last executing test programs: 1m33.356771228s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd73}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m33.117507738s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3b63e757}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000140)=ANY=[@ANYBLOB="2412bc4c88a79283e89b50e8"], 0x30}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="33a8", 0x584, 0x0, 0x0, 0xf5ffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001d000000000008000a00", @ANYRES32=0x0, @ANYRESHEX=r3], 0x54}}, 0x40001) getsockopt$nfc_llcp(r2, 0x6a, 0x0, 0x0, 0x20000071) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1m17.613710491s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3b63e757}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000140)=ANY=[@ANYBLOB="2412bc4c88a79283e89b50e8"], 0x30}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="33a8", 0x584, 0x0, 0x0, 0xf5ffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001d000000000008000a00", @ANYRES32=0x0, @ANYRESHEX=r3], 0x54}}, 0x40001) getsockopt$nfc_llcp(r2, 0x6a, 0x0, 0x0, 0x20000071) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1m2.707074898s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3b63e757}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000140)=ANY=[@ANYBLOB="2412bc4c88a79283e89b50e8"], 0x30}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="33a8", 0x584, 0x0, 0x0, 0xf5ffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001d000000000008000a00", @ANYRES32=0x0, @ANYRESHEX=r3], 0x54}}, 0x40001) getsockopt$nfc_llcp(r2, 0x6a, 0x0, 0x0, 0x20000071) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 48.075344126s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3b63e757}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000140)=ANY=[@ANYBLOB="2412bc4c88a79283e89b50e8"], 0x30}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="33a8", 0x584, 0x0, 0x0, 0xf5ffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001d000000000008000a00", @ANYRES32=0x0, @ANYRESHEX=r3], 0x54}}, 0x40001) getsockopt$nfc_llcp(r2, 0x6a, 0x0, 0x0, 0x20000071) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 20.372841837s ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3b63e757}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000140)=ANY=[@ANYBLOB="2412bc4c88a79283e89b50e8"], 0x30}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000040)="33a8", 0x584, 0x0, 0x0, 0xf5ffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001d000000000008000a00", @ANYRES32=0x0, @ANYRESHEX=r3], 0x54}}, 0x40001) getsockopt$nfc_llcp(r2, 0x6a, 0x0, 0x0, 0x20000071) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 13.44780673s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000079a000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={r4, 0x1, 0x6, @local}, 0x10) r5 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) sendfile(r5, r5, 0x0, 0xc000000000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r9, 0x1, 0x0, 0x0, {0x23}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x34}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000300)}, 0x10) r10 = socket(0x10, 0x803, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) openat$cgroup_ro(r11, &(0x7f0000000680)='cpuacct.usage_sys\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r12, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdfe1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8d0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r13, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000007c0)}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x144, r9, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x28004000}, 0xc010) 12.61354525s ago: executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xf, &(0x7f0000000080)="02", 0x1) listen(r0, 0x0) 12.539174824s ago: executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="470d00000000000000000a0000002800018008000300000000000800030002000000140002"], 0x3c}}, 0x0) 12.357477986s ago: executing program 1: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r1, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100040000000800070000000000080003"], 0x4c}}, 0x0) 12.139082295s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}]}]}}}]}, 0x68}}, 0x0) 11.778488801s ago: executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0xf, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000001500)=""/15, 0xf}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) 956.987369ms ago: executing program 3: 929.420583ms ago: executing program 4: 815.411233ms ago: executing program 3: 770.672285ms ago: executing program 2: 754.821151ms ago: executing program 4: 620.869182ms ago: executing program 2: 601.424801ms ago: executing program 3: 590.962167ms ago: executing program 4: 451.135961ms ago: executing program 2: 420.368608ms ago: executing program 3: 342.340233ms ago: executing program 4: 320.73474ms ago: executing program 2: 212.774065ms ago: executing program 3: 188.943908ms ago: executing program 4: 170.988257ms ago: executing program 2: 77.77669ms ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 51.481079ms ago: executing program 2: 0s ago: executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, @mcast1, @mcast1, 0x0, 0x700, 0x12, 0x1208e00}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2, 0x10}}, 0x12) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 239.191152][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.215251][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.228423][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.241429][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.254085][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.308310][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.337113][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.416018][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.448433][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.460582][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.515636][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.552466][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.601562][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.626107][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.652674][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.681612][ T9518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.724316][ T9518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.763930][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.808359][ T9518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.851488][ T9518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.881631][ T9518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.892741][ T9518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.906881][ T9841] netlink: 9392 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.964157][ T9841] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 240.219335][ T9850] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 240.259455][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.308496][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.436150][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.470851][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.724084][ T9864] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 240.948336][ T9873] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 241.494762][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.526349][ T9900] ipvlan2: entered allmulticast mode [ 241.533793][ T9900] veth0_vlan: entered allmulticast mode [ 242.114374][ T9923] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 242.130967][ T9923] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.142593][ T9923] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.795676][ T9943] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.805725][ T9943] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.814644][ T9943] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.823636][ T9943] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.450182][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.740595][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.875170][ T1051] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.049046][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.050437][ T9981] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 244.060837][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.078083][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.093007][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.102258][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 244.110332][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.173163][ T1051] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.333836][ T1051] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.487126][ T1051] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.793789][ T1051] bridge_slave_1: left allmulticast mode [ 244.824071][ T1051] bridge_slave_1: left promiscuous mode [ 244.842195][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.859429][ T1051] bridge_slave_0: left allmulticast mode [ 244.869435][ T1051] bridge_slave_0: left promiscuous mode [ 244.883685][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.925934][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.692926][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.706816][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.720305][ T1051] bond0 (unregistering): Released all slaves [ 245.739703][T10000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.800846][ T9977] chnl_net:caif_netlink_parms(): no params data found [ 246.019071][T10023] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.151684][ T5111] Bluetooth: hci3: command tx timeout [ 246.177108][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.271576][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.299841][T10040] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 246.302719][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.309660][T10040] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.328782][T10040] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.354312][ T9977] bridge_slave_0: entered allmulticast mode [ 246.370584][ T9977] bridge_slave_0: entered promiscuous mode [ 246.384674][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.394348][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.412537][ T9977] bridge_slave_1: entered allmulticast mode [ 246.442544][ T9977] bridge_slave_1: entered promiscuous mode [ 246.590118][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.830199][ T9977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.859342][T10052] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.938707][ T9977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.162720][ T1051] mac80211_hwsim hwsim12 wlan0 (unregistering): left allmulticast mode [ 247.260672][ T1051] team0: Port device macvlan2 removed [ 247.314825][ T9977] team0: Port device team_slave_0 added [ 247.339562][ T9977] team0: Port device team_slave_1 added [ 247.368344][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.433318][ T1051] hsr_slave_0: left promiscuous mode [ 247.456400][ T1051] hsr_slave_1: left promiscuous mode [ 247.477657][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.509284][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.530475][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.549423][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.596725][ T1051] veth1_macvtap: left promiscuous mode [ 247.609155][ T1051] veth0_macvtap: left promiscuous mode [ 248.231666][ T5111] Bluetooth: hci3: command tx timeout [ 248.477563][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 248.537173][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 249.157789][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.181646][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.271750][ T9977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.307541][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.320736][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.322609][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.364013][ T9977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.554104][T10083] ieee802154 phy1 wpan1: encryption failed: -90 [ 249.598196][ T9977] hsr_slave_0: entered promiscuous mode [ 249.644344][ T9977] hsr_slave_1: entered promiscuous mode [ 249.682254][ T9977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.721550][ T9977] Cannot create hsr debugfs directory [ 250.311944][ T5111] Bluetooth: hci3: command tx