last executing test programs: 39.149443642s ago: executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000660a000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 38.926718362s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000540)=""/131, 0xe}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 38.490738466s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000022c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x290, 0x328, 0x328, 0x328, 0x1a8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'batadv0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0x70, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ip_vti0\x00', 'nicvf0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 38.389610517s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x1e}]}, 0x28}}, 0x0) 38.300600303s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="130000007200a143000000030000000007"], 0x18}}, 0x0) 38.205568375s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x626, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 36.897488961s ago: executing program 3: r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r0, 0x0) 36.760393322s ago: executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x2}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 36.549642598s ago: executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x408d0, &(0x7f0000000700)={0xa, 0x0, 0x0, @mcast2}, 0x20) 36.502070429s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000300)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 36.409150491s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @local}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x48}}, 0x0) 36.319951595s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 31.627784415s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="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", 0x5c1}], 0x1, &(0x7f0000000700)=ANY=[], 0xd0}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMPNS(r0, 0x80108907, &(0x7f0000000040)) 31.555243556s ago: executing program 0: r0 = socket(0x28, 0x0, 0x0) r1 = socket(0x28, 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) write$binfmt_script(r0, 0x0, 0xffffff9a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0, 0x24}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x200000}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000001440)={&(0x7f00000001c0)=@nameseq={0x1e, 0x2, 0x0, {0x42}}, 0x10, 0x0}, 0x0) 31.453355917s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000140)=""/75}, 0x20) 31.401556913s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x72}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) 31.392519267s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 31.350712747s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@ipv6_newaddrlabel={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFAL_ADDRESS={0x14, 0x1, @dev}]}, 0x30}}, 0x0) 30.835311318s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.800342532s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.736149997s ago: executing program 2: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x1310, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) 30.64859093s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x8a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x0, 0x6}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x28, 0x107, 0x0, 0x0, {0x8}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0x9, 0x0, 0x0, 0x0, @str='!])&\x00'}]}]}, 0x24}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 30.342916793s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 30.289578121s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.224722514s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 30.133071436s ago: executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x1310, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x0) 30.035986593s ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}}, 0x0) 804.594821ms ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000006fc0)=[{{&(0x7f0000003200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x4, 0x58}]}}}], 0x18}}], 0x1, 0x0) 621.224945ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x44) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r1, 0x0) kernel console output (not intermixed with test programs): problems! [ 59.459116][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.486692][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.502540][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.517303][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.527996][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.541200][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.554430][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.565990][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.577571][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.589581][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.600015][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.610536][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.620692][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.632264][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.642192][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.652743][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.664236][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.678593][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.696793][ T5121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.706554][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.713196][ T5121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.722701][ T5121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.731919][ T5121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.760974][ T5118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.776863][ T5118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.790687][ T5118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.799665][ T5118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.861433][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.903708][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.062024][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.078849][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.126311][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.150805][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.168422][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.186576][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.316765][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.335013][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.457532][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.469833][ T5217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.488142][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.697394][ T5225] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 60.811070][ T5220] Cannot find set identified by id 0 to match [ 60.904029][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.006174][ T5231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.058076][ T5238] syz_tun: entered promiscuous mode [ 61.124191][ T5234] syz_tun: left promiscuous mode [ 61.291061][ T5246] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 61.303337][ T5115] Bluetooth: hci0: command tx timeout [ 61.303394][ T5120] Bluetooth: hci1: command tx timeout [ 61.383876][ T5120] Bluetooth: hci4: command tx timeout [ 61.383894][ T5115] Bluetooth: hci2: command tx timeout [ 61.389282][ T5120] Bluetooth: hci3: command tx timeout [ 61.615145][ T5262] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 61.807955][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.900763][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.999737][ T5273] syz_tun: entered promiscuous mode [ 62.071135][ T5272] syz_tun: left promiscuous mode [ 62.282637][ T5289] Cannot find set identified by id 0 to match [ 62.654908][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.740973][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.947642][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.315097][ T5333] net_ratelimit: 2 callbacks suppressed [ 63.315115][ T5333] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 63.345356][ T5337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.990132][ T5370] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.218020][ T5380] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 64.653966][ T5404] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.673288][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 64.716099][ T5407] Cannot find set identified by id 0 to match [ 65.385221][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.596246][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.738605][ T5445] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 65.773393][ T5445] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.889994][ T5453] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.981372][ T5457] sctp: [Deprecated]: syz-executor.3 (pid 5457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.981372][ T5457] Use struct sctp_sack_info instead [ 66.004838][ T5459] dccp_invalid_packet: P.Data Offset(48) too large [ 66.165241][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.269466][ T5478] bridge2: entered allmulticast mode [ 66.279913][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.416573][ T5493] dccp_invalid_packet: P.Data Offset(48) too large [ 66.433470][ T5124] Bluetooth: hci4: command 0x0405 tx timeout [ 67.239112][ T5537] dvmrp0: entered allmulticast mode [ 67.604264][ T5550] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.199339][ T5571] dvmrp0: entered allmulticast mode [ 68.297637][ T5576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.503175][ T5124] Bluetooth: hci4: command 0x0405 tx timeout [ 68.696318][ T5603] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.830773][ T5607] dvmrp0: entered allmulticast mode [ 70.005187][ T5663] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.410404][ T5680] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.468614][ T5682] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.582988][ T5124] Bluetooth: hci4: command 0x0405 tx timeout [ 70.612519][ T5688] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.635025][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.641526][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.220952][ T5802] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.345572][ T5811] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.867112][ T5838] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 74.211870][ T5857] Zero length message leads to an empty skb [ 74.463715][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.716682][ T5886] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 74.761799][ T5892] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.653598][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.562715][ T5967] syz_tun: entered promiscuous mode [ 76.594489][ T5967] syz_tun: left promiscuous mode [ 76.751163][ T784] cfg80211: failed to load regulatory.db [ 76.862066][ T5987] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 76.961783][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.009938][ T5995] Bluetooth: MGMT ver 1.22 [ 77.237558][ T6004] syz_tun: entered promiscuous mode [ 77.245793][ T6004] syz_tun: left promiscuous mode [ 77.487634][ T6015] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.621628][ T6020] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.631771][ T6020] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.640580][ T6020] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.649321][ T6020] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.666888][ T6020] vxlan0: entered promiscuous mode [ 77.676670][ T6020] vxlan0: entered allmulticast mode [ 77.714850][ T6020] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.723898][ T6020] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.732764][ T6020] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.742021][ T6020] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.856258][ T6028] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 78.050391][ T6037] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.059493][ T6037] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.068786][ T6037] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.077629][ T6037] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.120094][ T6040] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 79.409027][ T6050] bond0: entered promiscuous mode [ 79.423030][ T6050] bond_slave_0: entered promiscuous mode [ 79.428940][ T6050] bond_slave_1: entered promiscuous mode [ 79.453151][ T6050] bond0: entered allmulticast mode [ 79.458301][ T6050] bond_slave_0: entered allmulticast mode [ 79.465025][ T6050] bond_slave_1: entered allmulticast mode [ 79.471940][ T6045] bond0: entered promiscuous mode [ 79.478006][ T6045] bond_slave_0: entered promiscuous mode [ 79.492468][ T6045] bond_slave_1: entered promiscuous mode [ 79.506930][ T6045] bond0: entered allmulticast