last executing test programs: 1m30.218481539s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 1m17.559529223s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 1m4.414542464s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 53.735261439s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 44.111769147s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 33.457770643s ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 31.683290147s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 31.435738656s ago: executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) 31.267533938s ago: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000002060103000000000000000000000000050001000700000005"], 0x54}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) 31.189160556s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e0001000000cce8000700d457000057"], 0x24}}, 0x0) 31.128033427s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe80, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d}, 0x28) 31.038798992s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000240000000080800014000000000050003eaffffff000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 30.993815047s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0xc, &(0x7f0000000dc0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 30.911239115s ago: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) 30.894392226s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x0}) 30.810419036s ago: executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) 30.734271748s ago: executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mem_connect\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.72198527s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.550998648s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x89}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 30.47554341s ago: executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000002060103000000000000000000000000050001000700000005"], 0x54}}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) 30.389494217s ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x8a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x0, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x28, 0x107, 0x0, 0x0, {0x8}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}]}, 0x24}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 30.256178497s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 30.175421605s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000240000000080800014000000000050003eaffffff000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 30.125614731s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 30.078427483s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x8, 0xc, &(0x7f0000000dc0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 30.036767134s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000018}) epoll_wait(r2, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r2, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b1, &(0x7f0000000040)={'bond0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000290000003e0000000000000000000000180000000000ca002900001e390000000000000000000000270dd24e31670306e02733a73ed20f5121fb9e7e040e5f1aa2eaa42c4a8e5243e05612dd86862e7cf0a03dd4bec41c3139522fc0de5138c9d105472c4c082eb0a03e21198b949bfef1412a760000000000000000000000000000f62d15595d6f005eef43ec27fbc175f8faee009fa82e52dc4dd56340bc935654a5bd649a1295567ebc369435b973343c4193580ebc639508348a1b174d07f0dce935813d4f3f39736a40f5528b9e56195904dcb8a3b4bb2f5e4a0b"], 0x28}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2000000}, 0x10}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) sendfile(r5, r6, &(0x7f0000000180)=0x7, 0xffff) write$binfmt_misc(r4, &(0x7f0000000400)={'syz1'}, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f00000014c0), &(0x7f0000001500)=0x4) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r10, @rand_addr=0x64010100}, 0x10) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev, @dev}, 0x10) write$binfmt_elf64(r5, &(0x7f0000003380)=ANY=[], 0x18c6) 682.699826ms ago: executing program 0: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 660.075338ms ago: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) 357.438247ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 0s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000440)='GPL\x00', 0x8, 0x54, &(0x7f0000000480)=""/84}, 0x90) kernel console output (not intermixed with test programs): 0 [ 63.064355][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.077010][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.161456][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.174915][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.206808][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.226698][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.240034][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.263854][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.283188][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.294367][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.307238][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.371182][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.393571][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.410481][ T5117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.431486][ T5117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.443973][ T5117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.453943][ T5117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.494904][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.513979][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.600501][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.609506][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.643160][ T2467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.664823][ T2467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.705842][ T5213] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.754225][ T2467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.778379][ T2467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.918946][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.945041][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.046006][ T957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.097313][ T957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.796692][ T5111] Bluetooth: hci0: command tx timeout [ 64.876869][ T5111] Bluetooth: hci2: command tx timeout [ 64.882309][ T5111] Bluetooth: hci4: command tx timeout [ 64.887921][ T53] Bluetooth: hci3: command tx timeout [ 64.888212][ T5119] Bluetooth: hci1: command tx timeout [ 64.988071][ T5259] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 64.996197][ T5259] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 65.061343][ T5259] net_ratelimit: 2 callbacks suppressed [ 65.061361][ T5259] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 66.006982][ T5315] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 66.027080][ T5315] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 66.040103][ T5314] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 66.048676][ T5315] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.177915][ T5320] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 66.758312][ T5354] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.805979][ T5354] hsr0: entered promiscuous mode [ 66.849340][ T5354] hsr0: left promiscuous mode [ 66.875558][ T5358] sctp: [Deprecated]: syz-executor.4 (pid 5358) Use of int in maxseg socket option. [ 66.875558][ T5358] Use struct sctp_assoc_value instead [ 67.335513][ T5390] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 67.369135][ T5390] macsec1: entered promiscuous mode [ 67.374656][ T5390] macsec1: entered allmulticast mode [ 67.386519][ T5390] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 67.407324][ T5390] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 67.416840][ T5390] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 67.852850][ T5420] macsec1: entered promiscuous mode [ 67.896536][ T5420] macvlan0: entered promiscuous mode [ 67.922710][ T5420] macvlan0: left promiscuous mode [ 67.968860][ T5430] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.984508][ T5430] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.000461][ T5430] Zero length message leads to an empty skb [ 68.013645][ T5423] tap0: tun_chr_ioctl cmd 1074025675 [ 68.030146][ T5423] tap0: persist enabled [ 68.047457][ T5423] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 68.060114][ T5423] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 68.342895][ T5456] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 68.363317][ T5456] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.379007][ T5456] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 68.404287][ T5456] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 68.418426][ T5456] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.421165][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.433652][ T5458] hsr0: entered promiscuous mode [ 68.457763][ T5458] hsr0: left promiscuous mode [ 68.498770][ T5465] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.504889][ T5463] macsec1: entered promiscuous mode [ 68.514009][ T5465] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 68.522752][ T5463] macvlan0: entered promiscuous mode [ 68.531664][ T5463] macvlan0: left promiscuous mode [ 68.790461][ T5477] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.978482][ T5483] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 69.015557][ T5485] Cannot find set identified by id 0 to match [ 69.023720][ T5483] macsec1: entered promiscuous mode [ 69.038654][ T5483] macsec1: entered allmulticast mode [ 69.059996][ T5483] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 69.112869][ T5483] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 69.123271][ T5483] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 69.183425][ T5492] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 69.233741][ T5496] macsec1: entered promiscuous mode [ 69.259708][ T5496] macvlan0: entered promiscuous mode [ 69.304070][ T5496] macvlan0: left promiscuous mode [ 69.895053][ T5536] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 70.671998][ T5567] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.888929][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.221098][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.235569][ T5599] validate_nla: 2 callbacks suppressed [ 71.235587][ T5599] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 71.681734][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.688947][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.184754][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.090383][ T5714] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 73.729011][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.773658][ T5757] team0: Port device batadv0 added [ 73.870964][ T5764] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 74.008774][ T5771] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.122534][ T5775] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.411241][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.441076][ T5794] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 74.690681][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.838621][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.856472][ T5817] netlink: 896 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.856641][ T5820] x_tables: unsorted entry at hook 1 [ 74.865910][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.906999][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.939002][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.979117][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.299847][ T5847] x_tables: unsorted entry at hook 1 [ 76.801225][ T45] cfg80211: failed to load regulatory.db [ 78.714241][ T6062] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 78.818159][ T6067] bond0: entered promiscuous mode [ 78.829407][ T6067] bond_slave_0: entered promiscuous mode [ 78.845540][ T6067] bond_slave_1: entered promiscuous mode [ 78.864175][ T6067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.873425][ T6067] bond0: left promiscuous mode [ 78.885504][ T6067] bond_slave_0: left promiscuous mode [ 78.895799][ T6067] bond_slave_1: left promiscuous mode [ 79.180934][ T6085] atomic_op ffff8880600b9998 conn xmit_atomic 0000000000000000 [ 79.633071][ T6110] __nla_validate_parse: 13 callbacks suppressed [ 79.633090][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.759019][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.922262][ T6129] atomic_op ffff88802c91b998 conn xmit_atomic 0000000000000000 [ 80.186703][ T6145] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 80.301244][ T957] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 80.362884][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 80.496858][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 80.875614][ T6186] lo speed is unknown, defaulting to 1000 [ 80.914011][ T6186] lo speed is unknown, defaulting to 1000 [ 80.922194][ T6186] lo speed is