timeout [ 251.096664][T10127] ieee802154 phy1 wpan1: encryption failed: -90 [ 251.172324][ T9977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.219131][ T9977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.229145][T10133] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.250453][ T9977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 251.279037][ T9977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 251.579641][ T9977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.628590][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.646148][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.653359][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.713171][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.720345][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.882986][T10148] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 252.129310][T10156] Bluetooth: MGMT ver 1.22 [ 252.139711][T10156] Bluetooth: hci3: invalid length 0, exp 2 for type 29 [ 252.390576][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.402143][ T5111] Bluetooth: hci3: command tx timeout [ 252.433676][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.457369][T10162] cannot load conntrack support for proto=3 [ 252.564696][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.808103][ T9977] veth0_vlan: entered promiscuous mode [ 252.869010][ T9977] veth1_vlan: entered promiscuous mode [ 252.995953][ T9977] veth0_macvtap: entered promiscuous mode [ 253.041015][ T9977] veth1_macvtap: entered promiscuous mode [ 253.316723][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.331803][T10184] Bluetooth: hci3: invalid length 0, exp 2 for type 29 [ 253.336190][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.361356][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.390454][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.415006][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.429067][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.442103][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.459148][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.488668][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.500389][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.526388][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.740012][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.768778][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.801609][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.829918][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.844027][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.858063][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.870448][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.884222][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.896637][T10201] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 253.907757][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.921019][T10201] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.931482][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.933224][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.962265][T10199] x_tables: duplicate underflow at hook 2 [ 253.996655][ T9977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.008411][ T9977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.022111][ T9977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.030856][ T9977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.047617][T10199] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 254.374118][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.389986][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.425738][T10210] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 254.533587][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.561826][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.720581][T10216] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.010984][T10223] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.185938][ T29] audit: type=1804 audit(1718286386.475:19): pid=10223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3035634167/syzkaller.HQYfSt/39/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 255.396257][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.158580][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.220061][T10254] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 256.592609][T10269] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.689702][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.790408][ T29] audit: type=1804 audit(1718286388.085:20): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir928203113/syzkaller.LrN8JJ/8/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 257.241113][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.464971][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.635415][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.942239][T10304] x_tables: duplicate underflow at hook 2 [ 257.997486][T10304] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 258.232435][ T5111] Bluetooth: hci0: command 0x0401 tx timeout [ 258.526107][T10331] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 258.560740][T10331] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 258.597741][T10328] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 258.642346][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.826800][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.913970][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.482971][T10429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.454145][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.469842][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.497519][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.185338][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.532023][T10491] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.203866][T10532] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 265.835206][T10555] bridge0: port 3(team0) entered blocking state [ 265.866671][T10555] bridge0: port 3(team0) entered disabled state [ 265.882695][T10555] team0: entered allmulticast mode [ 265.897703][T10555] team_slave_0: entered allmulticast mode [ 265.916182][T10555] team_slave_1: entered allmulticast mode [ 265.956744][T10555] team0: entered promiscuous mode [ 265.976048][T10555] team_slave_0: entered promiscuous mode [ 266.002324][T10555] team_slave_1: entered promiscuous mode [ 266.034073][T10555] bridge0: port 3(team0) entered blocking state [ 266.041713][T10555] bridge0: port 3(team0) entered forwarding state [ 266.767577][ T29] audit: type=1800 audit(1718286398.065:21): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 266.834601][ T29] audit: type=1804 audit(1718286398.135:22): pid=10591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir928203113/syzkaller.LrN8JJ/41/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 267.078888][T10598] bridge0: port 3(team0) entered blocking state [ 267.102592][T10598] bridge0: port 3(team0) entered disabled state [ 267.130893][T10598] team0: entered allmulticast mode [ 267.141770][T10598] team_slave_0: entered allmulticast mode [ 267.148889][T10598] team_slave_1: entered allmulticast mode [ 267.206028][T10598] team0: entered promiscuous mode [ 267.221510][ T5111] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.234177][ T5111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.245253][ T5111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.254029][T10598] team_slave_0: entered promiscuous mode [ 267.262569][T10598] team_slave_1: entered promiscuous mode [ 267.282390][ T5111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.284663][T10598] bridge0: port 3(team0) entered blocking state [ 267.295917][T10598] bridge0: port 3(team0) entered forwarding state [ 267.309622][ T5111] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 267.321119][ T5111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.455629][T10614] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.747797][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.759476][ T29] audit: type=1804 audit(1718286399.045:23): pid=10620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3316910394/syzkaller.sEQpNf/422/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 267.993246][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.022870][T10604] chnl_net:caif_netlink_parms(): no params data found [ 268.358387][T10604] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.379771][T10604] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.412322][T10604] bridge_slave_0: entered allmulticast mode [ 268.424020][T10604] bridge_slave_0: entered promiscuous mode [ 268.449792][T10649] ip6erspan0: entered promiscuous mode [ 268.500527][T10604] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.514950][T10604] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.531895][T10604] bridge_slave_1: entered allmulticast mode [ 268.542091][T10604] bridge_slave_1: entered promiscuous mode [ 268.691031][T10604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.720463][T10604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.858359][T10604] team0: Port device team_slave_0 added [ 268.884252][T10604] team0: Port device team_slave_1 added [ 269.006658][T10604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.018100][T10604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.053404][T10604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.070027][T10604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.078634][T10604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.110483][T10604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.293085][T10604] hsr_slave_0: entered promiscuous mode [ 269.314724][T10604] hsr_slave_1: entered promiscuous mode [ 269.325728][T10604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.335440][T10604] Cannot create hsr debugfs directory [ 269.431606][ T5111] Bluetooth: hci6: command tx timeout [ 269.953138][T10604] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.096338][T10604] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.248143][T10604] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.422179][T10604] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.755341][T10604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 270.769201][T10715] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 270.779147][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.782492][T10604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 270.816830][T10604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 270.852059][T10604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.006506][T10719] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 271.186054][T10604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.263024][T10604] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.289154][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.296511][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.361115][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.368425][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.498645][T10604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.521557][ T5110] Bluetooth: hci6: command tx timeout [ 271.876716][ T29] audit: type=1804 audit(1718286403.175:24): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834210727/syzkaller.ZwiRHu/128/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 271.936564][ T29] audit: type=1804 audit(1718286403.205:25): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834210727/syzkaller.ZwiRHu/128/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 271.947168][T10604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.966938][ T29] audit: type=1804 audit(1718286403.215:26): pid=10740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834210727/syzkaller.ZwiRHu/128/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 272.010464][T10742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.138834][T10604] veth0_vlan: entered promiscuous mode [ 272.163715][T10604] veth1_vlan: entered promiscuous mode [ 272.208409][T10604] veth0_macvtap: entered promiscuous mode [ 272.233673][T10604] veth1_macvtap: entered promiscuous mode [ 