mode [ 79.522935][ T6045] bond_slave_0: entered allmulticast mode [ 79.528681][ T6045] bond_slave_1: entered allmulticast mode [ 79.595974][ T6064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 79.847862][ T6078] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.869062][ T6078] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 80.000561][ T6088] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 80.186290][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.218001][ T6088] team0: entered promiscuous mode [ 80.223324][ T6088] team_slave_0: entered promiscuous mode [ 80.229247][ T6088] team_slave_1: entered promiscuous mode [ 80.237753][ T6088] team0: entered allmulticast mode [ 80.244332][ T6088] team_slave_0: entered allmulticast mode [ 80.250324][ T6088] team_slave_1: entered allmulticast mode [ 80.258898][ T6088] bond0: (slave team0): Enslaving as an active interface with an up link [ 81.306565][ T6166] bond0: entered promiscuous mode [ 81.311638][ T6166] bond_slave_0: entered promiscuous mode [ 81.350922][ T6166] bond_slave_1: entered promiscuous mode [ 81.360207][ T6166] bond0: entered allmulticast mode [ 81.372938][ T6166] bond_slave_0: entered allmulticast mode [ 81.381148][ T6166] bond_slave_1: entered allmulticast mode [ 81.532635][ T6173] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 81.633760][ T6180] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.667841][ T6180] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 82.903791][ T6260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.662257][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.750786][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.977394][ T6336] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.252622][ T6351] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 84.438888][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.873145][ T6391] tipc: Enabling of bearer rejected, failed to enable media [ 85.495815][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.524077][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.750220][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.760402][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.682638][ T6430] tipc: Enabling of bearer rejected, failed to enable media [ 87.907334][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.001839][ T6465] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 88.022771][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.032724][ T6465] netlink: 3285 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.458369][ T6484] tipc: Enabling of bearer rejected, failed to enable media [ 88.723312][ T6494] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 88.746188][ T6494] __nla_validate_parse: 1 callbacks suppressed [ 88.746202][ T6494] netlink: 3285 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.278304][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.301290][ T6508] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 90.308993][ T6508] macsec1: entered promiscuous mode [ 90.465322][ T6530] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 90.522559][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.597111][ T6531] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 90.697115][ T6543] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 90.704530][ T6531] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 90.705652][ T6543] netlink: 3285 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.732200][ T6531] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 90.766683][ T6531] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.933103][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.178428][ T6570] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 91.205030][ T6576] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 91.312240][ T6579] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.371165][ T6584] ebt_limit: overflow, try lower: 0/0 [ 91.738922][ T6590] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 91.795676][ T6590] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 91.817670][ T6590] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 91.848815][ T6590] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 92.155088][ T6613] ebt_limit: overflow, try lower: 0/0 [ 92.521082][ T6628] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 92.567262][ T6628] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 92.585618][ T6628] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 92.604718][ T6628] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 92.620002][ T6638] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 92.642417][ T6638] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.664155][ T6641] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.282245][ T6668] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 93.298362][ T6668] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.581352][ T6679] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 93.609474][ T6679] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 93.619101][ T6688] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.999669][ T6707] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.097511][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.245584][ T6728] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.289562][ T6728] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 95.806206][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.231505][ T6769] Bluetooth: MGMT ver 1.22 [ 96.378457][ T6779] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 96.380747][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.213765][ T6823] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 98.141780][ T6864] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.169828][ T6864] caif0 speed is unknown, defaulting to 1000 [ 98.207920][ T6864] caif0 speed is unknown, defaulting to 1000 [ 98.268749][ T6864] caif0 speed is unknown, defaulting to 1000 [ 98.732153][ T784] caif0 speed is unknown, defaulting to 1000 [ 98.738845][ T6864] infiniband syz1: set down [ 98.746103][ T6864] infiniband syz1: added caif0 [ 98.777647][ T6876] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.816909][ T6876] openvswitch: netlink: Key type 29 is not supported [ 98.870682][ T6864] RDS/IB: syz1: added [ 98.890295][ T6864] smc: adding ib device syz1 with port count 1 [ 98.935812][ T6864] smc: ib device syz1 port 1 has pnetid [ 98.946753][ T6884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.962111][ T784] caif0 speed is unknown, defaulting to 1000 [ 98.988122][ T6864] caif0 speed is unknown, defaulting to 1000 [ 99.217115][ T6901] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 99.298223][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.491888][ T6864] caif0 speed is unknown, defaulting to 1000 [ 99.668568][ T6923] vlan2: entered promiscuous mode [ 99.862949][ T5124] Bluetooth: hci4: command 0x0405 tx timeout [ 99.892425][ T6935] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.981631][ T6864] caif0 speed is unknown, defaulting to 1000 [ 100.056196][ T6941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.381998][ T6963] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 100.419807][ T6864] caif0 speed is unknown, defaulting to 1000 [ 100.525618][ T6965] vlan2: entered promiscuous mode [ 100.812986][ T6986] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.839926][ T6986] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 100.857074][ T6989] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 100.864706][ T6986] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 100.951411][ T6864] caif0 speed is unknown, defaulting to 1000 [ 101.577888][ T7020] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.611091][ T7020] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 101.648711][ T7020] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 101.865167][ T7038] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 101.888803][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.917416][ T7038] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.958059][ T7044] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.980325][ T7044] rdma_rxe: rxe_newlink: failed to add caif0 [ 102.023960][ T5115] Bluetooth: hci4: command 0x0405 tx timeout [ 102.202178][ T7059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.919650][ T7104] tipc: Started in network mode [ 102.936106][ T7104] tipc: Node identity id-name-, cluster identity 4711 [ 102.957615][ T7104] tipc: Enabling of bearer rejected, failed to enable media [ 102.961847][ T7109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.347131][ T7135] lo speed is unknown, defaulting to 1000 [ 103.367846][ T7135] lo speed is unknown, defaulting to 1000 [ 103.380694][ T7137] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 103.404112][ T7135] lo speed is unknown, defaulting to 1000 [ 103.411346][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.468093][ T7135] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.532299][ T7135] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.551414][ T7121] syz-executor.4 (7121) used greatest stack depth: 18896 bytes left [ 103.568668][ T7147] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 103.590506][ T7146] Driver unsupported XDP return value 0 on prog (id 202) dev N/A, expect packet loss! [ 103.620856][ T7147] team0: Device hsr_slave_0 failed to register rx_handler [ 103.655141][ T7135] lo speed is unknown, defaulting to 1000 [ 103.667684][ T7149] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 103.694827][ T7135] lo speed is unknown, defaulting to 1000 [ 103.715359][ T7135] lo speed is unknown, defaulting to 1000 [ 103.732107][ T7135] lo speed is unknown, defaulting to 1000 [ 103.751246][ T7135] lo speed is unknown, defaulting to 1000 [ 104.095994][ T7174] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 104.116973][ T7173] tipc: Started in network mode [ 104.121984][ T7173] tipc: Node identity id-name-, cluster identity 4711 [ 104.164544][ T7173] tipc: Enabling of bearer rejected, failed to enable media [ 104.213975][ T7179] tipc: Started in network mode [ 104.239304][ T7179] tipc: Node identity id-name-, cluster identity 4711 [ 104.268539][ T7179] tipc: Enabling of bearer rejected, failed to enable media [ 104.653277][ T7216] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 105.022666][ T7235] __nla_validate_parse: 3 callbacks suppressed [ 105.022685][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.405161][ T7259] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 105.551558][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.584343][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.994111][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.309801][ T7339] tipc: Can't bind to reserved service type 0 [ 107.396063][ T7345] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.411893][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.427845][ T7345] tc_dump_action: action bad kind [ 107.832136][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.042963][ T7406] tipc: Failed to remove unknown binding: 66,1,1/0:2834889938/2834889940 [ 109.068458][ T7406] tipc: Failed to remove unknown binding: 66,1,1/0:2834889938/2834889940 [ 109.097492][ T7406] tipc: Failed to remove unknown binding: 66,1,1/0:2834889938/2834889940 [ 109.302449][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.421960][ T7426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.442938][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.464183][ T7426] tc_dump_action: action bad kind [ 109.794315][ T7441] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 109.839125][ T7441] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 110.195450][ T7449] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 110.222162][ T7449] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 110.843573][ T7466] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 110.914334][ T7471] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 111.061889][ T7485] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 111.087628][ T7485] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 111.500881][ T7521] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 111.512633][ T7523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.752245][ T7540] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.306637][ T29] audit: type=1800 audit(1717119820.984:2): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 112.575410][ T7603] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 112.585361][ T7603] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 113.727185][ T7672] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 114.240410][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.501302][ T7716] nbd: couldn't find device at index -1 [ 115.437891][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.788792][ T7791] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.799618][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.919416][ T7794] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.952349][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.053158][ T7802] nbd: couldn't find device at index -1 [ 116.853284][ T7843] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.880611][ T7843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.330943][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.558297][ T7880] validate_nla: 1 callbacks suppressed [ 117.558314][ T7880] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 117.589185][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.544392][ T7933] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 118.743458][ T7947] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 119.154337][ T7965] xt_CT: No such helper "snmp" [ 119.299551][ T7980] __nla_validate_parse: 11 callbacks suppressed [ 119.299573][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.418442][ T7989] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 119.439761][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.561113][ T7995] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 119.585467][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.709308][ T8004] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 119.734869][ T8004] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.874169][ T8006] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 119.910337][ T8006] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.604720][ T8057] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 120.631577][ T8058] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 120.664851][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.751905][ T8064] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 120.820817][ T8070] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 120.860981][ T8070] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.403592][ T8100] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 121.869850][ T8081] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.925909][ T8114] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.144193][ T8123] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.245629][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.291026][ T8125] ipvlan2: entered allmulticast mode [ 122.314827][ T8125] ip6gretap0: entered allmulticast mode [ 123.085288][ T8175] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 123.416183][ T8191] syz_tun: entered promiscuous mode [ 123.428711][ T8191] macsec2: entered promiscuous mode [ 123.440458][ T8191] macsec2: entered allmulticast mode [ 123.447948][ T8191] syz_tun: entered allmulticast mode [ 123.471590][ T8191] syz_tun: left allmulticast mode [ 123.489203][ T8191] syz_tun: left promiscuous mode [ 124.348569][ T8230] validate_nla: 1 callbacks suppressed [ 124.348587][ T8230] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 124.363140][ T8230] __nla_validate_parse: 2 callbacks suppressed [ 124.363155][ T8230] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.411284][ T8230] xt_cgroup: invalid path, errno=-2 [ 124.563071][ T8239] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 124.597502][ T8206] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 124.676041][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.051358][ T8275] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 126.849412][ T8360] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 126.998549][ T8370] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 127.029977][ T8370] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.075479][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.113649][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.453417][ T8397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.740738][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.768625][ T8419] ip6tnl1: entered promiscuous mode [ 127.775724][ T8419] ip6tnl1: entered allmulticast mode [ 127.906198][ T8427] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 127.916927][ T8427] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.959866][ T8427] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 128.224985][ T8450] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 128.379968][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.390598][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.621205][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.636918][ T8469] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 128.648565][ T8469] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 129.516073][ T8535] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 130.119474][ T8564] __nla_validate_parse: 2 callbacks suppressed [ 130.119492][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.241749][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.101775][ T8625] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 131.110199][ T8625] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 131.386676][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.611964][ T8651] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 131.620955][ T8651] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 131.811754][ T8668] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 131.823080][ T8668] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 132.600146][ T8699] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 132.617575][ T8699] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 132.737415][ T8708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.769069][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.067922][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.225167][ T8726] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 133.955819][ T8753] netlink: zone id is out of range [ 133.981886][ T8753] netlink: zone id is out of range [ 134.002143][ T8753] netlink: del zone limit has 4 unknown bytes [ 134.477528][ T8762] "syz-executor.4" (8762) uses obsolete ecb(arc4) skcipher [ 135.255699][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.265235][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.273529][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.284336][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.292103][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.300136][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.364152][ T8805] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.435521][ T5111] syz-executor.4 (5111) used greatest stack depth: 18128 bytes left [ 135.528718][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.577588][ T8798] caif0 speed is unknown, defaulting to 1000 [ 135.690230][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.867485][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.010518][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 136.099168][ T8798] lo speed is unknown, defaulting to 1000 [ 136.351361][ T51] bridge_slave_1: left allmulticast mode [ 136.367189][ T51] bridge_slave_1: left promiscuous mode [ 136.376458][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.425082][ T51] bridge_slave_0: left allmulticast mode [ 136.430762][ T51] bridge_slave_0: left promiscuous mode [ 136.438325][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.577886][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.183824][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.203359][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.224283][ T51] bond0 (unregistering): Released all slaves [ 137.383885][ T5124] Bluetooth: hci1: command tx timeout [ 137.610836][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 138.342281][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.355970][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.380462][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.408748][ T8798] bridge_slave_0: entered allmulticast mode [ 138.434512][ T8798] bridge_slave_0: entered promiscuous mode [ 138.487660][ T51] hsr_slave_0: left promiscuous mode [ 138.494061][ T51] hsr_slave_1: left promiscuous mode [ 138.500373][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.512959][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.535925][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.556385][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.622039][ T51] veth1_macvtap: left promiscuous mode [ 138.646493][ T51] veth0_macvtap: left promiscuous mode [ 138.667373][ T51] veth1_vlan: left promiscuous mode [ 138.686395][ T51] veth0_vlan: left promiscuous mode [ 139.289418][ T51] team0 (unregistering): Port device team_slave_1 removed [ 139.363111][ T51] team0 (unregistering): Port device team_slave_0 removed [ 139.473649][ T5124] Bluetooth: hci1: command tx timeout [ 139.846210][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.860239][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.881236][ T8798] bridge_slave_1: entered allmulticast mode [ 139.894200][ T8798] bridge_slave_1: entered promiscuous mode [ 139.906256][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.921404][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.058563][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.101169][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.182473][ T8942] tipc: Enabling of bearer rejected, failed to enable media [ 140.314968][ T8798] team0: Port device team_slave_0 added [ 140.362041][ T8798] team0: Port device team_slave_1 added [ 140.520724][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.537261][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.611693][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.631624][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.659768][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.734654][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.875068][ T8798] hsr_slave_0: entered promiscuous mode [ 140.888526][ T8798] hsr_slave_1: entered promiscuous mode [ 140.899032][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.908803][ T8798] Cannot create hsr debugfs directory [ 141.260133][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.270239][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.549223][ T5124] Bluetooth: hci1: command tx timeout [ 141.834814][ T8798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.862345][ T8798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.886840][ T8798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.918531][ T8798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.065362][ T9039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 142.098524][ T9039] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.165879][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.209897][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.254225][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.261377][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.302364][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.309569][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.751995][ T9072] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 142.764123][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.775087][ T9072] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.009394][ T8798] veth0_vlan: entered promiscuous mode [ 143.051557][ T8798] veth1_vlan: entered promiscuous mode [ 143.196389][ T8798] veth0_macvtap: entered promiscuous mode [ 143.230442][ T8798] veth1_macvtap: entered promiscuous mode [ 143.372207][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.421717][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.439552][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.467340][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.497451][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.529697][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.563155][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.597255][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.623253][ T5124] Bluetooth: hci1: command tx timeout [ 143.636392][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.763508][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.772614][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.781047][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.794398][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.802274][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.812224][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.825140][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.836024][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.846411][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.871425][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.890260][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.901691][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.911980][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.929612][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.943887][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.984838][ T8798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.001925][ T8798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.015519][ T8798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.032984][ T8798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.118369][ T9120] caif0 speed is unknown, defaulting to 1000 [ 144.214821][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.366102][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.469751][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.490571][ T9153] tc_dump_action: action bad kind [ 144.545446][ T61] bond0: (slave netdevsim0): Releasing backup interface [ 144.572027][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 144.608528][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 144.633355][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.671102][ T9120] lo speed is unknown, defaulting to 1000 [ 144.710321][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.725715][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.822964][ T5165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.830816][ T5165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.972248][ T61] bridge_slave_1: left allmulticast mode [ 144.993431][ T61] bridge_slave_1: left promiscuous mode [ 144.999386][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.015992][ T61] bridge_slave_0: left allmulticast mode [ 145.045101][ T61] bridge_slave_0: left promiscuous mode [ 145.051051][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.061404][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.553343][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.562241][ T61] bond_slave_0: left promiscuous mode [ 145.567988][ T61] bond_slave_0: left allmulticast mode [ 145.577134][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.587194][ T61] bond_slave_1: left promiscuous mode [ 145.592732][ T61] bond_slave_1: left allmulticast mode [ 145.601058][ T61] bond0 (unregistering): Released all slaves [ 145.614779][ T61] bond1 (unregistering): Released all slaves [ 145.633484][ T9180] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.645797][ T9180] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.677704][ T9187] bond0: entered promiscuous mode [ 145.943568][ T5124] Bluetooth: hci4: command tx timeout [ 146.294248][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.374662][ T61] hsr_slave_0: left promiscuous mode [ 146.382725][ T61] hsr_slave_1: left promiscuous mode [ 146.440206][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.463044][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.473988][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.489326][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.512230][ T9241] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.538605][ T9241] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.570964][ T61] veth1_macvtap: left promiscuous mode [ 146.588695][ T61] veth0_macvtap: left promiscuous mode [ 146.605775][ T61] veth1_vlan: left promiscuous mode [ 146.611283][ T61] veth0_vlan: left promiscuous mode [ 147.710047][ T61] team0 (unregistering): Port device team_slave_1 removed [ 147.795095][ T61] team0 (unregistering): Port device team_slave_0 removed [ 148.026230][ T5124] Bluetooth: hci4: command tx timeout [ 148.205505][ T140] smc: removing ib device syz1 [ 148.397325][ T5162] lo speed is unknown, defaulting to 1000 [ 148.430676][ T9307] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 148.447467][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 149.226699][ T9337] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 149.261658][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.291830][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.324691][ T9120] bridge_slave_0: entered allmulticast mode [ 149.363942][ T9120] bridge_slave_0: entered promiscuous mode [ 149.415262][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.433032][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.440207][ T9120] bridge_slave_1: entered allmulticast mode [ 149.483250][ T9120] bridge_slave_1: entered promiscuous mode [ 149.867154][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.917965][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.103881][ T5124] Bluetooth: hci4: command tx timeout [ 150.139971][ T9384] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 150.186905][ T9120] team0: Port device team_slave_0 added [ 150.246419][ T9120] team0: Port device team_slave_1 added [ 150.375496][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.382474][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.410637][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.425518][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.432528][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.461857][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.609912][ T9120] hsr_slave_0: entered promiscuous mode [ 150.633606][ T9120] hsr_slave_1: entered promiscuous mode [ 150.642917][ T9120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.650494][ T9120] Cannot create hsr debugfs directory [ 150.806304][ T9416] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [FSR] L3 index 0 [ 150.907806][ T9423] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 151.046179][ T29] audit: type=1800 audit(1717119859.724:3): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1959 res=0 errno=0 [ 151.519855][ T9120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.542560][ T9120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.564933][ T9120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.614817][ T9120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.759755][ T9473] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 151.817158][ T9120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.865653][ T9120] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.894482][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.901702][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.926436][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.933651][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.178967][ T9490] ebtables: ebtables: counters copy to user failed while replacing table [ 152.187949][ T5115] Bluetooth: hci4: command tx timeout [ 152.340677][ T9120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.471678][ T9120] veth0_vlan: entered promiscuous mode [ 152.525167][ T9120] veth1_vlan: entered promiscuous mode [ 152.630752][ T9120] veth0_macvtap: entered promiscuous mode [ 152.662344][ T9120] veth1_macvtap: entered promiscuous mode [ 152.750119][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.789790][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.832367][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.873917][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.887493][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.899300][ T9526] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.907147][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.919568][ T9526] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.929323][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.941776][ T9526] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.945695][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.971193][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.013047][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.029570][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.052869][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.059879][ T9529] ebtables: ebtables: counters copy to user failed while replacing table [ 153.064160][ T5124] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 153.082043][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.095241][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.107232][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.118490][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.129205][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.141062][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.158026][ T9120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.167032][ T9120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.177652][ T9120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.187135][ T9120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.329704][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.366345][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.461101][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.471274][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.603331][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.622316][ T9552] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 153.638280][ T29] audit: type=1804 audit(1717119862.314:4): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1264331325/syzkaller.ksvd7i/0/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 153.923575][ T9562] ebtables: ebtables: counters copy to user failed while replacing table [ 154.137867][ T9569] syzkaller0: entered allmulticast mode [ 154.269270][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.280773][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.292409][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.303418][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.311929][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.319825][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.569796][ T140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.589696][ T140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.746396][ T140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.762515][ T140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.867175][ T140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.893247][ T140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.101527][ T140] bond0: (slave netdevsim0): Releasing backup interface [ 155.129483][ T140] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 155.141433][ T140] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 155.153421][ T140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.164052][ T140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.245793][ T9620] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 155.269678][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.375448][ T9575] chnl_net:caif_netlink_parms(): no params data found [ 155.630341][ T140] bridge_slave_1: left allmulticast mode [ 155.653021][ T140] bridge_slave_1: left promiscuous mode [ 155.668586][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.700846][ T140] bridge_slave_0: left allmulticast mode [ 155.719752][ T140] bridge_slave_0: left promiscuous mode [ 155.740164][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.999323][ T9659] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 156.157150][ T140] dvmrp0 (unregistering): left allmulticast mode [ 156.344860][ T5115] Bluetooth: hci2: command tx timeout [ 156.471255][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.480179][ T140] bond_slave_0: left promiscuous mode [ 156.486245][ T140] bond_slave_0: left allmulticast mode [ 156.495705][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.505144][ T140] bond_slave_1: left promiscuous mode [ 156.510656][ T140] bond_slave_1: left allmulticast mode [ 156.519387][ T140] bond0 (unregistering): (slave team0): Releasing backup interface [ 156.528417][ T140] team0: left promiscuous mode [ 156.533292][ T140] team_slave_0: left promiscuous mode [ 156.539037][ T140] team_slave_1: left promiscuous mode [ 156.545242][ T140] team0: left allmulticast mode [ 156.550144][ T140] team_slave_0: left allmulticast mode [ 156.556789][ T140] team_slave_1: left allmulticast mode [ 156.569324][ T140] bond0 (unregistering): Released all slaves [ 156.582080][ T140] bond1 (unregistering): Released all slaves [ 156.597335][ T140] bond2 (unregistering): Released all slaves [ 156.609589][ T140] bond3 (unregistering): Released all slaves [ 156.630046][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.641854][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.649624][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.670184][ T9575] bridge_slave_0: entered allmulticast mode [ 156.685134][ T9575] bridge_slave_0: entered promiscuous mode [ 156.721525][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.734932][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.745746][ T9575] bridge_slave_1: entered allmulticast mode [ 156.763774][ T9575] bridge_slave_1: entered promiscuous mode [ 156.825547][ T140] tipc: Left network mode [ 156.886800][ T9673] Cannot find add_set index 0 as target [ 157.028494][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.095918][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.327642][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.380400][ T9575] team0: Port device team_slave_0 added [ 157.435904][ T9575] team0: Port device team_slave_1 added [ 157.491518][ T140] hsr_slave_0: left promiscuous mode [ 157.513378][ T140] hsr_slave_1: left promiscuous mode [ 157.525295][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.540907][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.557766][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.574237][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.610243][ T140] veth1_macvtap: left promiscuous mode [ 157.619247][ T140] veth0_macvtap: left promiscuous mode [ 157.625587][ T140] veth1_vlan: left promiscuous mode [ 157.631096][ T140] veth0_vlan: left promiscuous mode [ 157.731894][ T9722] Cannot find add_set index 0 as target [ 158.092105][ T140] team0 (unregistering): Port device team_slave_1 removed [ 158.131081][ T140] team0 (unregistering): Port device team_slave_0 removed [ 158.424715][ T5115] Bluetooth: hci2: command tx timeout [ 158.511296][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.536552][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.566927][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.618440][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.664568][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.727568][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.826773][ T9734] tap0: tun_chr_ioctl cmd 1074025677 [ 158.832304][ T9734] tap0: linktype set to 821 [ 158.933798][ T9575] hsr_slave_0: entered promiscuous mode [ 158.974569][ T9575] hsr_slave_1: entered promiscuous mode [ 158.993817][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.001404][ T9575] Cannot create hsr debugfs directory [ 159.454109][ T9767] tap0: tun_chr_ioctl cmd 1074025677 [ 159.470880][ T9767] tap0: linktype set to 821 [ 159.645087][ T9784] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 159.819855][ T9575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.833019][ T9575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.844223][ T9575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.879519][ T9575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.080292][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.122575][ T9575] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.159905][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.167126][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.191170][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.198343][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.215322][ T9808] tap0: tun_chr_ioctl cmd 1074025677 [ 160.220909][ T9808] tap0: linktype set to 821 [ 160.345321][ T9818] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 160.346570][ T9814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.369453][ T9818] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 160.388540][ T9818] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.503126][ T5115] Bluetooth: hci2: command tx timeout [ 160.529194][ T9814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.726042][ T9814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.853118][ T9814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.990999][ T9814] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.048815][ T9814] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.173342][ T9814] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.198952][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.217098][ T9863] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.242989][ T9863] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.251791][ T9863] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.262254][ T9863] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.274883][ T9863] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.296951][ T9863] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.307574][ T9863] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.324649][ T9863] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 161.340172][ T9863] geneve2: entered promiscuous mode [ 161.346562][ T9863] geneve2: entered allmulticast mode [ 161.372107][ T9814] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.418427][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.655124][ T9885] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 161.658604][ T9575] veth0_vlan: entered promiscuous mode [ 161.676189][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.711680][ T9575] veth1_vlan: entered promiscuous mode [ 161.745202][ T9885] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 161.806444][ T9892] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.867015][ T9575] veth0_macvtap: entered promiscuous mode [ 161.907443][ T9575] veth1_macvtap: entered promiscuous mode [ 161.963508][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.999537][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.014853][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.027220][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.043987][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.054995][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.065593][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.076551][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.113885][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.142731][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.156000][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.178270][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.190499][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.214505][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.237744][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.247997][ T9575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.272606][ T9575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.299463][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.390930][ T9575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.400080][ T9575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.453113][ T9575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.479387][ T9575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.591451][ T5115] Bluetooth: hci2: command tx timeout [ 162.645712][ T9917] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 162.851472][ T9919] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 163.174064][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.181926][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.297195][ T9941] syz-executor.2[9941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.297377][ T9941] syz-executor.2[9941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.369754][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.391981][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.496980][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.524186][ T9951] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 163.799950][ T9969] Cannot find set identified by id 0 to match [ 163.841806][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.969961][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.987861][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.078728][ T9978] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 164.111220][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.605243][T10005] macvlan1: entered allmulticast mode [ 164.623361][T10005] veth1_vlan: entered allmulticast mode [ 164.794413][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.912050][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.937641][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.044546][T10018] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 165.059416][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.076642][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.086148][T10026] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 165.448793][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.561228][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.589773][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.684928][T10046] macvlan1: entered allmulticast mode [ 165.690595][T10046] veth1_vlan: entered allmulticast mode [ 165.697258][T10045] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 165.727979][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.989559][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.337419][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.372265][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.540397][T10064] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 166.549060][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.559720][T10075] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.665004][T10084] xt_l2tp: v2 tid > 0xffff: 150994944 [ 166.682230][T10072] team0: Port device team_slave_1 removed [ 167.263286][T10113] xt_l2tp: v2 tid > 0xffff: 150994944 [ 168.070107][T10155] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.164664][T10163] sch_tbf: peakrate 71 is lower than or equals to rate 13415355817161298577 ! [ 168.231917][T10168] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 168.769139][T10201] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 169.296091][T10220] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 169.331526][T10220] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.540167][T10231] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 169.584064][T10231] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.788366][T10246] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 169.834275][T10246] bond0: (slave bond_slave_0): Releasing backup interface [ 170.119824][T10262] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.144206][T10262] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.642079][T10297] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.681723][T10297] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.903231][T10318] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 170.918322][T10318] bond0: (slave bond_slave_0): Releasing backup interface [ 171.287209][T10345] xt_TCPMSS: Only works on TCP SYN packets [ 171.408384][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.876762][T10381] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 171.961796][T10384] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.986498][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.180986][T10399] tun0: tun_chr_ioctl cmd 1074025673 [ 172.505470][T10416] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.510483][T10418] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.856562][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.916123][T10444] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.377220][T10474] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.446412][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.611390][T10489] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 173.718791][T10495] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 173.842297][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.871065][T10495] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.907920][T10495] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 173.936267][ T61] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 173.955294][T10509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.095217][ T51] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.241208][T10528] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 174.806779][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.901501][T10561] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 176.103238][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 176.279031][T10605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.312316][T10605] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 176.331531][T10605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.359875][T10605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.388524][T10608] __nla_validate_parse: 2 callbacks suppressed [ 176.388540][T10608] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.432008][T10605] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 176.576005][T10610] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.733256][T10623] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.957336][T10634] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.610384][T10675] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.834939][T10686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.930674][T10689] veth0_vlan: entered allmulticast mode [ 178.034206][T10686] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 178.069756][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.096736][T10686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.140953][T10686] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 178.519790][T10727] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 178.611523][T10733] xt_TCPMSS: Only works on TCP SYN packets [ 178.882748][T10750] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.987483][T10756] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 179.035850][T10762] xt_TCPMSS: Only works on TCP SYN packets [ 179.089269][T10764] veth0_vlan: entered allmulticast mode [ 179.241144][T10766] netem: change failed [ 179.428940][T10790] veth0_vlan: entered allmulticast mode [ 180.152258][T10830] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 180.516706][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.535500][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.549246][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.582269][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.594943][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 180.608162][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.943894][ T2469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.092366][ T2469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.113295][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.218148][ T2469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.307888][ T2469] bond0: (slave netdevsim0): Releasing backup interface [ 181.316244][ T2469] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 181.324845][ T2469] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 181.342778][ T2469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.380554][T10839] chnl_net:caif_netlink_parms(): no params data found [ 181.521217][T10839] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.530155][T10839] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.550097][T10839] bridge_slave_0: entered allmulticast mode [ 181.559254][T10839] bridge_slave_0: entered promiscuous mode [ 181.591539][T10839] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.602427][T10839] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.610019][T10839] bridge_slave_1: entered allmulticast mode [ 181.617609][T10839] bridge_slave_1: entered promiscuous mode [ 181.625077][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.750843][T10839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.773712][ T2469] bridge_slave_1: left allmulticast mode [ 181.779399][ T2469] bridge_slave_1: left promiscuous mode [ 181.815687][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.853717][ T2469] bridge_slave_0: left allmulticast mode [ 181.859385][ T2469] bridge_slave_0: left promiscuous mode [ 181.881391][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.120531][T10919] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 182.396250][ T2469] dvmrp0 (unregistering): left allmulticast mode [ 182.675782][ T5115] Bluetooth: hci3: command tx timeout [ 182.701704][ T2469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.713663][ T2469] bond_slave_0: left promiscuous mode [ 182.719590][ T2469] bond_slave_0: left allmulticast mode [ 182.727711][ T2469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.737318][ T2469] bond_slave_1: left promiscuous mode [ 182.749737][ T2469] bond_slave_1: left allmulticast mode [ 182.757051][ T2469] bond0 (unregistering): Released all slaves [ 182.773372][ T2469] bond1 (unregistering): Released all slaves [ 182.790300][T10839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.927491][ T2469] tipc: Left network mode [ 182.937353][T10839] team0: Port device team_slave_0 added [ 182.967310][T10839] team0: Port device team_slave_1 added [ 183.067942][T10949] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 183.246352][T10839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.262778][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.335020][T10839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.469220][T10968] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.491650][T10839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.501334][T10839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.528229][T10839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.558930][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.631720][ T2469] hsr_slave_0: left promiscuous mode [ 183.657790][ T2469] hsr_slave_1: left promiscuous mode [ 183.673899][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.681317][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.705673][ T2469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.724058][ T2469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.762082][ T2469] veth1_macvtap: left promiscuous mode [ 183.781949][ T2469] veth0_macvtap: left promiscuous mode [ 183.813483][ T2469] veth1_vlan: left promiscuous mode [ 183.818830][ T2469] veth0_vlan: left promiscuous mode [ 183.918531][T10986] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.222529][ T29] audit: type=1804 audit(1717119892.894:5): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir752508168/syzkaller.bsCro9/84/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 184.410430][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.705601][ T2469] team0 (unregistering): Port device team_slave_1 removed [ 184.752997][ T5115] Bluetooth: hci3: command 0x041b tx timeout [ 184.765208][ T2469] team0 (unregistering): Port device team_slave_0 removed [ 184.973401][ T29] audit: type=1804 audit(1717119893.654:6): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir752508168/syzkaller.bsCro9/92/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 185.319803][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.465667][T10839] hsr_slave_0: entered promiscuous mode [ 185.488051][T11025] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.535718][T10839] hsr_slave_1: entered promiscuous mode [ 185.554183][T10839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.576436][T10839] Cannot create hsr debugfs directory [ 185.730964][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.758002][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.809598][T11047] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.986145][T11057] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.450919][T11082] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.495155][T10839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.507856][T10839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.527877][T10839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.559675][T10839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.695088][T11092] __nla_validate_parse: 7 callbacks suppressed [ 186.695106][T11092] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.776861][T10839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.823805][ T5124] Bluetooth: hci3: command 0x041b tx timeout [ 186.843361][T10839] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.879664][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.886838][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.937593][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.944797][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.492541][T10839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.741990][T10839] veth0_vlan: entered promiscuous mode [ 187.791628][T10839] veth1_vlan: entered promiscuous mode [ 187.921958][T11153] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.947671][T10839] veth0_macvtap: entered promiscuous mode [ 187.981229][T10839] veth1_macvtap: entered promiscuous mode [ 188.043971][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.058862][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.085080][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.107434][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.159269][T10839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.198621][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.232233][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.242981][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.253791][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.264838][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.275517][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.286306][T10839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.299899][T10839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.316252][T10839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.341042][T10839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.366130][T10839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.384430][T10839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.400575][T10839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.552257][T11183] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.659542][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.677151][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.767163][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.783232][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.903182][ T5124] Bluetooth: hci3: command 0x041b tx timeout [ 189.666140][T11247] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 189.869406][T11254] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 190.256923][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.408987][ T29] audit: type=1804 audit(1717119899.084:7): pid=11281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1264331325/syzkaller.ksvd7i/150/cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0 [ 190.440652][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.939140][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.960866][T11319] block nbd0: not configured, cannot reconfigure [ 190.983277][ T5115] Bluetooth: hci3: command 0x041b tx timeout [ 191.182333][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.216801][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.312036][T11334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.487252][T11349] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 191.497681][T11349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.542342][T11351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.854935][T11369] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.864640][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.886375][T11370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.909901][T11369] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.954836][T11369] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 191.985189][T11369] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 192.021067][T11369] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.039753][T11383] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 192.051167][T11383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.158361][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.211508][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.376630][T11385] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.522624][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.012105][T11438] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [S] L3 index 0 [ 193.073094][ T5115] Bluetooth: hci3: command 0x041b tx timeout [ 193.397833][T11455] syzkaller0: entered promiscuous mode [ 193.412802][T11455] syzkaller0: entered allmulticast mode [ 193.439112][T11464] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.465771][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.484308][T11464] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 193.502039][T11464] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 194.517918][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.670690][T11514] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 196.148182][T11536] syzkaller0: entered promiscuous mode [ 196.153809][T11536] syzkaller0: entered allmulticast mode [ 196.188640][T11540] xt_HMARK: proto mask must be zero with L3 mode [ 196.251185][T11543] x_tables: duplicate entry at hook 2 [ 196.680276][T11562] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 198.155955][T11562] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 198.180913][T11564] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 198.252001][T11573] xt_HMARK: proto mask must be zero with L3 mode [ 198.272258][T11575] x_tables: duplicate entry at hook 2 [ 198.382147][T11582] __nla_validate_parse: 5 callbacks suppressed [ 198.382165][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.401959][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.527998][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.556036][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.615414][T11600] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 198.702293][T11607] x_tables: duplicate entry at hook 2 [ 198.757207][T11597] syzkaller0: entered promiscuous mode [ 198.768865][T11597] syzkaller0: entered allmulticast mode [ 198.875466][T11612] xt_HMARK: proto mask must be zero with L3 mode [ 200.669030][T11648] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 200.777731][T11654] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.033086][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.474148][T11681] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 201.489159][T11684] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.524711][T11684] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 202.044446][T11709] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 202.102308][T11714] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.112642][T11716] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 202.153616][T11716] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 202.168892][T11710] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 202.368279][T11732] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.391010][T11732] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.141565][T11744] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 203.321437][T11756] atomic_op ffff88807fd22198 conn xmit_atomic 0000000000000000 [ 203.439375][T11763] __nla_validate_parse: 3 callbacks suppressed [ 203.439394][T11763] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.481862][T11763] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.503265][T11763] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.557071][T11765] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.561918][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.576907][T11765] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.595132][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.610312][T11765] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.620473][T11773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.633308][T11773] tipc: Started in network mode [ 203.638770][T11769] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.652981][T11773] tipc: Node identity 6, cluster identity 4711 [ 203.666666][T11773] tipc: Node number set to 6 [ 204.169802][T11809] tipc: Cannot configure node identity twice [ 205.732199][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.748130][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.757241][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.766173][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.775232][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.792449][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.882222][ T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.976010][ T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.141914][ T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.242795][ T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.429951][T11938] dummy0: entered promiscuous mode [ 206.436366][T11938] macvlan2: entered allmulticast mode [ 206.441844][T11938] dummy0: entered allmulticast mode [ 206.451700][T11938] dummy0: left allmulticast mode [ 206.459320][T11938] dummy0: left promiscuous mode [ 206.729352][T11905] chnl_net:caif_netlink_parms(): no params data found [ 206.749387][ T51] bridge_slave_1: left allmulticast mode [ 206.762117][ T51] bridge_slave_1: left promiscuous mode [ 206.768189][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.786329][ T51] bridge_slave_0: left allmulticast mode [ 206.792000][ T51] bridge_slave_0: left promiscuous mode [ 206.803404][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.295388][ T51] dvmrp0 (unregistering): left allmulticast mode [ 207.862974][ T5115] Bluetooth: hci0: command tx timeout [ 207.967282][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.978219][ T51] bond0 (unregistering): Released all slaves [ 207.990638][ T51] bond1 (unregistering): Released all slaves [ 208.085840][ T51] bond2 (unregistering): (slave batadv1): Removing an active aggregator [ 208.096135][ T51] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 208.106936][ T51] bond2 (unregistering): Released all slaves [ 208.253484][ T51] tipc: Left network mode [ 208.312245][T11975] dummy0: entered promiscuous mode [ 208.317992][T11975] macvlan2: entered allmulticast mode [ 208.323584][T11975] dummy0: entered allmulticast mode [ 208.338336][T11975] dummy0: left allmulticast mode [ 208.346955][T11975] dummy0: left promiscuous mode [ 208.694677][T11977] syzkaller0: entered promiscuous mode [ 208.710471][T11977] syzkaller0: entered allmulticast mode [ 208.786492][T11996] __nla_validate_parse: 14 callbacks suppressed [ 208.786508][T11996] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.018014][T12010] netlink: 4444 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.037129][T12010] netlink: 4444 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.953155][ T5115] Bluetooth: hci0: command tx timeout [ 210.342051][T11905] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.349770][T11905] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.367443][T11905] bridge_slave_0: entered allmulticast mode [ 210.374950][T11905] bridge_slave_0: entered promiscuous mode [ 210.417361][T12014] dummy0: entered promiscuous mode [ 210.422577][T12014] macvlan2: entered allmulticast mode [ 210.438494][T12014] dummy0: entered allmulticast mode [ 210.453210][T12014] dummy0: left allmulticast mode [ 210.458283][T12014] dummy0: left promiscuous mode [ 210.472758][T12019] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.508033][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.522237][T11905] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.531233][T11905] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.539571][T11905] bridge_slave_1: entered allmulticast mode [ 210.548753][T11905] bridge_slave_1: entered promiscuous mode [ 210.577687][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.584846][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.677217][T11905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.761395][T12030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.770999][ T51] hsr_slave_0: left promiscuous mode [ 210.790714][ T51] hsr_slave_1: left promiscuous mode [ 210.805694][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.815290][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.832780][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.842968][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.897650][ T51] veth1_macvtap: left promiscuous mode [ 210.904374][ T51] veth0_macvtap: left promiscuous mode [ 210.910106][ T51] veth1_vlan: left promiscuous mode [ 210.915658][ T51] veth0_vlan: left promiscuous mode [ 211.469163][ T51] team0 (unregistering): Port device team_slave_0 removed [ 211.913766][T11905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.023323][ T5115] Bluetooth: hci0: command tx timeout [ 212.031491][T12054] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 212.179481][T11905] team0: Port device team_slave_0 added [ 212.213336][T11905] team0: Port device team_slave_1 added [ 212.335840][T11905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.350235][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.399779][T11905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.457459][T11905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.463550][T12074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.493175][T11905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.565945][T11905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.736092][T11905] hsr_slave_0: entered promiscuous mode [ 212.758110][T11905] hsr_slave_1: entered promiscuous mode [ 213.049356][T12092] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 213.265011][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.398363][T12108] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.522768][T12115] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 213.649638][T11905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.668446][T11905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.682362][T11905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.702570][T11905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.967660][T11905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.031850][T11905] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.058936][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.066112][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.108448][ T5115] Bluetooth: hci0: command tx timeout [ 214.168475][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.175639][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.414606][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.426103][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.443220][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.459632][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.468838][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.476978][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.641153][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.686831][T12146] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.841701][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.888333][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.972082][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.048382][T11905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.174276][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.486422][T12189] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 215.504552][T12191] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 215.551270][T11905] veth0_vlan: entered promiscuous mode [ 215.565562][T12135] chnl_net:caif_netlink_parms(): no params data found [ 215.588006][ T61] bridge_slave_1: left allmulticast mode [ 215.600566][ T61] bridge_slave_1: left promiscuous mode [ 215.607405][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.637582][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.952176][T12205] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.234200][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.242296][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.251084][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.262160][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.278730][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.286480][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.376996][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.388615][ T61] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 216.399935][ T61] bond0 (unregistering): Released all slaves [ 216.477858][T11905] veth1_vlan: entered promiscuous mode [ 216.540340][ T61] tipc: Left network mode [ 216.565679][T11905] veth0_macvtap: entered promiscuous mode [ 216.585328][ T5124] Bluetooth: hci1: command tx timeout [ 216.656407][T11905] veth1_macvtap: entered promiscuous mode [ 216.736696][T12135] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.744215][T12135] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.751506][T12135] bridge_slave_0: entered allmulticast mode [ 216.758963][T12135] bridge_slave_0: entered promiscuous mode [ 216.793740][T12135] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.814466][T12135] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.821708][T12135] bridge_slave_1: entered allmulticast mode [ 216.830464][T12135] bridge_slave_1: entered promiscuous mode [ 216.947852][T12135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.963853][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.977193][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.987494][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.998350][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.010011][T11905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.021686][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.065328][T12135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.108636][T12238] xt_CT: No such helper "netbios-ns" [ 217.127199][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.152944][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.162786][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.178814][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.190536][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.208044][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.220350][T11905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.240334][T11905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.260219][T11905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.286311][ T61] hsr_slave_0: left promiscuous mode [ 217.297397][ T61] hsr_slave_1: left promiscuous mode [ 217.306086][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.313931][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.340326][ T61] veth1_macvtap: left promiscuous mode [ 217.346551][ T61] veth0_macvtap: left promiscuous mode [ 217.352200][ T61] veth1_vlan: left promiscuous mode [ 217.839722][ T61] team0 (unregistering): Port device team_slave_1 removed [ 217.878492][ T61] team0 (unregistering): Port device team_slave_0 removed [ 218.237165][T11905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.246682][T11905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.255516][T11905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.266140][T11905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.352417][ T5124] Bluetooth: hci3: command tx timeout [ 218.405634][T12267] xt_nfacct: accounting object `syz1' does not exists [ 218.416519][T12135] team0: Port device team_slave_0 added [ 218.520822][T12135] team0: Port device team_slave_1 added [ 218.663224][ T5124] Bluetooth: hci1: command tx timeout [ 218.691371][T12135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.698794][T12135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.727061][T12135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.786812][T12135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.807789][T12135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.850224][T12135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.873782][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.881593][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.900580][T12211] chnl_net:caif_netlink_parms(): no params data found [ 219.063411][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.071257][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.110195][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.209512][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.312524][T12135] hsr_slave_0: entered promiscuous mode [ 219.319186][T12135] hsr_slave_1: entered promiscuous mode [ 219.326803][T12135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.335859][T12135] Cannot create hsr debugfs directory [ 219.423074][T12307] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 219.425663][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.445120][T12307] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 219.536577][T12311] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.545594][T12311] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.554712][T12311] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.563753][T12311] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.646793][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.711990][T12321] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 219.718812][T12211] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.720618][T12321] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 219.737571][T12211] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.744665][T12321] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.762750][T12211] bridge_slave_0: entered allmulticast mode [ 219.774250][T12211] bridge_slave_0: entered promiscuous mode [ 219.792338][T12211] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.807672][T12211] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.822662][T12211] bridge_slave_1: entered allmulticast mode [ 219.832171][T12211] bridge_slave_1: entered promiscuous mode [ 219.956044][T12211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.003464][T12211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.178298][T12211] team0: Port device team_slave_0 added [ 220.235352][T12211] team0: Port device team_slave_1 added [ 220.334017][ T61] bridge_slave_1: left allmulticast mode [ 220.353229][ T61] bridge_slave_1: left promiscuous mode [ 220.359139][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.383710][ T61] bridge_slave_0: left allmulticast mode [ 220.399841][ T61] bridge_slave_0: left promiscuous mode [ 220.413253][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.422991][ T5124] Bluetooth: hci3: command tx timeout [ 220.744089][ T5124] Bluetooth: hci1: command tx timeout [ 220.871945][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.884764][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.895444][ T61] bond0 (unregistering): Released all slaves [ 220.920611][T12211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.927895][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.955088][T12211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.994899][T12211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.021022][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.086516][T12211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.154239][T12369] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.766869][T12390] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.503089][ T5124] Bluetooth: hci3: command tx timeout [ 222.822993][ T5124] Bluetooth: hci1: command tx timeout [ 224.583719][ T5124] Bluetooth: hci3: command tx timeout [ 251.375990][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.385404][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.412952][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.421009][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.446445][ T5115] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 251.463876][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 251.691881][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.705960][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.716992][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.725714][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.734780][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 251.742110][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.114780][ T5124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.123936][ T5124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.137664][ T5124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.146078][ T5124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.154267][ T5124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 252.161603][ T5124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 253.543159][ T5124] Bluetooth: hci5: command tx timeout [ 253.784227][ T5124] Bluetooth: hci6: command tx timeout [ 254.183188][ T5124] Bluetooth: hci7: command tx timeout [ 255.623212][ T5124] Bluetooth: hci5: command tx timeout [ 255.863133][ T5124] Bluetooth: hci6: command tx timeout [ 255.950424][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.262993][ T5124] Bluetooth: hci7: command tx timeout [ 257.708856][ T5124] Bluetooth: hci5: command tx timeout [ 257.943270][ T5124] Bluetooth: hci6: command tx timeout [ 258.343203][ T5124] Bluetooth: hci7: command tx timeout [ 259.783210][ T5124] Bluetooth: hci5: command tx timeout [ 260.023075][ T5124] Bluetooth: hci6: command tx timeout [ 260.423019][ T5124] Bluetooth: hci7: command tx timeout [ 268.268526][ T5124] Bluetooth: hci4: command 0x0406 tx timeout [ 279.137871][ T5115] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 279.149215][ T5115] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 279.164130][ T5115] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 279.172565][ T5115] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 279.180462][ T5115] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 279.188941][ T5115] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 280.985473][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 280.994924][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 281.002612][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 281.010653][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 281.019183][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 281.026931][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 281.222961][ T5115] Bluetooth: hci8: command tx timeout [ 283.072988][ T5115] Bluetooth: hci9: command tx timeout [ 283.303117][ T5115] Bluetooth: hci8: command tx timeout [ 285.143724][ T5115] Bluetooth: hci9: command tx timeout [ 285.383194][ T5115] Bluetooth: hci8: command tx timeout [ 287.225893][ T5115] Bluetooth: hci9: command tx timeout [ 287.463125][ T5115] Bluetooth: hci8: command tx timeout [ 289.303026][ T5115] Bluetooth: hci9: command tx timeout [ 304.103162][ T5124] Bluetooth: hci2: command 0x0405 tx timeout [ 316.532031][ T5124] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 316.544525][ T5124] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 316.552380][ T5124] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 316.561488][ T5124] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 316.569837][ T5124] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 316.577351][ T5124] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 316.801658][ T5124] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 316.811884][ T5124] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 316.819986][ T5124] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 316.829379][ T5124] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 316.837489][ T5124] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 316.846364][ T5124] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 317.261679][ T5124] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 317.270530][ T5124] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 317.283657][ T5124] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 317.292191][ T5124] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 317.300151][ T5124] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 317.307716][ T5124] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 317.386308][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.663096][ T5115] Bluetooth: hci10: command tx timeout [ 318.912967][ T5115] Bluetooth: hci11: command tx timeout [ 319.383130][ T5115] Bluetooth: hci12: command tx timeout [ 320.759414][ T5115] Bluetooth: hci10: command tx timeout [ 320.983087][ T5115] Bluetooth: hci11: command tx timeout [ 321.463009][ T5115] Bluetooth: hci12: command tx timeout [ 322.823328][ T5115] Bluetooth: hci10: command tx timeout [ 323.063360][ T5115] Bluetooth: hci11: command tx timeout [ 323.543147][ T5115] Bluetooth: hci12: command tx timeout [ 324.912627][ T5115] Bluetooth: hci10: command tx timeout [ 325.143175][ T5115] Bluetooth: hci11: command tx timeout [ 325.623079][ T5115] Bluetooth: hci12: command tx timeout [ 329.712962][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 339.952949][ T5115] Bluetooth: hci1: command 0x0406 tx timeout [ 344.071711][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 344.083625][ T5120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 344.091431][ T5120] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 344.100078][ T5120] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 344.108768][ T5120] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 344.122011][ T5120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 345.068682][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 346.019019][ T5115] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 346.029048][ T5115] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 346.037330][ T5115] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 346.051235][ T5115] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 346.059352][ T5115] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 346.066902][ T5115] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 346.183590][ T5115] Bluetooth: hci13: command tx timeout [ 348.104393][ T5115] Bluetooth: hci14: command tx timeout [ 348.273118][ T5115] Bluetooth: hci13: command tx timeout [ 350.193173][ T5115] Bluetooth: hci14: command tx timeout [ 350.343139][ T5115] Bluetooth: hci13: command tx timeout [ 352.263172][ T5115] Bluetooth: hci14: command tx timeout [ 352.423018][ T5115] Bluetooth: hci13: command tx timeout [ 354.343140][ T5115] Bluetooth: hci14: command tx timeout [ 375.783219][T12434] Bluetooth: hci5: command 0x0406 tx timeout [ 375.790363][T12434] Bluetooth: hci7: command 0x0406 tx timeout [ 375.803497][ T5115] Bluetooth: hci6: command 0x0406 tx timeout [ 378.183233][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 378.190904][ T30] Not tainted 6.9.0-syzkaller-12143-g030fae30f059 #0 [ 378.205975][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.218184][ T30] task:kworker/u8:3 state:D stack:22096 pid:51 tgid:51 ppid:2 flags:0x00004000 2024/05/31 01:48:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 378.231809][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 378.260835][ T30] Call Trace: [ 378.283040][ T30] [ 378.286010][ T30] __schedule+0x17e8/0x4a20 [ 378.290557][ T30] ? __pfx___schedule+0x10/0x10 [ 378.302873][ T30] ? __pfx_lock_release+0x10/0x10 [ 378.307924][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 378.322858][ T30] ? kthread_data+0x52/0xd0 [ 378.327384][ T30] ? schedule+0x90/0x320 [ 378.331636][ T30] ? wq_worker_sleeping+0x66/0x240 [ 378.350754][ T30] ? schedule+0x90/0x320 [ 378.362938][ T30] schedule+0x14b/0x320 [ 378.367129][ T30] schedule_preempt_disabled+0x13/0x30 [ 378.372599][ T30] __mutex_lock+0x6a4/0xd70 [ 378.392876][ T30] ? __mutex_lock+0x527/0xd70 [ 378.397584][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 378.404052][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 378.409119][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 378.415418][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.421411][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 378.434823][ T30] ? process_scheduled_works+0x945/0x1830 [ 378.440563][ T30] process_scheduled_works+0xa2c/0x1830 [ 378.450573][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.460220][ T30] ? assign_work+0x364/0x3d0 [ 378.465181][ T30] worker_thread+0x86d/0xd70 [ 378.469802][ T30] ? __kthread_parkme+0x169/0x1d0 [ 378.481975][ T30] ? __pfx_worker_thread+0x10/0x10 [ 378.488889][ T30] kthread+0x2f0/0x390 [ 378.499625][ T30] ? __pfx_worker_thread+0x10/0x10 [ 378.504906][ T30] ? __pfx_kthread+0x10/0x10 [ 378.509511][ T30] ret_from_fork+0x4b/0x80 [ 378.533001][ T30] ? __pfx_kthread+0x10/0x10 [ 378.537623][ T30] ret_from_fork_asm+0x1a/0x30 [ 378.542415][ T30] [ 378.570440][ T30] INFO: task kworker/u8:4:61 blocked for more than 143 seconds. [ 378.582850][ T30] Not tainted 6.9.0-syzkaller-12143-g030fae30f059 #0 [ 378.590057][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.622903][ T30] task:kworker/u8:4 state:D stack:21296 pid:61 tgid:61 ppid:2 flags:0x00004000 [ 378.642901][ T30] Workqueue: netns cleanup_net [ 378.647699][ T30] Call Trace: [ 378.650987][ T30] [ 378.662982][ T30] __schedule+0x17e8/0x4a20 [ 378.667541][ T30] ? __pfx___schedule+0x10/0x10 [ 378.672408][ T30] ? __pfx_lock_release+0x10/0x10 [ 378.692915][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 378.698403][ T30] ? kthread_data+0x52/0xd0 [ 378.714566][ T30] ? schedule+0x90/0x320 [ 378.718834][ T30] ? wq_worker_sleeping+0x66/0x240 [ 378.732859][ T30] ? schedule+0x90/0x320 [ 378.737132][ T30] schedule+0x14b/0x320 [ 378.741309][ T30] schedule_preempt_disabled+0x13/0x30 [ 378.762857][ T30] __mutex_lock+0x6a4/0xd70 [ 378.767401][ T30] ? __mutex_lock+0x527/0xd70 [ 378.772097][ T3