unknown, defaulting to 1000 [ 80.973568][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.053906][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.171251][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.342766][ T5162] lo speed is unknown, defaulting to 1000 [ 81.349393][ T6186] infiniband syz0: set active [ 81.354526][ T6186] infiniband syz0: added lo [ 81.431693][ T6186] RDS/IB: syz0: added [ 81.447957][ T6186] smc: adding ib device syz0 with port count 1 [ 81.454323][ T6186] smc: ib device syz0 port 1 has pnetid [ 81.463040][ T5162] lo speed is unknown, defaulting to 1000 [ 81.473525][ T6186] lo speed is unknown, defaulting to 1000 [ 81.548153][ T6215] syz-executor.4[6215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.548402][ T6215] syz-executor.4[6215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.984681][ T6233] pim6reg: entered allmulticast mode [ 82.072653][ T6186] lo speed is unknown, defaulting to 1000 [ 82.102340][ T6233] pim6reg: left allmulticast mode [ 82.286043][ T6246] bond0: entered promiscuous mode [ 82.326332][ T6246] bond_slave_0: entered promiscuous mode [ 82.340535][ T6246] bond_slave_1: entered promiscuous mode [ 82.361656][ T6246] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 82.420498][ T6246] bond0: left promiscuous mode [ 82.450824][ T6246] bond_slave_0: left promiscuous mode [ 82.472398][ T6246] bond_slave_1: left promiscuous mode [ 82.539489][ T6186] lo speed is unknown, defaulting to 1000 [ 82.551730][ T6258] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 82.621625][ T6262] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 82.923963][ T6273] syz-executor.1[6273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.924214][ T6273] syz-executor.1[6273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.951249][ T6186] lo speed is unknown, defaulting to 1000 [ 83.414984][ T6186] lo speed is unknown, defaulting to 1000 [ 83.501854][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.535723][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.872786][ T6329] macsec1: entered promiscuous mode [ 83.885551][ T6329] macvlan1: entered promiscuous mode [ 83.894066][ T6329] macsec1: entered allmulticast mode [ 83.900079][ T6329] macvlan1: entered allmulticast mode [ 83.906237][ T6329] veth1_vlan: entered allmulticast mode [ 83.914557][ T6329] macvlan1: left allmulticast mode [ 83.922017][ T6329] veth1_vlan: left allmulticast mode [ 83.935475][ T6329] macvlan1: left promiscuous mode [ 84.524413][ T6371] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.903455][ T6396] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 84.916499][ T6396] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 84.944808][ T6396] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 84.994272][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.025181][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.325089][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.677503][ T6440] macsec1: entered promiscuous mode [ 85.696007][ T6440] macvlan1: entered promiscuous mode [ 85.720799][ T6440] macsec1: entered allmulticast mode [ 85.736675][ T6440] macvlan1: entered allmulticast mode [ 85.747959][ T6440] veth1_vlan: entered allmulticast mode [ 85.771384][ T6448] SET target dimension over the limit! [ 85.778427][ T6440] macvlan1: left allmulticast mode [ 85.795346][ T6440] veth1_vlan: left allmulticast mode [ 85.808882][ T6440] macvlan1: left promiscuous mode [ 86.049486][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.149077][ T6471] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 86.265679][ T6478] pim6reg: entered allmulticast mode [ 86.291627][ T6479] veth0_vlan: entered allmulticast mode [ 86.398163][ T6487] macsec1: entered promiscuous mode [ 86.415732][ T6487] macvlan1: entered promiscuous mode [ 86.425234][ T6487] macsec1: entered allmulticast mode [ 86.440521][ T6487] macvlan1: entered allmulticast mode [ 86.450596][ T6487] veth1_vlan: entered allmulticast mode [ 86.475007][ T6487] macvlan1: left allmulticast mode [ 86.502976][ T6487] veth1_vlan: left allmulticast mode [ 86.516551][ T6487] macvlan1: left promiscuous mode [ 86.553402][ T6485] pim6reg: left allmulticast mode [ 86.642595][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.754361][ T6504] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 87.117236][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.220638][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.235092][ T6534] SET target dimension over the limit! [ 87.255111][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.789484][ T6581] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 88.070325][ T29] audit: type=1804 audit(1718226676.575:2): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3693989458/syzkaller.zmAK4H/139/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 88.411400][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.748910][ T29] audit: type=1804 audit(1718226677.255:3): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir738221696/syzkaller.FcleUS/96/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 88.974137][ T6655] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 89.442795][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.583681][ T6704] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 89.873685][ T6724] sctp: [Deprecated]: syz-executor.0 (pid 6724) Use of int in maxseg socket option. [ 89.873685][ T6724] Use struct sctp_assoc_value instead [ 90.083315][ T6736] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.123571][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.181606][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.379217][ T29] audit: type=1804 audit(1718226678.885:4): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir738221696/syzkaller.FcleUS/100/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 90.437258][ T6765] __nla_validate_parse: 1 callbacks suppressed [ 90.437279][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.175566][ T29] audit: type=1804 audit(1718226679.675:5): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir738221696/syzkaller.FcleUS/104/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 91.480389][ T6813] sctp: [Deprecated]: syz-executor.2 (pid 6813) Use of int in maxseg socket option. [ 91.480389][ T6813] Use struct sctp_assoc_value instead [ 91.513070][ T6814] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.462587][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.547772][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e1b2c00: rx timeout, send abort [ 92.557683][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807e1b2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.600615][ T6847] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 92.719800][ T6847] infiniband syz0: set down [ 92.779849][ T933] lo speed is unknown, defaulting to 1000 [ 92.837241][ T5162] lo speed is unknown, defaulting to 1000 [ 93.025589][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.079786][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.087412][ T6862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.113046][ T6862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.154621][ T6862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.459026][ T6885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.477920][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.000542][ T6908] Bluetooth: MGMT ver 1.22 [ 94.388469][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.510862][ T6921] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.520259][ T6921] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.529043][ T6921] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.537828][ T6921] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.623733][ T6921] vxlan0: entered promiscuous mode [ 94.927420][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880798e7400: rx timeout, send abort [ 94.935932][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880798e7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.274663][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.409254][ T6948] geneve2: entered promiscuous mode [ 95.427189][ T6948] geneve2: entered allmulticast mode [ 95.977290][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.039483][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.074555][ T6983] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.083432][ T6983] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.092204][ T6983] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.100970][ T6983] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.136697][ T6983] vxlan0: entered promiscuous mode [ 96.354578][ T6995] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 97.077382][ T7032] tun0: tun_chr_ioctl cmd 35108 [ 98.166710][ T7078] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 98.280962][ T7086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.288653][ T7086] IPv6: NLM_F_CREATE should be set when creating new route [ 98.295927][ T7086] IPv6: NLM_F_CREATE should be set when creating new route [ 98.637548][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.675385][ T7101] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.053869][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.196196][ T7123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.470798][ T7133] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.710617][ T7143] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 99.722577][ T7143] geneve0: entered promiscuous mode [ 99.752119][ T7143] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 99.786586][ T7146] geneve2: entered promiscuous mode [ 99.792479][ T7146] geneve2: entered allmulticast mode [ 99.946264][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.368401][ T7169] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.753838][ T7181] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 100.772718][ T7181] netlink: 201372 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.467447][ T7234] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.492245][ T2467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.503130][ T7234] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 101.667568][ T7244] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 101.691202][ T2467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.742838][ T7246] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 101.769561][ T7246] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.783186][ T7248] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 101.900949][ T2467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.101220][ T2467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.157281][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.295919][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.312354][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.324593][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.339050][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.350176][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.363061][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.389569][ T7279] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 102.475004][ T7283] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 102.591464][ T7278] lo speed is unknown, defaulting to 1000 [ 102.615513][ T2467] bridge_slave_1: left allmulticast mode [ 102.631833][ T2467] bridge_slave_1: left promiscuous mode [ 102.654608][ T2467] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.697401][ T2467] bridge_slave_0: left allmulticast mode [ 102.714511][ T2467] bridge_slave_0: left promiscuous mode [ 102.722724][ T7300] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 102.731096][ T2467] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.746563][ T7300] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.769528][ T7300] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.120026][ T2467] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 103.262024][ T2467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.275599][ T2467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.286228][ T2467] bond0 (unregistering): Released all slaves [ 103.305714][ T7306] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 103.314276][ T7306] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.422955][ T7317] pim6reg1: entered promiscuous mode [ 103.436215][ T7317] pim6reg1: entered allmulticast mode [ 103.582513][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.742272][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.060307][ T2467] hsr_slave_0: left promiscuous mode [ 104.125227][ T2467] hsr_slave_1: left promiscuous mode [ 104.133804][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.156945][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.182178][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.205640][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.250938][ T2467] veth1_macvtap: left promiscuous mode [ 104.261007][ T2467] veth0_macvtap: left promiscuous mode [ 104.268709][ T2467] veth1_vlan: left promiscuous mode [ 104.344283][ T29] audit: type=1804 