272.275604][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.287451][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.297789][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.309629][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.321853][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.336988][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.347519][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.359664][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.370929][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.390936][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.401797][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.414790][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.436045][T10604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.463237][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.507303][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.519327][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.532301][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.571420][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.594546][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.609896][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.628477][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.658884][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.677079][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.699152][T10604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.719762][T10604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.738192][T10604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.760087][T10604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.779664][T10604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.807010][T10604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.827067][T10604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.104329][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.139126][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.259378][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.272224][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.309520][T10760] nbd: couldn't find a device at index 1073741824 [ 273.495841][T10768] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 273.591566][ T5110] Bluetooth: hci6: command tx timeout [ 273.778938][T10776] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 273.814308][T10776] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 274.550500][T10801] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 274.566988][T10801] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.583426][T10803] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 274.625805][T10808] No such timeout policy "syz0" [ 274.720414][T10809] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 274.840009][T10815] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 274.860375][T10811] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 274.895118][T10811] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.902675][T10815] team0: Device hsr_slave_0 failed to register rx_handler [ 275.671708][ T5110] Bluetooth: hci6: command tx timeout [ 282.065857][T10823] xt_TPROXY: Can be used only with -p tcp or -p udp [ 283.870591][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.501037][ T29] audit: type=1804 audit(1718286416.795:27): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir834210727/syzkaller.ZwiRHu/140/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 285.601370][ T29] audit: type=1804 audit(1718286416.835:28): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834210727/syzkaller.ZwiRHu/140/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 285.697990][ T29] audit: type=1804 audit(1718286416.835:29): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir834210727/syzkaller.ZwiRHu/140/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 285.702429][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.754088][T10885] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.838730][T10888] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 286.747974][T10909] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 286.764820][T10909] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.053428][T10919] ip6t_rpfilter: unknown options [ 289.068368][T10912] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 289.086715][T10912] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.671413][T10953] dccp_invalid_packet: P.Data Offset(0) too small [ 289.695677][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.734253][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.356980][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.429158][T10988] bridge_slave_1: left allmulticast mode [ 290.454033][T10988] bridge_slave_1: left promiscuous mode [ 290.461024][T10988] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.696982][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.709382][T11003] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 290.751677][T11003] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 290.853327][T11011] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 291.227023][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.275528][T11024] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 291.310388][T11024] batadv_slave_0: entered promiscuous mode [ 291.352537][T11024] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 291.366694][T11024] Cannot create hsr debugfs directory [ 291.687693][T11041] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 292.095241][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.332879][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.404451][T11068] vlan2: entered promiscuous mode [ 292.415927][T11068] batadv0: entered promiscuous mode [ 292.433911][T11068] batadv0: left promiscuous mode [ 292.785587][T11083] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.815902][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.836389][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.889428][T11083] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.053699][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.098647][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.304245][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.321901][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.484069][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.549824][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.904910][ T61] bridge_slave_1: left allmulticast mode [ 293.921900][ T61] bridge_slave_1: left promiscuous mode [ 293.929283][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.951671][ T61] bridge_slave_0: left allmulticast mode [ 293.957481][ T61] bridge_slave_0: left promiscuous mode [ 293.971601][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.316739][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.337706][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.353984][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.362702][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.371152][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.383029][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.846488][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.858993][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.878149][ T61] bond0 (unregistering): Released all slaves [ 295.483414][T11144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.589144][ T61] hsr_slave_0: left promiscuous mode [ 295.620988][ T61] hsr_slave_1: left promiscuous mode [ 295.627381][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.642784][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.651975][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.664031][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.715771][ T61] veth1_macvtap: left promiscuous mode [ 295.731598][ T61] veth0_macvtap: left promiscuous mode [ 295.757694][ T61] veth1_vlan: left promiscuous mode [ 295.777724][ T61] veth0_vlan: left promiscuous mode [ 296.471592][ T5110] Bluetooth: hci5: command tx timeout [ 296.927836][ T61] team0 (unregistering): Port device team_slave_1 removed [ 296.985796][ T61] team0 (unregistering): Port device team_slave_0 removed [ 297.704356][T11167] syzkaller1: entered promiscuous mode [ 297.709904][T11167] syzkaller1: entered allmulticast mode [ 297.863781][ T5111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.879733][ T5111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.888634][ T5111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.925904][ T5111] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.934505][ T5111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 297.950343][ T5111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 298.171696][T11192] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 298.338681][T11197] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 298.377024][T11197] __nla_validate_parse: 1 callbacks suppressed [ 298.377083][T11197] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.412068][T11197] bridge0: port 3(syz_tun) entered blocking state [ 298.429777][T11197] bridge0: port 3(syz_tun) entered disabled state [ 298.441617][T11197] syz_tun: entered allmulticast mode [ 298.454095][T11197] syz_tun: entered promiscuous mode [ 298.460373][T11197] bridge0: port 3(syz_tun) entered blocking state [ 298.468160][T11197] bridge0: port 3(syz_tun) entered forwarding state [ 298.551434][ T5111] Bluetooth: hci5: command tx timeout [ 298.738686][T11128] chnl_net:caif_netlink_parms(): no params data found [ 298.963451][T11183] chnl_net:caif_netlink_parms(): no params data found [ 299.132886][T11128] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.140733][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.150443][T11128] bridge_slave_0: entered allmulticast mode [ 299.165582][T11128] bridge_slave_0: entered promiscuous mode [ 299.200572][T11220] hsr_slave_0: left promiscuous mode [ 299.228231][T11220] hsr_slave_1: left promiscuous mode [ 299.316147][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.325798][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.335593][T11128] bridge_slave_1: entered allmulticast mode [ 299.356091][T11128] bridge_slave_1: entered promiscuous mode [ 299.573389][T11183] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.586937][T11183] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.600090][T11183] bridge_slave_0: entered allmulticast mode [ 299.607865][T11183] bridge_slave_0: entered promiscuous mode [ 299.632560][T11226] syzkaller1: entered promiscuous mode [ 299.639279][T11226] syzkaller1: entered allmulticast mode [ 299.656711][T11128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.680372][T11128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.703722][T11183] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.723260][T11183] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.738416][T11183] bridge_slave_1: entered allmulticast mode [ 299.746150][T11183] bridge_slave_1: entered promiscuous mode [ 299.964444][T11183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.990098][T11128] team0: Port device team_slave_0 added [ 300.014261][T11183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.072214][ T5111] Bluetooth: hci7: command tx timeout [ 300.110236][T11128] team0: Port device team_slave_1 added [ 300.279956][T11243] bridge0: entered promiscuous mode [ 300.289198][T11243] bridge0: left promiscuous mode [ 300.337287][T11183] team0: Port device team_slave_0 added [ 300.349629][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.416409][T11128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.445017][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.480503][T11128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.497123][T11183] team0: Port device team_slave_1 added [ 300.525324][T11128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.552921][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.583974][T11128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.631777][ T5111] Bluetooth: hci5: command tx timeout [ 300.711676][T11183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.720516][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.750412][T11183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.768234][T11254] hsr_slave_0: left promiscuous mode [ 300.775496][T11254] hsr_slave_1: left promiscuous mode [ 300.852280][T11183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.859509][T11183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.897007][T11183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.012787][T11128] hsr_slave_0: entered promiscuous mode [ 301.032378][T11128] hsr_slave_1: entered promiscuous mode [ 301.049704][T11128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.068190][T11128] Cannot create hsr debugfs directory [ 301.267704][T11183] hsr_slave_0: entered promiscuous mode [ 301.285068][T11183] hsr_slave_1: entered promiscuous mode [ 