last executing test programs: 1m14.888071413s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 1m2.806443979s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 54.985775757s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@allocspi={0x104, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@multicast2, @in=@multicast2}, {@in=@multicast1, 0x0, 0x32}, @in=@empty}, 0x0, 0x7845}, [@lastused={0xc}]}, 0x104}}, 0x0) 54.916087379s ago: executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 54.827144315s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_lifetime={0x4, 0x3}]}, 0x70}, 0x1, 0x7}, 0x0) 46.975949682s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 39.1160921s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_lifetime={0x4, 0x3}]}, 0x70}, 0x1, 0x7}, 0x0) 35.777015574s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 24.152813057s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_lifetime={0x4, 0x3}]}, 0x70}, 0x1, 0x7}, 0x0) 23.25051236s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 6.823954061s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_lifetime={0x4, 0x3}]}, 0x70}, 0x1, 0x7}, 0x0) 5.803910877s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) 1.015188652s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 914.531137ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 860.321708ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b6080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000850000000f00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 712.745906ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 668.623338ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffe0002}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x78, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf09}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x20}]}, 0x78}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x14, 0x21, 0x0, 0x0, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "0e"}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) accept$inet(r1, &(0x7f0000000740)={0x2, 0x0, @private}, &(0x7f0000000780)=0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x68, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6, 0x1, 0xa}, {0x8, 0x2, @private}, {0x5}}]}]}]}]}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x2004c001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x30, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0xf73e2a8985f971c0}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004041}, 0x20000800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@bridge_getlink={0x228, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x48}, [@IFLA_PHYS_SWITCH_ID={0x9, 0x24, "1d332a9098"}, @IFLA_MTU={0x8}, @IFLA_MTU={0x8, 0x4, 0x7fff}, @IFLA_VF_PORTS={0x1e4, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "03305ed19abc4fc32a000cb836ac1070"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'batadv_slave_1\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "92616eabee037d7bcd8c5fca0a2a2b92"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1ef}, @IFLA_PORT_VF={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '.,{%\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_PROFILE={0x8, 0x2, ']-)\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3e2e163dc980e23b8ce7321bd5f27c5e"}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "de22b8dc9c96c33356530c89915eec1c"}, @IFLA_PORT_PROFILE={0x8, 0x2, '!!(\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f212774e54a7e6815c1df8fa463e3918"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ff9f477ee1a61265983135d748b34352"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c5da09a19d5746f13e77ecf8ea289e7a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "60a6a27ac6c3bef5964182d9ad90f54e"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x400}, @IFLA_PORT_PROFILE={0x6, 0x2, '^\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fe387ba3d0464b23c3ae4637adef7dca"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "22fcd8b8ae4aeb3b34c109f254464933"}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a1d27c3d125e507b08e7b3af20456b6"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0xc, 0x2, 'ip6gre0\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x65}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x13, 0x2, 'batadv_slave_1\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_PROFILE={0x8, 0x2, ')N&\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x40035dd}]}, 0x228}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r13, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "13fb5e405c6bda1bbd87b4a11d839455"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4080) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 598.042867ms ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x38, 0x0, &(0x7f00000001c0)) 543.65063ms ago: executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00) 460.583771ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5c00000013006bcd9e3fe3dc6e48aa31086b8700300000007ea60264160af365040014000d003b008bc3a0e640e517d34460c024eab556a705251e61829408000000000000003bbd22708941b1436e000a84c9f5d1938037e786a6d0", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 438.464761ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 344.22831ms ago: executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x29, &(0x7f0000000fc0), &(0x7f0000001000)=0xc) 303.093297ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x7, 0x0, 0x0, {{0x8}, {@val={0x8, 0x2}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x2}}}}}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000080)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r6, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="01000008000300"/18, @ANYRES32, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 256.375865ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000000200)="b1"}, 0x20) 186.412314ms ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 121.608794ms ago: executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33) 119.219497ms ago: executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @mcast1, 0x6}, @in={0x2, 0x0, @empty}], 0x2c) socketpair(0x0, 0x0, 0x800, &(0x7f0000000080)) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0x24}}, 0x41) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x18000000}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6c}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x78d2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x0) 68.109148ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 32.683114ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 0s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0xfecc) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x9d, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 8111][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.170327][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.187922][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.199356][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.211968][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.223580][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.234962][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.244964][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.264072][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.303798][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.331717][ T9191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.356274][ T9191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.366737][ T9191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.377083][ T9191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.563843][ T2806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.571684][ T2806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.681165][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.698557][ T9650] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.706482][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.719962][ T9650] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.743516][ T9650] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.274505][ T9684] dccp_invalid_packet: pskb_may_pull failed [ 164.754244][ T9713] vlan2: entered promiscuous mode [ 164.763649][ T9713] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 164.770968][ T9713] vlan2: entered allmulticast mode [ 164.781611][ T9713] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 165.129886][ T2806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.296700][ T2806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.407682][ T2806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.591829][ T2806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.621113][ T9738] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 165.815739][ T9740] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 165.840815][ T9743] bridge0: port 3(bond2) entered blocking state [ 165.872524][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.883826][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.891540][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.904107][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.911788][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.923167][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.960803][ T9743] bridge0: port 3(bond2) entered disabled state [ 165.967349][ T9743] bond2: entered allmulticast mode [ 165.972478][ T9743] bridge2: entered allmulticast mode [ 165.979734][ T9743] bond2: entered promiscuous mode [ 165.984847][ T9743] bridge2: entered promiscuous mode [ 166.223526][ T2806] bridge_slave_1: left allmulticast mode [ 166.229210][ T2806] bridge_slave_1: left promiscuous mode [ 166.272754][ T2806] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.298420][ T2806] bridge_slave_0: left allmulticast mode [ 166.323194][ T2806] bridge_slave_0: left promiscuous mode [ 166.329049][ T2806] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.455420][ T9764] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.485305][ T9764] netlink: 8446 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.888175][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.900395][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.908640][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.922295][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.931032][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.938566][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.068436][ T2806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.081569][ T2806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.092365][ T2806] bond0 (unregistering): (slave bond1): Releasing backup interface [ 167.101105][ T2806] bond0 (unregistering): Released all slaves [ 167.190782][ T2806] bond1 (unregistering): Released all slaves [ 167.405526][ T9784] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.861644][ T9804] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.871690][ T9804] netlink: 8446 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.952799][ T5125] Bluetooth: hci1: command tx timeout [ 168.137956][ T2806] hsr_slave_0: left promiscuous mode [ 168.154429][ T2806] hsr_slave_1: left promiscuous mode [ 168.169942][ T2806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.185379][ T2806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.194617][ T2806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.203328][ T2806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.244641][ T2806] veth1_macvtap: left promiscuous mode [ 168.250168][ T2806] veth0_macvtap: left promiscuous mode [ 168.256625][ T2806] veth1_vlan: left promiscuous mode [ 168.261978][ T2806] veth0_vlan: left promiscuous mode [ 168.829674][ T2806] team0 (unregistering): Port device team_slave_1 removed [ 168.879280][ T2806] team0 (unregistering): Port device team_slave_0 removed [ 168.999984][ T5125] Bluetooth: hci2: command tx timeout [ 169.278478][ T9817] ip6gretap0: entered promiscuous mode [ 169.287595][ T9817] batadv_slave_0: entered promiscuous mode [ 169.295563][ T9817] hsr1: entered allmulticast mode [ 169.300643][ T9817] batadv_slave_0: entered allmulticast mode [ 169.327432][ T9744] chnl_net:caif_netlink_parms(): no params data found [ 169.475497][ T9837] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.504565][ T9837] netlink: 8446 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.621132][ T9744] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.628735][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.638232][ T9744] bridge_slave_0: entered allmulticast mode [ 169.650092][ T9744] bridge_slave_0: entered promiscuous mode [ 169.661178][ T9744] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.671473][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.693131][ T9744] bridge_slave_1: entered allmulticast mode [ 169.700113][ T9744] bridge_slave_1: entered promiscuous mode [ 169.730462][ T9779] chnl_net:caif_netlink_parms(): no params data found [ 169.766347][ T9744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.790454][ T9744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.846550][ T9744] team0: Port device team_slave_0 added [ 169.858190][ T9744] team0: Port device team_slave_1 added [ 169.911506][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.923400][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.953300][ T9744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.983423][ T9744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.990373][ T9744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.016676][ T9744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.027883][ T9779] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.038971][ T5125] Bluetooth: hci1: command tx timeout [ 170.043212][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.051476][ T9779] bridge_slave_0: entered allmulticast mode [ 170.064103][ T9779] bridge_slave_0: entered promiscuous mode [ 170.090741][ T2806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.130887][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.141527][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.150316][ T9779] bridge_slave_1: entered allmulticast mode [ 170.157876][ T9779] bridge_slave_1: entered promiscuous mode [ 170.190354][ T9744] hsr_slave_0: entered promiscuous mode [ 170.196801][ T9744] hsr_slave_1: entered promiscuous mode [ 170.209694][ T9744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.217303][ T9744] Cannot create hsr debugfs directory [ 170.236735][ T2806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.265813][ T9779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.282045][ T9779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.334954][ T2806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.364433][ T9779] team0: Port device team_slave_0 added [ 170.397720][ T9779] team0: Port device team_slave_1 added [ 170.414743][ T2806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.465800][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.472988][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.499014][ T9779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.521952][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.529343][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.557566][ T9779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.647919][ T9779] hsr_slave_0: entered promiscuous mode [ 170.657031][ T9779] hsr_slave_1: entered promiscuous mode [ 170.664024][ T9779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.671575][ T9779] Cannot create hsr debugfs directory [ 170.759946][ T2806] bridge_slave_1: left allmulticast mode [ 170.765812][ T2806] bridge_slave_1: left promiscuous mode [ 170.771509][ T2806] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.783621][ T2806] bridge_slave_0: left allmulticast mode [ 170.789303][ T2806] bridge_slave_0: left promiscuous mode [ 170.795226][ T2806] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.077238][ T5125] Bluetooth: hci2: command tx timeout [ 171.101448][ T2806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.112211][ T2806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.123055][ T2806] bond0 (unregistering): Released all slaves [ 171.525500][ T2806] hsr_slave_0: left promiscuous mode [ 171.531524][ T2806] hsr_slave_1: left promiscuous mode [ 171.537954][ T2806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.553916][ T2806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.562119][ T2806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.569713][ T2806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.592366][ T2806] veth1_macvtap: left promiscuous mode [ 171.597902][ T2806] veth0_macvtap: left promiscuous mode [ 171.603710][ T2806] veth1_vlan: left promiscuous mode [ 171.608976][ T2806] veth0_vlan: left promiscuous mode [ 172.004204][ T2806] team0 (unregistering): Port device team_slave_1 removed [ 172.037597][ T2806] team0 (unregistering): Port device team_slave_0 removed [ 172.113185][ T5125] Bluetooth: hci1: command tx timeout [ 172.516918][ T9744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.530752][ T9744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.603351][ T9744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.620775][ T9779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.639974][ T9779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.673822][ T9779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.695424][ T9744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.805966][ T9852] syzkaller0: entered promiscuous mode [ 172.819172][ T9852] syzkaller0: entered allmulticast mode [ 172.829828][ T9779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.169037][ T5125] Bluetooth: hci2: command tx timeout [ 174.203128][ T5125] Bluetooth: hci1: command tx timeout [ 174.413897][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.629319][ T9779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.847509][ T9779] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.884416][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.945783][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.952990][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.993170][ T9744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.013955][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.021088][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.102011][ T9744] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.181371][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.188544][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.220250][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.228068][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.235981][ T5125] Bluetooth: hci2: command tx timeout [ 175.282368][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.309012][ T9912] bond2: left allmulticast mode [ 175.329294][ T9912] bridge2: left allmulticast mode [ 175.343598][ T9912] bond2: left promiscuous mode [ 175.348877][ T9912] bridge2: left promiscuous mode [ 175.355391][ T9912] bridge0: port 3(bond2) entered disabled state [ 175.372266][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.393107][ T9912] bridge_slave_1: left allmulticast mode [ 175.404308][ T9912] bridge_slave_1: left promiscuous mode [ 175.419324][ T9912] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.428947][ T9912] bridge_slave_0: left allmulticast mode [ 175.435721][ T9912] bridge_slave_0: left promiscuous mode [ 175.441486][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.485108][ T9912] bond0: (slave bridge0): Releasing backup interface [ 175.971206][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.010534][ T9744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.062540][ T9945] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.088515][ T9779] veth0_vlan: entered promiscuous mode [ 176.132264][ T9779] veth1_vlan: entered promiscuous mode [ 176.231463][ T9779] veth0_macvtap: entered promiscuous mode [ 176.263881][ T9779] veth1_macvtap: entered promiscuous mode [ 176.329304][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.357468][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.393349][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.413600][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.435737][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.471367][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.493628][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.517016][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.564334][ T9779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.574100][ T9779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.596366][ T9779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.622929][ T9779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.747423][ T9744] veth0_vlan: entered promiscuous mode [ 176.800358][ T9744] veth1_vlan: entered promiscuous mode [ 176.862418][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.893018][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.939397][ T9744] veth0_macvtap: entered promiscuous mode [ 176.969017][ T9744] veth1_macvtap: entered promiscuous mode [ 176.986672][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.024166][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.057098][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.099422][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.126168][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.147210][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.195197][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.223149][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.235437][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.245738][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.256755][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.272555][ T9744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.287944][ T9744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.301704][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.315440][ T9744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.369526][ T9744] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.412509][ T9744] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.439471][ T9744] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.449568][ T9744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.610413][ T9997] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 177.843758][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.851875][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.939216][ T2806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.973253][ T2806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.024564][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.050875][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.048012][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.656790][T10092] tap0: tun_chr_ioctl cmd 1074025677 [ 179.664014][T10092] tap0: linktype set to 773 [ 179.671204][T10094] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 179.679796][T10094] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.707521][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.717465][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.726126][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.735491][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.753709][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 179.762094][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.100724][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.139524][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.175005][T10099] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.194520][T10099] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 180.340881][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.499177][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.541155][T10119] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 180.573455][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.685610][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.835075][ T35] bridge_slave_1: left allmulticast mode [ 180.840752][ T35] bridge_slave_1: left promiscuous mode [ 180.851959][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.868599][ T35] bridge_slave_0: left allmulticast mode [ 180.902194][ T35] bridge_slave_0: left promiscuous mode [ 180.910990][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.093689][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.116887][T10145] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 181.132362][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.243143][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 181.243547][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 181.462908][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.475914][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.487383][ T35] bond0 (unregistering): Released all slaves [ 181.592072][T10153] tap0: tun_chr_ioctl cmd 1074025677 [ 181.631147][T10153] tap0: linktype set to 773 [ 181.657114][T10095] chnl_net:caif_netlink_parms(): no params data found [ 181.676788][T10157] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.687670][T10161] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 181.697403][T10161] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.873128][ T5125] Bluetooth: hci2: command tx timeout [ 181.941090][T10171] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 181.943998][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.975953][T10174] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 182.156587][T10175] vlan0: entered promiscuous mode [ 182.215020][T10175] batman_adv: batadv0: Adding interface: vlan0 [ 182.263983][T10175] batman_adv: batadv0: The MTU of interface vlan0 is too small (1480) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 182.300415][T10175] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 182.474194][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.481350][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.539862][T10095] bridge_slave_0: entered allmulticast mode [ 182.568851][T10095] bridge_slave_0: entered promiscuous mode [ 182.747988][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.775379][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.793684][T10095] bridge_slave_1: entered allmulticast mode [ 182.822930][T10095] bridge_slave_1: entered promiscuous mode [ 182.856179][ T35] hsr_slave_0: left promiscuous mode [ 182.870326][ T35] hsr_slave_1: left promiscuous mode [ 182.878736][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.886655][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.902194][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.922808][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.971525][ T35] veth1_macvtap: left promiscuous mode [ 182.977478][ T35] veth0_macvtap: left promiscuous mode [ 182.983794][ T35] veth1_vlan: left promiscuous mode [ 182.989400][ T35] veth0_vlan: left promiscuous mode [ 183.872059][ T35] team0 (unregistering): Port device team_slave_1 removed [ 183.914035][ T35] team0 (unregistering): Port device team_slave_0 removed [ 183.967871][ T5125] Bluetooth: hci2: command tx timeout [ 184.401837][T10227] vlan2: entered promiscuous mode [ 184.412522][T10227] batman_adv: batadv0: Adding interface: vlan2 [ 184.431928][T10227] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.470886][T10227] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 184.508699][T10241] syz_tun: entered promiscuous mode [ 184.532501][T10241] vlan3: entered promiscuous mode [ 184.576091][T10241] syz_tun: left promiscuous mode [ 184.656520][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.674534][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.814760][T10095] team0: Port device team_slave_0 added [ 184.850255][T10095] team0: Port device team_slave_1 added [ 184.940460][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.956123][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.996519][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.038669][T10269] vlan2: entered promiscuous mode [ 185.054611][T10269] batman_adv: batadv0: Adding interface: vlan2 [ 185.060798][T10269] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.178104][T10269] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 185.234801][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.241911][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.296286][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.467581][T10095] hsr_slave_0: entered promiscuous mode [ 185.486421][T10288] nftables ruleset with unbound chain [ 185.494958][T10095] hsr_slave_1: entered promiscuous mode [ 185.513545][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.529044][T10095] Cannot create hsr debugfs directory [ 185.614498][T10294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.032981][ T5125] Bluetooth: hci2: command tx timeout [ 186.722431][T10095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.756858][T10095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.805202][T10095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.869464][T10095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.911023][ T29] audit: type=1804 audit(1718022075.045:12): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir675551269/syzkaller.PpPpuM/42/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 187.081625][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.151811][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.184832][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.191971][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.225591][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.232761][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.634287][T10399] vxcan1: tx address claim with dlc 1 [ 187.710838][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.750541][T10404] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 187.792723][T10403] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 187.884490][T10095] veth0_vlan: entered promiscuous mode [ 187.919859][T10095] veth1_vlan: entered promiscuous mode [ 188.009788][T10095] veth0_macvtap: entered promiscuous mode [ 188.050744][T10095] veth1_macvtap: entered promiscuous mode [ 188.109654][T10422] __nla_validate_parse: 4 callbacks suppressed [ 188.109670][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.127065][ T5125] Bluetooth: hci2: command tx timeout [ 188.172136][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.190248][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.207077][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.239275][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.257886][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.268702][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.280935][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.304043][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.350762][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.395013][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.423129][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.453541][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.496377][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.527283][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.684467][T10095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.706667][T10095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.727602][T10095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.739412][T10095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.831231][T10447] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.907903][T10449] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 188.939368][T10449] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.950005][ T29] audit: type=1800 audit(1718022077.075:13): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 188.959239][T10453] set match dimension is over the limit! [ 189.001416][ T29] audit: type=1804 audit(1718022077.125:14): pid=10451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir675551269/syzkaller.PpPpuM/47/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 189.081106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.091929][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.100036][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.118272][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.469516][T10476] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 189.593586][T10481] vxcan1: tx address claim with dlc 1 [ 190.103155][T10516] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.118294][T10516] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 190.659747][T10555] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 190.730534][T10555] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.761773][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.171684][T10590] gretap0: entered promiscuous mode [ 191.178243][T10590] erspan0: entered promiscuous mode [ 191.190250][T10590] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 191.198370][T10590] Cannot create hsr debugfs directory [ 191.324413][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.356452][T10596] ipip0: entered promiscuous mode [ 191.361223][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.477882][T10602] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 191.926888][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.886521][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.031685][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.058770][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.062154][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.083272][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.094318][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.104848][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.112155][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.323505][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.656557][ T1102] bridge_slave_1: left allmulticast mode [ 193.675278][ T1102] bridge_slave_1: left promiscuous mode [ 193.694125][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.733936][ T1102] bridge_slave_0: left allmulticast mode [ 193.739775][ T1102] bridge_slave_0: left promiscuous mode [ 193.760732][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.895026][T10721] __nla_validate_parse: 1 callbacks suppressed [ 193.895045][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.302059][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.327409][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.349082][ T1102] bond0 (unregistering): Released all slaves [ 194.518080][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.535795][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.549846][T10739] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.162579][ T5125] Bluetooth: hci2: command tx timeout [ 195.292991][T10678] chnl_net:caif_netlink_parms(): no params data found [ 195.523607][T10781] atomic_op ffff88805e897198 conn xmit_atomic 0000000000000000 [ 195.663707][ T1102] hsr_slave_0: left promiscuous mode [ 195.693377][ T1102] hsr_slave_1: left promiscuous mode [ 195.730602][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.750437][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.778977][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.810679][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.840176][T10800] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 195.893498][ T1102] veth1_macvtap: left promiscuous mode [ 195.905903][ T1102] veth0_macvtap: left promiscuous mode [ 195.918383][ T1102] veth1_vlan: left promiscuous mode [ 195.940867][ T1102] veth0_vlan: left promiscuous mode [ 196.600636][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 196.642322][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 197.069646][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.102485][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.127560][T10678] bridge_slave_0: entered allmulticast mode [ 197.136385][T10678] bridge_slave_0: entered promiscuous mode [ 197.154447][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.161568][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.201839][T10678] bridge_slave_1: entered allmulticast mode [ 197.222397][T10678] bridge_slave_1: entered promiscuous mode [ 197.233689][ T5112] Bluetooth: hci2: command tx timeout [ 197.527361][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.547764][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.721601][T10678] team0: Port device team_slave_0 added [ 197.777937][T10678] team0: Port device team_slave_1 added [ 197.853726][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.863076][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.892468][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.907740][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.920794][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.950153][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.987371][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.023148][T10850] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 198.122066][T10678] hsr_slave_0: entered promiscuous mode [ 198.135842][T10678] hsr_slave_1: entered promiscuous mode [ 198.147319][T10678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.160885][T10678] Cannot create hsr debugfs directory [ 198.262343][T10860] Bluetooth: MGMT ver 1.22 [ 198.409714][T10867] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.988619][T10892] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.099044][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.203538][T10678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.231385][T10678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.255957][T10678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.281599][T10678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.323123][ T5112] Bluetooth: hci2: command tx timeout [ 199.426314][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.479395][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.535499][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.542701][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.577619][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.584803][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.975491][T10941] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 200.021531][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.171977][T10678] veth0_vlan: entered promiscuous mode [ 200.221043][T10678] veth1_vlan: entered promiscuous mode [ 200.263749][T10954] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 200.283114][T10954] veth0_macvtap: left promiscuous mode [ 200.434042][T10957] macvtap0: entered promiscuous mode [ 200.440610][T10957] macvtap0: left promiscuous mode [ 200.505188][T10968] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 200.545992][T10678] veth0_macvtap: entered promiscuous mode [ 200.575138][T10678] veth1_macvtap: entered promiscuous mode [ 200.618610][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.653974][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.691191][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.733770][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.771413][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.785772][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.815490][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.841667][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.868561][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.885660][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.903138][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.925433][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.961869][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.966417][T10678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.990208][ T8] IPVS: starting estimator thread 0... [ 200.999694][T10678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.022519][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.035722][T10678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.052562][T10678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.083874][T10991] IPVS: using max 19 ests per chain, 45600 per kthread [ 201.233905][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.266647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.292207][T11000] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.331159][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.357045][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.393052][ T5112] Bluetooth: hci2: command tx timeout [ 201.916020][T11026] pim6reg: entered allmulticast mode [ 201.945322][T11026] vxcan1: entered allmulticast mode [ 201.964535][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.229864][ T29] audit: type=1804 audit(1718022090.365:15): pid=11039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1887693814/syzkaller.xXedhq/550/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 202.364579][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.400492][ T29] audit: type=1804 audit(1718022090.535:16): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1887693814/syzkaller.xXedhq/551/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 202.805037][T11061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 202.817713][T11061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.828770][T11061] syz_tun: entered promiscuous mode [ 202.835671][T11061] macsec2: entered promiscuous mode [ 202.841367][T11061] macsec2: entered allmulticast mode [ 202.850161][T11061] syz_tun: entered allmulticast mode [ 202.863058][T11061] syz_tun: left allmulticast mode [ 202.868935][T11061] syz_tun: left promiscuous mode [ 203.277360][T11075] macvtap0: entered promiscuous mode [ 203.286402][T11075] macvtap0: left promiscuous mode [ 203.336307][T11080] bridge_slave_0: entered promiscuous mode [ 203.342158][T11080] bridge_slave_0: entered allmulticast mode [ 203.713253][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802d50d400: rx timeout, send abort [ 203.724214][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802d50d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.248717][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.289275][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.706359][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 204.747751][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.794335][T11138] syz_tun: entered promiscuous mode [ 204.799870][T11138] macsec2: entered promiscuous mode [ 204.824769][T11138] macsec2: entered allmulticast mode [ 204.830090][T11138] syz_tun: entered allmulticast mode [ 204.859382][T11138] syz_tun: left allmulticast mode [ 204.869738][T11138] syz_tun: left promiscuous mode [ 204.883894][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.892369][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.908593][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.918736][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.929906][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.937478][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.215128][T11162] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967167 (only 8 groups) [ 205.585469][T11179] tipc: Failed to remove unknown binding: 66,1,1/0:388824004/388824006 [ 205.603640][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.666673][T11183] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.685531][T11174] tipc: Failed to remove unknown binding: 66,1,1/0:388824004/388824006 [ 205.727226][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.743296][T11174] tipc: Failed to remove unknown binding: 66,1,1/0:388824004/388824006 [ 205.804634][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.932866][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.122902][T11203] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 206.134762][T11209] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967167 (only 8 groups) [ 206.147420][T11203] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.165427][T11145] chnl_net:caif_netlink_parms(): no params data found [ 206.328089][ T50] bridge_slave_1: left allmulticast mode [ 206.351115][ T50] bridge_slave_1: left promiscuous mode [ 206.375952][T11217] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.378031][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.466263][ T50] bridge_slave_0: left allmulticast mode [ 206.471948][ T50] bridge_slave_0: left promiscuous mode [ 206.496927][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.994732][ T5125] Bluetooth: hci2: command tx timeout [ 207.269822][T11241] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967167 (only 8 groups) [ 207.462062][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.473560][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.485358][ T50] bond0 (unregistering): Released all slaves [ 207.532305][T11232] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 207.593083][T11232] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.741718][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.767254][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.792130][T11145] bridge_slave_0: entered allmulticast mode [ 207.828066][T11145] bridge_slave_0: entered promiscuous mode [ 207.890856][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.905866][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.922483][T11145] bridge_slave_1: entered allmulticast mode [ 207.941173][T11145] bridge_slave_1: entered promiscuous mode [ 207.957687][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.028636][T11274] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4294967167 (only 8 groups) [ 208.167400][T11145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.230372][T11145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.554060][T11145] team0: Port device team_slave_0 added [ 208.618709][T11145] team0: Port device team_slave_1 added [ 209.075661][ T5125] Bluetooth: hci2: command tx timeout [ 209.165229][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.358356][ T50] hsr_slave_0: left promiscuous mode [ 209.384796][ T50] hsr_slave_1: left promiscuous mode [ 209.391104][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.402192][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.425719][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.444289][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.493970][ T50] veth1_macvtap: left promiscuous mode [ 209.506129][ T50] veth0_macvtap: left promiscuous mode [ 209.518884][ T50] veth1_vlan: left promiscuous mode [ 209.531355][ T50] veth0_vlan: left promiscuous mode [ 210.168357][ T50] team0 (unregistering): Port device team_slave_1 removed [ 210.212221][ T50] team0 (unregistering): Port device team_slave_0 removed [ 210.588040][T11316] syzkaller0: entered promiscuous mode [ 210.597328][T11316] syzkaller0: entered allmulticast mode [ 210.604458][T11326] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 210.641969][T11326] team0: Port device netdevsim0 added [ 210.675455][T11145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.692030][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.721171][T11145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.801929][T11145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.831346][T11145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.905743][T11145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.041417][T11145] hsr_slave_0: entered promiscuous mode [ 211.067257][T11145] hsr_slave_1: entered promiscuous mode [ 211.105959][T11145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.132038][T11145] Cannot create hsr debugfs directory [ 211.153048][ T5125] Bluetooth: hci2: command tx timeout [ 212.010375][T11145] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.023718][T11145] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.049694][T11145] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.070739][T11145] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.226694][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.361914][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.553551][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.767178][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.834887][T11145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.913555][T11145] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.955025][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.962272][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.985950][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.993136][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.115879][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.126278][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.143082][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.158270][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.166397][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.174070][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.232849][ T5112] Bluetooth: hci2: command tx timeout [ 213.580747][ T12] batman_adv: batadv0: Removing interface: vlan2 [ 213.871096][ T12] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 214.156922][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.176235][ T12] bond0 (unregistering): Released all slaves [ 214.416895][ T12] bond1 (unregistering): (slave batadv1): Removing an active aggregator [ 214.426753][ T12] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 214.439198][ T12] bond1 (unregistering): Released all slaves [ 214.457384][ T12] bond2 (unregistering): Released all slaves [ 214.476285][ T12] bond3 (unregistering): Released all slaves [ 214.507126][T11487] macvlan2: entered allmulticast mode [ 214.543261][T11487] team_slave_0: entered promiscuous mode [ 214.553919][T11487] team_slave_1: entered promiscuous mode [ 214.559624][T11487] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 214.567444][T11487] team0: entered allmulticast mode [ 214.573394][T11487] team_slave_0: entered allmulticast mode [ 214.580235][T11487] team_slave_1: entered allmulticast mode [ 214.588004][T11487] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 214.596966][T11487] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.616731][T11487] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 214.689322][T11483] bond0: entered promiscuous mode [ 214.697579][T11483] bond_slave_0: entered promiscuous mode [ 214.703932][T11483] bond_slave_1: entered promiscuous mode [ 214.709834][T11483] macvlan2: entered promiscuous mode [ 214.715668][T11483] team0: entered promiscuous mode [ 214.820970][T11491] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.013626][T11501] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.073054][T11501] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.233912][ T5112] Bluetooth: hci4: command tx timeout [ 215.284929][T11145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.629785][T11145] veth0_vlan: entered promiscuous mode [ 215.673644][ T12] hsr_slave_0: left promiscuous mode [ 215.679700][ T12] hsr_slave_1: left promiscuous mode [ 215.726058][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.744981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.792421][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.821042][ T12] veth1_macvtap: left promiscuous mode [ 215.841250][ T12] veth0_macvtap: left promiscuous mode [ 215.859453][ T12] veth1_vlan: left promiscuous mode [ 215.871973][ T12] veth0_vlan: left promiscuous mode [ 216.072266][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.145563][ T12] pim6reg (unregistering): left allmulticast mode [ 216.541203][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.580087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.789756][ T12] vxcan1 (unregistering): left allmulticast mode [ 216.970600][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.001472][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.021691][T11546] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 217.050896][T11546] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 217.128808][T11145] veth1_vlan: entered promiscuous mode [ 217.313582][ T5112] Bluetooth: hci4: command tx timeout [ 217.336922][T11560] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 217.368131][T11563] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.385177][T11563] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.478789][T11145] veth0_macvtap: entered promiscuous mode [ 217.508539][T11438] chnl_net:caif_netlink_parms(): no params data found [ 217.641008][T11145] veth1_macvtap: entered promiscuous mode [ 217.791114][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.816781][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.837173][T11438] bridge_slave_0: entered allmulticast mode [ 217.854846][T11438] bridge_slave_0: entered promiscuous mode [ 217.887728][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.922909][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.946257][T11438] bridge_slave_1: entered allmulticast mode [ 217.965634][T11438] bridge_slave_1: entered promiscuous mode [ 218.066819][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.097206][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.125315][T11145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.157957][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.170158][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.202985][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.232936][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.256378][T11145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.280961][T11145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.296358][T11145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.320330][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.364551][T11145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.385927][T11145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.415340][T11145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.434061][T11145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.485041][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.514427][ T29] audit: type=1804 audit(1718022106.655:17): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir675551269/syzkaller.PpPpuM/182/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 218.721343][T11438] team0: Port device team_slave_0 added [ 218.765564][T11438] team0: Port device team_slave_1 added [ 218.851155][T11438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.859430][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.887937][T11438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.901045][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.923728][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.931803][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.942111][T11438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.953278][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.981537][T11438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.139938][T11438] hsr_slave_0: entered promiscuous mode [ 219.164082][T11438] hsr_slave_1: entered promiscuous mode [ 219.184167][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.301118][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.328486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.393408][ T5112] Bluetooth: hci4: command tx timeout [ 219.858156][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.989745][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.169541][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.262892][T11683] pim6reg1: entered allmulticast mode [ 220.334880][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.412796][T11683] pim6reg1: entered promiscuous mode [ 220.589925][T11438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.624183][T11698] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 220.668556][T11438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.686081][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.704456][T11438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.711226][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.720687][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.729949][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.739540][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.754260][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.787427][T11438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.947827][ T12] bridge_slave_1: left allmulticast mode [ 220.958269][ T12] bridge_slave_1: left promiscuous mode [ 220.984514][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.994572][ T12] bridge_slave_0: left allmulticast mode [ 221.000228][ T12] bridge_slave_0: left promiscuous mode [ 221.016263][T11715] netlink: zone id is out of range [ 221.028643][T11715] netlink: zone id is out of range [ 221.029191][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.052871][T11715] netlink: zone id is out of range [ 221.061841][T11715] netlink: zone id is out of range [ 221.081546][T11715] netlink: zone id is out of range [ 221.092158][T11715] netlink: zone id is out of range [ 221.104958][T11715] netlink: zone id is out of range [ 221.110662][T11715] netlink: zone id is out of range [ 221.449928][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.463196][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.473209][ T5125] Bluetooth: hci4: command tx timeout [ 221.474790][ T12] bond0 (unregistering): Released all slaves [ 221.817023][T11735] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 222.106273][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.175261][T11703] chnl_net:caif_netlink_parms(): no params data found [ 222.315766][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.429859][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.468485][ T12] hsr_slave_0: left promiscuous mode [ 222.475841][T11763] net_ratelimit: 13 callbacks suppressed [ 222.475858][T11763] netlink: zone id is out of range [ 222.486885][ T12] hsr_slave_1: left promiscuous mode [ 222.503443][T11763] netlink: zone id is out of range [ 222.509029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.510234][T11763] netlink: zone id is out of range [ 222.524410][T11763] netlink: zone id is out of range [ 222.529671][T11763] netlink: zone id is out of range [ 222.535763][T11763] netlink: zone id is out of range [ 222.538279][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.541028][T11763] netlink: zone id is out of range [ 222.555269][T11763] netlink: zone id is out of range [ 222.560501][T11763] netlink: zone id is out of range [ 222.567344][T11763] netlink: zone id is out of range [ 222.575377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.600752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.626482][ T12] veth1_macvtap: left promiscuous mode [ 222.631996][ T12] veth0_macvtap: left promiscuous mode [ 222.639480][ T12] veth1_vlan: left promiscuous mode [ 222.645050][ T12] veth0_vlan: left promiscuous mode [ 222.833494][ T5125] Bluetooth: hci2: command tx timeout [ 223.109446][ T12] team0 (unregistering): Port device team_slave_1 removed [ 223.148953][ T12] team0 (unregistering): Port device team_slave_0 removed [ 223.702219][T11766] lo: MTU too low for tipc bearer [ 223.718555][T11766] tipc: Enabling of bearer rejected, failed to enable media [ 223.747389][T11769] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 223.895796][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.902959][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.938936][T11793] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 223.988391][T11703] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.006132][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.018684][T11703] bridge_slave_0: entered allmulticast mode [ 224.042731][T11703] bridge_slave_0: entered promiscuous mode [ 224.054967][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.062125][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.078199][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.087926][T11703] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.103284][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.125818][T11703] bridge_slave_1: entered allmulticast mode [ 224.132597][T11703] bridge_slave_1: entered promiscuous mode [ 224.161519][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.187875][T11803] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.197008][T11803] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.206260][T11803] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.215226][T11803] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.231078][T11803] vxlan0: entered promiscuous mode [ 224.355755][T11703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.386199][T11703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.522357][T11703] team0: Port device team_slave_0 added [ 224.547148][T11703] team0: Port device team_slave_1 added [ 224.670804][T11703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.685038][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.747314][T11703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.799901][T11703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.809959][T11703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.844254][T11703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.914419][ T5125] Bluetooth: hci2: command tx timeout [ 225.072047][T11703] hsr_slave_0: entered promiscuous mode [ 225.083435][T11703] hsr_slave_1: entered promiscuous mode [ 225.090384][T11703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.099887][T11703] Cannot create hsr debugfs directory [ 225.171034][T11843] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.292142][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.468490][T11856] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.591519][T11438] veth0_vlan: entered promiscuous mode [ 225.610313][T11438] veth1_vlan: entered promiscuous mode [ 225.700638][T11438] veth0_macvtap: entered promiscuous mode [ 225.711441][T11438] veth1_macvtap: entered promiscuous mode [ 225.787871][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.800933][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.822246][T11438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.850172][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.882995][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.906328][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.925533][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.947324][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.967656][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.992802][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.008144][T11438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.030970][T11438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.041068][T11438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.064501][T11438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.081882][T11438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.285785][T11703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.323998][T11703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.364260][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.372081][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.439280][T11703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.460105][T11703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.504534][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.536383][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.736811][ T29] audit: type=1804 audit(1718022114.875:18): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir14289738/syzkaller.Utnu59/678/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 226.789978][T11703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.849567][T11703] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.882677][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.889828][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.919729][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.926919][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.993009][ T5125] Bluetooth: hci2: command tx timeout [ 227.065639][T11920] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 227.215326][T11703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.302460][T11703] veth0_vlan: entered promiscuous mode [ 227.318908][T11703] veth1_vlan: entered promiscuous mode [ 227.375098][T11703] veth0_macvtap: entered promiscuous mode [ 227.394765][T11703] veth1_macvtap: entered promiscuous mode [ 227.452036][T11703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.465943][T11703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.479730][T11703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.492143][T11703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.511620][T11703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.534679][T11438] syz-executor.3 (11438) used greatest stack depth: 18736 bytes left [ 227.549027][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.569961][T11941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.705819][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.754947][T11948] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.797745][T11703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.819703][T11703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.855554][T11703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.879424][T11703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.913802][T11703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.947679][T11703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.971077][T11703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.983009][T11703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.024258][T11703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.125981][T11703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.154009][T11703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.172518][T11703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.181828][T11703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.284847][T11968] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 228.395515][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.425518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.535951][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.554412][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.564047][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.570407][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.600816][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.602272][T11983] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.623714][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.631190][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.655636][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.711812][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.775924][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.884847][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.024163][ T1102] bridge_slave_1: left allmulticast mode [ 229.029832][ T1102] bridge_slave_1: left promiscuous mode [ 229.041217][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.050009][ T1102] bridge_slave_0: left allmulticast mode [ 229.060795][ T1102] bridge_slave_0: left promiscuous mode [ 229.066715][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.399355][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.410893][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.421644][ T1102] bond0 (unregistering): Released all slaves [ 229.547614][T11979] chnl_net:caif_netlink_parms(): no params data found [ 229.767625][T11992] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.782380][T11992] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.794498][T11992] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.803766][T11992] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.822310][T11992] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.831981][T11992] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.853216][T11992] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.871634][T11992] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 229.884212][T11992] geneve3: entered promiscuous mode [ 229.889543][T11992] geneve3: entered allmulticast mode [ 230.088232][T11979] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.105542][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.133748][T11979] bridge_slave_0: entered allmulticast mode [ 230.142706][T11979] bridge_slave_0: entered promiscuous mode [ 230.157376][T11979] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.164693][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.171917][T11979] bridge_slave_1: entered allmulticast mode [ 230.180194][T11979] bridge_slave_1: entered promiscuous mode [ 230.210218][T12014] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.409616][T11979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.510624][T11979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.701271][ T1102] hsr_slave_0: left promiscuous mode [ 230.715198][ T1102] hsr_slave_1: left promiscuous mode [ 230.730794][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.740268][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.752942][ T5112] Bluetooth: hci4: command tx timeout [ 230.761127][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.769677][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.805897][ T1102] veth1_macvtap: left promiscuous mode [ 230.811415][ T1102] veth0_macvtap: left promiscuous mode [ 230.842472][ T1102] veth1_vlan: left promiscuous mode [ 230.852761][ T1102] veth0_vlan: left promiscuous mode [ 231.699241][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 231.782296][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.792391][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.809061][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.824691][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 231.838050][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.853272][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.860709][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.491164][T11979] team0: Port device team_slave_0 added [ 232.535653][T11979] team0: Port device team_slave_1 added [ 232.673219][T11979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.680200][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.763476][T11979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.805580][T11979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.842806][ T5125] Bluetooth: hci4: command tx timeout [ 232.849607][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.878046][T12056] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 232.941611][T11979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.179411][T11979] hsr_slave_0: entered promiscuous mode [ 233.223327][T11979] hsr_slave_1: entered promiscuous mode [ 233.268947][T12067] macsec0: entered allmulticast mode [ 233.283808][T12067] veth1_macvtap: entered allmulticast mode [ 233.695611][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.726088][T12083] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.806196][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.830611][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.953881][ T5125] Bluetooth: hci2: command tx timeout [ 234.037585][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.103151][T12091] nbd: must specify at least one socket [ 234.257323][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.431054][T12049] chnl_net:caif_netlink_parms(): no params data found [ 234.623452][T12111] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 234.784373][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.794671][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.804646][T12049] bridge_slave_0: entered allmulticast mode [ 234.819096][T12049] bridge_slave_0: entered promiscuous mode [ 234.845566][ T1102] bridge_slave_1: left allmulticast mode [ 234.851234][ T1102] bridge_slave_1: left promiscuous mode [ 234.878552][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.912731][ T5125] Bluetooth: hci4: command tx timeout [ 234.914084][ T1102] bridge_slave_0: left allmulticast mode [ 234.947599][ T1102] bridge_slave_0: left promiscuous mode [ 234.967978][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.404079][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.417117][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.427927][ T1102] bond0 (unregistering): Released all slaves [ 235.448707][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.462915][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.493471][T12049] bridge_slave_1: entered allmulticast mode [ 235.500209][T12049] bridge_slave_1: entered promiscuous mode [ 235.576808][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.789277][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.804468][T11979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.891048][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.911262][T11979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.935974][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.953061][T12145] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 236.023416][T11979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.036726][ T5125] Bluetooth: hci2: command tx timeout [ 236.099918][T12049] team0: Port device team_slave_0 added [ 236.141246][T12049] team0: Port device team_slave_1 added [ 236.163395][T11979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.434065][ T1102] hsr_slave_0: left promiscuous mode [ 236.441538][ T1102] hsr_slave_1: left promiscuous mode [ 236.464031][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.471456][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.496731][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.511489][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.579856][ T1102] veth1_macvtap: left promiscuous mode [ 236.585621][ T1102] veth0_macvtap: left promiscuous mode [ 236.591267][ T1102] veth1_vlan: left promiscuous mode [ 236.602869][ T1102] veth0_vlan: left promiscuous mode [ 236.995384][ T5125] Bluetooth: hci4: command tx timeout [ 237.080653][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 237.123187][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 237.546735][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.557666][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.591226][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.703362][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.710344][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.741269][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.885867][T12049] hsr_slave_0: entered promiscuous mode [ 237.918652][T12049] hsr_slave_1: entered promiscuous mode [ 237.929508][T12049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.945196][T12049] Cannot create hsr debugfs directory [ 238.113092][ T5125] Bluetooth: hci2: command tx timeout [ 238.128328][T12197] bridge0: entered promiscuous mode [ 238.133922][T12197] bridge0: entered allmulticast mode [ 238.304181][T11979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.381987][T11979] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.414769][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.421911][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.444863][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.451990][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.870159][T12049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.908127][T12049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.927139][T12049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.965802][T12049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.041462][T11979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.070321][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.173928][T11979] veth0_vlan: entered promiscuous mode [ 239.192074][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.241222][T11979] veth1_vlan: entered promiscuous mode [ 239.336301][T11979] veth0_macvtap: entered promiscuous mode [ 239.399715][T11979] veth1_macvtap: entered promiscuous mode [ 239.448079][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.484988][T11979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.528299][T11979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.550290][T11979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.575365][T12249] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 239.584811][T12249] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.598393][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.619301][T11979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.659110][T11979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.669413][T11979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.690929][T11979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.717680][T11979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.742816][T11979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.764826][T11979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.784037][T11979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.793601][T11979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.805490][T11979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.815369][T11979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.856817][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.864017][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.991797][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.999018][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.121449][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.133089][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.193143][ T5125] Bluetooth: hci2: command tx timeout [ 240.222477][T12275] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.273407][T12272] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 240.305716][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.313910][T12272] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.318196][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.371717][T12283] batadv_slave_1: default FDB implementation only supports local addresses [ 240.636070][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.690290][T12049] veth0_vlan: entered promiscuous mode [ 240.727934][T12049] veth1_vlan: entered promiscuous mode [ 241.075084][T12049] veth0_macvtap: entered promiscuous mode [ 241.103043][T12049] veth1_macvtap: entered promiscuous mode [ 241.138914][T12321] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 241.201358][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.221930][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.245503][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.275679][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.298452][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.340917][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.368046][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.400769][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.418824][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.440500][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.469520][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.484505][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.511471][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.544668][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.595770][T12049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.618736][T12049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.633846][T12049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.652728][T12049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.843179][ T2806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.851015][ T2806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.955885][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.002940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.339622][T12381] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 242.359894][T12381] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.675356][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.095259][T12416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.271607][T12428] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.297240][T12428] net_ratelimit: 53 callbacks suppressed [ 243.297258][T12428] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 243.530497][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.599394][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.609122][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.619853][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.635042][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.645159][ T5112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 243.654082][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.791815][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.889944][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.106668][ T12] bridge_slave_1: left allmulticast mode [ 244.116378][ T12] bridge_slave_1: left promiscuous mode [ 244.127953][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.140188][ T12] bridge_slave_0: left allmulticast mode [ 244.146442][ T12] bridge_slave_0: left promiscuous mode [ 244.152271][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.412234][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.432974][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.441433][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.473245][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.482657][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.496284][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.708107][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.721694][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.732272][ T12] bond0 (unregistering): Released all slaves [ 245.139579][T12483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.358272][T12489] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 245.366583][T12489] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.537594][T12439] chnl_net:caif_netlink_parms(): no params data found [ 245.556527][T12494] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.587756][ T12] hsr_slave_0: left promiscuous mode [ 245.594789][ T12] hsr_slave_1: left promiscuous mode [ 245.600950][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.612536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.621478][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.629022][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.661953][ T12] veth1_macvtap: left promiscuous mode [ 245.671332][ T12] veth0_macvtap: left promiscuous mode [ 245.679447][ T12] veth1_vlan: left promiscuous mode [ 245.687191][ T12] veth0_vlan: left promiscuous mode [ 245.722992][ T5112] Bluetooth: hci2: command tx timeout [ 246.202292][ T12] team0 (unregistering): Port device team_slave_1 removed [ 246.241854][ T12] team0 (unregistering): Port device team_slave_0 removed [ 246.595195][ T5112] Bluetooth: hci4: command tx timeout [ 246.897050][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.945968][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.967763][T12439] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.996193][T12439] bridge_slave_0: entered allmulticast mode [ 247.015453][T12439] bridge_slave_0: entered promiscuous mode [ 247.048246][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.062823][T12439] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.076529][T12439] bridge_slave_1: entered allmulticast mode [ 247.093523][T12439] bridge_slave_1: entered promiscuous mode [ 247.265082][T12439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.308538][T12439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.361428][T12455] chnl_net:caif_netlink_parms(): no params data found [ 247.469555][T12439] team0: Port device team_slave_0 added [ 247.530335][T12439] team0: Port device team_slave_1 added [ 247.653911][T12439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.672838][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.742671][T12439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.762516][T12439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.770665][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.815475][ T5112] Bluetooth: hci2: command tx timeout [ 247.830870][T12439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.916437][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.215621][T12455] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.237310][T12455] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.259051][T12455] bridge_slave_0: entered allmulticast mode [ 248.282908][T12455] bridge_slave_0: entered promiscuous mode [ 248.380518][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.478658][T12455] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.501178][T12455] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.519440][T12455] bridge_slave_1: entered allmulticast mode [ 248.526864][T12455] bridge_slave_1: entered promiscuous mode [ 248.563351][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.604559][T12439] hsr_slave_0: entered promiscuous mode [ 248.623023][T12439] hsr_slave_1: entered promiscuous mode [ 248.673237][ T5112] Bluetooth: hci4: command tx timeout [ 248.724182][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.755234][T12455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.780938][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.790155][T12616] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 248.857310][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.893246][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.904962][T12455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.967578][T12621] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 248.980120][T12621] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.032491][T12455] team0: Port device team_slave_0 added [ 249.087763][T12455] team0: Port device team_slave_1 added [ 249.177203][T12455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.202736][T12455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.254811][T12455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.274519][T12455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.281577][T12455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.309184][T12455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.493864][T12645] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 249.643488][ T12] bridge_slave_1: left allmulticast mode [ 249.652876][ T12] bridge_slave_1: left promiscuous mode [ 249.658846][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.672241][ T12] bridge_slave_0: left allmulticast mode [ 249.678459][ T12] bridge_slave_0: left promiscuous mode [ 249.678886][T12654] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 249.687304][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.873123][ T5112] Bluetooth: hci2: command tx timeout [ 250.099703][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.111160][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.126355][ T12] bond0 (unregistering): Released all slaves [ 250.153815][T12455] hsr_slave_0: entered promiscuous mode [ 250.175344][T12455] hsr_slave_1: entered promiscuous mode [ 250.181773][T12455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.200104][T12455] Cannot create hsr debugfs directory [ 250.243884][T12658] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 250.419539][T12668] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 250.435410][T12666] xt_bpf: check failed: parse error [ 250.754411][ T5112] Bluetooth: hci4: command tx timeout [ 250.755435][T12679] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.109347][ T12] hsr_slave_0: left promiscuous mode [ 251.121324][ T12] hsr_slave_1: left promiscuous mode [ 251.131949][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.148733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.163764][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.171383][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.216922][ T12] veth1_macvtap: left promiscuous mode [ 251.222969][ T12] veth0_macvtap: left promiscuous mode [ 251.228807][ T12] veth1_vlan: left promiscuous mode [ 251.235669][ T12] veth0_vlan: left promiscuous mode [ 251.723534][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.957151][ T5112] Bluetooth: hci2: command tx timeout [ 252.178257][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.251087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.405811][T12717] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.780614][T12688] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 252.832885][ T5112] Bluetooth: hci4: command tx timeout [ 252.915481][T12728] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 252.971858][T12439] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.076043][T12736] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 253.697116][T12439] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.717091][T12439] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.731988][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.742062][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.766018][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.775902][T12439] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.942396][T12748] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 254.120123][T12760] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 254.258781][T12768] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.289405][T12439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.306884][T12455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.882160][T12455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.926598][T12455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.953503][T12455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.974558][T12773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 254.998629][T12439] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.049062][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.056273][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.177238][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.184424][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.291300][T12439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.312383][T12439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.493927][T12455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.552418][T12455] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.612277][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.619492][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.672429][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.684576][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.691718][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.852903][T12439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.906524][T12815] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 255.970698][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.992844][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.029002][T12439] veth0_vlan: entered promiscuous mode [ 256.084819][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.409358][T12439] veth1_vlan: entered promiscuous mode [ 256.504124][T12439] veth0_macvtap: entered promiscuous mode [ 256.543222][T12439] veth1_macvtap: entered promiscuous mode [ 256.634117][T12455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.660718][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.702676][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.734997][T12439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.797558][T12843] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 256.813405][T12845] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 256.833615][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.862772][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.902760][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.923096][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.942717][T12439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.963141][T12439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.973293][T12849] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 256.993169][T12849] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.994284][T12439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.045963][T12439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.073083][T12439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.110794][T12439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.127108][T12439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.218395][T12856] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.292235][T12455] veth0_vlan: entered promiscuous mode [ 257.400083][T12455] veth1_vlan: entered promiscuous mode [ 257.592533][ T2836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.622934][ T2836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.679443][T12878] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 257.712795][T12878] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.723104][T12455] veth0_macvtap: entered promiscuous mode [ 257.740264][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.766994][T12455] veth1_macvtap: entered promiscuous mode [ 257.775338][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.912125][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.934463][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.945903][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.971830][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.984454][T12455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.993903][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.145112][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.150432][T12894] delete_channel: no stack [ 258.159909][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.178622][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.189333][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.202161][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.214672][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.225707][T12455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.245315][T12455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.257207][T12455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.306905][T12455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.343046][T12455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.367279][T12455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.379897][T12455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.550927][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.612226][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.689300][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.713328][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.796448][T12921] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 258.830792][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.994319][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.022381][T12928] vlan3: entered promiscuous mode [ 259.255442][T12947] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.274391][T12947] bond0: option all_slaves_active: invalid value (2) [ 259.365773][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.954054][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.128078][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.163396][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.498391][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.508315][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.517864][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.527319][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.540602][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.553106][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.655363][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.743982][T13020] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 260.776876][T13020] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 260.808056][T13020] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 260.820811][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.853089][T13020] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 261.004851][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.078612][T13029] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 261.254210][T13038] SET target dimension over the limit! [ 261.508330][ T11] bridge_slave_1: left allmulticast mode [ 261.541230][ T11] bridge_slave_1: left promiscuous mode [ 261.547339][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.576665][ T11] bridge_slave_0: left allmulticast mode [ 261.582332][ T11] bridge_slave_0: left promiscuous mode [ 261.604959][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.774105][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.782390][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.798004][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.809392][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.821222][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.837167][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.085389][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.102543][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.113679][ T11] bond0 (unregistering): Released all slaves [ 262.144115][T13050] __nla_validate_parse: 2 callbacks suppressed [ 262.144131][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.167019][T13050] bond0: option all_slaves_active: invalid value (2) [ 262.184359][T13054] wg2: entered promiscuous mode [ 262.191765][T13054] wg2: entered allmulticast mode [ 262.204872][T13056] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 262.242795][T13056] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.381853][T13063] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 262.487875][T13067] IPv6: sit1: Disabled Multicast RS [ 262.594047][ T5125] Bluetooth: hci2: command tx timeout [ 262.604486][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.620101][T13075] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.621596][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.671206][T13075] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 262.691874][T13004] chnl_net:caif_netlink_parms(): no params data found [ 262.734206][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.769635][T13078] vlan4: entered promiscuous mode [ 262.982365][T13085] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.007072][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.020063][T13085] bond0: option all_slaves_active: invalid value (2) [ 263.174661][T13093] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 263.206109][ T11] hsr_slave_0: left promiscuous mode [ 263.225191][ T11] hsr_slave_1: left promiscuous mode [ 263.246898][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.255178][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.277119][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.285285][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.309759][ T11] veth1_macvtap: left promiscuous mode [ 263.317615][ T11] veth0_macvtap: left promiscuous mode [ 263.323700][ T11] veth1_vlan: left promiscuous mode [ 263.329620][ T11] veth0_vlan: left promiscuous mode [ 263.780557][ T11] team0 (unregistering): Port device team_slave_1 removed [ 263.817815][ T11] team0 (unregistering): Port device team_slave_0 removed [ 263.873066][ T5125] Bluetooth: hci4: command tx timeout [ 264.312515][T13004] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.320422][T13105] SET target dimension over the limit! [ 264.335351][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.342569][T13004] bridge_slave_0: entered allmulticast mode [ 264.377218][T13004] bridge_slave_0: entered promiscuous mode [ 264.391043][T13107] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 264.420928][T13004] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.438038][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.463471][T13004] bridge_slave_1: entered allmulticast mode [ 264.480744][T13004] bridge_slave_1: entered promiscuous mode [ 264.601242][T13004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.646925][T13118] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 264.672846][ T5125] Bluetooth: hci2: command tx timeout [ 264.705136][T13004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.729398][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.750860][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.878149][T13004] team0: Port device team_slave_0 added [ 264.899201][T13004] team0: Port device team_slave_1 added [ 265.024450][T13004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.031440][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.072320][T13004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.099727][T13004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.115622][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.162953][T13004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.206381][T13057] chnl_net:caif_netlink_parms(): no params data found [ 265.305116][T13139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.346945][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.519520][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.639670][T13004] hsr_slave_0: entered promiscuous mode [ 265.704100][T13004] hsr_slave_1: entered promiscuous mode [ 265.753653][T13147] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 265.840486][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.953752][ T5125] Bluetooth: hci4: command tx timeout [ 266.029410][T13172] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.033018][T13173] SET target dimension over the limit! [ 266.111321][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.142387][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.150318][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.157608][T13057] bridge_slave_0: entered allmulticast mode [ 266.169609][T13057] bridge_slave_0: entered promiscuous mode [ 266.181593][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.213003][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.220190][T13057] bridge_slave_1: entered allmulticast mode [ 266.228897][T13057] bridge_slave_1: entered promiscuous mode [ 266.385626][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.428789][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.613570][T13057] team0: Port device team_slave_0 added [ 266.648206][T13057] team0: Port device team_slave_1 added [ 266.731695][T13207] [ 266.734039][T13207] ====================================================== [ 266.741028][T13207] WARNING: possible circular locking dependency detected [ 266.748020][T13207] 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 Not tainted [ 266.755094][T13207] ------------------------------------------------------ [ 266.762080][T13207] syz-executor.2/13207 is trying to acquire lock: [ 266.768461][T13207] ffff8880b9438828 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 266.778802][T13207] [ 266.778802][T13207] but task is already holding lock: [ 266.786136][T13207] ffff8880b943e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 266.795610][T13207] [ 266.795610][T13207] which lock already depends on the new lock. [ 266.795610][T13207] [ 266.805983][T13207] [ 266.805983][T13207] the existing dependency chain (in reverse order) is: [ 266.814966][T13207] [ 266.814966][T13207] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 266.822233][T13207] lock_acquire+0x1ed/0x550 [ 266.827232][T13207] _raw_spin_lock_nested+0x31/0x40 [ 266.832844][T13207] raw_spin_rq_lock_nested+0x2a/0x140 [ 266.838712][T13207] sched_mm_cid_exit_signals+0x17b/0x4b0 [ 266.844838][T13207] exit_signals+0x2a1/0x5c0 [ 266.849831][T13207] do_exit+0x6b4/0x27e0 [ 266.854480][T13207] __pfx___ia32_sys_exit+0x0/0x10 [ 266.860001][T13207] do_syscall_64+0xf3/0x230 [ 266.865001][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.871386][T13207] [ 266.871386][T13207] -> #1 (&sighand->siglock){-.-.}-{2:2}: [ 266.879170][T13207] lock_acquire+0x1ed/0x550 [ 266.884165][T13207] _raw_spin_lock_irqsave+0xd5/0x120 [ 266.889941][T13207] __lock_task_sighand+0x149/0x2d0 [ 266.895550][T13207] group_send_sig_info+0x274/0x310 [ 266.901170][T13207] bpf_send_signal_common+0x2dd/0x430 [ 266.907033][T13207] bpf_send_signal_thread+0x16/0x20 [ 266.912739][T13207] bpf_prog_682b67a395ac5c66+0xd/0x1a [ 266.918620][T13207] bpf_trace_run4+0x334/0x590 [ 266.923792][T13207] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 266.930958][T13207] lock_mm_and_find_vma+0x213/0x2f0 [ 266.936653][T13207] exc_page_fault+0x1bf/0x8c0 [ 266.941822][T13207] asm_exc_page_fault+0x26/0x30 [ 266.947164][T13207] rep_movs_alternative+0x30/0x70 [ 266.952696][T13207] _copy_from_user+0x8c/0xe0 [ 266.957786][T13207] copy_msghdr_from_user+0xae/0x680 [ 266.963478][T13207] do_recvmmsg+0x40f/0xae0 [ 266.968386][T13207] __x64_sys_recvmmsg+0x199/0x250 [ 266.973902][T13207] do_syscall_64+0xf3/0x230 [ 266.978901][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.985287][T13207] [ 266.985287][T13207] -> #0 (lock#10){+.+.}-{2:2}: [ 266.992209][T13207] validate_chain+0x18e0/0x5900 [ 266.997625][T13207] __lock_acquire+0x1346/0x1fd0 [ 267.002988][T13207] lock_acquire+0x1ed/0x550 [ 267.007990][T13207] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 267.015077][T13207] stack_map_get_build_id_offset+0x9af/0x9d0 [ 267.021562][T13207] __bpf_get_stack+0x4ad/0x5a0 [ 267.026823][T13207] bpf_get_stack_raw_tp+0x1a3/0x240 [ 267.032519][T13207] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 267.038472][T13207] bpf_trace_run2+0x2ec/0x540 [ 267.043647][T13207] trace_tlb_flush+0x118/0x140 [ 267.048923][T13207] switch_mm_irqs_off+0x7cb/0xae0 [ 267.054453][T13207] __schedule+0x1066/0x4a20 [ 267.059456][T13207] preempt_schedule_common+0x84/0xd0 [ 267.065241][T13207] preempt_schedule+0xe1/0xf0 [ 267.070419][T13207] preempt_schedule_thunk+0x1a/0x30 [ 267.076120][T13207] _raw_spin_unlock+0x3e/0x50 [ 267.081297][T13207] __text_poke+0xa6b/0xd30 [ 267.086224][T13207] text_poke_bp_batch+0x265/0xb30 [ 267.091752][T13207] text_poke_finish+0x30/0x50 [ 267.096926][T13207] arch_jump_label_transform_apply+0x1c/0x30 [ 267.103401][T13207] static_key_enable_cpuslocked+0x136/0x260 [ 267.109793][T13207] static_key_enable+0x1a/0x20 [ 267.115057][T13207] tracepoint_add_func+0x953/0x9e0 [ 267.120663][T13207] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 267.128094][T13207] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 267.133959][T13207] bpf_raw_tracepoint_open+0x1c2/0x240 [ 267.139917][T13207] __sys_bpf+0x3c0/0x810 [ 267.144650][T13207] __x64_sys_bpf+0x7c/0x90 [ 267.149565][T13207] do_syscall_64+0xf3/0x230 [ 267.154562][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.160952][T13207] [ 267.160952][T13207] other info that might help us debug this: [ 267.160952][T13207] [ 267.171150][T13207] Chain exists of: [ 267.171150][T13207] lock#10 --> &sighand->siglock --> &rq->__lock [ 267.171150][T13207] [ 267.183290][T13207] Possible unsafe locking scenario: [ 267.183290][T13207] [ 267.190709][T13207] CPU0 CPU1 [ 267.196045][T13207] ---- ---- [ 267.201380][T13207] lock(&rq->__lock); [ 267.205421][T13207] lock(&sighand->siglock); [ 267.212500][T13207] lock(&rq->__lock); [ 267.219146][T13207] lock(lock#10); [ 267.222857][T13207] [ 267.222857][T13207] *** DEADLOCK *** [ 267.222857][T13207] [ 267.230968][T13207] 8 locks held by syz-executor.2/13207: [ 267.236498][T13207] #0: ffffffff8e3809e8 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0xbb/0x190 [ 267.248391][T13207] #1: ffffffff8e1ce5b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 267.258206][T13207] #2: ffffffff8e3e1a48 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 267.268992][T13207] #3: ffffffff8e1e3688 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 [ 267.279404][T13207] #4: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 267.288852][T13207] #5: ffff8880b943e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 267.298736][T13207] #6: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 267.308100][T13207] #7: ffff88807a2c3118 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x237/0x9d0 [ 267.318862][T13207] [ 267.318862][T13207] stack backtrace: [ 267.324734][T13207] CPU: 0 PID: 13207 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 267.335201][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 267.345238][T13207] Call Trace: [ 267.348504][T13207] [ 267.351414][T13207] dump_stack_lvl+0x241/0x360 [ 267.356088][T13207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.361270][T13207] ? print_circular_bug+0x130/0x1a0 [ 267.366445][T13207] check_noncircular+0x36a/0x4a0 [ 267.371385][T13207] ? hlock_conflict+0x59/0x1e0 [ 267.376135][T13207] ? __pfx_check_noncircular+0x10/0x10 [ 267.381569][T13207] ? lockdep_lock+0x123/0x2b0 [ 267.386222][T13207] validate_chain+0x18e0/0x5900 [ 267.391057][T13207] ? __pfx_validate_chain+0x10/0x10 [ 267.396229][T13207] ? validate_chain+0x15b1/0x5900 [ 267.401235][T13207] ? mark_lock+0x9a/0x350 [ 267.405539][T13207] ? mark_lock+0x9a/0x350 [ 267.409845][T13207] __lock_acquire+0x1346/0x1fd0 [ 267.414671][T13207] lock_acquire+0x1ed/0x550 [ 267.419146][T13207] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 267.425882][T13207] ? __pfx_lock_acquire+0x10/0x10 [ 267.430880][T13207] ? validate_chain+0x11e/0x5900 [ 267.435792][T13207] ? down_read_trylock+0x24f/0x3c0 [ 267.440879][T13207] ? stack_map_get_build_id_offset+0x237/0x9d0 [ 267.447009][T13207] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 267.453764][T13207] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 267.460329][T13207] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 267.467067][T13207] stack_map_get_build_id_offset+0x9af/0x9d0 [ 267.473025][T13207] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 267.479504][T13207] __bpf_get_stack+0x4ad/0x5a0 [ 267.484245][T13207] ? __pfx___bpf_get_stack+0x10/0x10 [ 267.489504][T13207] ? __pfx___cant_migrate+0x10/0x10 [ 267.494678][T13207] bpf_get_stack_raw_tp+0x1a3/0x240 [ 267.499856][T13207] ? bpf_trace_run2+0x1fc/0x540 [ 267.504705][T13207] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 267.510137][T13207] bpf_trace_run2+0x2ec/0x540 [ 267.514795][T13207] ? __pfx_bpf_trace_run2+0x10/0x10 [ 267.519975][T13207] ? trace_tlb_flush+0x77/0x140 [ 267.524804][T13207] trace_tlb_flush+0x118/0x140 [ 267.529545][T13207] switch_mm_irqs_off+0x7cb/0xae0 [ 267.534548][T13207] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 267.540074][T13207] __schedule+0x1066/0x4a20 [ 267.544559][T13207] ? __pfx_lock_release+0x10/0x10 [ 267.549559][T13207] ? bpf_get_stack_raw_tp+0x1a3/0x240 [ 267.554906][T13207] ? __pfx___schedule+0x10/0x10 [ 267.559733][T13207] ? bpf_trace_run2+0x36e/0x540 [ 267.564568][T13207] ? preempt_schedule+0xe1/0xf0 [ 267.569396][T13207] preempt_schedule_common+0x84/0xd0 [ 267.574657][T13207] preempt_schedule+0xe1/0xf0 [ 267.579309][T13207] ? __pfx_preempt_schedule+0x10/0x10 [ 267.584655][T13207] ? trace_tlb_flush+0x6/0x140 [ 267.589394][T13207] ? trace_tlb_flush+0x6/0x140 [ 267.594129][T13207] preempt_schedule_thunk+0x1a/0x30 [ 267.599302][T13207] _raw_spin_unlock+0x3e/0x50 [ 267.603954][T13207] __text_poke+0xa6b/0xd30 [ 267.608347][T13207] ? trace_tlb_flush+0x6/0x140 [ 267.613086][T13207] ? __pfx_text_poke_memcpy+0x10/0x10 [ 267.618430][T13207] ? __pfx___text_poke+0x10/0x10 [ 267.623341][T13207] ? __pfx___might_resched+0x10/0x10 [ 267.628599][T13207] ? __mutex_trylock_common+0x183/0x2e0 [ 267.634122][T13207] ? __pfx___might_resched+0x10/0x10 [ 267.639384][T13207] ? trace_tlb_flush+0x6/0x140 [ 267.644121][T13207] text_poke_bp_batch+0x265/0xb30 [ 267.649122][T13207] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 267.654638][T13207] ? __pfx___mutex_lock+0x10/0x10 [ 267.659634][T13207] ? arch_jump_label_transform_queue+0x9b/0x100 [ 267.665848][T13207] text_poke_finish+0x30/0x50 [ 267.670497][T13207] arch_jump_label_transform_apply+0x1c/0x30 [ 267.676450][T13207] static_key_enable_cpuslocked+0x136/0x260 [ 267.682322][T13207] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 267.688104][T13207] static_key_enable+0x1a/0x20 [ 267.692841][T13207] tracepoint_add_func+0x953/0x9e0 [ 267.697929][T13207] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 267.703707][T13207] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 267.710638][T13207] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 267.718082][T13207] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 267.723861][T13207] ? anon_inode_getfile+0xff/0x180 [ 267.728947][T13207] ? bpf_probe_register+0x134/0x1f0 [ 267.734118][T13207] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 267.739464][T13207] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 267.745338][T13207] bpf_raw_tracepoint_open+0x1c2/0x240 [ 267.750769][T13207] __sys_bpf+0x3c0/0x810 [ 267.754998][T13207] ? __pfx___sys_bpf+0x10/0x10 [ 267.759735][T13207] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 267.765778][T13207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.771733][T13207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.778035][T13207] ? do_syscall_64+0x100/0x230 [ 267.782775][T13207] __x64_sys_bpf+0x7c/0x90 [ 267.787168][T13207] do_syscall_64+0xf3/0x230 [ 267.791648][T13207] ? clear_bhb_loop+0x35/0x90 [ 267.796298][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.802173][T13207] RIP: 0033:0x7f3d8387cf69 [ 267.806560][T13207] Code: Unable to access opcode bytes at 0x7f3d8387cf3f. [ 267.813548][T13207] RSP: 002b:00007f3d8452c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.821933][T13207] RAX: ffffffffffffffda RBX: 00007f3d839b3f80 RCX: 00007f3d8387cf69 2024/06/10 12:22:36 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 267.829878][T13207] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 267.837821][T13207] RBP: 00007f3d838da6fe R08: 0000000000000000 R09: 0000000000000000 [ 267.845764][T13207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.853705][T13207] R13: 000000000000000b R14: 00007f3d839b3f80 R15: 00007ffcbd196e58 [ 267.861657][T13207] [ 267.868966][ T5125] Bluetooth: hci2: command tx timeout [ 267.957315][ T11] bridge_slave_1: left allmulticast mode [ 267.972630][ T11] bridge_slave_1: left promiscuous mode [ 267.978372][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.035676][ T5125] Bluetooth: hci4: command tx timeout [ 268.066419][ T11] bridge_slave_0: left allmulticast mode [ 268.072068][ T11] bridge_slave_0: left promiscuous mode [ 268.087083][ T11] bridge0: port 1(bridge_slave_0) entered disabled state