last executing test programs: 42.885867913s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0xa2, &(0x7f0000000900)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x6c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0xe2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0xe, 0xf989, "f2e4e54b76a88d2a973c"}, @exp_fastopen={0xfe, 0x8, 0xf989, "e8e82b84"}, @sack={0x5, 0x2}, @fastopen={0x22, 0xa, "bc556e758e4fa40b"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @mptcp=@capable={0x1e, 0xc}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0xe, 0xf989, "b23ffdd7f7f300000000"}, @fastopen={0x22, 0x3, "03"}]}}}}}}}}, 0x0) 42.765825711s ago: executing program 2: socket(0x0, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 42.501887245s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x0, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 42.372237387s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x10000000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 41.624909747s ago: executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 41.452242943s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r1) 39.742329448s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003700)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x2e1, 0x0, 0x0, 0x1, [@generic="698116aedb8b20ea7c6c1ea25cebb36cb7516a143ffcbf515d9b35990799d65ed4fa083777eacc95fa2f3717c611e3c6fe1d4b847f38d0dacc9f008b92723a786b2dd3347844e021bcf5efa0a62caef6e04b6b1b9d643540e3a8fae523375efd02993336c03a1a1bf64ef9ed0ad98cc24e76e2b2f4cb4bf0fb02b4ad1c66f8c32e54a0cb9093b9d599e05e779bd684cc7706d2260a8a8c54287555094b6ad08ade2ab84cf88d0ef9342515965597c9eca65e292856ea502b09a749a8f3ea66e51b0d33dec35a77773ef419d59b4c3ca6e89835cffebd2a3886a4e26ba7f4e360d05d6eaad1f680cbdb784160890a3ea391a12000c155b0b50bd74b86937a09d67069c2343877999893989ea493f51f925ac132aab7eec297a3862434e93e1811424687bde6a777c97a8503cff06c411b865f973c2495874293fa612c3260e57c6fc930b693c94681bff0ba128341de4210b22373fba80a6dda5133339b8f435c4b1369d68ab17e15e5f4f0e397e38939f706aacfc602b84e7b6800c0407bf31cde3bad212985b4e73516dcba1abcef724ff9c3f8ebaac7bc51521a2b8b1959c2f199abdfb004a36f34dc1ed8e955ecbbf7e57622ccca111565b06627b5188b7cc860d88e6ecb1a6e09c98bd28d59ff9881879a10c459274f02d802799dc31d22a16d50dc3aa6a209beff95faf7fb3e0efb64abea0107d907e48bdf05ff18f9e25374350fd94c8574626204411980450b26b4d94cc27af25c9fb01ec651cf743389268d34efaccc90cc31417372c8b417661bf7bcc60322ce048935b50b9cc604f502ec4077f684c3491a75e1c316960536739ed057fbaf1f7e51908afa659e47c32760feff1c9286daf9f38f1f4efbfbadb527a8d24a02dbb11b8df87d6d425e33ff3e21b99398b37eb27fc6d22441f23a2abf2d5af960808635a16f2c54345aa0222d3b3ccccc84b240f3c0573a0f390d5db54944e64486182fc1420f4853ef552b1c365de6e507645e9e710041dbd9f2aa13cc59b9bb1670be77a739"]}]}, 0x300}}, 0x0) 38.80894017s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) socket(0x0, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfd}]}, 0x28}}, 0x0) 38.703507684s ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=@gettaction={0x24, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x24}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1a4}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 38.481487238s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 38.113872417s ago: executing program 4: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={[0x7fff]}, 0x8) 38.030440967s ago: executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendfile(r2, r1, 0x0, 0x100004002) 31.767852832s ago: executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x144000, 0x7fe2, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f0000000180), 0x0}, 0x20) 31.555136606s ago: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000280000000000000029"], 0x40}}], 0x1, 0x0) 31.480670056s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000200)="65f0c7e6344d335f", 0x8) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf, 0x0, &(0x7f00000000c0)) 31.391935042s ago: executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001200010300"/46, @ANYRESOCT], 0x4c}}, 0x0) 31.356041805s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x40030000000000}, 0x0) 31.282954443s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0x2, 0x64, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @empty}}}], 0x20}}], 0x1, 0x0) 31.247667591s ago: executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000740)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xe4}}, 0x0) 31.229574887s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001880)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x30}}, 0x0) 31.148076267s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.131145423s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000003020200"], 0x14}, 0x1, 0x40030000000000}, 0x0) bind$inet6(r0, &(0x7f0000000100), 0x1c) listen(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb6}]}, &(0x7f0000000a80)='syzkaller\x00', 0x3219, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x8, 0x10, &(0x7f0000001000)={0x0, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0xffffffffffffffff, r2, r2], &(0x7f0000001080)=[{0x1}, {0x2}, {0x2, 0x3, 0x3, 0x3}], 0x10, 0x200}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000ec0)="baf97e6ef900aae5f6a2570fbe2bd0d5dde6baa1296dd9de9f4d7260ffdfd8303e0e9045759f287a655ece44efe5c0c92bedb443d1a8ca743df4b4a7325d26841ce48d34d5", 0x45) setsockopt$packet_int(r3, 0x107, 0x0, &(0x7f0000000000), 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000003000000000000", @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) 31.065210623s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000c80)=0xf4e) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) writev(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000740)="fbed740186815dc61288608fe9432e111b57e53d8584f76e3bcfcb4b8414941ab1284878cb874ec1ea339291de82530c3146931459305a07ca30fc029a18dfef57276a3b6681bf4c6cb5c646645fa6f056f4031008ce2a6a5be3188e87dd9c91e69b3a4464015e988c430c9ebd1fb337694f07fa48e6219556e0633ae3fe5410", 0x80}], 0x1) 30.975766324s ago: executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe0, &(0x7f0000000000), &(0x7f0000000080)=0x4) 30.895348367s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2a00000026000506"], 0x2c}}, 0x0) 30.155007458s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x1008008, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/166, 0xa6}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 30.033183409s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={{0x14}, [], {0x14}}, 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 1.11240208s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x20}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd040032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb3b7e"], 0xfdef) 871.086363ms ago: executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) 0s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x4}}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. 2024/06/09 17:06:56 fuzzer started 2024/06/09 17:06:57 dialing manager at 10.128.0.169:30016 [ 70.164123][ T5092] cgroup: Unknown subsys name 'net' [ 70.364914][ T5092] cgroup: Unknown subsys name 'rlimit' [ 71.764887][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.771568][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/09 17:06:59 starting 5 executor processes [ 71.809036][ T5100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.837253][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.845498][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.854289][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.855757][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.864043][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.869784][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.876482][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.885663][ T5129] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.891148][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.899535][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.905703][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.913225][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.919984][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.927602][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.940809][ T5129] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.940906][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.949830][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.963706][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.965153][ T5129] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.971576][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.978407][ T5129] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.985395][ T5131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.000269][ T5131] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.012984][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.023914][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.024605][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.056575][ T5131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.064583][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.072289][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.080032][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.698038][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 73.742326][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 73.797331][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 73.960993][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.968487][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.975975][ T5114] bridge_slave_0: entered allmulticast mode [ 73.984461][ T5114] bridge_slave_0: entered promiscuous mode [ 74.005625][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 74.030718][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.038113][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.046603][ T5114] bridge_slave_1: entered allmulticast mode [ 74.059035][ T5114] bridge_slave_1: entered promiscuous mode [ 74.142927][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 74.154616][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.163665][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.170901][ T5116] bridge_slave_0: entered allmulticast mode [ 74.178669][ T5116] bridge_slave_0: entered promiscuous mode [ 74.187635][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.195138][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.202851][ T5116] bridge_slave_1: entered allmulticast mode [ 74.209881][ T5116] bridge_slave_1: entered promiscuous mode [ 74.280523][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.290398][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.302600][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.309834][ T5112] bridge_slave_0: entered allmulticast mode [ 74.318505][ T5112] bridge_slave_0: entered promiscuous mode [ 74.366120][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.375876][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.387880][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.395410][ T5112] bridge_slave_1: entered allmulticast mode [ 74.402814][ T5112] bridge_slave_1: entered promiscuous mode [ 74.435365][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.449616][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.537601][ T5114] team0: Port device team_slave_0 added [ 74.556251][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.563959][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.571569][ T5113] bridge_slave_0: entered allmulticast mode [ 74.579154][ T5113] bridge_slave_0: entered promiscuous mode [ 74.607830][ T5114] team0: Port device team_slave_1 added [ 74.630847][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.644707][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.664265][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.671679][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.678858][ T5113] bridge_slave_1: entered allmulticast mode [ 74.687956][ T5113] bridge_slave_1: entered promiscuous mode [ 74.705493][ T5116] team0: Port device team_slave_0 added [ 74.726589][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.733732][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.759763][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.835670][ T5116] team0: Port device team_slave_1 added [ 74.856770][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.864597][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.891386][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.906922][ T5112] team0: Port device team_slave_0 added [ 74.916829][ T5112] team0: Port device team_slave_1 added [ 74.939705][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.949727][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.957680][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.965238][ T5115] bridge_slave_0: entered allmulticast mode [ 74.973172][ T5115] bridge_slave_0: entered promiscuous mode [ 74.994563][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.001629][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.027676][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.042147][ T5122] Bluetooth: hci4: command tx timeout [ 75.048305][ T4488] Bluetooth: hci1: command tx timeout [ 75.082297][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.091856][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.099055][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.106948][ T5115] bridge_slave_1: entered allmulticast mode [ 75.114746][ T5115] bridge_slave_1: entered promiscuous mode [ 75.121634][ T5122] Bluetooth: hci0: command tx timeout [ 75.127380][ T5122] Bluetooth: hci2: command tx timeout [ 75.133133][ T4488] Bluetooth: hci3: command tx timeout [ 75.145542][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.152628][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.178837][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.222662][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.229646][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.256279][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.304435][ T5114] hsr_slave_0: entered promiscuous mode [ 75.310978][ T5114] hsr_slave_1: entered promiscuous mode [ 75.320104][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.327154][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.353193][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.399609][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.452428][ T5113] team0: Port device team_slave_0 added [ 75.482320][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.507448][ T5113] team0: Port device team_slave_1 added [ 75.523863][ T5116] hsr_slave_0: entered promiscuous mode [ 75.531536][ T5116] hsr_slave_1: entered promiscuous mode [ 75.537851][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.545926][ T5116] Cannot create hsr debugfs directory [ 75.569775][ T5115] team0: Port device team_slave_0 added [ 75.615107][ T5115] team0: Port device team_slave_1 added [ 75.695112][ T5112] hsr_slave_0: entered promiscuous mode [ 75.705663][ T5112] hsr_slave_1: entered promiscuous mode [ 75.712322][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.719906][ T5112] Cannot create hsr debugfs directory [ 75.727657][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.735140][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.761459][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.779063][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.786288][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.812500][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.848899][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.856096][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.882347][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.895797][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.902936][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.929733][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.090451][ T5115] hsr_slave_0: entered promiscuous mode [ 76.097084][ T5115] hsr_slave_1: entered promiscuous mode [ 76.103972][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.111742][ T5115] Cannot create hsr debugfs directory [ 76.185381][ T5113] hsr_slave_0: entered promiscuous mode [ 76.193395][ T5113] hsr_slave_1: entered promiscuous mode [ 76.199661][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.207768][ T5113] Cannot create hsr debugfs directory [ 76.510853][ T5114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.546111][ T5114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.559360][ T5114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.590507][ T5114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.663379][ T5116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.682292][ T5116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.694500][ T5116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.715524][ T5116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.803587][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.818707][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.846021][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.857114][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.952090][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.964193][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.981716][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.012077][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.124444][ T5122] Bluetooth: hci1: command tx timeout [ 77.129922][ T5122] Bluetooth: hci4: command tx timeout [ 77.144985][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.168409][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.178893][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.193504][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.202781][ T4488] Bluetooth: hci3: command tx timeout [ 77.208241][ T4488] Bluetooth: hci0: command tx timeout [ 77.214050][ T5122] Bluetooth: hci2: command tx timeout [ 77.233191][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.250518][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.290684][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.309679][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.340030][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.347427][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.360338][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.367497][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.425260][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.432461][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.476345][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.483556][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.540022][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.640382][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.680073][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.722280][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.729469][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.787681][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.835526][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.842894][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.887136][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.916814][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.016966][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.024256][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.099505][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.127102][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.148130][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.155297][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.168046][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.175244][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.185289][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.192475][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.288909][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.333913][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.477645][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.575957][ T5114] veth0_vlan: entered promiscuous mode [ 78.658779][ T5116] veth0_vlan: entered promiscuous mode [ 78.683185][ T5114] veth1_vlan: entered promiscuous mode [ 78.734018][ T5116] veth1_vlan: entered promiscuous mode [ 78.909382][ T5116] veth0_macvtap: entered promiscuous mode [ 78.940815][ T5116] veth1_macvtap: entered promiscuous mode [ 78.964223][ T5114] veth0_macvtap: entered promiscuous mode [ 79.014125][ T5114] veth1_macvtap: entered promiscuous mode [ 79.034594][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.056669][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.090948][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.113004][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.126531][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.138743][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.155943][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.168734][ T5116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.177895][ T5116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.187667][ T5116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.196911][ T5116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.206070][ T4488] Bluetooth: hci4: command tx timeout [ 79.212010][ T5122] Bluetooth: hci1: command tx timeout [ 79.233428][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.246213][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.258256][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.275266][ T5114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.288288][ T4488] Bluetooth: hci0: command tx timeout [ 79.291336][ T5131] Bluetooth: hci3: command tx timeout [ 79.294376][ T5114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.299144][ T5122] Bluetooth: hci2: command tx timeout [ 79.308854][ T5114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.322243][ T5114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.532032][ T5112] veth0_vlan: entered promiscuous mode [ 79.550175][ T5112] veth1_vlan: entered promiscuous mode [ 79.558831][ T5115] veth0_vlan: entered promiscuous mode [ 79.590091][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.614753][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.620692][ T5113] veth0_vlan: entered promiscuous mode [ 79.631559][ T5115] veth1_vlan: entered promiscuous mode [ 79.705395][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.708120][ T5112] veth0_macvtap: entered promiscuous mode [ 79.727127][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.730191][ T5113] veth1_vlan: entered promiscuous mode [ 79.775585][ T5112] veth1_macvtap: entered promiscuous mode [ 79.823828][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.832222][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.846826][ T5115] veth0_macvtap: entered promiscuous mode [ 79.880807][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.890982][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.904600][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.916632][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.928247][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.941106][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.954484][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.973032][ T5115] veth1_macvtap: entered promiscuous mode [ 80.014168][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.031303][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.053615][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.066322][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.079133][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.104685][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.120560][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.129912][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.146016][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.174383][ T5113] veth0_macvtap: entered promiscuous mode [ 80.200398][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.215015][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.228463][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.239405][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.250325][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.262853][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.275956][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.302704][ T5113] veth1_macvtap: entered promiscuous mode [ 80.320983][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.342234][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.357012][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.382526][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.396078][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.407651][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.419372][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.487915][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.507973][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.517400][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.526563][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.578456][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.590244][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.610983][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.639767][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.672002][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.693471][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.713086][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.728610][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.762803][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.806760][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.840495][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.850724][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.871518][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.889897][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.915567][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.931042][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.948852][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.963793][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.009288][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.019899][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.029891][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.052527][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.279859][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.301650][ T5122] Bluetooth: hci4: command tx timeout [ 81.301798][ T5131] Bluetooth: hci1: command tx timeout [ 81.349663][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.363205][ T5131] Bluetooth: hci2: command tx timeout [ 81.363385][ T4488] Bluetooth: hci0: command tx timeout [ 81.374687][ T5122] Bluetooth: hci3: command tx timeout [ 81.438984][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.451536][ T2391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.475947][ T2391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.493698][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.530278][ T2391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.561576][ T2391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.584788][ T5222] pim6reg1: entered promiscuous mode [ 81.590210][ T5222] pim6reg1: entered allmulticast mode [ 81.743533][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.772994][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.817313][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.846861][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.963773][ T5232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.415355][ T5247] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.553069][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.614356][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.629711][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.670551][ T5249] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.734510][ T5253] tipc: Started in network mode [ 82.743928][ T5253] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 82.772643][ T5253] tipc: Enabling of bearer rejected, failed to enable media [ 82.873497][ T5249] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.085607][ T5249] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.141778][ T5263] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.260822][ T5232] infiniband syz2: set active [ 83.277410][ T5232] infiniband syz2: added veth1_to_bridge [ 83.323252][ T5232] syz2: rxe_create_cq: returned err = -12 [ 83.367476][ T5232] infiniband syz2: Couldn't create ib_mad CQ [ 83.389574][ T5249] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.403835][ T5232] infiniband syz2: Couldn't open port 1 [ 83.568794][ T5232] RDS/IB: syz2: added [ 83.608205][ T5232] smc: adding ib device syz2 with port count 1 [ 83.627615][ T5232] smc: ib device syz2 port 1 has pnetid [ 83.765715][ T5249] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.962108][ T5249] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.102256][ T5249] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.223149][ T5249] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.422706][ T5281] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 84.460076][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.909090][ T5298] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.289344][ T5307] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.460444][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.679874][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.745245][ T5322] sctp: [Deprecated]: syz-executor.1 (pid 5322) Use of int in max_burst socket option deprecated. [ 85.745245][ T5322] Use struct sctp_assoc_value instead [ 85.789465][ T5318] team0: Device wg1 is of different type [ 85.822677][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.040308][ T5328] macsec1: entered promiscuous mode [ 86.052352][ T5328] vlan0: entered promiscuous mode [ 86.133420][ T5328] vlan0: left promiscuous mode [ 86.939657][ T5359] team0: Device vlan0 is up. Set it down before adding it as a team port [ 87.130796][ T1153] cfg80211: failed to load regulatory.db [ 88.297413][ T5395] Zero length message leads to an empty skb [ 90.536115][ T5444] __nla_validate_parse: 3 callbacks suppressed [ 90.536136][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.617264][ T5444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.966361][ T5452] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 91.146488][ T5456] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 91.180073][ T5456] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 91.229569][ T5456] bond1: (slave vcan1): making interface the new active one [ 91.252917][ T5456] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 91.462155][ T5463] bridge0: entered promiscuous mode [ 91.465086][ T5465] sctp: [Deprecated]: syz-executor.2 (pid 5465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.465086][ T5465] Use struct sctp_sack_info instead [ 91.499365][ T5463] bridge0: left promiscuous mode [ 91.695446][ T5471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.922616][ T4488] Bluetooth: hci4: command 0x0405 tx timeout [ 92.341682][ T5492] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.542878][ T5499] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 92.563508][ T5499] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.081616][ T5516] gretap0: entered promiscuous mode [ 93.105808][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.147764][ T5516] gretap0: left promiscuous mode [ 93.858592][ T5539] openvswitch: netlink: Key type 9220 is out of range max 32 [ 95.376879][ T5572] pim6reg1: entered promiscuous mode [ 95.382696][ T5572] pim6reg1: entered allmulticast mode [ 95.852082][ T5565] syz-executor.4 (5565) used greatest stack depth: 18064 bytes left [ 95.852638][ T5579] ɶƣ0GC¦: entered promiscuous mode [ 96.019029][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.734038][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.113336][ T5627] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 97.146106][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.348880][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.427135][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.430011][ T5640] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 97.542641][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.662406][ T5648] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 97.694752][ T5649] pim6reg1: entered promiscuous mode [ 97.722554][ T5649] pim6reg1: entered allmulticast mode [ 97.980588][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.119156][ T5660] vlan3: entered allmulticast mode [ 98.141235][ T5666] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.513205][ T5677] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 98.537239][ T5677] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 98.562875][ T5677] netlink: 190580 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.585426][ T5668] syzkaller0: entered promiscuous mode [ 98.593297][ T5668] syzkaller0: entered allmulticast mode [ 100.477022][ T5681] ɶƣ0GC¦: entered promiscuous mode [ 100.772213][ T5691] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 100.779752][ T5692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.800764][ T5691] pim6reg0: linktype set to 65534 [ 100.819724][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.339690][ T5708] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 101.360833][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.370108][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.458167][ T5708] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.465532][ T5708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.474040][ T5708] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.481301][ T5708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.599969][ T5708] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.942796][ T4488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.959662][ T4488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.969726][ T4488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.002153][ T4488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.016268][ T4488] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.025155][ T4488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.067703][ T5716] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 102.098412][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.113889][ T5716] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 102.136577][ T5716] netlink: 190580 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.317113][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.520046][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.679471][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.027523][ T5740] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 103.252902][ T61] bridge_slave_1: left allmulticast mode [ 103.258865][ T61] bridge_slave_1: left promiscuous mode [ 103.295595][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.345540][ T61] bridge_slave_0: left allmulticast mode [ 103.370544][ T61] bridge_slave_0: left promiscuous mode [ 103.386947][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.081227][ T4488] Bluetooth: hci1: command tx timeout [ 104.319218][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.340386][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.355289][ T61] bond0 (unregistering): Released all slaves [ 104.378240][ T5750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.390501][ T5750] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.816891][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.068904][ T5786] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 105.740819][ T5808] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.789175][ T5808] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.161586][ T4488] Bluetooth: hci1: command tx timeout [ 106.347079][ T61] hsr_slave_0: left promiscuous mode [ 106.351519][ T5830] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.414779][ T61] hsr_slave_1: left promiscuous mode [ 106.433663][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.471838][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.508557][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.537811][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.607092][ T61] veth1_macvtap: left promiscuous mode [ 106.624971][ T61] veth0_macvtap: left promiscuous mode [ 106.639535][ T61] veth1_vlan: left promiscuous mode [ 106.657668][ T61] veth0_vlan: left promiscuous mode [ 107.435821][ T61] team0 (unregistering): Port device team_slave_1 removed [ 107.476362][ T61] team0 (unregistering): Port device team_slave_0 removed [ 107.895790][ T5833] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 107.946556][ T5844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.977078][ T5844] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.061717][ T5713] chnl_net:caif_netlink_parms(): no params data found [ 108.245952][ T4488] Bluetooth: hci1: command tx timeout [ 108.336640][ T5854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.493341][ T5868] bridge_slave_0: default FDB implementation only supports local addresses [ 108.750045][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.787512][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.848504][ T5713] bridge_slave_0: entered allmulticast mode [ 108.856867][ T5713] bridge_slave_0: entered promiscuous mode [ 108.940308][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.956986][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.978932][ T5713] bridge_slave_1: entered allmulticast mode [ 109.004137][ T5713] bridge_slave_1: entered promiscuous mode [ 109.335519][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.436958][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.680721][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.774982][ T5713] team0: Port device team_slave_0 added [ 109.806387][ T5713] team0: Port device team_slave_1 added [ 110.076871][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.100759][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.158069][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.255136][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.304955][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.337178][ T4488] Bluetooth: hci1: command tx timeout [ 110.372074][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.508885][ T5944] Bluetooth: MGMT ver 1.22 [ 110.537247][ T5713] hsr_slave_0: entered promiscuous mode [ 110.571529][ T5713] hsr_slave_1: entered promiscuous mode [ 110.599711][ T5713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.637997][ T5713] Cannot create hsr debugfs directory [ 110.739978][ T5951] bond0: entered promiscuous mode [ 110.762046][ T5951] bond_slave_0: entered promiscuous mode [ 110.776065][ T5951] bond_slave_1: entered promiscuous mode [ 110.799035][ T5951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.911886][ T5951] bond0: left promiscuous mode [ 110.916749][ T5951] bond_slave_0: left promiscuous mode [ 110.930253][ T5951] bond_slave_1: left promiscuous mode [ 111.698802][ T29] audit: type=1800 audit(1717952859.014:2): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 112.737025][ T6006] bond0: entered promiscuous mode [ 112.762796][ T6006] bond_slave_0: entered promiscuous mode [ 112.768912][ T6006] bond_slave_1: entered promiscuous mode [ 112.785789][ T6006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.818892][ T6006] bond0: left promiscuous mode [ 112.839813][ T6006] bond_slave_0: left promiscuous mode [ 112.851851][ T6006] bond_slave_1: left promiscuous mode [ 113.413284][ T5713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.447480][ T5713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.501984][ T5713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.539351][ T5713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.172051][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.264274][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.318004][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.325271][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.398796][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.406030][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.637610][ T6063] bond0: entered promiscuous mode [ 114.702317][ T6063] bond_slave_0: entered promiscuous mode [ 114.708248][ T6063] bond_slave_1: entered promiscuous mode [ 114.781691][ T6063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.798606][ T6063] bond0: left promiscuous mode [ 114.813327][ T6063] bond_slave_0: left promiscuous mode [ 114.818993][ T6063] bond_slave_1: left promiscuous mode [ 114.870002][ T6068] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 115.611851][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.668666][ T6094] tipc: Started in network mode [ 115.702089][ T6094] tipc: Node identity e0000001, cluster identity 4711 [ 115.726900][ T6094] tipc: Enabling of bearer rejected, failed to enable media [ 116.016611][ T5713] veth0_vlan: entered promiscuous mode [ 116.075100][ T5713] veth1_vlan: entered promiscuous mode [ 116.252251][ T5713] veth0_macvtap: entered promiscuous mode [ 116.302891][ T5713] veth1_macvtap: entered promiscuous mode [ 116.394914][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.441239][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.480204][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.529578][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.574338][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.590027][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.601945][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.641552][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.693199][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.733096][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.756316][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.791733][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.839490][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.880960][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.911363][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.939758][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.971256][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.012623][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.062832][ T6130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 117.088524][ T5713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.135639][ T5713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.189582][ T5713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.221171][ T5713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.400514][ T6151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 117.656876][ T3824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.686331][ T3824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.906143][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.932177][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.287521][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.507475][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.543238][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.062940][ T6208] ipvlan2: entered promiscuous mode [ 119.091446][ T6208] ipvlan2: entered allmulticast mode [ 119.118139][ T6208] bond0: entered allmulticast mode [ 119.148213][ T6208] bond_slave_0: entered allmulticast mode [ 119.167715][ T6208] bond_slave_1: entered allmulticast mode [ 119.192885][ T6208] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.585350][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.685442][ T6230] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 120.042761][ T6243] tipc: Enabling of bearer rejected, failed to enable media [ 121.005297][ T6278] syzkaller1: entered promiscuous mode [ 121.015954][ T6278] syzkaller1: entered allmulticast mode [ 121.819907][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.831801][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.197782][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802cb06c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 122.821704][ T6338] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 122.842094][ T6338] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 123.303314][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.748970][ T6367] syzkaller1: entered promiscuous mode [ 123.782232][ T6367] syzkaller1: entered allmulticast mode [ 124.789625][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.000331][ T6407] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.043023][ T6407] unsupported nlmsg_type 40 [ 125.199780][ T6414] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 125.365053][ T6420] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.134326][ T6446] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.881595][ T4488] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.889126][ T4488] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.168287][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.227364][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.476439][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.499776][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.211413][ T4488] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.321878][ T6529] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 129.332295][ T6529] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.919653][ T6542] tipc: Enabled bearer , priority 10 [ 131.033320][ T1153] tipc: Node number set to 4269801642 [ 131.677367][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 131.687792][ T6587] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.415895][ T6599] af_packet: tpacket_rcv: packet too big, clamped from 59245 to 3952. macoff=96 [ 132.669471][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.692058][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.705238][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.723619][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.732345][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.740435][ T5122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.748557][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.824918][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.873788][ T6606] vlan2: entered promiscuous mode [ 132.880013][ T6606] gretap0: entered promiscuous mode [ 132.896547][ T6606] gretap0: left promiscuous mode [ 132.934150][ T6612] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.947191][ T6612] netem: invalid attributes len -24 [ 132.952983][ T6612] netem: change failed [ 132.958440][ T6614] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 133.005909][ T6614] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.051422][ T6614] team0: entered allmulticast mode [ 133.061273][ T6614] team_slave_0: entered allmulticast mode [ 133.082372][ T6614] team_slave_1: entered allmulticast mode [ 133.102090][ T6614] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.158467][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.196904][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.215864][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.232483][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.262036][ T6615] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 133.273262][ T6615] bond0: (slave team0): Releasing backup interface [ 133.280983][ T6615] team0: left allmulticast mode [ 133.290100][ T6615] team_slave_0: left allmulticast mode [ 133.302738][ T6615] team_slave_1: left allmulticast mode [ 133.328463][ T6615] bridge0: port 3(team0) entered blocking state [ 133.335140][ T6615] bridge0: port 3(team0) entered disabled state [ 133.347607][ T6615] team0: entered allmulticast mode [ 133.353973][ T6615] team_slave_0: entered allmulticast mode [ 133.364677][ T6615] team_slave_1: entered allmulticast mode [ 133.385139][ T6615] team0: entered promiscuous mode [ 133.391807][ T6615] team_slave_0: entered promiscuous mode [ 133.399581][ T6615] team_slave_1: entered promiscuous mode [ 133.443337][ T6619] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.460891][ T6619] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.485374][ T6621] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 133.598104][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.638358][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.816156][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.218182][ T12] bridge_slave_1: left allmulticast mode [ 134.244109][ T12] bridge_slave_1: left promiscuous mode [ 134.269341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.300900][ T12] bridge_slave_0: left allmulticast mode [ 134.310586][ T12] bridge_slave_0: left promiscuous mode [ 134.319925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.818157][ T4488] Bluetooth: hci3: command tx timeout [ 134.873120][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.047193][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.065792][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.078720][ T12] bond0 (unregistering): Released all slaves [ 135.128094][ T6643] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.921575][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.008631][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.404712][ T6702] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.822130][ T12] hsr_slave_0: left promiscuous mode [ 136.845610][ T12] hsr_slave_1: left promiscuous mode [ 136.866706][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.881253][ T4488] Bluetooth: hci3: command tx timeout [ 136.893538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.933363][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.940842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.991246][ T12] veth1_macvtap: left promiscuous mode [ 136.997638][ T12] veth0_macvtap: left promiscuous mode [ 137.004088][ T12] veth1_vlan: left promiscuous mode [ 137.009597][ T12] veth0_vlan: left promiscuous mode [ 138.023445][ T12] team0 (unregistering): Port device team_slave_1 removed [ 138.102024][ T12] team0 (unregistering): Port device team_slave_0 removed [ 138.487975][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.728069][ T6609] chnl_net:caif_netlink_parms(): no params data found [ 138.751381][ T6721] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.967119][ T4488] Bluetooth: hci3: command tx timeout [ 139.431821][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.442381][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.468844][ T6609] bridge_slave_0: entered allmulticast mode [ 139.522663][ T6609] bridge_slave_0: entered promiscuous mode [ 139.554226][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.585798][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.599810][ T6609] bridge_slave_1: entered allmulticast mode [ 139.622886][ T6609] bridge_slave_1: entered promiscuous mode [ 139.823950][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.007479][ T6787] syzkaller0: entered promiscuous mode [ 140.015102][ T6787] syzkaller0: entered allmulticast mode [ 140.043793][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.058016][ T6774] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 140.129221][ T6774] team0: Device veth1_macvtap failed to register rx_handler [ 141.051793][ T4488] Bluetooth: hci3: command tx timeout [ 141.983168][ T6609] team0: Port device team_slave_0 added [ 142.034559][ T6609] team0: Port device team_slave_1 added [ 142.212737][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.247758][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.339964][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.405759][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.435200][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.584588][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.633345][ T6839] Illegal XDP return value 6839 on prog (id 90) dev N/A, expect packet loss! [ 142.894917][ T6609] hsr_slave_0: entered promiscuous mode [ 142.932856][ T6609] hsr_slave_1: entered promiscuous mode [ 142.956081][ T6853] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.039571][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.073799][ T6609] Cannot create hsr debugfs directory [ 143.846680][ T5160] IPVS: starting estimator thread 0... [ 143.987811][ T6892] IPVS: using max 16 ests per chain, 38400 per kthread [ 144.490306][ T6915] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 144.578428][ T6901] team0: Port device team_slave_0 removed [ 144.691377][ T6902] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 144.700360][ T6923] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 144.731310][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.758059][ T6905] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 144.877508][ T6915] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 144.896540][ T6916] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 145.036639][ T6932] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.149342][ T6919] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 145.212111][ T6932] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.243927][ T6935] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.303693][ T6921] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 145.501978][ T6936] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 145.548444][ T6945] vlan3: entered promiscuous mode [ 145.561246][ T6945] dummy0: entered promiscuous mode [ 145.999929][ T6945] dummy0: left promiscuous mode [ 146.077485][ T6938] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 146.179180][ T6959] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.466710][ T6609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.526279][ T6609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.570618][ T6609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.608131][ T6609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.977897][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.098682][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.207116][ T6609] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.271926][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.279232][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.339364][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.346636][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.168005][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.390320][ T6609] veth0_vlan: entered promiscuous mode [ 148.452189][ T6609] veth1_vlan: entered promiscuous mode [ 148.610388][ T6609] veth0_macvtap: entered promiscuous mode [ 148.644063][ T6609] veth1_macvtap: entered promiscuous mode [ 148.743478][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.791228][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.811573][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.823477][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.843480][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.872412][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.903453][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.930630][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.960755][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.998222][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.038703][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.080230][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.108461][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.135243][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.168026][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.189470][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.234560][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.273758][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.392995][ T6609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.446839][ T6609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.467300][ T6609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.485300][ T6609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.220834][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.241513][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.406743][ T2410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.439059][ T2410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.474128][ T7150] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.372020][ T7188] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.076103][ T7212] ªªªªªª: renamed from vlan0 (while UP) [ 153.110176][ T7215] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.382377][ T7227] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.415750][ T7276] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.893398][ T7291] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 154.910498][ T7292] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 154.950769][ T7291] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.956058][ T7292] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.128523][ T29] audit: type=1804 audit(1717952902.444:3): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2031200811/syzkaller.WyAiFh/189/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 155.223467][ T29] audit: type=1800 audit(1717952902.494:4): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1954 res=0 errno=0 [ 155.599720][ T7307] syz-executor.4[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.599899][ T7307] syz-executor.4[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.008408][ T7318] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.953470][ T7353] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 157.011891][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 157.085717][ T7353] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 157.150833][ T7360] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.604313][ T7377] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 157.615794][ T7377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.623489][ T7377] IPv6: NLM_F_CREATE should be set when creating new route [ 157.901649][ T7382] ªªªªªª: renamed from vlan0 (while UP) [ 157.922895][ T7390] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 157.962610][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.016239][ T7384] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(235062594279924) <= P.seqno(0) <= S.SWH(235062594279998)) and (P.ackno exists or LAWL(111429334982211) <= P.ackno(111429334982212) <= S.AWH(111429334982212), sending SYNC... [ 158.224168][ T7399] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 158.250587][ T7399] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.337383][ T7399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.372872][ T7399] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 158.454177][ T7412] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.868933][ T7421] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 159.083682][ T7427] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 160.964334][ T7518] tipc: Started in network mode [ 160.969479][ T7518] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 160.978408][ T7518] tipc: Enabled bearer , priority 0 [ 160.998426][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.019716][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.030533][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.067493][ T7518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.077860][ T7518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.119286][ T7518] tipc: Resetting bearer [ 161.185183][ T7518] tipc: Disabling bearer [ 161.282842][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.361311][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.431733][ T7526] dccp_invalid_packet: P.Data Offset(0) too small [ 161.441443][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 161.693954][ T7536] sctp: [Deprecated]: syz-executor.3 (pid 7536) Use of int in maxseg socket option. [ 161.693954][ T7536] Use struct sctp_assoc_value instead [ 162.602014][ T7563] dccp_invalid_packet: P.Data Offset(0) too small [ 163.183714][ T7582] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.236288][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.265922][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.277719][ T7585] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 163.328874][ T7585] team0: Port device dummy0 added [ 165.401644][ T7679] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 165.503698][ T7679] team0: Port device dummy0 added [ 165.520234][ T7683] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.561143][ T7683] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 166.696268][ T29] audit: type=1804 audit(1717952914.014:5): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1291943646/syzkaller.Abc1sh/216/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 166.886883][ T7728] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.019254][ T7728] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.168458][ T7728] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.233943][ T7743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.367572][ T7728] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.641868][ T7728] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.776961][ T7728] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.891705][ T7728] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.916465][ T7728] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.109673][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.238889][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.684988][ T7796] ipvlan2: entered promiscuous mode [ 168.711760][ T7796] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 168.886022][ T7804] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 169.293311][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.314134][ T7819] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.379161][ T7812] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 169.628818][ T7817] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 169.727385][ T7817] bond2 (unregistering): Released all slaves [ 170.321573][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 172.516443][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.305619][ T7971] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 174.343710][ T7971] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.368391][ T7971] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 174.579514][ T7985] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 174.604783][ T7985] team0: left allmulticast mode [ 174.642196][ T7985] team_slave_0: left allmulticast mode [ 174.676307][ T7985] team_slave_1: left allmulticast mode [ 174.704079][ T7985] team0: left promiscuous mode [ 174.745131][ T7985] team_slave_0: left promiscuous mode [ 174.770128][ T7985] team_slave_1: left promiscuous mode [ 174.783931][ T7985] bridge0: port 3(team0) entered disabled state [ 174.814881][ T7985] bridge_slave_1: left allmulticast mode [ 174.820592][ T7985] bridge_slave_1: left promiscuous mode [ 174.832059][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.850398][ T7985] bridge_slave_0: left allmulticast mode [ 174.858530][ T7985] bridge_slave_0: left promiscuous mode [ 174.870821][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.024394][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.212495][ T8008] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 175.344014][ T8008] bond1: entered promiscuous mode [ 175.349600][ T8008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.406929][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.502501][ T8014] bond1: left promiscuous mode [ 175.543977][ T8008] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.643155][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.659081][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.367859][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 177.038976][ T8090] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.268523][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 177.422194][ T8104] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 177.482423][ T8104] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 177.515589][ T8113] bridge0: port 3(vlan2) entered blocking state [ 177.530725][ T8113] bridge0: port 3(vlan2) entered disabled state [ 177.558241][ T8113] vlan2: entered allmulticast mode [ 177.566842][ T8113] vlan2: left allmulticast mode [ 177.584367][ T8111] vlan0: entered promiscuous mode [ 177.590004][ T8112] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 177.735956][ T8115] vlan0 (unregistering): left promiscuous mode [ 177.760905][ T8104] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 177.777117][ T8117] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 177.787913][ T8112] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 178.503977][ T8152] bridge0: port 3(vlan0) entered blocking state [ 178.510500][ T8152] bridge0: port 3(vlan0) entered disabled state [ 178.531345][ T8152] vlan0: entered allmulticast mode [ 178.612060][ T8152] vlan0: left allmulticast mode [ 178.708038][ T8151] vxcan2: entered promiscuous mode [ 178.715531][ T8151] vxcan2: entered allmulticast mode [ 180.760326][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.528620][ T8309] bond0: entered promiscuous mode [ 181.546329][ T8309] bond_slave_0: entered promiscuous mode [ 181.561762][ T8309] bond_slave_1: entered promiscuous mode [ 181.616311][ T8315] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.874872][ T8334] IPVS: Error joining to the multicast group [ 182.020395][ T8343] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 182.039117][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.046598][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.341718][ T8355] tipc: Enabled bearer , priority 10 [ 182.604561][ T8367] wg2: entered promiscuous mode [ 182.629058][ T8367] wg2: entered allmulticast mode [ 182.760345][ T8376] pim6reg1: entered promiscuous mode [ 182.798181][ T8376] pim6reg1: entered allmulticast mode [ 183.443898][ T5165] tipc: Node number set to 8432298 [ 183.495446][ T8409] wg2: entered promiscuous mode [ 183.517190][ T8409] wg2: entered allmulticast mode [ 183.798685][ T8422] can: request_module (can-proto-0) failed. [ 184.393283][ T8455] can: request_module (can-proto-0) failed. [ 184.774582][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.962760][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.095393][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.235149][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.302497][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.312654][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.323278][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.338781][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.347712][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.355585][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.485598][ T8498] team0: Device ip6_vti0 is of different type [ 186.504135][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.519531][ T12] bond_slave_0: left promiscuous mode [ 186.526318][ T12] bond_slave_0: left allmulticast mode [ 186.544313][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.563996][ T12] bond_slave_1: left promiscuous mode [ 186.572850][ T12] bond_slave_1: left allmulticast mode [ 186.585012][ T12] bond0 (unregistering): Released all slaves [ 186.608290][ T12] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 186.619068][ T12] bond1 (unregistering): Released all slaves [ 186.648341][ T8524] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.664675][ T8524] 0·: renamed from hsr0 (while UP) [ 186.696658][ T8524] 0·: entered allmulticast mode [ 186.701945][ T8524] hsr_slave_0: entered allmulticast mode [ 186.707783][ T8524] hsr_slave_1: entered allmulticast mode [ 186.715094][ T8524] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 186.777388][ T12] ɶƣ0GC¦: left promiscuous mode [ 186.920438][ T12] tipc: Disabling bearer [ 186.937672][ T12] tipc: Left network mode [ 187.429348][ T29] audit: type=1804 audit(1717952934.754:6): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1291943646/syzkaller.Abc1sh/292/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 187.460221][ T4488] Bluetooth: hci2: command tx timeout [ 187.470219][ T8566] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 187.491515][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 187.601304][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 188.061221][ T12] hsr_slave_0: left promiscuous mode [ 188.075734][ T12] hsr_slave_1: left promiscuous mode [ 188.094587][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.106260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.116057][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.126634][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.162205][ T12] veth1_macvtap: left promiscuous mode [ 188.168131][ T12] veth0_macvtap: left promiscuous mode [ 188.174317][ T12] veth1_vlan: left promiscuous mode [ 188.180369][ T12] veth0_vlan: left promiscuous mode [ 189.132820][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.152636][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.161712][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.196431][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.204567][ T5122] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.212818][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.384516][ T8600] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 189.527852][ T5122] Bluetooth: hci2: command tx timeout [ 189.540989][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.582780][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.010666][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.018358][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.025851][ T8489] bridge_slave_0: entered allmulticast mode [ 190.033762][ T8489] bridge_slave_0: entered promiscuous mode [ 190.064708][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.085896][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.111317][ T8489] bridge_slave_1: entered allmulticast mode [ 190.127144][ T8489] bridge_slave_1: entered promiscuous mode [ 190.265077][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.300384][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.539846][ T8489] team0: Port device team_slave_0 added [ 190.575972][ T8489] team0: Port device team_slave_1 added [ 190.699675][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.726895][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.754847][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.807365][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.815333][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.841834][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.025582][ T8489] hsr_slave_0: entered promiscuous mode [ 191.043957][ T8489] hsr_slave_1: entered promiscuous mode [ 191.101678][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.238510][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.281542][ T5122] Bluetooth: hci0: command tx timeout [ 191.441004][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.553486][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.601251][ T5122] Bluetooth: hci2: command tx timeout [ 191.627720][ T8655] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 191.678865][ T8655] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.696547][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.746602][ T8597] chnl_net:caif_netlink_parms(): no params data found [ 191.781829][ T8651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.788904][ T8651] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 191.800435][ T8651] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 191.844991][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.000464][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.015598][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.036653][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.059905][ T8666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.196080][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.221458][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.228794][ T8597] bridge_slave_0: entered allmulticast mode [ 192.245149][ T8597] bridge_slave_0: entered promiscuous mode [ 192.335727][ T8597] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.346306][ T8597] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.353913][ T8597] bridge_slave_1: entered allmulticast mode [ 192.369225][ T8597] bridge_slave_1: entered promiscuous mode [ 192.443399][ T12] bridge_slave_1: left allmulticast mode [ 192.455602][ T12] bridge_slave_1: left promiscuous mode [ 192.471836][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.488435][ T12] bridge_slave_0: left allmulticast mode [ 192.496659][ T12] bridge_slave_0: left promiscuous mode [ 192.505205][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.031561][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.045070][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.058131][ T12] bond0 (unregistering): Released all slaves [ 193.079234][ T8597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.097083][ T8689] vlan0: entered promiscuous mode [ 193.108493][ T8689] batman_adv: batadv0: Adding interface: vlan0 [ 193.115679][ T8689] batman_adv: batadv0: The MTU of interface vlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.146224][ T8689] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 193.167520][ T8688] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 193.231946][ T8688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.269505][ T8691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.289339][ T8691] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 193.304542][ T8691] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 193.356644][ T8597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.371352][ T5122] Bluetooth: hci0: command tx timeout [ 193.382547][ T12] ɶƣ0GC¦: left promiscuous mode [ 193.544901][ T12] tipc: Left network mode [ 193.576979][ T8597] team0: Port device team_slave_0 added [ 193.603662][ T8597] team0: Port device team_slave_1 added [ 193.678089][ T8489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.685072][ T4488] Bluetooth: hci2: command tx timeout [ 193.768017][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.791847][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.857961][ T8597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.893199][ T8489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.919754][ T8597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.932630][ T8597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.960251][ T8597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.080976][ T8489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.129637][ T8489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.646940][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.653434][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.441188][ T4488] Bluetooth: hci0: command tx timeout [ 197.521296][ T4488] Bluetooth: hci0: command tx timeout [ 212.101078][ T4488] Bluetooth: hci4: command 0x0405 tx timeout [ 224.849520][ T5122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.866535][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.874923][ T5122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.888029][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.908417][ T5122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.915884][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.961869][ T4488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.979609][ T4488] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.988517][ T4488] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.998912][ T4488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.007366][ T4488] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.021568][ T4488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.606102][ T5131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.620954][ T5131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.629564][ T5131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.639456][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.649163][ T5131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.656638][ T5131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.961345][ T5131] Bluetooth: hci5: command tx timeout [ 227.121381][ T5131] Bluetooth: hci6: command tx timeout [ 227.441316][ T5131] Bluetooth: hci1: command 0x0406 tx timeout [ 227.681297][ T4488] Bluetooth: hci7: command tx timeout [ 229.041305][ T4488] Bluetooth: hci5: command tx timeout [ 229.211118][ T4488] Bluetooth: hci6: command tx timeout [ 229.761174][ T4488] Bluetooth: hci7: command tx timeout [ 231.121269][ T4488] Bluetooth: hci5: command tx timeout [ 231.281318][ T4488] Bluetooth: hci6: command tx timeout [ 231.841178][ T4488] Bluetooth: hci7: command tx timeout [ 233.201484][ T4488] Bluetooth: hci5: command tx timeout [ 233.363812][ T4488] Bluetooth: hci6: command tx timeout [ 233.921274][ T4488] Bluetooth: hci7: command tx timeout [ 250.009832][ T5131] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 250.019942][ T5131] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 250.028394][ T5131] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 250.036962][ T5131] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 250.046170][ T5131] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 250.055070][ T5131] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 252.081213][ T4488] Bluetooth: hci8: command tx timeout [ 253.760829][ T5131] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 253.771450][ T5131] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 253.779431][ T5131] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 253.794069][ T5131] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 253.805657][ T5131] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 253.813283][ T5131] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 254.162028][ T4488] Bluetooth: hci8: command tx timeout [ 255.841263][ T4488] Bluetooth: hci9: command tx timeout [ 256.085870][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.092486][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.248084][ T4488] Bluetooth: hci8: command tx timeout [ 257.921323][ T4488] Bluetooth: hci9: command tx timeout [ 258.324792][ T4488] Bluetooth: hci8: command tx timeout [ 260.017142][ T4488] Bluetooth: hci9: command tx timeout [ 262.081169][ T4488] Bluetooth: hci9: command tx timeout [ 289.993987][ T5122] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 289.997983][ T5123] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 290.011373][ T5122] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 290.011850][ T5123] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 290.026406][ T5122] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 290.039763][ T5123] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 290.049082][ T5123] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 290.061148][ T5123] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 290.061796][ T5122] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 290.076567][ T5123] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 290.076993][ T5122] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 290.091478][ T5122] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 290.588684][ T5122] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 290.599203][ T5122] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 290.614851][ T5122] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 290.623338][ T5122] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 290.636784][ T5122] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 290.644701][ T5122] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 292.161212][ T5122] Bluetooth: hci11: command tx timeout [ 292.161370][ T5131] Bluetooth: hci10: command tx timeout [ 292.721397][ T5131] Bluetooth: hci12: command tx timeout [ 294.001116][ T5131] Bluetooth: hci3: command 0x0405 tx timeout [ 294.241353][ T4488] Bluetooth: hci11: command tx timeout [ 294.241363][ T5131] Bluetooth: hci10: command tx timeout [ 294.811241][ T4488] Bluetooth: hci12: command tx timeout [ 296.321124][ T4488] Bluetooth: hci11: command tx timeout [ 296.321293][ T5131] Bluetooth: hci10: command tx timeout [ 296.881187][ T5131] Bluetooth: hci12: command tx timeout [ 298.401258][ T5131] Bluetooth: hci11: command tx timeout [ 298.403374][ T4488] Bluetooth: hci10: command tx timeout [ 298.961719][ T4488] Bluetooth: hci12: command tx timeout [ 309.361241][ T5131] Bluetooth: hci2: command 0x0406 tx timeout [ 314.486871][ T4488] Bluetooth: hci0: command 0x0406 tx timeout [ 315.186944][ T4488] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 315.199727][ T4488] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 315.208207][ T4488] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 315.222537][ T4488] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 315.232417][ T4488] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 315.239961][ T4488] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 317.281712][ T4488] Bluetooth: hci13: command tx timeout [ 317.528046][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540495][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.787411][ T5131] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 318.796752][ T5131] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 318.804838][ T5131] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 318.813697][ T5131] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 318.822320][ T5131] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 318.829823][ T5131] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 319.361437][ T5131] Bluetooth: hci13: command tx timeout [ 320.891263][ T5131] Bluetooth: hci14: command tx timeout [ 321.451429][ T5131] Bluetooth: hci13: command tx timeout [ 322.961277][ T5131] Bluetooth: hci14: command tx timeout [ 323.521325][ T5131] Bluetooth: hci13: command tx timeout [ 325.051351][ T5131] Bluetooth: hci14: command tx timeout [ 327.121269][ T5131] Bluetooth: hci14: command tx timeout [ 350.331448][ T5118] Bluetooth: hci6: command 0x0406 tx timeout [ 350.337602][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 350.341320][ T5123] Bluetooth: hci5: command 0x0406 tx timeout [ 355.078338][ T5131] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 355.095929][ T5122] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 355.096642][ T5123] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 355.104443][ T5122] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 355.113141][ T5123] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 355.121160][ T5122] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 355.127060][ T5123] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 355.134046][ T5122] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 355.141505][ T5123] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 355.147303][ T5122] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 355.155387][ T5123] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 355.168446][ T5123] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 355.715780][ T4488] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 355.729544][ T4488] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 355.738333][ T4488] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 355.747016][ T4488] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 355.755680][ T4488] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 355.763262][ T4488] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 356.561284][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 356.568973][ T30] Not tainted 6.10.0-rc2-syzkaller-00229-g0579f2724904 #0 [ 356.581723][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.590435][ T30] task:kworker/u8:1 state:D stack:21968 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 356.601205][ T30] Workqueue: netns cleanup_net [ 356.606059][ T30] Call Trace: 2024/06/09 17:11:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 356.609352][ T30] [ 356.660412][ T30] __schedule+0x17e8/0x4a20 [ 356.669515][ T30] ? __pfx___schedule+0x10/0x10 [ 356.681031][ T30] ? __pfx_lock_release+0x10/0x10 [ 356.686113][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 356.701865][ T30] ? kthread_data+0x52/0xd0 [ 356.706425][ T30] ? schedule+0x90/0x320 [ 356.710705][ T30] ? wq_worker_sleeping+0x66/0x240 [ 356.731021][ T30] ? schedule+0x90/0x320 [ 356.735412][ T30] schedule+0x14b/0x320 [ 356.739604][ T30] schedule_preempt_disabled+0x13/0x30 [ 356.760996][ T30] __mutex_lock+0x6a4/0xd70 [ 356.765574][ T30] ? __mutex_lock+0x527/0xd70 [ 356.770277][ T30] ? wiphy_unregister+0x236/0xaa0 [ 356.791024][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 356.796113][ T30] ? __up_read+0x2c2/0x6b0 [ 356.811146][ T30] ? __pfx___up_read+0x10/0x10 [ 356.820511][ T30] wiphy_unregister+0x236/0xaa0 [ 356.825481][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 356.840604][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 356.851162][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 356.856860][ T30] ? kfree+0x149/0x360 [ 356.868104][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 356.874448][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 356.880065][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 356.891490][ T30] hwsim_exit_net+0x5c1/0x670 [ 356.896219][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 356.906593][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 356.912939][ T30] cleanup_net+0x802/0xcc0 [ 356.917424][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 356.928787][ T30] ? process_scheduled_works+0x945/0x1830 [ 356.935057][ T30] process_scheduled_works+0xa2c/0x1830 [ 356.940682][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 356.951970][ T30] ? assign_work+0x364/0x3d0 [ 356.956622][ T30] worker_thread+0x86d/0xd70 [ 356.971031][ T30] ? __kthread_parkme+0x169/0x1d0 [ 356.976122][ T30] ? __pfx_worker_thread+0x10/0x10 [ 356.987410][ T30] kthread+0x2f0/0x390 [ 356.991987][ T30] ? __pfx_worker_thread+0x10/0x10 [ 356.997140][ T30] ? __pfx_kthread+0x10/0x10 [ 357.008245][ T30] ret_from_fork+0x4b/0x80 [ 357.013045][ T30] ? __pfx_kthread+0x10/0x10 [ 357.017687][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.023068][ T30] [ 357.026145][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 357.043098][ T30] Not tainted 6.10.0-rc2-syzkaller-00229-g0579f2724904 #0 [ 357.050816][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.067466][ T30] task:kworker/1:0 state:D stack:23248 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 357.089289][ T30] Workqueue: events linkwatch_event [ 357.094993][ T30] Call Trace: [ 357.098306][ T30] [ 357.107587][ T30] __schedule+0x17e8/0x4a20 [ 357.112476][ T30] ? __pfx___schedule+0x10/0x10 [ 357.117369][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.124181][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.129251][ T30] ? kick_pool+0x45c/0x620 [ 357.141389][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 357.146812][ T30] ? schedule+0x90/0x320 [ 357.158312][ T30] schedule+0x14b/0x320 [ 357.162880][ T30] schedule_preempt_disabled+0x13/0x30 [ 357.168379][ T30] __mutex_lock+0x6a4/0xd70 [ 357.179427][ T30] ? __mutex_lock+0x527/0xd70 [ 357.186870][ T30] ? linkwatch_event+0xe/0x60 [ 357.192227][ T3