301.297411][T11183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.312109][T11183] Cannot create hsr debugfs directory [ 302.157501][ T5111] Bluetooth: hci7: command tx timeout [ 302.260673][T11278] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 302.517467][T11284] pimreg: entered allmulticast mode [ 302.533695][T11284] pimreg: left allmulticast mode [ 302.647277][T11183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.666991][T11128] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.691847][T11128] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.712538][ T5111] Bluetooth: hci5: command tx timeout [ 302.725246][T11128] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.774379][T11183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.801103][T11128] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.898256][T11183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.054217][T11183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.229775][T11128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.290931][T11128] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.379771][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.387059][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.469450][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.476662][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.665417][T11183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.753234][T11183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.785763][T11183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.857586][T11183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.199668][T11183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.231685][ T5111] Bluetooth: hci7: command tx timeout [ 304.272228][T11317] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 304.288461][T11183] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.328147][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.335396][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.393516][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.400857][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.467001][T11128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.756331][T11128] veth0_vlan: entered promiscuous mode [ 304.798695][T11128] veth1_vlan: entered promiscuous mode [ 304.978567][T11128] veth0_macvtap: entered promiscuous mode [ 305.012088][T11128] veth1_macvtap: entered promiscuous mode [ 305.075506][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.101030][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.123196][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.141373][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.161704][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.173840][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.189785][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.208233][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.218611][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.230316][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.254648][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.270471][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.295480][T11128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.405815][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.434649][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.446482][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.460004][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.472035][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.487761][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.499989][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.513733][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.534679][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.549135][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.561038][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.572484][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.585697][T11128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.613457][T11183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.615817][T11342] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 305.634985][T11128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.657481][T11128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.662520][T11342] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.682284][T11128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.708312][T11128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.142679][T11183] veth0_vlan: entered promiscuous mode [ 306.174273][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.193128][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.213793][T11183] veth1_vlan: entered promiscuous mode [ 306.264402][ T1844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.292241][ T1844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.313435][ T5111] Bluetooth: hci7: command tx timeout [ 306.366990][T11183] veth0_macvtap: entered promiscuous mode [ 306.465168][T11353] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 306.493945][T11183] veth1_macvtap: entered promiscuous mode [ 306.557418][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.572608][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.586426][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.598472][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.609637][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.622587][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.644570][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.657332][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.672423][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.686699][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.698687][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.711359][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.729998][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.742909][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.759391][T11183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.841775][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.869597][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.886179][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.898839][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.920090][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.931956][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.951155][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.971508][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.987887][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.998637][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.008954][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.021741][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.034433][T11183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.046497][T11183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.068955][T11183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.106014][T11183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.136298][T11183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.151287][T11183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.166878][T11183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.446172][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.476244][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.538842][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.548496][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.757990][T11375] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 308.026288][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.262489][T11381] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 309.488952][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.683764][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.732333][T11394] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2097153 (only 8 groups) [ 309.867373][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.878082][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.890635][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.904560][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.916078][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.923948][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.205386][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.863047][ T51] bridge_slave_1: left allmulticast mode [ 310.875810][ T51] bridge_slave_1: left promiscuous mode [ 310.885344][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.912473][ T51] bridge_slave_0: left allmulticast mode [ 310.919236][ T51] bridge_slave_0: left promiscuous mode [ 310.943561][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.856550][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.913562][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.930510][ T51] bond0 (unregistering): Released all slaves [ 311.990048][T11432] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 312.021651][ T5110] Bluetooth: hci5: command tx timeout [ 312.063676][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.085473][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.167860][T11449] xt_socket: unknown flags 0x8 [ 312.249484][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.278495][T11400] chnl_net:caif_netlink_parms(): no params data found [ 312.460747][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.497732][T11455] netem: invalid attributes len -24 [ 312.528452][T11455] netem: change failed [ 312.662274][ T51] hsr_slave_0: left promiscuous mode [ 312.715102][ T51] hsr_slave_1: left promiscuous mode [ 312.736524][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.773406][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.791936][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.804684][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.865085][ T51] veth1_macvtap: left promiscuous mode [ 312.874065][ T51] veth0_macvtap: left promiscuous mode [ 312.890875][ T51] veth1_vlan: left promiscuous mode [ 312.898224][ T51] veth0_vlan: left promiscuous mode [ 313.838410][ T51] team0 (unregistering): Port device team_slave_1 removed [ 313.896920][ T51] team0 (unregistering): Port device team_slave_0 removed [ 314.074582][ T5110] Bluetooth: hci5: command tx timeout [ 314.731892][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.740325][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.782327][T11400] bridge_slave_0: entered allmulticast mode [ 314.793211][T11400] bridge_slave_0: entered promiscuous mode [ 314.809328][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.818931][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.861828][T11400] bridge_slave_1: entered allmulticast mode [ 314.869284][T11400] bridge_slave_1: entered promiscuous mode [ 315.052768][T11487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.077381][T11400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.141072][T11400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.257192][T11491] macsec1: entered promiscuous mode [ 315.275905][T11491] vlan0: entered promiscuous mode [ 315.298627][T11491] vlan0: left promiscuous mode [ 315.351654][T11400] team0: Port device team_slave_0 added [ 315.412319][T11400] team0: Port device team_slave_1 added [ 315.499821][T11400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.515785][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.594079][T11400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.671153][T11400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.679636][T11400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.723057][T11400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.940513][T11400] hsr_slave_0: entered promiscuous mode [ 315.986923][T11400] hsr_slave_1: entered promiscuous mode [ 316.010088][T11400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.032697][T11400] Cannot create hsr debugfs directory [ 316.151961][ T5110] Bluetooth: hci5: command tx timeout [ 316.197422][T11513] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.414370][T11524] bond0: option ad_select: unable to set because the bond device is up [ 316.741981][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.379248][T11400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.420107][T11400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.480107][T11400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.515596][T11400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.624024][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.978061][T11400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.076002][T11400] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.107751][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.116261][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.138874][T11565] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 