audit(1718226692.845:6): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir64105471/syzkaller.USpWGS/186/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 104.396800][ T5119] Bluetooth: hci0: command tx timeout [ 104.439343][ T7374] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 104.447962][ T7374] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 104.456186][ T7374] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.894173][ T2467] team0 (unregistering): Port device team_slave_1 removed [ 104.938795][ T7390] Bluetooth: MGMT ver 1.22 [ 104.950714][ T2467] team0 (unregistering): Port device team_slave_0 removed [ 105.254614][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.271362][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.492799][ T7278] chnl_net:caif_netlink_parms(): no params data found [ 105.622994][ T7405] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 105.751463][ T7278] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.774984][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.798026][ T7278] bridge_slave_0: entered allmulticast mode [ 105.808104][ T7278] bridge_slave_0: entered promiscuous mode [ 105.822300][ T7278] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.829696][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.842638][ T7278] bridge_slave_1: entered allmulticast mode [ 105.850025][ T7278] bridge_slave_1: entered promiscuous mode [ 105.929417][ T7278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.963516][ T7278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.031778][ T7429] sit0: entered promiscuous mode [ 106.060919][ T7429] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 106.200729][ T7278] team0: Port device team_slave_0 added [ 106.222631][ T7278] team0: Port device team_slave_1 added [ 106.277703][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.293546][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.325341][ T7278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.377275][ T7278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.384328][ T7278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.412072][ T7278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.476610][ T5119] Bluetooth: hci0: command tx timeout [ 106.488200][ T7455] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 106.503726][ T7278] hsr_slave_0: entered promiscuous mode [ 106.513471][ T7278] hsr_slave_1: entered promiscuous mode [ 106.520625][ T7278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.531093][ T7278] Cannot create hsr debugfs directory [ 106.863531][ T7474] __nla_validate_parse: 1 callbacks suppressed [ 106.863551][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.938085][ T7476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.079140][ T7278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.094084][ T7278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.118893][ T7278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.151445][ T7278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.328622][ T7278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.382499][ T7278] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.402737][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.409957][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.431437][ T7499] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.456681][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.463926][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.479160][ T7500] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 107.494265][ T7500] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.520376][ T7500] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 107.554852][ T7504] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 107.573895][ T7278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.879395][ T7523] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 107.908976][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.926270][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b79c800: rx timeout, send abort [ 107.933198][ T7278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.939201][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b79ec00: rx timeout, send abort [ 107.973264][ T7531] bridge0: entered promiscuous mode [ 107.987147][ T7531] vlan2: entered promiscuous mode [ 107.997352][ T7531] vlan2: entered allmulticast mode [ 108.002510][ T7531] bridge0: entered allmulticast mode [ 108.027248][ T7531] bridge0: left allmulticast mode [ 108.036818][ T7531] bridge0: left promiscuous mode [ 108.157979][ T7278] veth0_vlan: entered promiscuous mode [ 108.193179][ T7278] veth1_vlan: entered promiscuous mode [ 108.290253][ T7278] veth0_macvtap: entered promiscuous mode [ 108.324703][ T7278] veth1_macvtap: entered promiscuous mode [ 108.373995][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.399403][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.420312][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.434454][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.434652][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b79c800: abort rx timeout. Force session deactivation [ 108.456902][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b79ec00: abort rx timeout. Force session deactivation [ 108.490939][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.522509][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.551619][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.566828][ T5119] Bluetooth: hci0: command tx timeout [ 108.577400][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.634615][ T7278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.672747][ T7278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.720238][ T7278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.761370][ T7278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.790456][ T7278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.825600][ T7278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.834659][ T7278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.012271][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.043984][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.108160][ T7591] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 109.133496][ T7591] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.143160][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.166325][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.185544][ T7591] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 109.358035][ T7601] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.691504][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.736961][ T7625] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 109.754141][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.911435][ T7626] bridge0: entered promiscuous mode [ 109.944066][ T7626] vlan2: entered promiscuous mode [ 109.970082][ T7626] vlan2: entered allmulticast mode [ 109.975238][ T7626] bridge0: entered allmulticast mode [ 109.999969][ T7626] bridge0: left allmulticast mode [ 110.013122][ T7626] bridge0: left promiscuous mode [ 110.060037][ T7628] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 111.438227][ T7699] batadv0: entered promiscuous mode [ 111.449839][ T7699] batadv_slave_0: entered promiscuous mode [ 111.457756][ T7699] batadv_slave_0: left promiscuous mode [ 111.464759][ T7699] batadv0: left promiscuous mode [ 112.072453][ T957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.577899][ T7739] batadv0: entered promiscuous mode [ 112.597045][ T7739] batadv0: left promiscuous mode [ 112.803466][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.813155][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.825062][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.834412][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.842775][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.856814][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.907983][ T7744] lo speed is unknown, defaulting to 1000 [ 113.245236][ T957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.393284][ T957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.524010][ T957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.658713][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 113.865402][ T957] bridge_slave_1: left allmulticast mode [ 113.886599][ T957] bridge_slave_1: left promiscuous mode [ 113.916304][ T7808] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 113.916314][ T957] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.987817][ T957] bridge_slave_0: left allmulticast mode [ 113.993502][ T957] bridge_slave_0: left promiscuous mode [ 114.011870][ T957] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.399334][ T957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.413264][ T957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.427554][ T957] bond0 (unregistering): Released all slaves [ 114.454336][ T7820] __nla_validate_parse: 1 callbacks suppressed [ 114.454355][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.470220][ T7820] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 114.673107][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.681404][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.697605][ T7744] bridge_slave_0: entered allmulticast mode [ 114.704452][ T7744] bridge_slave_0: entered promiscuous mode [ 114.761742][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.775047][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.797058][ T7744] bridge_slave_1: entered allmulticast mode [ 114.816945][ T7744] bridge_slave_1: entered promiscuous mode [ 114.959955][ T5119] Bluetooth: hci0: command tx timeout [ 115.028217][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.202672][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.397204][ T957] hsr_slave_0: left promiscuous mode [ 115.416566][ T957] hsr_slave_1: left promiscuous mode [ 115.440171][ T957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.457918][ T957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.483866][ T957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.507236][ T957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.555752][ T957] veth1_macvtap: left promiscuous mode [ 115.566571][ T957] veth0_macvtap: left promiscuous mode [ 115.582885][ T957] veth1_vlan: left promiscuous mode [ 115.597529][ T957] veth0_vlan: left promiscuous mode [ 115.620351][ T7878] IPVS: Scheduler module ip_vs_sip not found [ 116.203700][ T957] team0 (unregistering): Port device team_slave_1 removed [ 116.236207][ T957] team0 (unregistering): Port device team_slave_0 removed [ 116.546557][ T7744] team0: Port device team_slave_0 added [ 116.555109][ T7744] team0: Port device team_slave_1 added [ 116.691380][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.715035][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.776507][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.807433][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.834955][ T7918] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 116.834953][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.834978][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.855553][ T7918] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.037064][ T5119] Bluetooth: hci0: command tx timeout [ 117.061678][ T7744] hsr_slave_0: entered promiscuous mode [ 117.090674][ T7744] hsr_slave_1: entered promiscuous mode [ 117.100300][ T7744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.108006][ T7744] Cannot create hsr debugfs directory [ 117.425090][ T7955] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.434756][ T7955] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.720490][ T7974] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 117.861505][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.929932][ T7744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.940455][ T7744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.957296][ T7744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.973434][ T7744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.221480][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.278868][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.319806][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.327013][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.361641][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.392670][ T8001] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 118.419603][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.426826][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.749836][ T8025] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 118.902620][ T8030] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 118.905803][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.922828][ T8030] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.001167][ T7744] veth0_vlan: entered promiscuous mode [ 119.018440][ T7744] veth1_vlan: entered promiscuous mode [ 119.108525][ T7744] veth0_macvtap: entered promiscuous mode [ 119.117709][ T5119] Bluetooth: hci0: command tx timeout [ 119.137847][ T7744] veth1_macvtap: entered promiscuous mode [ 119.204760][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.245042][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.274593][ T8042] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 119.299173][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.340793][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.364341][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.374481][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.385266][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.397038][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.413021][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.442397][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.473273][ T7744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.495106][ T7744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.512471][ T7744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.540674][ T7744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.567433][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.725449][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.745833][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.785151][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.799130][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.572689][ T8172] netlink: 65051 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.096707][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.452550][ T8209] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.679391][ T8209] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.934535][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.968607][ T8224] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 123.001593][ T8224] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.582770][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.592131][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.600742][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.609538][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.621494][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.629319][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.692868][ T8252] lo speed is unknown, defaulting to 1000 [ 123.953621][ T8270] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 124.184638][ T8252] chnl_net:caif_netlink_parms(): no params data found [ 124.499539][ T8299] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 124.518080][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.544991][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.559250][ T8252] bridge_slave_0: entered allmulticast mode [ 124.583950][ T8252] bridge_slave_0: entered promiscuous mode [ 124.609324][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.627608][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.642027][ T8252] bridge_slave_1: entered allmulticast mode [ 124.657453][ T8252] bridge_slave_1: entered promiscuous mode [ 124.677322][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.808416][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.873244][ T8322] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 124.875136][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.982866][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.022770][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.078213][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.163777][ T8252] team0: Port device team_slave_0 added [ 125.185310][ T8252] team0: Port device team_slave_1 added [ 125.200952][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.222919][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.235760][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.355591][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.363212][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.396811][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.427879][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.435846][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.514238][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.520087][ T8353] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 125.534698][ T11] bridge_slave_1: left allmulticast mode [ 125.541219][ T11] bridge_slave_1: left promiscuous mode [ 125.563520][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.600383][ T11] bridge_slave_0: left allmulticast mode [ 125.607341][ T11] bridge_slave_0: left promiscuous mode [ 125.619947][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.676968][ T5111] Bluetooth: hci0: command tx timeout [ 126.021030][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.033798][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.044332][ T11] bond0 (unregistering): Released all slaves [ 126.200954][ T8374] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.255017][ T8374] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.311441][ T8252] hsr_slave_0: entered promiscuous mode [ 126.348262][ T8252] hsr_slave_1: entered promiscuous mode [ 126.356065][ T8252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.369570][ T8252] Cannot create hsr debugfs directory [ 126.906229][ T11] hsr_slave_0: left promiscuous mode [ 126.914242][ T11] hsr_slave_1: left promiscuous mode [ 126.924201][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.935915][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.960836][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.981125][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.017807][ T11] veth1_macvtap: left promiscuous mode [ 127.023334][ T11] veth0_macvtap: left promiscuous mode [ 127.030902][ T11] veth1_vlan: left promiscuous mode [ 127.036583][ T11] veth0_vlan: left promiscuous mode [ 127.759418][ T5111] Bluetooth: hci0: command tx timeout [ 127.821339][ T11] team0 (unregistering): Port device team_slave_1 removed [ 127.860885][ T11] team0 (unregistering): Port device team_slave_0 removed [ 128.769113][ T8252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.799367][ T8252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.835655][ T8252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.864579][ T8252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.115497][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.184869][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.225621][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.232796][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.273011][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.280180][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.304879][ T8470] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 129.314514][ T8470] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.361688][ T8252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.378237][ T8470] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 129.387552][ T8252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.585120][ T8487] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.629560][ T8487] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.792982][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.848826][ T5111] Bluetooth: hci0: command tx timeout [ 129.900851][ T8252] veth0_vlan: entered promiscuous mode [ 129.936000][ T8252] veth1_vlan: entered promiscuous mode [ 130.027656][ T8252] veth0_macvtap: entered promiscuous mode [ 130.048743][ T8252] veth1_macvtap: entered promiscuous mode [ 130.073860][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.084752][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.097022][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.120330][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.136523][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.153539][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.173516][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.185967][ T8252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.215770][ T8252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.252006][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.274275][ T8252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.284535][ T8252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.296528][ T8252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.314371][ T8252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.501772][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.519488][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.585559][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.615175][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.943644][ T8598] xt_CT: No such helper "syz1" [ 132.537997][ T8640] xt_CT: No such helper "syz1" [ 132.563372][ T8643] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 132.584041][ T8643] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.593838][ T8643] ipvlan1: entered promiscuous mode [ 132.605553][ T8643] ipvlan1: entered allmulticast mode [ 132.615480][ T8643] veth0_vlan: entered allmulticast mode [ 132.625868][ T8643] bridge0: port 3(ipvlan1) entered blocking state [ 132.645735][ T8643] bridge0: port 3(ipvlan1) entered disabled state [ 132.656806][ T8643] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 132.673827][ T8646] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.775416][ T8651] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 132.814129][ T8651] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.824366][ T8651] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 132.885355][ T2467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.096109][ T8670] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 133.125937][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.636583][ T8692] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 133.647543][ T8692] TCP: tcp_parse_options: Illegal window scaling value 120 > 14 received [ 133.707504][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.723025][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.732864][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.743099][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.751732][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.760424][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.913786][ T8694] lo speed is unknown, defaulting to 1000 [ 134.215363][ T8721] Bluetooth: MGMT ver 1.22 [ 134.252488][ T8722] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.261987][ T8722] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.270859][ T8722] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.280511][ T8722] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.326471][ T8722] vxlan0: entered promiscuous mode [ 134.338096][ T8722] vxlan0: entered allmulticast mode [ 134.582011][ T8727] bond0: entered promiscuous mode [ 134.833152][ T2467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.887584][ T8694] chnl_net:caif_netlink_parms(): no params data found [ 135.053574][ T2467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.228221][ T8767] netem: incorrect gi model size [ 135.245472][ T8767] netem: change failed [ 135.254944][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.364088][ T2467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.697784][ T8694] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.716989][ T8694] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.734480][ T8694] bridge_slave_0: entered allmulticast mode [ 135.756071][ T8694] bridge_slave_0: entered promiscuous mode [ 135.775301][ T8694] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.785024][ T8694] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.796136][ T8694] bridge_slave_1: entered allmulticast mode [ 135.807995][ T8694] bridge_slave_1: entered promiscuous mode [ 135.827615][ T8811] netem: incorrect gi model size [ 135.835139][ T8811] netem: change failed [ 135.847854][ T5119] Bluetooth: hci0: command tx timeout [ 135.959914][ T8694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.022791][ T8694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.309783][ T8829] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.442211][ T8694] team0: Port device team_slave_0 added [ 136.489484][ T8694] team0: Port device team_slave_1 added [ 136.692934][ T8838] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.737538][ T2467] bridge_slave_1: left allmulticast mode [ 136.749254][ T2467] bridge_slave_1: left promiscuous mode [ 136.765280][ T2467] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.786580][ T2467] bridge_slave_0: left allmulticast mode [ 136.808793][ T2467] bridge_slave_0: left promiscuous mode [ 136.825774][ T2467] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.560405][ T2467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.587187][ T2467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.621487][ T2467] bond0 (unregistering): Released all slaves [ 137.670063][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.688586][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.716800][ T8694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.754153][ T8694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.780845][ T8694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.807208][ T8694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.916899][ T5119] Bluetooth: hci0: command tx timeout [ 138.081350][ T8694] hsr_slave_0: entered