333] __nla_validate_parse: 6 callbacks suppressed [ 269.787660][T13333] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.815383][T13329] lo speed is unknown, defaulting to 1000 [ 269.831118][T13329] lo speed is unknown, defaulting to 1000 [ 269.852978][T13329] lo speed is unknown, defaulting to 1000 [ 269.861455][T13329] lo speed is unknown, defaulting to 1000 [ 269.897752][T13215] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.915321][T13329] lo speed is unknown, defaulting to 1000 [ 269.957346][T13215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.004703][T13215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.038831][T13215] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.231533][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.257414][T13356] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 270.264919][T13357] batadv_slave_0: entered allmulticast mode [ 270.309277][T13357] pim6reg: entered allmulticast mode [ 270.327012][T13357] batadv_slave_0: left allmulticast mode [ 270.346588][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.358569][T13354] dvmrp0: entered allmulticast mode [ 270.366450][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.381017][T13357] pim6reg: left allmulticast mode [ 270.606853][T13377] Dead loop on virtual device ipvlan1, fix it urgently! [ 270.674711][T13385] netlink: 4335 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.016889][T13392] syzkaller0: entered promiscuous mode [ 271.037925][T13392] syzkaller0: entered allmulticast mode [ 271.442592][T13377] syz-executor.1 (13377) used greatest stack depth: 6448 bytes left [ 271.799734][T13434] ieee802154 phy1 wpan1: encryption failed: -90 [ 273.050883][T13426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.060745][T13434] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 273.152004][T13442] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.393629][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.410841][ T29] audit: type=1800 audit(1718908866.366:42): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 273.432448][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.433975][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.466537][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.468842][ T29] audit: type=1804 audit(1718908866.366:43): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/343/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 273.502815][ T29] audit: type=1804 audit(1718908866.366:44): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/343/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 273.530238][ T29] audit: type=1804 audit(1718908866.366:45): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/343/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 273.556345][ T29] audit: type=1804 audit(1718908866.466:46): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/343/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 273.582685][ T29] audit: type=1804 audit(1718908866.466:47): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir660701968/syzkaller.e6Jbfq/343/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 273.827826][T13479] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 274.002874][T13492] Cannot find add_set index 0 as target [ 274.014032][T13492] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 274.891304][T13539] lo speed is unknown, defaulting to 1000 [ 274.919215][T13539] lo speed is unknown, defaulting to 1000 [ 274.950569][T13539] lo speed is unknown, defaulting to 1000 [ 275.004496][T13539] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.071321][T13539] lo speed is unknown, defaulting to 1000 [ 275.079814][T13539] lo speed is unknown, defaulting to 1000 [ 275.087447][T13539] lo speed is unknown, defaulting to 1000 [ 275.095358][T13539] lo speed is unknown, defaulting to 1000 [ 275.102659][T13539] lo speed is unknown, defaulting to 1000 [ 275.130913][T13555] __nla_validate_parse: 4 callbacks suppressed [ 275.130939][T13555] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.294497][T13571] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 275.310921][T13571] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.323792][T13571] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 275.344604][T13573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.734839][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.746531][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.861435][T13582] vlan2: entered promiscuous mode [ 275.867626][T13582] batadv0: entered promiscuous mode [ 276.086656][T13596] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.120735][T13600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.135417][T13598] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.357529][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.610195][ T29] audit: type=1804 audit(1718908869.566:48): pid=13615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4269336090/syzkaller.PT2quG/546/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 276.653083][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.687392][ T29] audit: type=1800 audit(1718908869.646:49): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 276.689555][T13627] vlan2: entered promiscuous mode [ 276.729120][ T29] audit: type=1804 audit(1718908869.676:50): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1274535887/syzkaller.Nq80s7/157/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 276.755713][T13615] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.775307][ T29] audit: type=1804 audit(1718908869.676:51): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1274535887/syzkaller.Nq80s7/157/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 277.092700][T13639] vcan0: tx drop: invalid da for name 0x0000000000000104 [ 277.316677][T13637] team0 (unregistering): Port device team_slave_0 removed [ 277.375291][T13637] team0 (unregistering): Port device team_slave_1 removed [ 277.479705][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.565239][T13724] x_tables: duplicate underflow at hook 2 [ 278.874870][T13736] vlan2: entered promiscuous mode [ 279.446876][T13773] dummy0: entered promiscuous mode [ 279.488501][ T29] audit: type=1804 audit(1718908872.446:52): pid=13777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3047556165/syzkaller.C650bx/360/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 279.541975][T13779] vlan2: entered promiscuous mode [ 279.551721][T13779] batadv0: entered promiscuous mode [ 279.706831][T13786] vlan3: entered promiscuous mode [ 280.350999][T13824] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 280.388105][T13828] rdma_rxe: rxe_newlink: failed to add bond0 [ 280.531639][T13833] syzkaller1: entered promiscuous mode [ 280.537522][T13833] syzkaller1: entered allmulticast mode [ 280.796649][T13848] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 280.847158][T13848] bridge0: port 3(bond2) entered blocking state [ 280.860730][T13848] bridge0: port 3(bond2) entered disabled state [ 280.868545][T13848] bond2: entered allmulticast mode [ 280.876363][T13848] bond2: entered promiscuous mode [ 280.932491][T13859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.944532][ T5172] IPVS: starting estimator thread 0... [ 281.009779][T13862] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 281.033880][T13860] IPVS: using max 21 ests per chain, 50400 per kthread [ 281.218423][T13872] vlan2: entered promiscuous mode [ 281.254091][T13879] syzkaller1: entered promiscuous mode [ 281.264410][T13879] syzkaller1: entered allmulticast mode [ 281.483509][T13882] __nla_validate_parse: 7 callbacks suppressed [ 281.483528][T13882] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.521950][T13883] sctp: [Deprecated]: syz-executor.0 (pid 13883) Use of int in maxseg socket option. [ 281.521950][T13883] Use struct sctp_assoc_value instead [ 281.523094][T13882] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.831072][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.858865][T13888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.871446][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.967506][T13891] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.104040][T13903] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 282.420565][T13921] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.441096][T13921] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.467062][T13923] vlan2: entered promiscuous mode [ 282.628669][T13931] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.640537][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.647674][T13929] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 282.755281][T13936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.218795][T13951] sch_tbf: burst 7 is lower than device lo mtu (18) ! [ 283.790533][T13971] Dead loop on virtual device ipvlan1, fix it urgently! [ 283.808550][T13969] vlan3: entered promiscuous mode [ 284.052571][T13986] sctp: [Deprecated]: syz-executor.3 (pid 13986) Use of int in max_burst socket option. [ 284.052571][T13986] Use struct sctp_assoc_value instead [ 284.234890][T13995] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 285.184044][T14021] x_tables: duplicate underflow at hook 3 [ 285.434292][T14028] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 286.154408][T14045] vlan2: entered promiscuous mode [ 286.433974][T14054] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 286.454841][T14054] team0: Port device batadv2 added [ 286.647053][T14059] sch_tbf: burst 7 is lower than device lo mtu (11337746) ! [ 286.988354][T14078] __nla_validate_parse: 5 callbacks suppressed [ 286.988373][T14078] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.296371][T14092] vlan3: entered promiscuous mode [ 288.725242][T14162] lo speed is unknown, defaulting to 1000 [ 288.743073][T14162] lo speed is unknown, defaulting to 1000 [ 289.014927][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.038955][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.530863][T14190] vlan2: entered promiscuous mode [ 290.119250][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.356275][T14220] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.426473][T14224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.531215][T14227] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.701716][T14233] vlan3: entered promiscuous mode [ 290.951812][T14245] sctp: [Deprecated]: syz-executor.1 (pid 14245) Use of int in maxseg socket option. [ 290.951812][T14245] Use struct sctp_assoc_value instead [ 291.127854][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.158770][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.279445][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.308631][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.420613][T14275] vlan2: entered promiscuous mode [ 292.113606][T14293] __nla_validate_parse: 5 callbacks suppressed [ 292.113628][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.473403][T14308] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.859430][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.876813][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.922758][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.996509][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.007972][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.044624][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.075427][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.047820][T14378] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.115601][T14382] pim6reg1: entered promiscuous mode [ 296.130179][T14382] pim6reg1: entered allmulticast mode [ 297.201384][T14409] __nla_validate_parse: 4 callbacks suppressed [ 297.201406][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.479751][T14419] pim6reg1: entered promiscuous mode [ 297.493685][T14419] pim6reg1: entered allmulticast mode [ 297.510193][T14423] sch_fq: defrate 0 ignored. [ 297.519889][T14423] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.755738][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.787850][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.042577][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.062331][T14456] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.086726][T14456] netlink: 1528 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.103831][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.118938][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.514314][T14470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.592224][T14472] pim6reg1: entered promiscuous mode [ 298.611941][T14472] pim6reg1: entered allmulticast mode [ 299.219716][T14488] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 299.253484][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.158323][T14577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.488513][T14592] syz-executor.1[14592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.488802][T14592] syz-executor.1[14592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.829586][T14610] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 301.858497][T14610] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 302.233618][T14631] syzkaller1: entered promiscuous mode [ 302.239343][T14631] syzkaller1: entered allmulticast mode [ 302.412718][T14633] vlan3: entered promiscuous mode [ 303.791052][T14725] ipip0: entered promiscuous mode [ 303.802715][T14727] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 303.814850][T14727] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 303.835234][T14727] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 303.904145][T14730] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 303.920324][T14730] __nla_validate_parse: 11 callbacks suppressed [ 303.920341][T14730] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.992941][T14734] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 304.020306][T14734] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.158660][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.300198][T14755] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.114232][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 317.231431][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.863989][ T5127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.874934][ T5127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.893395][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.901698][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.930056][ T5127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.938046][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.160071][ T5127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.174291][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.193860][ T5127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.202094][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.216364][ T5127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.229778][ T5127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.668784][ T5127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.683780][ T5127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.693683][ T5127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.716902][ T5127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.726215][ T5127] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.741569][ T5127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.947365][ T5128] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 335.956977][ T5128] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 335.957801][ T5129] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 335.972872][ T5128] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 335.980112][ T5129] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 335.981830][ T5128] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 335.994762][ T5129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 335.995742][ T5128] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 336.007893][ T5129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 336.017787][ T5129] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 336.025970][ T5129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 336.034583][ T5129] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 336.983993][ T5129] Bluetooth: hci5: command tx timeout [ 337.303493][ T5129] Bluetooth: hci6: command tx timeout [ 337.783481][ T5129] Bluetooth: hci7: command tx timeout [ 338.113904][ T5129] Bluetooth: hci8: command tx timeout [ 338.113938][ T5128] Bluetooth: hci9: command tx timeout [ 339.073584][ T5128] Bluetooth: hci5: command tx timeout [ 339.393458][ T5128] Bluetooth: hci6: command tx timeout [ 339.863794][ T5128] Bluetooth: hci7: command tx timeout [ 340.183789][ T5128] Bluetooth: hci9: command tx timeout [ 340.184756][ T5129] Bluetooth: hci8: command tx timeout [ 341.143519][ T5129] Bluetooth: hci5: command tx timeout [ 341.463864][ T5129] Bluetooth: hci6: command tx timeout [ 341.943450][ T5129] Bluetooth: hci7: command tx timeout [ 342.263540][ T5129] Bluetooth: hci9: command tx timeout [ 342.263604][ T5128] Bluetooth: hci8: command tx timeout [ 343.233468][ T5128] Bluetooth: hci5: command tx timeout [ 343.543685][ T5128] Bluetooth: hci6: command tx timeout [ 344.031598][ T5128] Bluetooth: hci7: command tx timeout [ 344.343516][ T5128] Bluetooth: hci8: command tx timeout [ 344.353486][ T5128] Bluetooth: hci9: command tx timeout [ 378.666790][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.934112][ T5129] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 399.943899][ T5129] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 399.951874][ T5129] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 399.966779][ T5129] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 399.974817][ T5129] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 399.982224][ T5129] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 400.219370][ T5128] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 400.228779][ T5128] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 400.237217][ T5128] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 400.246393][ T5128] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 400.261450][ T5128] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 400.269489][ T5128] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 400.828277][ T5129] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 400.837694][ T5129] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 400.853645][ T5129] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 400.862117][ T5129] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 400.871177][ T5129] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 400.883497][ T5129] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 400.932104][ T5129] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 400.941881][ T5129] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 400.953234][ T5129] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 400.961521][ T5129] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 400.975291][ T5129] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 400.983531][ T5129] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 401.029480][ T5129] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 401.044054][ T5129] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 401.052769][ T5129] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 401.071645][ T5129] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 401.081135][ T5129] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 401.088940][ T5129] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 402.023641][ T5129] Bluetooth: hci10: command tx timeout [ 402.349011][ T5129] Bluetooth: hci11: command tx timeout [ 402.983973][ T5129] Bluetooth: hci12: command tx timeout [ 403.067185][ T5129] Bluetooth: hci13: command tx timeout [ 403.144985][ T5129] Bluetooth: hci14: command tx timeout [ 404.103654][ T5129] Bluetooth: hci10: command tx timeout [ 404.424677][ T5129] Bluetooth: hci11: command tx timeout [ 405.063663][ T5129] Bluetooth: hci12: command tx timeout [ 405.144018][ T5129] Bluetooth: hci13: command tx timeout [ 405.224605][ T5129] Bluetooth: hci14: command tx timeout [ 406.183484][ T5129] Bluetooth: hci10: command tx timeout [ 406.512835][ T5129] Bluetooth: hci11: command tx timeout [ 407.143818][ T5129] Bluetooth: hci12: command tx timeout [ 407.224105][ T5129] Bluetooth: hci13: command tx timeout [ 407.308149][ T5129] Bluetooth: hci14: command tx timeout [ 408.263360][ T5129] Bluetooth: hci10: command tx timeout [ 408.594162][ T5129] Bluetooth: hci11: command tx timeout [ 409.233583][ T5129] Bluetooth: hci12: command tx timeout [ 409.314348][ T5129] Bluetooth: hci13: command tx timeout [ 409.386361][ T5129] Bluetooth: hci14: command tx timeout [ 416.583567][ T5128] Bluetooth: hci1: command 0x041b tx timeout [ 418.663415][ T5129] Bluetooth: hci1: command 0x041b tx timeout [ 420.743741][ T5129] Bluetooth: hci1: command 0x041b tx timeout [ 422.823529][ T5129] Bluetooth: hci1: command 0x041b tx timeout [ 424.903620][ T5129] Bluetooth: hci1: command 0x041b tx timeout [ 440.116569][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.823869][ T30] INFO: task kworker/u8:26:6516 blocked for more than 143 seconds. [ 454.831809][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 454.850789][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.859574][ T30] task:kworker/u8:26 state:D stack:24752 pid:6516 tgid:6516 ppid:2 flags:0x00004000 2024/06/20 18:44:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 454.878550][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 454.902383][ T30] Call Trace: [ 454.913293][ T30] [ 454.916284][ T30] __schedule+0x17e8/0x4a20 [ 454.920842][ T30] ? __pfx___schedule+0x10/0x10 [ 454.943062][ T30] ? __pfx_lock_release+0x10/0x10 [ 454.948972][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 454.961996][ T30] ? kthread_data+0x52/0xd0 [ 454.966682][ T30] ? schedule+0x90/0x320 [ 454.970948][ T30] ? wq_worker_sleeping+0x66/0x240 [ 454.983330][ T30] ? schedule+0x90/0x320 [ 454.987610][ T30] schedule+0x14b/0x320 [ 454.991800][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.005766][ T30] __mutex_lock+0x6a4/0xd70 [ 455.010314][ T30] ? mark_lock+0x9a/0x350 [ 455.020274][ T30] ? __mutex_lock+0x527/0xd70 [ 455.025276][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 455.030424][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 455.045483][ T30] addrconf_dad_work+0xd0/0x16f0 [ 455.050480][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 455.068840][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.082292][ T30] ? process_scheduled_works+0x945/0x1830 [ 455.088118][ T30] process_scheduled_works+0xa2c/0x1830 [ 455.101743][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.107883][ T30] ? assign_work+0x364/0x3d0 [ 455.112518][ T30] worker_thread+0x86d/0xd70 [ 455.125927][ T30] ? __kthread_parkme+0x169/0x1d0 [ 455.130995][ T30] ? __pfx_worker_thread+0x10/0x10 [ 455.141239][ T30] kthread+0x2f0/0x390 [ 455.150342][ T30] ? __pfx_worker_thread+0x10/0x10 [ 455.162047][ T30] ? __pfx_kthread+0x10/0x10 [ 455.167010][ T30] ret_from_fork+0x4b/0x80 [ 455.171462][ T30] ? __pfx_kthread+0x10/0x10 [ 455.184364][ T30] ret_from_fork_asm+0x1a/0x30 [ 455.189194][ T30] [ 455.192297][ T30] INFO: task syz-executor.0:14781 blocked for more than 143 seconds. [ 455.203344][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 455.210989][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.230523][ T30] task:syz-executor.0 state:D stack:27424 pid:14781 tgid:14780 ppid:8105 flags:0x00004006 [ 455.244228][ T30] Call Trace: [ 455.247526][ T30] [ 455.251319][ T30] __schedule+0x17e8/0x4a20 [ 455.261863][ T30] ? __pfx___schedule+0x10/0x10 [ 455.269964][ T30] ? __pfx_lock_release+0x10/0x10 [ 455.281167][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 455.286906][ T30] ? schedule+0x90/0x320 [ 455.291171][ T30] schedule+0x14b/0x320 [ 455.310935][ T30] schedule_preempt_disabled+0x13/0x30 [ 455.323247][ T30] __mutex_lock+0x6a4/0xd70 [ 455.327789][ T30] ? __mutex_lock+0x527/0xd70 [ 455.332485][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 455.344904][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 455.349973][ T30] ? __might_fault+0xc6/0x120 [ 455.362506][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 455.369863][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 455.382605][ T30] ? __fget_files+0x3f6/0x470 [ 455.387468][ T30] ? __fget_files+0x29/0x470 [ 455.392084][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 455.407220][ T30] ? security_file_ioctl+0x87/0xb0 [ 455