318.162715][T11565] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.241654][ T5110] Bluetooth: hci5: command tx timeout [ 318.246533][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.260171][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.127176][T11400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.369224][T11400] veth0_vlan: entered promiscuous mode [ 319.415510][T11400] veth1_vlan: entered promiscuous mode [ 319.609122][T11400] veth0_macvtap: entered promiscuous mode [ 319.666227][T11400] veth1_macvtap: entered promiscuous mode [ 319.722020][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.754325][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.778412][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.819573][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.852361][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.884231][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.944294][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.957061][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.968591][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.989545][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.024125][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.045673][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.061838][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.077999][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.102513][T11400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.142523][T11621] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.168540][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.179462][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.190952][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.206619][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.219789][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.234730][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.253508][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.265371][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.276516][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.287588][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.300087][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.314579][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.325228][T11400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.335920][T11400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.349269][T11400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.378513][T11624] bond0: option ad_select: unable to set because the bond device is up [ 320.448243][T11400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.483629][T11400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.520558][T11400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.551527][T11400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.821450][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.854053][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.948209][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.965362][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.979778][T11641] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 321.069541][T11641] tipc: Failed to remove unknown binding: 66,1,1/0:474795465/474795467 [ 321.145787][T11641] tipc: Failed to remove unknown binding: 66,1,1/0:474795465/474795467 [ 321.449807][T11654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.973715][T11667] xt_TCPMSS: Only works on TCP SYN packets [ 321.991905][T11674] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 322.082440][T11674] tipc: Failed to remove unknown binding: 66,1,1/0:3656766015/3656766017 [ 322.093295][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.102337][T11674] tipc: Failed to remove unknown binding: 66,1,1/0:3656766015/3656766017 [ 322.337556][T11685] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 322.384522][T11685] : entered promiscuous mode [ 322.430000][T11685] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.461868][T11685] bridge_slave_0: left allmulticast mode [ 322.467888][T11685] bridge_slave_0: left promiscuous mode [ 322.477281][T11685] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.785476][ T29] audit: type=1804 audit(1718286454.075:30): pid=11697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3600877100/syzkaller.H5bfff/49/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 322.891461][T11693] lo speed is unknown, defaulting to 1000 [ 322.945265][ T29] audit: type=1804 audit(1718286454.245:31): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3600877100/syzkaller.H5bfff/49/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 323.146564][ T2908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.425255][T11693] lo speed is unknown, defaulting to 1000 [ 323.656010][ T2908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.731875][T11693] lo speed is unknown, defaulting to 1000 [ 323.902718][ T2908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.994670][T11711] tipc: Started in network mode [ 323.999771][T11711] tipc: Node identity ac1414aa, cluster identity 4711 [ 324.052278][T11711] tipc: New replicast peer: 0.0.0.0 [ 324.075180][T11711] tipc: Enabled bearer , priority 0 [ 324.257284][T11715] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 324.282995][ T2908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.299486][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.314873][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.323742][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.333334][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.344002][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 324.352756][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.508533][T11722] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 324.516996][T11722] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.532585][T11693] infiniband syz0: set active [ 324.538883][T11693] infiniband syz0: added lo [ 324.553870][T11693] syz0: rxe_create_cq: returned err = -12 [ 324.560629][T11693] infiniband syz0: Couldn't create ib_mad CQ [ 324.591715][T11693] infiniband syz0: Couldn't open port 1 [ 324.600676][ T8] lo speed is unknown, defaulting to 1000 [ 324.688790][T11725] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.710391][T11713] lo speed is unknown, defaulting to 1000 [ 324.782924][T11693] RDS/IB: syz0: added [ 324.826415][T11693] smc: adding ib device syz0 with port count 1 [ 324.884147][T11693] smc: ib device syz0 port 1 has pnetid [ 324.895442][ T5155] lo speed is unknown, defaulting to 1000 [ 324.908198][ T2908] bridge_slave_1: left allmulticast mode [ 324.943083][ T2908] bridge_slave_1: left promiscuous mode [ 324.948901][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.993951][ T2908] bridge_slave_0: left allmulticast mode [ 325.014438][ T2908] bridge_slave_0: left promiscuous mode [ 325.020345][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.181436][ T25] tipc: Node number set to 2886997162 [ 325.900001][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.915812][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.938553][ T2908] bond0 (unregistering): Released all slaves [ 325.984119][T11693] lo speed is unknown, defaulting to 1000 [ 326.480184][ T5111] Bluetooth: hci5: command tx timeout [ 326.588727][T11693] lo speed is unknown, defaulting to 1000 [ 326.693424][T11750] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 326.776075][T11713] chnl_net:caif_netlink_parms(): no params data found [ 326.916816][T11753] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 327.173462][T11713] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.180647][T11713] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.221969][T11713] bridge_slave_0: entered allmulticast mode [ 327.250902][T11713] bridge_slave_0: entered promiscuous mode [ 327.275113][T11713] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.282493][T11713] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.289789][T11713] bridge_slave_1: entered allmulticast mode [ 327.313000][T11713] bridge_slave_1: entered promiscuous mode [ 327.320411][T11693] lo speed is unknown, defaulting to 1000 [ 327.512490][T11713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.575947][T11713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.762794][T11713] team0: Port device team_slave_0 added [ 327.787512][T11713] team0: Port device team_slave_1 added [ 327.945873][T11713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.961602][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.992506][T11713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.011167][T11693] lo speed is unknown, defaulting to 1000 [ 328.051826][T11713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.058832][T11713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.201406][T11713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.407195][T11713] hsr_slave_0: entered promiscuous mode [ 328.445757][T11713] hsr_slave_1: entered promiscuous mode [ 328.521485][T11713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.529360][T11713] Cannot create hsr debugfs directory [ 328.561402][ T5111] Bluetooth: hci5: command tx timeout [ 328.712798][T11693] lo speed is unknown, defaulting to 1000 [ 328.966669][T11789] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 329.444311][T11693] lo speed is unknown, defaulting to 1000 [ 329.882695][ T5110] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 329.895536][ T5110] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 329.906023][ T5110] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 329.914451][ T5110] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 329.926256][ T5110] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 329.945583][ T5110] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 329.993408][T11713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.030094][T11713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.044042][T11713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.055671][T11713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.311007][T11693] lo speed is unknown, defaulting to 1000 [ 330.358478][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.477154][T11713] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.520392][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.528225][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.599173][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.611116][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.631807][ T5110] Bluetooth: hci5: command tx timeout [ 330.770803][T11713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.975613][T11693] lo speed is unknown, defaulting to 1000 [ 331.427075][T11713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.587704][T11693] lo speed is unknown, defaulting to 1000 [ 331.632340][T11713] veth0_vlan: entered promiscuous mode [ 331.688498][T11713] veth1_vlan: entered promiscuous mode [ 331.797878][T11713] veth0_macvtap: entered promiscuous mode [ 331.845828][T11713] veth1_macvtap: entered promiscuous mode [ 331.923295][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.938964][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.984084][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.001888][ T5110] Bluetooth: hci8: command tx timeout [ 332.021479][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.087545][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.133901][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.173921][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.215440][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.251361][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.273692][T11841] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 332.283627][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.283696][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.371494][T11841] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.385178][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.403228][T11841] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.423389][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.444752][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.467615][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.499431][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.527268][T11713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.711657][ T5110] Bluetooth: hci5: command tx timeout [ 332.731025][ T2908] hsr_slave_0: left promiscuous mode [ 332.783215][ T2908] hsr_slave_1: left promiscuous mode [ 332.821800][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.836716][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.864042][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.911597][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.084134][ T2908] veth1_macvtap: left promiscuous mode [ 333.102145][ T2908] veth0_macvtap: left promiscuous mode [ 333.120350][ T2908] veth1_vlan: left promiscuous mode [ 333.134634][ T2908] veth0_vlan: left promiscuous mode [ 334.078395][ T5110] Bluetooth: hci8: command tx timeout [ 334.431792][ T29] audit: type=1804 audit(1718286465.725:32): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3600877100/syzkaller.H5bfff/73/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 334.660662][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 334.780689][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 335.622586][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.638834][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.651128][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.664335][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.676784][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.688487][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.698694][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.709867][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.720152][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.730872][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.740772][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.753898][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.766938][T11713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.778031][T11713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.793977][T11713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.988921][T11713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.016901][T11906] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 336.033284][T11906] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.043835][T11713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.047198][T11906] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.101410][T11713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.111144][T11713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.155486][ T5110] Bluetooth: hci8: command tx timeout [ 336.439427][ T2444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.450698][ T2444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.495100][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.503737][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.549299][T11798] chnl_net:caif_netlink_parms(): no params data found [ 336.790508][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.820358][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.832869][T11798] bridge_slave_0: entered allmulticast mode [ 336.841791][T11798] bridge_slave_0: entered promiscuous mode [ 336.856886][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.864374][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.872160][T11798] bridge_slave_1: entered allmulticast mode [ 336.879620][T11798] bridge_slave_1: entered promiscuous mode [ 337.012394][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.099099][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.258004][T11798] team0: Port device team_slave_0 added [ 337.286808][T11798] team0: Port device team_slave_1 added [ 337.444019][T11932] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.744840][ T1844] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.805614][T11798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.851603][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.897534][T11798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.119941][ T1844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.186865][T11798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.231618][ T5110] Bluetooth: hci8: command tx timeout [ 338.235041][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.322103][T11798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.542838][ T1844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.655112][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.665617][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.674575][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.700682][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.721067][T11961] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 338.734908][T11961] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 338.746260][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.755624][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.763638][T11961] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.853561][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.955428][ T1844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.084348][T11972] xt_HMARK: spi-set and port-set can't be combined [ 339.087821][T11798] hsr_slave_0: entered promiscuous mode [ 339.120893][T11798] hsr_slave_1: entered promiscuous mode [ 339.144029][T11798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.166048][T11798] Cannot create hsr debugfs directory [ 339.285214][T11976] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.454953][T11957] lo speed is unknown, defaulting to 1000 [ 339.830198][ T1844] bridge_slave_1: left allmulticast mode [ 339.859884][ T1844] bridge_slave_1: left promiscuous mode [ 339.880061][ T1844] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.925946][ T1844] bridge_slave_0: left allmulticast mode [ 339.938202][ T1844] bridge_slave_0: left promiscuous mode [ 339.958773][ T1844] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.791681][ T5111] Bluetooth: hci5: command tx timeout [ 342.169020][ T1844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.237417][ T1844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.300332][ T1844] bond0 (unregistering): Released all slaves [ 342.871513][ T5111] Bluetooth: hci5: command tx timeout [ 343.088716][T11798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.122911][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.186659][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.476189][T11798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.690538][T11798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.880818][T11798] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 343.900873][T11798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.302705][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802385f400: rx timeout, send abort [ 344.389214][T12032] wg2: entered promiscuous mode [ 344.412414][T12032] wg2: entered allmulticast mode [ 344.551855][ T1844] hsr_slave_0: left promiscuous mode [ 344.580364][ T1844] hsr_slave_1: left promiscuous mode [ 344.592173][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.606640][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.624089][ T1844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.635685][ T1844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.690732][ T1844] veth1_macvtap: left promiscuous mode [ 344.696725][ T1844] veth0_macvtap: left promiscuous mode [ 344.702594][ T1844] veth1_vlan: left promiscuous mode [ 344.708111][ T1844] veth0_vlan: left promiscuous mode [ 344.815213][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802385f400: abort rx timeout. Force session deactivation [ 344.951572][ T5111] Bluetooth: hci5: command tx timeout [ 345.566932][ T1844] team0 (unregistering): Port device team_slave_1 removed [ 345.645544][ T1844] team0 (unregistering): Port device team_slave_0 removed [ 346.401161][T11957] chnl_net:caif_netlink_parms(): no params data found [ 346.563190][T11798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 346.605153][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.640828][ T29] audit: type=1804 audit(1718286477.935:33): pid=12049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3600877100/syzkaller.H5bfff/93/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 346.693991][T11798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 346.760477][T11798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 346.882553][T11798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 347.031606][ T5111] Bluetooth: hci5: command tx timeout [ 347.045457][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.075844][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.083440][T11957] bridge_slave_0: entered allmulticast mode [ 347.092182][T11957] bridge_slave_0: entered promiscuous mode [ 347.116734][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.147145][T11957] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.191394][T11957] bridge_slave_1: entered allmulticast mode [ 347.214090][T11957] bridge_slave_1: entered promiscuous mode [ 347.449617][T12070] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.575585][T11957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.654274][T11957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.864801][T11957] team0: Port device team_slave_0 added [ 347.874087][T12084] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 347.912844][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.956223][T11957] team0: Port device team_slave_1 added [ 348.036381][ T29] audit: type=1804 audit(1718286479.325:34): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir928203113/syzkaller.LrN8JJ/236/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 348.144017][T12084] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 348.179057][T12084] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.193519][T11957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.224816][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.260745][T11957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.289136][T11957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.304126][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.376525][T11957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.641809][T11957] hsr_slave_0: entered promiscuous mode [ 348.704618][T11957] hsr_slave_1: entered promiscuous mode [ 348.731461][T11957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.739748][T11957] Cannot create hsr debugfs directory [ 348.932409][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.023203][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.079054][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.086280][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.162533][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.169800][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.742497][T12125] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.117134][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.408169][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 350.479544][T11957] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.561102][T11957] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.717459][ T9977] bridge0: port 3(syz_tun) entered disabled state [ 350.797718][T12144] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.884276][ T9977] syz_tun (unregistering): left allmulticast mode [ 350.890843][ T9977] syz_tun (unregistering): left promiscuous mode [ 350.928858][ T9977] bridge0: port 3(syz_tun) entered disabled state [ 350.951699][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.965299][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.979222][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.989616][T11957] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.999872][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.022448][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.032887][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.037084][T11957] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.272421][ T2908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.497842][ T2908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.563450][T12148] lo speed is unknown, defaulting to 1000 [ 351.580403][T12156] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 351.626424][T11798] veth0_vlan: entered promiscuous mode [ 351.650540][T11798] veth1_vlan: entered promiscuous mode [ 351.743582][ T2908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.904050][ T2908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.085730][T11798] veth0_macvtap: entered promiscuous mode [ 