promiscuous mode [ 138.090227][ T8907] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 138.104365][ T8694] hsr_slave_1: entered promiscuous mode [ 138.129906][ T8694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.148627][ T8694] Cannot create hsr debugfs directory [ 138.210114][ T8910] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.356591][ T8913] sch_fq: defrate 0 ignored. [ 138.478413][ T8919] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 138.962194][ T2467] hsr_slave_0: left promiscuous mode [ 138.997973][ T2467] hsr_slave_1: left promiscuous mode [ 139.024986][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.037243][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.057360][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.064816][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.130413][ T2467] veth1_macvtap: left promiscuous mode [ 139.136001][ T2467] veth0_macvtap: left promiscuous mode [ 139.158529][ T2467] veth1_vlan: left promiscuous mode [ 139.163906][ T2467] veth0_vlan: left promiscuous mode [ 139.675629][ T2467] team0 (unregistering): Port device team_slave_1 removed [ 139.735855][ T2467] team0 (unregistering): Port device team_slave_0 removed [ 140.009732][ T5119] Bluetooth: hci0: command tx timeout [ 140.050750][ T8938] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.060325][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.073514][ T8938] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 140.201426][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.261297][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.560713][ T8694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.575437][ T8694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.594353][ T8694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.620033][ T8694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.771701][ T8694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.813090][ T8694] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.849320][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.856512][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.873958][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.881141][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.232378][ T8694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.310853][ T8694] veth0_vlan: entered promiscuous mode [ 141.334718][ T8694] veth1_vlan: entered promiscuous mode [ 141.399491][ T8694] veth0_macvtap: entered promiscuous mode [ 141.480089][ T9019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.508209][ T8694] veth1_macvtap: entered promiscuous mode [ 141.546692][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.576533][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.599788][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.640667][ T9019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.668083][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.681626][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.699132][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.710134][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.720289][ T8694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.735851][ T8694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.753552][ T8694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.808619][ T9019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.845284][ T8694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.859129][ T8694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.869152][ T8694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.878460][ T8694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.961439][ T9019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.076857][ T5119] Bluetooth: hci0: command tx timeout [ 142.165058][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.179407][ T9019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.190394][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.274376][ T9019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.351713][ T9019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.413299][ T9019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.446143][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.470158][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.493859][ T9065] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 142.513373][ T9066] xt_NFQUEUE: number of queues (65530) out of range (got 66566) [ 142.897750][ T9096] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.990286][ T9100] xt_NFQUEUE: number of queues (65530) out of range (got 66566) [ 143.010484][ T9104] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 143.610511][ T9129] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 143.703892][ T29] audit: type=1804 audit(1718226732.205:7): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3088215902/syzkaller.IXgf3W/419/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 143.972872][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.013087][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.205953][ T9153] bridge0: entered promiscuous mode [ 144.253748][ T9153] bridge0: left promiscuous mode [ 144.554936][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.294857][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.451773][ T9238] syz-executor.3[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.452008][ T9238] syz-executor.3[9238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.454383][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.462620][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.486058][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.495326][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.509195][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.521255][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.530267][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.574629][ T9296] syz-executor.0[9296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.574862][ T9296] syz-executor.0[9296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.622413][ T9290] lo speed is unknown, defaulting to 1000 [ 146.789478][ T9306] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 146.796188][ T9306] pim6reg0: linktype set to 805 [ 146.844775][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.076959][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.205855][ T9332] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 147.254659][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.269169][ T9338] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.279084][ T9338] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 147.403364][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.461712][ T9347] tipc: Enabling of bearer rejected, failed to enable media [ 147.509633][ T9290] chnl_net:caif_netlink_parms(): no params data found [ 147.677118][ T11] bridge_slave_1: left allmulticast mode [ 147.688007][ T11] bridge_slave_1: left promiscuous mode [ 147.718453][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.755421][ T11] bridge_slave_0: left allmulticast mode [ 147.771770][ T11] bridge_slave_0: left promiscuous mode [ 147.793428][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.169125][ T29] audit: type=1804 audit(1718226736.675:8): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3088215902/syzkaller.IXgf3W/443/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 148.222032][ T29] audit: type=1804 audit(1718226736.705:9): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3088215902/syzkaller.IXgf3W/443/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 148.420410][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.444479][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.476085][ T11] bond0 (unregistering): Released all slaves [ 148.560056][ T5119] Bluetooth: hci0: command tx timeout [ 148.625859][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.635534][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.650029][ T9290] bridge_slave_0: entered allmulticast mode [ 148.657625][ T9290] bridge_slave_0: entered promiscuous mode [ 148.671103][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.682508][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.690958][ T9290] bridge_slave_1: entered allmulticast mode [ 148.703158][ T9290] bridge_slave_1: entered promiscuous mode [ 148.875411][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.945726][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.962661][ T9389] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.083691][ T9290] team0: Port device team_slave_0 added [ 149.093773][ T9392] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 149.111870][ T9392] pim6reg0: linktype set to 805 [ 149.153480][ T9290] team0: Port device team_slave_1 added [ 149.344536][ T11] hsr_slave_0: left promiscuous mode [ 149.367662][ T11] hsr_slave_1: left promiscuous mode [ 149.388969][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.411432][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.434865][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.451192][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.503187][ T11] veth1_macvtap: left promiscuous mode [ 149.520840][ T11] veth0_macvtap: left promiscuous mode [ 149.538833][ T11] veth1_vlan: left promiscuous mode [ 149.554386][ T11] veth0_vlan: left promiscuous mode [ 149.941614][ T29] audit: type=1804 audit(1718226738.445:10): pid=9395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3088215902/syzkaller.IXgf3W/448/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 150.344869][ T11] team0 (unregistering): Port device team_slave_1 removed [ 150.403993][ T11] team0 (unregistering): Port device team_slave_0 removed [ 150.559167][ T9428] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 150.646745][ T5119] Bluetooth: hci0: command tx timeout [ 150.701816][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.715255][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.008071][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.036050][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.103755][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.147088][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.155956][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.184460][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.201341][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.297547][ T9460] lo speed is unknown, defaulting to 1000 [ 151.342591][ T9290] hsr_slave_0: entered promiscuous mode [ 151.358928][ T9290] hsr_slave_1: entered promiscuous mode [ 151.396112][ T9290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.406721][ T9290] Cannot create hsr debugfs directory [ 151.483066][ T9472] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 151.548869][ T9477] tipc: Enabling of bearer rejected, failed to enable media [ 151.781515][ T9492] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.891227][ T9490] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 151.924366][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.935330][ T9501] lo speed is unknown, defaulting to 1000 [ 152.114858][ T9290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.141832][ T9514] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.152472][ T9290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.163993][ T9290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.186167][ T9290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.364790][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.403816][ T9290] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.425710][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.432904][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.475491][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.482723][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.553031][ T9290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.639200][ T9535] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 152.716917][ T5119] Bluetooth: hci0: command tx timeout [ 152.793802][ T9535] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.803387][ T9535] bond0: (slave team0): Enslaving as an active interface with an up link [ 152.814248][ T9539] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 152.848123][ T9539] bond0: (slave team0): Releasing backup interface [ 152.866016][ T9539] bridge0: port 3(team0) entered blocking state [ 152.872945][ T9539] bridge0: port 3(team0) entered disabled state [ 152.879752][ T9539] team0: entered allmulticast mode [ 152.884863][ T9539] team_slave_0: entered allmulticast mode [ 152.891024][ T9539] team_slave_1: entered allmulticast mode [ 152.898170][ T9539] batadv0: entered allmulticast mode [ 152.905389][ T9539] team0: entered promiscuous mode [ 152.911389][ T9539] team_slave_0: entered promiscuous mode [ 152.917510][ T9539] team_slave_1: entered promiscuous mode [ 152.923325][ T9539] batadv0: entered promiscuous mode [ 152.983422][ T9547] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 153.102171][ T9290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.267460][ T9290] veth0_vlan: entered promiscuous mode [ 153.302079][ T9290] veth1_vlan: entered promiscuous mode [ 153.339051][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 153.349293][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 153.364179][ T9290] veth0_macvtap: entered promiscuous mode [ 153.377358][ T9290] veth1_macvtap: entered promiscuous mode [ 153.402293][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.421899][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.440938][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.456262][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.479943][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.491741][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.502623][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.513113][ T9290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.524828][ T9290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.541126][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.563094][ T9290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.577236][ T9290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.604781][ T9290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.615847][ T9290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.705051][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.714183][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.742617][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.751274][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.181214][ T9606] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.796646][ T5111] Bluetooth: hci0: command tx timeout [ 155.850658][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.449760][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.520374][ T9655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.841764][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.880426][ T5111] Bluetooth: hci0: command 0x0405 tx timeout [ 157.023604][ T9691] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 157.101164][ T9691] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.114043][ T9691] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.123472][ T9697] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 157.133825][ T9697] bond0: (slave team0): Releasing backup interface [ 157.148122][ T9697] bridge0: port 3(team0) entered blocking state [ 157.156981][ T9697] bridge0: port 3(team0) entered disabled state [ 157.171299][ T9697] team0: entered allmulticast mode [ 157.182115][ T9697] team_slave_0: entered allmulticast mode [ 157.193682][ T9697] team_slave_1: entered allmulticast mode [ 157.201685][ T9697] team0: entered promiscuous mode [ 157.207674][ T9697] team_slave_0: entered promiscuous mode [ 157.213857][ T9697] team_slave_1: entered promiscuous mode [ 157.786702][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.101566][ T9767] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 158.110342][ T9767] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.125378][ T9767] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 158.134964][ T9767] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 158.146554][ T9767] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.213697][ T29] audit: type=1800 audit(1718226746.715:11): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 158.258352][ T29] audit: type=1804 audit(1718226746.745:12): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3094914328/syzkaller.fs37dw/413/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 158.312543][ T29] audit: type=1804 audit(1718226746.825:13): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3094914328/syzkaller.fs37dw/413/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 158.625678][ T957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.688032][ T9795] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 158.708795][ T9795] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.741200][ T9795] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 158.766596][ T9795] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 158.806612][ T9795] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.901226][ T957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.073929][ T957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.205640][ T957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.461199][ T957] bridge_slave_1: left allmulticast mode [ 159.480783][ T957] bridge_slave_1: left promiscuous mode [ 159.496757][ T957] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.532447][ T957] bridge_slave_0: left allmulticast mode [ 159.543209][ T957] bridge_slave_0: left promiscuous mode [ 159.549120][ T957] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.563124][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.572553][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.586738][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.596679][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.605298][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.613198][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.660430][ T9849] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 160.132653][ T957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.152989][ T957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.174285][ T957] bond0 (unregistering): Released all slaves [ 160.229421][ T9858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.378909][ T9843] lo speed is unknown, defaulting to 1000 [ 160.454960][ T9880] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 160.926796][ T9900] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.030049][ T957] hsr_slave_0: left promiscuous mode [ 161.059162][ T957] hsr_slave_1: left promiscuous mode [ 161.067748][ T957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.075270][ T957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.090693][ T957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.099647][ T957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.136015][ T957] veth1_macvtap: left promiscuous mode [ 161.142865][ T957] veth0_macvtap: left promiscuous mode [ 161.151954][ T957] veth1_vlan: left promiscuous mode [ 161.158531][ T957] veth0_vlan: left promiscuous mode [ 161.632710][ T957] team0 (unregistering): Port device team_slave_1 removed [ 161.669657][ T957] team0 (unregistering): Port device team_slave_0 removed [ 161.677974][ T5119] Bluetooth: hci0: command tx timeout [ 162.013691][ T9905] tipc: Started in network mode [ 162.019053][ T9905] tipc: Node identity fe8, cluster identity 4711 [ 162.025481][ T9905] tipc: Enabling of bearer rejected, failed to enable media [ 162.151500][ T9843] chnl_net:caif_netlink_parms(): no params data found [ 162.273178][ T9935] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 162.434896][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.469359][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.486110][ T9948] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.496646][ T9843] bridge_slave_0: entered allmulticast mode [ 162.517106][ T9843] bridge_slave_0: entered promiscuous mode [ 162.536046][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.566696][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.573953][ T9843] bridge_slave_1: entered allmulticast mode [ 162.608825][ T9843] bridge_slave_1: entered promiscuous mode [ 162.749003][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.791434][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.882619][ T9843] team0: Port device team_slave_0 added [ 162.908893][ T9843] team0: Port device team_slave_1 added [ 162.965481][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.982852][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.015294][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.030167][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.046475][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.080437][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.167902][ T9843] hsr_slave_0: entered promiscuous mode [ 163.190092][ T9843] hsr_slave_1: entered promiscuous mode [ 163.203627][ T9843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.221172][ T9843] Cannot create hsr debugfs directory [ 163.557929][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.701499][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.756748][ T5119] Bluetooth: hci0: command tx timeout [ 164.064974][ T9843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.099894][ T9843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.121238][ T9843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.161759][ T9843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.339177][T10053] syz_tun: entered promiscuous mode [ 164.400600][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.413559][T10052] syz_tun: left promiscuous mode [ 164.460954][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.511176][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.518407][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.529723][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.536960][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.963111][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.989306][T10098] Bluetooth: MGMT ver 1.22 [ 165.131206][ T9843] veth0_vlan: entered promiscuous mode [ 165.173811][ T9843] veth1_vlan: entered promiscuous mode [ 165.264641][ T9843] veth0_macvtap: entered promiscuous mode [ 165.318928][ T9843] veth1_macvtap: entered promiscuous mode [ 165.393567][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.417240][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.438615][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.472941][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.508790][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.527233][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.542843][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.553565][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.564349][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.587921][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.615176][ T9843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.633497][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.636784][ T9843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.656817][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.669845][ T9843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.696064][ T9843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.733194][T10129] pimreg: entered allmulticast mode [ 165.829574][T10129] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 165.837538][ T5119] Bluetooth: hci0: command tx timeout [ 165.939926][T10129] pimreg: left allmulticast mode [ 166.065414][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.095273][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.215621][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.244242][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.651244][T10182] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.420324][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.463376][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.661612][T10191] vcan0: entered promiscuous mode [ 167.674793][T10191] vlan2: entered promiscuous mode [ 167.690087][T10191] vlan2: entered allmulticast mode [ 167.705775][T10191] vcan0: entered allmulticast mode [ 167.723590][T10191] vcan0: left allmulticast mode [ 167.730876][T10191] vcan0: left promiscuous mode [ 167.755660][T10200] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 167.778585][T10200] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.791160][T10200] bond0: option arp_missed_max: invalid value (0) [ 167.803929][T10200] bond0: option arp_missed_max: allowed values 1 - 255 [ 168.809430][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.305912][T10311] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 169.327904][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.355284][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.396878][T10311] : entered promiscuous mode [ 169.404183][T10316] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 169.478949][T10312] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 169.701751][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.734102][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.826999][T10333] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.914188][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.923168][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.940267][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.949900][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.967121][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.974474][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.031124][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.096025][T10338] lo speed is unknown, defaulting to 1000 [ 170.189755][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.366045][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.470763][T10369] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.567631][ T77] bridge_slave_1: left allmulticast mode [ 170.582207][ T77] bridge_slave_1: left promiscuous mode [ 170.588316][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.604254][ T77] bridge_slave_0: left allmulticast mode [ 170.614422][ T77] bridge_slave_0: left promiscuous mode [ 170.620535][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.041028][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.059708][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.073351][ T77] bond0 (unregistering): Released all slaves [ 171.403097][T10412] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 171.459877][T10338] chnl_net:caif_netlink_parms(): no params data found [ 171.544750][T10419] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 171.557863][T10419] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.756296][T10338] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.776602][T10338] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.805455][T10338] bridge_slave_0: entered allmulticast mode [ 171.887995][T10338] bridge_slave_0: entered promiscuous mode [ 171.911994][T10338] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.933764][T10338] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.947269][T10338] bridge_slave_1: entered allmulticast mode [ 171.997179][ T5119] Bluetooth: hci0: command tx timeout [ 172.018229][T10338] bridge_slave_1: entered promiscuous mode [ 172.150175][ T77] hsr_slave_0: left promiscuous mode [ 172.165572][ T77] hsr_slave_1: left promiscuous mode [ 172.185000][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.203197][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.230617][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.256791][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.294436][ T77] veth1_macvtap: left promiscuous mode [ 172.306570][ T77] veth0_macvtap: left promiscuous mode [ 172.312286][ T77] veth1_vlan: left promiscuous mode [ 172.324575][ T77] veth0_vlan: left promiscuous mode [ 172.911699][ T77] team0 (unregistering): Port device team_slave_1 removed [ 172.945529][ T77] team0 (unregistering): Port device team_slave_0 removed [ 172.954818][T10479] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 173.235736][T10461] syz-executor.3 (10461) used greatest stack depth: 18576 bytes left [ 173.341340][T10338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.373726][T10451] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.399970][T10338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.425342][T10485] syz-executor.0 uses old SIOCAX25GETINFO [ 173.591828][T10338] team0: Port device team_slave_0 added [ 173.604516][T10492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.615570][T10338] team0: Port device team_slave_1 added [ 173.625426][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.717345][T10338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.746631][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.800922][T10338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.842982][T10338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.860305][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.904617][T10338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.970972][T10516] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.025380][T10338] hsr_slave_0: entered promiscuous mode [ 174.047315][T10338] hsr_slave_1: entered promiscuous mode [ 174.078620][ T5119] Bluetooth: hci0: command tx timeout [ 174.085064][T10338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.096930][T10338] Cannot create hsr debugfs directory [ 174.149453][T10529] smc: net device wlan0 applied user defined pnetid SYZ2 [ 174.525699][T10550] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.581547][T10552] bond0: entered promiscuous mode [ 174.591908][T10552] bond_slave_0: entered promiscuous mode [ 174.598906][T10552] bond_slave_1: entered promiscuous mode [ 174.707101][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.783534][T10338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.828751][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 174.841320][T10338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.869084][T10338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.892488][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.899810][T10338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.927426][T10574] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 174.935545][T10574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.069773][T10338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.107826][T10338] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.141230][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.148542][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.164636][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.171901][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.570488][T10338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.632113][T10608] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 175.640812][T10608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.704772][T10338] veth0_vlan: entered promiscuous mode [ 175.720660][T10338] veth1_vlan: entered promiscuous mode [ 175.751578][T10610] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.792053][T10338] veth0_macvtap: entered promiscuous mode [ 175.840037][T10338] veth1_macvtap: entered promiscuous mode [ 175.883036][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.900176][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.935001][T10338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.973472][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.018349][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.033404][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.044375][T10631] openvswitch: netlink: Port 8336768 exceeds max allowable 65535 [ 176.083304][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.103453][T10338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.121339][T10338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.134791][T10338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.158768][ T5119] Bluetooth: hci0: command tx timeout [ 176.169707][T10338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.179580][T10338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.188905][T10338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.197819][T10338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.340861][T10643] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 176.362841][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.389439][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.417212][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.506819][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.514685][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.779566][T10666] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 176.884682][T10673] ieee802154 phy0 wpan0: encryption failed: -22 [ 177.012191][T10679] sctp: [Deprecated]: syz-executor.2 (pid 10679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.012191][T10679] Use struct sctp_sack_info instead [ 177.251927][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.265648][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.629488][T10728] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 178.416293][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.649540][T10790] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.919458][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.428745][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.450969][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.463230][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.476592][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.487393][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 179.494788][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.550094][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.629655][T10825] lo speed is unknown, defaulting to 1000 [ 180.035868][T10864] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 180.514967][T10899] __nla_validate_parse: 1 callbacks suppressed [ 180.514986][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.555551][T10825] chnl_net:caif_netlink_parms(): no params data found [ 180.620917][T10907] x_tables: duplicate entry at hook 3 [ 180.934508][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.974742][T10825] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.984218][T10825] bridge_slave_0: entered allmulticast mode [ 180.992073][T10825] bridge_slave_0: entered promiscuous mode [ 181.002539][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.010056][T10825] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.022048][T10825] bridge_slave_1: entered allmulticast mode [ 181.035254][T10825] bridge_slave_1: entered promiscuous mode [ 181.076021][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.277095][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 181.277703][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 181.285761][ T4490] Bluetooth: hci3: command 0x0406 tx timeout [ 181.298988][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.344418][T10825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.372707][T10825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.380506][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.473935][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.517222][ T5111] Bluetooth: hci0: command tx timeout [ 181.528343][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.610146][T10967] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 181.657659][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.693715][T10825] team0: Port device team_slave_0 added [ 181.740162][T10825] team0: Port device team_slave_1 added [ 181.847247][T10825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.858070][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.886534][T10825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.925045][T10825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.932217][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.962619][T10825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.104698][T10825] hsr_slave_0: entered promiscuous mode [ 182.125511][T10825] hsr_slave_1: entered promiscuous mode [ 182.137030][T10825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.158510][T10825] Cannot create hsr debugfs directory [ 182.201897][ T77] bridge_slave_1: left allmulticast mode [ 182.213113][ T77] bridge_slave_1: left promiscuous mode [ 182.245003][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.263535][ T77] bridge_slave_0: left allmulticast mode [ 182.271577][ T77] bridge_slave_0: left promiscuous mode [ 182.282093][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.340844][T11009] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 182.525302][T11015] xt_time: unknown flags 0x4 [ 182.775075][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.786223][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.798142][ T77] bond0 (unregistering): Released all slaves [ 182.821952][T11019] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.606865][ T5111] Bluetooth: hci0: command tx timeout [ 183.742575][ T77] hsr_slave_0: left promiscuous mode [ 183.774028][ T77] hsr_slave_1: left promiscuous mode [ 183.784850][T11059] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 183.796722][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.804315][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.812781][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.820502][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.850036][ T77] veth1_macvtap: left promiscuous mode [ 183.855693][ T77] veth0_macvtap: left promiscuous mode [ 183.861515][ T77] veth1_vlan: left promiscuous mode [ 183.867718][ T77] veth0_vlan: left promiscuous mode [ 184.567334][ T77] team0 (unregistering): Port device team_slave_1 removed [ 184.620067][ T77] team0 (unregistering): Port device team_slave_0 removed [ 185.079053][T11084] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.452690][T10825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.487006][T10825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.499983][T10825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.526705][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.553309][T10825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.607531][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.676713][ T5111] Bluetooth: hci0: command tx timeout [ 185.691851][T11111] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 185.795738][T10825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.845258][T10825] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.868980][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.876152][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.928419][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.935592][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.944844][T11121] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.011731][T10825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.403119][T10825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.492855][T11150] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 186.517883][T10825] veth0_vlan: entered promiscuous mode [ 186.536213][T10825] veth1_vlan: entered promiscuous mode [ 186.579670][T10825] veth0_macvtap: entered promiscuous mode [ 186.590375][T10825] veth1_macvtap: entered promiscuous mode [ 186.605438][T10825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.617132][T10825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.628645][T10825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.646097][T10825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.656925][T10825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.667746][T10825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.678329][T10825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.688332][T10825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.698963][T10825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.710232][T10825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.721601][T10825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.731705][T10825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.757778][T10825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.781336][T10825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.973074][T11167] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.983899][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.008851][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.103812][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.126985][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.140672][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.361113][T11190] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 187.487632][T11196] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.802490][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.216808][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.304620][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.404474][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.468091][T11271] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 188.675764][T11286] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.972581][T11305] bridge0: entered allmulticast mode [ 188.989896][T11305] pimreg: entered allmulticast mode [ 189.646674][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.068816][T11370] openvswitch: netlink: IP tunnel dst address not specified [ 190.274505][T11380] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 190.462261][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.471973][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.483274][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.493203][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.503431][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.519229][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.578314][T11391] lo speed is unknown, defaulting to 1000 [ 190.621161][T11398] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 191.134498][T11391] chnl_net:caif_netlink_parms(): no params data found [ 191.230075][T11437] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 191.524335][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.536610][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.546315][T11391] bridge_slave_0: entered allmulticast mode [ 191.561387][T11391] bridge_slave_0: entered promiscuous mode [ 191.966285][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.985208][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.994691][T11391] bridge_slave_1: entered allmulticast mode [ 191.997122][ T5111] Bluetooth: hci4: command 0x0405 tx timeout [ 192.006332][T11391] bridge_slave_1: entered promiscuous mode [ 192.082001][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.104265][T11475] __nla_validate_parse: 5 callbacks suppressed [ 192.104285][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.122128][T11475] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 192.148902][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.172267][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.261076][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.556600][ T5111] Bluetooth: hci0: command tx timeout [ 194.574170][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.636627][ T5111] Bluetooth: hci0: command tx timeout [ 196.716614][ T5111] Bluetooth: hci0: command tx timeout [ 198.796928][ T5111] Bluetooth: hci0: command tx timeout [ 213.116805][ T5166] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec [ 216.396563][ T786] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 60 sec [ 222.919057][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.938849][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.966529][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.986807][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.997278][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.007453][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.103476][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.113654][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.118680][ T4490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.138431][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.146741][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.154477][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.163367][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.167623][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.179417][ T4490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.193939][ T4490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.202901][ T4490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.210430][ T4490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 223.460647][ T5119] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 223.477011][ T5119] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 223.484814][ T5119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 223.498112][ T5119] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 223.505771][ T5119] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 223.514017][ T5119] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 225.036592][ T4490] Bluetooth: hci5: command tx timeout [ 225.196584][ T4490] Bluetooth: hci6: command tx timeout [ 225.286960][ T5119] Bluetooth: hci7: command tx timeout [ 225.597321][ T4490] Bluetooth: hci8: command tx timeout [ 227.118730][ T4490] Bluetooth: hci5: command tx timeout [ 227.276828][ T4490] Bluetooth: hci6: command tx timeout [ 227.356567][ T4490] Bluetooth: hci7: command tx timeout [ 227.686643][ T4490] Bluetooth: hci8: command tx timeout [ 229.206928][ T4490] Bluetooth: hci5: command tx timeout [ 229.366646][ T4490] Bluetooth: hci6: command tx timeout [ 229.446764][ T4490] Bluetooth: hci7: command tx timeout [ 229.756519][ T4490] Bluetooth: hci8: command tx timeout [ 231.277507][ T4490] Bluetooth: hci5: command tx timeout [ 231.437010][ T4490] Bluetooth: hci6: command tx timeout [ 231.526617][ T4490] Bluetooth: hci7: command tx timeout [ 231.836797][ T4490] Bluetooth: hci8: command tx timeout [ 255.524092][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 255.533551][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 255.542797][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 255.557177][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 255.564907][ T5119] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 255.573063][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 255.999812][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.596976][ T5119] Bluetooth: hci9: command tx timeout [ 259.676950][ T5119] Bluetooth: hci9: command tx timeout [ 261.756848][ T4490] Bluetooth: hci9: command tx timeout [ 263.836918][ T5119] Bluetooth: hci9: command tx timeout [ 287.955204][ T4490] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 287.966226][ T4490] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 287.974372][ T4490] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 287.982846][ T4490] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 287.991437][ T4490] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 288.016739][ T4490] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 288.035090][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 288.052507][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 288.061254][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 288.075391][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 288.083282][ T5119] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 288.095053][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 288.232625][ T5119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 288.241735][ T5119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 288.250633][ T5119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 288.258879][ T5119] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 288.272335][ T5119] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 288.279959][ T5119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 288.392220][ T5119] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 288.407698][ T5119] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 288.416556][ T5119] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 288.425115][ T5119] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 288.433821][ T5119] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 288.441294][ T5119] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 290.076996][ T4490] Bluetooth: hci10: command tx timeout [ 290.156804][ T4490] Bluetooth: hci11: command tx timeout [ 290.317002][ T4490] Bluetooth: hci12: command tx timeout [ 290.476612][ T4490] Bluetooth: hci13: command tx timeout [ 292.173052][ T4490] Bluetooth: hci10: command tx timeout [ 292.246579][ T4490] Bluetooth: hci11: command tx timeout [ 292.409437][ T4490] Bluetooth: hci12: command tx timeout [ 292.566571][ T4490] Bluetooth: hci13: command tx timeout [ 294.236708][ T4490] Bluetooth: hci10: command tx timeout [ 294.321503][ T4490] Bluetooth: hci11: command tx timeout [ 294.476594][ T4490] Bluetooth: hci12: command tx timeout [ 294.636755][ T4490] Bluetooth: hci13: command tx timeout [ 296.316635][ T4490] Bluetooth: hci10: command tx timeout [ 296.402862][ T4490] Bluetooth: hci11: command tx timeout [ 296.563895][ T4490] Bluetooth: hci12: command tx timeout [ 296.716801][ T4490] Bluetooth: hci13: command tx timeout [ 314.400781][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 314.406481][ T5111] Bluetooth: hci4: command 0x0405 tx timeout [ 317.446003][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.752061][ T5119] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 320.761520][ T5119] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 320.771069][ T5119] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 320.779476][ T5119] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 320.787818][ T5119] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 320.795247][ T5119] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 322.882190][ T5119] Bluetooth: hci14: command tx timeout [ 324.956719][ T5119] Bluetooth: hci14: command tx timeout [ 327.036723][ T5119] Bluetooth: hci14: command tx timeout [ 329.118642][ T5119] Bluetooth: hci14: command tx timeout [ 341.125584][ T30] INFO: task kworker/u8:4:77 blocked for more than 143 seconds. [ 341.133340][ T30] Not tainted 6.10.0-rc2-syzkaller-00742-g91579c93a9b2 #0 [ 341.147927][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.161901][ T30] task:kworker/u8:4 state:D stack:21072 pid:77 tgid:77 ppid:2 flags:0x00004000 2024/06/12 21:15:29 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 341.175685][ T30] Workqueue: netns cleanup_net [ 341.216026][ T30] Call Trace: [ 341.219481][ T30] [ 341.222430][ T30] __schedule+0x17e8/0x4a20 [ 341.236627][ T30] ? __pfx___schedule+0x10/0x10 [ 341.241533][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.266476][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.271992][ T30] ? kthread_data+0x52/0xd0 [ 341.286579][ T30] ? schedule+0x90/0x320 [ 341.290861][ T30] ? wq_worker_sleeping+0x66/0x240 [ 341.295988][ T30] ? schedule+0x90/0x320 [ 341.306445][ T30] schedule+0x14b/0x320 [ 341.310633][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.316110][ T30] __mutex_lock+0x6a4/0xd70 [ 341.336591][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 341.341832][ T30] ? __mutex_lock+0x527/0xd70 [ 341.357449][ T30] ? nsim_destroy+0x71/0x5c0 [ 341.362087][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.376546][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 341.381953][ T30] ? _raw_spin_unlock+0x28/0x50 [ 341.396537][ T30] ? simple_release_fs+0x9c/0xd0 [ 341.401507][ T30] nsim_destroy+0x71/0x5c0 [ 341.405954][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 341.426407][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 341.431902][ T30] nsim_dev_reload_down+0x98/0xd0 [ 341.446414][ T30] devlink_reload+0x18b/0x870 [ 341.451123][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 341.476463][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 341.481972][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 341.496413][ T30] ? class_remove_file_ns+0x121/0x160 [ 341.501818][ T30] cleanup_net+0x615/0xcc0 [ 341.506253][ T30] ? __pfx_cleanup_net+0x10/0x10 [