352.195187][T11798] veth1_macvtap: entered promiscuous mode [ 352.220283][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.455558][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.468905][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.494275][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.506864][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.518303][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.541499][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.563698][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.601157][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.617277][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.630169][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.644389][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.677491][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.707907][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.732790][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.756579][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.789790][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.926787][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.940129][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.951873][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.965230][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.977352][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.994292][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.008348][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.020397][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.040117][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.063407][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.063535][T12185] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.076144][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.110006][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.111538][ T5111] Bluetooth: hci3: command tx timeout [ 353.129710][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.150675][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.173859][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.199517][T11957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.256767][T11798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.284757][T11798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.307568][T11798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.319868][T11798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.333763][ T2908] bridge_slave_1: left allmulticast mode [ 353.339464][ T2908] bridge_slave_1: left promiscuous mode [ 353.345774][ T2908] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.362832][ T2908] bridge_slave_0: left allmulticast mode [ 353.368872][ T2908] bridge_slave_0: left promiscuous mode [ 353.385600][ T2908] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.177406][T12197] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.280845][ T2908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.311965][ T2908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.328877][ T2908] bond0 (unregistering): Released all slaves [ 354.362727][ T2908] bond1 (unregistering): Released all slaves [ 354.840759][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.896606][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.984475][T12148] chnl_net:caif_netlink_parms(): no params data found [ 355.133933][T12217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.191483][ T5111] Bluetooth: hci3: command tx timeout [ 355.227785][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.236273][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.273135][T12215] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 355.394487][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.404544][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.483478][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.506729][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.922849][T12148] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.949370][T12148] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.963024][T12148] bridge_slave_0: entered allmulticast mode [ 355.977926][T12148] bridge_slave_0: entered promiscuous mode [ 356.049722][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.068681][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.095982][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.118977][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.152840][ T2908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.159608][T12237] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.182606][ T2908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.245393][ T2908] veth1_macvtap: left promiscuous mode [ 356.250975][ T2908] veth0_macvtap: left promiscuous mode [ 356.269522][ T2908] veth1_vlan: left promiscuous mode [ 356.279536][ T2908] veth0_vlan: left promiscuous mode [ 356.501492][ T2908] infiniband syz0: set down [ 357.147323][ T2908] team0 (unregistering): Port device team_slave_1 removed [ 357.213010][ T2908] team0 (unregistering): Port device team_slave_0 removed [ 357.271864][ T5111] Bluetooth: hci3: command tx timeout [ 357.725512][ T1844] smc: removing ib device syz0 [ 357.757184][T12148] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.765896][T12148] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.778497][T12148] bridge_slave_1: entered allmulticast mode [ 357.798576][T12148] bridge_slave_1: entered promiscuous mode [ 357.941959][ T5157] lo speed is unknown, defaulting to 1000 [ 358.182864][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.309265][T12148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.363214][T12245] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.435159][T12148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.813608][T12148] team0: Port device team_slave_0 added [ 358.905981][T12148] team0: Port device team_slave_1 added [ 359.226112][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.267002][T12266] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 359.351801][ T5111] Bluetooth: hci3: command tx timeout [ 359.401980][T12148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.439186][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.596070][T12148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.659752][T12148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.711710][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.881377][T12148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.935387][T11957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.685520][T12148] hsr_slave_0: entered promiscuous mode [ 360.860365][T12148] hsr_slave_1: entered promiscuous mode [ 360.886927][T12148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.931466][T12148] Cannot create hsr debugfs directory [ 362.013103][T11957] veth0_vlan: entered promiscuous mode [ 362.048285][T11957] veth1_vlan: entered promiscuous mode [ 362.291152][T11957] veth0_macvtap: entered promiscuous mode [ 362.424927][T11957] veth1_macvtap: entered promiscuous mode [ 362.593162][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.629428][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.651626][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.675543][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.697998][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.725905][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.746938][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.768940][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.797012][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.818774][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.839880][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.867060][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.879402][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.892700][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.908241][T11957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.918975][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.048637][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.070887][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.096982][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.121316][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.137251][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.160761][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.180874][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.210893][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.231016][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.242541][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.252651][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.264184][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.275048][T11957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.295594][T11957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.336695][T11957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.477802][T11957] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.505682][T11957] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.534197][T11957] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.555362][T11957] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.744138][T12148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.793678][T12148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.850566][T12148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.893105][T12148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.125860][T12359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.211472][T12359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.258191][T12365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.378474][T12365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.501486][T12370] dccp_invalid_packet: P.Data Offset(0) too small [ 364.614147][T12372] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 364.935885][T12148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.021088][T12148] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.123365][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.133009][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.214358][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.221832][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.458876][T12363] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.644038][T12363] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.903120][T12363] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.113511][T12363] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.345262][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.411767][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.458059][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.558690][T12363] bridge_slave_1: left allmulticast mode [ 366.568367][T12363] bridge_slave_1: left promiscuous mode [ 366.588809][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.640872][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.649920][T12363] bridge_slave_0: left allmulticast mode [ 366.671995][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.683027][T12363] bridge_slave_0: left promiscuous mode [ 366.695632][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.719298][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.727716][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 366.747390][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.756366][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.868152][T12363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.883068][T12363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.896513][T12363] bond0 (unregistering): Released all slaves [ 368.338944][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.477886][T12148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.567579][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.604904][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.655142][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.872255][ T5111] Bluetooth: hci5: command tx timeout [ 368.887983][T12363] hsr_slave_0: left promiscuous mode [ 368.901553][T12363] hsr_slave_1: left promiscuous mode [ 368.913107][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.931085][T12363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.955201][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.978783][T12363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.038343][T12363] veth1_macvtap: left promiscuous mode [ 369.057111][T12363] veth0_macvtap: left promiscuous mode [ 369.063308][T12363] veth1_vlan: left promiscuous mode [ 369.068746][T12363] veth0_vlan: left promiscuous mode [ 370.007321][T12363] team0 (unregistering): Port device team_slave_1 removed [ 370.061826][T12363] team0 (unregistering): Port device team_slave_0 removed [ 370.952819][ T5111] Bluetooth: hci5: command tx timeout [ 371.011162][T12148] veth0_vlan: entered promiscuous mode [ 371.055637][T12418] chnl_net:caif_netlink_parms(): no params data found [ 371.220847][T12148] veth1_vlan: entered promiscuous mode [ 371.291810][ T29] audit: type=1804 audit(1718286502.595:35): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2555228666/syzkaller.7xzfVx/237/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 371.357653][T12481] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 371.590010][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.618221][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.627106][T12418] bridge_slave_0: entered allmulticast mode [ 371.637586][T12418] bridge_slave_0: entered promiscuous mode [ 371.698589][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.719281][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.751377][T12418] bridge_slave_1: entered allmulticast mode [ 371.777293][T12418] bridge_slave_1: entered promiscuous mode [ 371.948134][T12148] veth0_macvtap: entered promiscuous mode [ 372.060804][T12418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.098750][T12148] veth1_macvtap: entered promiscuous mode [ 372.195480][T12418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.387568][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.431330][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.463047][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.487189][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.519550][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.549821][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.572091][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.593042][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.628917][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.642157][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.652165][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.665507][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.680839][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.709614][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.736109][T12148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.761110][T12418] team0: Port device team_slave_0 added [ 372.796039][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.843573][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.862307][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.892025][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.915860][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.948692][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.974322][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.995371][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.018619][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.029849][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.031390][ T5111] Bluetooth: hci5: command tx timeout [ 373.055802][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.068984][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.081237][T12148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.100409][T12148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.116554][T12148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.134000][T12418] team0: Port device team_slave_1 added [ 373.168613][T12148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.187604][T12148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.209372][T12148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.220825][T12148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.344533][T12418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.373171][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.429929][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.448994][T12418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.456109][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.467809][T12418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.477255][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.515514][T12418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.534183][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.564611][T12539] netem: unknown loss type 8 [ 373.572800][T12539] netem: change failed [ 373.722090][T12418] hsr_slave_0: entered promiscuous mode [ 373.749595][T12418] hsr_slave_1: entered promiscuous mode [ 373.771955][T12418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.785618][T12418] Cannot create hsr debugfs directory [ 374.320833][T12365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.347446][T12365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.556259][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.597544][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.611933][T12553] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 375.111731][ T5111] Bluetooth: hci5: command tx timeout [ 375.165418][ T1051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.247226][ T5110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.258468][ T5110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.273434][ T5110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.321875][ T5110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.336399][ T5110] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 375.345501][ T5110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.487871][ T1051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.756799][ T1051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.318809][T12600] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 376.370981][T12602] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 376.495355][T12418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.549823][T12418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.589714][T12418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.700872][T12418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.434498][ T5111] Bluetooth: hci6: command tx timeout [ 377.784460][T12647] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.309668][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.346420][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.410615][ T1051] bond0 (unregistering): Released all slaves [ 378.475592][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.522747][T12568] chnl_net:caif_netlink_parms(): no params data found [ 378.554783][ T1051] : left promiscuous mode [ 378.572758][T12671] sctp: [Deprecated]: syz-executor.3 (pid 12671) Use of int in maxseg socket option. [ 378.572758][T12671] Use struct sctp_assoc_value instead [ 379.037781][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.167977][T12683] Bluetooth: MGMT ver 1.22 [ 379.311477][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.338157][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.356454][T12568] bridge_slave_0: entered allmulticast mode [ 379.372836][T12568] bridge_slave_0: entered promiscuous mode [ 379.426831][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.482333][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.511692][ T5111] Bluetooth: hci6: command tx timeout [ 379.532199][T12568] bridge_slave_1: entered allmulticast mode [ 379.572703][T12568] bridge_slave_1: entered promiscuous mode [ 379.775280][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.806203][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.831766][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.839796][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.913425][ T1051] veth1_macvtap: left promiscuous mode [ 379.920300][ T1051] veth0_macvtap: left promiscuous mode [ 379.927350][ T1051] veth1_vlan: left promiscuous mode [ 379.933885][ T1051] veth0_vlan: left promiscuous mode [ 381.100854][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 381.211708][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 381.592926][ T5110] Bluetooth: hci6: command tx timeout [ 381.867422][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.878719][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.003055][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.152840][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.202961][T12568] team0: Port device team_slave_0 added [ 382.258408][T12568] team0: Port device team_slave_1 added [ 382.712194][ T783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.766272][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.782885][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.881534][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.049051][T12418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.078917][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.088070][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.151421][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.191957][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.316345][T12418] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.359295][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.475322][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.485221][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.672029][ T5110] Bluetooth: hci6: command tx timeout [ 383.850477][T12748] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 384.009664][T12568] hsr_slave_0: entered promiscuous mode [ 384.090075][T12568] hsr_slave_1: entered promiscuous mode [ 384.142347][T12568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.150487][T12568] Cannot create hsr debugfs directory [ 384.261478][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.362694][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.370325][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.841768][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.271701][ T5155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.432330][ T30] INFO: task syz-executor.1:9743 blocked for more than 143 seconds. 2024/06/13 13:48:36 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 385.491276][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 385.552269][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.594327][ T30] task:syz-executor.1 state:D stack:23800 pid:9743 tgid:9741 ppid:7809 flags:0x00000006 [ 385.656276][ T30] Call Trace: [ 385.660481][ T30] [ 385.672144][ T30] __schedule+0x17e8/0x4a20 [ 385.677047][ T30] ? __pfx___schedule+0x10/0x10 [ 385.706278][ T30] ? __pfx_lock_release+0x10/0x10 [ 385.731924][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 385.737472][ T30] ? schedule+0x90/0x320 [ 385.761405][ T30] schedule+0x14b/0x320 [ 385.765635][ T30] schedule_preempt_disabled+0x13/0x30 [ 385.771112][ T30] __mutex_lock+0x6a4/0xd70 [ 385.781674][ T783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.811247][ T30] ? __mutex_lock+0x527/0xd70 [ 385.816082][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5d0 [ 385.834978][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 385.840067][ T30] ? __asan_memset+0x23/0x50 [ 385.851334][ T30] nfsd_nl_listener_get_doit+0x115/0x5d0 [ 385.857025][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 385.881272][ T30] genl_rcv_msg+0xb14/0xec0 [ 385.885844][ T30] ? mark_lock+0x9a/0x350 [ 385.890203][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.912885][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 385.919011][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 385.937380][ T30] ? __pfx___might_resched+0x10/0x10 [ 385.971327][ T30] netlink_rcv_skb+0x1e3/0x430 [ 385.978718][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 386.011555][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.016926][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 386.041430][ T30] genl_rcv+0x28/0x40 [ 386.045485][ T30] netlink_unicast+0x7ea/0x980 [ 386.050281][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 386.081709][ T30] ? __virt_addr_valid+0x183/0x520 [ 386.086902][ T30] ? __check_object_size+0x49c/0x900 [ 386.101381][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 386.106564][ T30] netlink_sendmsg+0x8db/0xcb0 [ 386.121386][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.126858][ T30] ? __import_iovec+0x536/0x820 [ 386.152127][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 386.159183][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 386.181450][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 386.187003][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [