last executing test programs: 32.375268316s ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88faca"], 0xdd12}], 0x1}, 0x0) 32.236862248s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x78}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) 32.06055106s ago: executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) 31.938839789s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0x48}}, 0x0) 31.806530839s ago: executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x80) 31.717886905s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000012340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b40)=[{0x10}, {0x10, 0x117, 0x2}], 0x20}}], 0x2, 0x0) 31.585066776s ago: executing program 4: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0x100) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 31.312960133s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32=r3, @ANYBLOB="0c0058000108"], 0x28}}, 0x0) 31.252302737s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 31.181348792s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 31.116844754s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000002c0)=""/172, &(0x7f0000000380)=0xac) 31.115208237s ago: executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xfffffbfa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x4041) 31.052856017s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000340)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba1540d7961bc87bc84cca3dfe5e6e4d388460ea5c5eb810735d04e8e3dddb707fb80d61", 0x70, 0x4040051, 0x0, 0x0) shutdown(r0, 0x1) 30.990828479s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.965554119s ago: executing program 1: bind$tipc(0xffffffffffffffff, &(0x7f0000000080), 0x10) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 30.954258721s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x44}}, 0x0) r1 = accept4(r0, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000580)=0x80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="2bdc61b73a2901cd8f5b056bb4da676df8a9d8631191189143fc20a4cba40537454a2c601d1e35088ad8d9a402309676de3c6b884ef8f0d6b07433a615c334200d68c32696d944b521278cba4c2732abdb151db5aa0eb852b20326b167984495317655539d67d5416e1cbbfabeb10811db1ab2e4f6fb48ac6576d2da", 0xfffffffffffffe46) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xf}, 0x14, &(0x7f0000000500)=[{&(0x7f0000000040)="27031000590400000008002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000819b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 30.830361382s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000300)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{}, {0x6, 0x0, 0x0, 0x9}]}) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) 30.76838422s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000070000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xffffffffffffff51, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.742523889s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x3b}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140b}}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x77, &(0x7f0000001480)={r1}, 0x8) 30.650550294s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 30.630469919s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001c000502120000000000000002000000", @ANYRES32=r2, @ANYBLOB="080000000a0001"], 0x34}}, 0x0) 30.605305865s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) 30.530128882s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0xe) sendto$inet6(r0, &(0x7f0000000140)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8000, 0x4) shutdown(r0, 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) 30.392757106s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) 30.018395881s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c0100001000130700000000000000f2ffffffff000000000000000000000000ff01000000000000000000000000000100000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003c000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000008001d00000000004c0014"], 0x14c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=':\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffdf4, 0x0}, 0x40002000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(r2, 0x0, 0x36) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x40000000015, 0x5, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(r0, &(0x7f0000000040)='\"', 0x1, 0x0, 0x0, 0x0) 973.195134ms ago: executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @remote, [], [], 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x800000, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 803.46573ms ago: executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001400000a146080002"], 0xfc}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7) socket$kcm(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007200a143000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0800010002"], 0x20}}, 0x0) 596.844474ms ago: executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x94}}, 0x0) 545.222505ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000001c0)) 0s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe00000120"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): [T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.089450][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.154410][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.181780][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.199117][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.254332][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.452181][T15225] hsr_slave_0: entered promiscuous mode [ 384.483321][T15225] hsr_slave_1: entered promiscuous mode [ 384.496614][T15225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.513909][T15225] Cannot create hsr debugfs directory [ 384.795382][T15049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.905704][T15398] syz-executor.4[15398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.905952][T15398] syz-executor.4[15398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.035063][T15049] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.122644][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.129874][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.168336][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.175851][ T5194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.424635][T15049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.608967][T15428] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 385.741693][T15225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.770286][T15225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.811629][T15436] pim6reg: entered allmulticast mode [ 385.850297][ T5145] Bluetooth: hci0: command tx timeout [ 385.855258][T15225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.906884][T15225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.946716][T15049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.969110][T15435] pim6reg: left allmulticast mode [ 386.064820][T15452] syz-executor.3[15452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.065045][T15452] syz-executor.3[15452] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 386.143639][T15049] veth0_vlan: entered promiscuous mode [ 386.205858][T15049] veth1_vlan: entered promiscuous mode [ 386.263280][T15455] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.282696][T15456] team_slave_0: entered promiscuous mode [ 386.290051][T15456] team_slave_0: entered allmulticast mode [ 386.326524][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.348375][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.360077][T15460] tc_dump_action: action bad kind [ 386.408143][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.441245][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.448422][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.484783][T15049] veth0_macvtap: entered promiscuous mode [ 386.522758][T15466] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.522999][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.539269][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.577026][T15049] veth1_macvtap: entered promiscuous mode [ 386.657909][T15225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.686385][T15225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.724832][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.750988][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.765141][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.776079][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.801029][T15049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.845511][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.876010][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.887618][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.900042][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.910232][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.923232][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.936159][T15049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.946924][T15049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.964881][T15049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.999077][T15049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.027394][T15049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.049224][T15049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.068907][T15049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.310945][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.410107][T15494] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.471077][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.486914][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.504151][T15225] veth0_vlan: entered promiscuous mode [ 387.546739][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.557973][T15225] veth1_vlan: entered promiscuous mode [ 387.572316][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.617508][T15505] syz-executor.0[15505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.617734][T15505] syz-executor.0[15505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.632489][T15225] veth0_macvtap: entered promiscuous mode [ 387.701185][T15225] veth1_macvtap: entered promiscuous mode [ 387.764484][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.796798][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.821463][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.861311][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.884187][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.906526][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.928780][ T5145] Bluetooth: hci0: command tx timeout [ 387.935585][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.974881][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.022466][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.054781][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.071022][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.082425][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.095929][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.106465][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.117350][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.127280][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.138008][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.150580][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.228978][T15225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.242997][T15535] syz-executor.3[15535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.243233][T15535] syz-executor.3[15535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.265400][T15225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.296563][T15225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.305830][T15225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.407080][ T29] audit: type=1800 audit(1718455791.719:52): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1935 res=0 errno=0 [ 388.482927][ T29] audit: type=1804 audit(1718455791.799:53): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/726/memory.events" dev="sda1" ino=1935 res=1 errno=0 [ 388.564294][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.602130][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.682551][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.700651][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.850750][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 388.978302][ T29] audit: type=1800 audit(1718455792.289:54): pid=15571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 389.050951][ T29] audit: type=1804 audit(1718455792.289:55): pid=15571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/730/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 389.447036][ T29] audit: type=1800 audit(1718455792.759:56): pid=15604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 389.512512][T15610] atomic_op ffff888079ff7998 conn xmit_atomic 0000000000000000 [ 389.541427][T15608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.542829][ T29] audit: type=1804 audit(1718455792.849:57): pid=15604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2620682863/syzkaller.M8wZCt/4/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 390.018578][T15641] atomic_op ffff888079574198 conn xmit_atomic 0000000000000000 [ 390.085708][ T29] audit: type=1800 audit(1718455793.399:58): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 390.132404][ T29] audit: type=1804 audit(1718455793.449:59): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1731708752/syzkaller.dSQVtV/254/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 390.597166][ T29] audit: type=1800 audit(1718455793.909:60): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 390.688866][T15682] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.706318][ T29] audit: type=1804 audit(1718455793.999:61): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2620682863/syzkaller.M8wZCt/13/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 391.040175][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 391.077351][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.107022][T15708] tc_dump_action: action bad kind [ 391.117305][T15709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.124636][T15709] IPv6: NLM_F_CREATE should be set when creating new route [ 391.158954][T15713] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.575930][T15739] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.590734][T15739] tc_dump_action: action bad kind [ 391.949563][T15761] wg2: entered promiscuous mode [ 391.955355][T15761] wg2: entered allmulticast mode [ 392.075834][T15774] x_tables: duplicate entry at hook 3 [ 392.476916][T15795] wg2: entered promiscuous mode [ 392.487917][T15795] wg2: entered allmulticast mode [ 392.628247][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 392.661769][T15806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.669093][T15806] IPv6: NLM_F_CREATE should be set when creating new route [ 392.753114][T15813] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 392.779231][T15813] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.805466][T15821] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 392.824658][T15813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.881177][T15821] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 393.521990][T15859] geneve2: entered promiscuous mode [ 393.527259][T15859] geneve2: entered allmulticast mode [ 394.195406][T15896] geneve3: entered promiscuous mode [ 394.202357][T15896] geneve3: entered allmulticast mode [ 394.582291][T15921] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 394.710061][T15921] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 394.720337][T15921] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 394.765671][T15921] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 394.791640][T15921] bond4 (unregistering): Released all slaves [ 394.933062][T15942] geneve3: entered promiscuous mode [ 394.949882][T15942] geneve3: entered allmulticast mode [ 395.362363][T15971] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 395.487860][T15967] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 395.496947][T15967] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.553522][T15978] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 395.565444][T15978] bond4: (slave batadv2): Enslaving as a backup interface with an up link [ 395.621794][T15984] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 395.641799][T15984] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.675449][T15984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.709651][T15989] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 395.748418][T15971] bond4 (unregistering): (slave batadv2): Releasing backup interface [ 395.801183][T15971] bond4 (unregistering): Released all slaves [ 395.854210][T15984] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 395.939508][T15995] team_slave_0: entered promiscuous mode [ 395.945200][T15995] team_slave_0: entered allmulticast mode [ 396.269496][T16018] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.421265][T16020] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 396.453216][T16020] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 396.591541][T16029] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 396.601805][T16029] bond4: (slave batadv3): Enslaving as a backup interface with an up link [ 396.680028][T16029] bond4 (unregistering): (slave batadv3): Releasing backup interface [ 396.724510][T16029] bond4 (unregistering): Released all slaves [ 396.765536][T16037] geneve2: entered promiscuous mode [ 396.775764][T16037] geneve2: entered allmulticast mode [ 397.286299][T16060] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.868448][T16101] wg2: entered promiscuous mode [ 397.889469][T16101] wg2: entered allmulticast mode [ 398.012526][T16116] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.384927][T16139] validate_nla: 3 callbacks suppressed [ 398.384945][T16139] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 398.474336][T16142] wg2: left promiscuous mode [ 398.492589][T16142] wg2: left allmulticast mode [ 398.537032][T16142] wg2: entered promiscuous mode [ 398.557011][T16142] wg2: entered allmulticast mode [ 398.634599][T16154] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 398.659940][T16157] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 398.847824][T16170] bond1 (unregistering): Released all slaves [ 399.042344][T16178] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 399.125995][ T29] audit: type=1804 audit(1718455802.439:62): pid=16180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/785/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 399.238174][T16180] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.474868][T16200] geneve2: entered promiscuous mode [ 399.500764][T16200] geneve2: entered allmulticast mode [ 400.374825][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 400.399799][T16242] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 400.408183][T16242] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 400.438787][T16242] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 401.023320][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.138108][T16274] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 401.252193][T16274] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 401.261963][T16274] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 401.308240][T16284] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.405373][T16274] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 401.428482][T16274] bond1 (unregistering): Released all slaves [ 402.013304][T16325] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.332660][ T29] audit: type=1804 audit(1718455805.649:63): pid=16346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3214821263/syzkaller.3Pefee/775/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 402.365243][T16346] netlink: 1074 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.425029][T16354] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 402.560008][T16356] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 402.779651][T16364] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.816259][T16364] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 402.864073][T16364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.910616][T16364] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 402.965571][T16372] lo: Caught tx_queue_len zero misconfig [ 403.100605][T16375] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.176647][T16377] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 403.537471][T16402] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.565292][T16402] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 403.640827][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 404.300126][T16432] SET target dimension over the limit! [ 404.330609][T16434] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.419056][T16436] vlan2: entered promiscuous mode [ 404.436703][T16436] veth1_to_hsr: entered promiscuous mode [ 404.473114][T16436] team0: Port device vlan2 added [ 404.511603][T16445] tipc: Enabling of bearer rejected, failed to enable media [ 405.043810][T16473] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 405.070272][T16473] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 405.102108][T16473] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 405.298037][ T29] audit: type=1804 audit(1718455808.609:64): pid=16479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2620682863/syzkaller.M8wZCt/86/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 405.341414][T16479] netlink: 1074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.368138][T16483] vlan3: entered promiscuous mode [ 405.374490][T16483] veth1_to_hsr: entered promiscuous mode [ 405.390230][T16483] team0: Port device vlan3 added [ 406.095843][T16506] pim6reg: entered allmulticast mode [ 406.148759][T16506] pim6reg: left allmulticast mode [ 406.226922][T16512] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 406.328359][ T29] audit: type=1804 audit(1718455809.639:65): pid=16516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/820/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 406.384931][T16516] netlink: 1074 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.791687][T16532] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 406.961199][ T29] audit: type=1804 audit(1718455810.279:66): pid=16532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/821/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 407.061393][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 407.097447][T16541] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 407.150016][T16541] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 407.271060][T16553] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 407.489871][T16562] tipc: Started in network mode [ 407.494964][T16562] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 407.517868][T16562] tipc: Enabling of bearer rejected, failed to enable media [ 407.704615][T16571] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 407.955068][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.983496][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.141948][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.219912][T16584] pim6reg: entered allmulticast mode [ 408.256197][T16583] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.302572][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.354682][T16586] pim6reg: left allmulticast mode [ 408.474592][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.789487][ T11] bridge_slave_1: left allmulticast mode [ 408.806802][ T11] bridge_slave_1: left promiscuous mode [ 408.814028][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.835677][ T5160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.847874][ T5160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.856499][ T5160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.879147][ T5160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.890430][ T5160] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 408.894506][ T11] bridge_slave_0: left allmulticast mode [ 408.908783][ T11] bridge_slave_0: left promiscuous mode [ 408.918728][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.927982][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.478181][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.494144][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.509753][ T11] bond0 (unregistering): Released all slaves [ 409.701261][T16621] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.354394][ T11] hsr_slave_0: left promiscuous mode [ 410.374035][ T11] hsr_slave_1: left promiscuous mode [ 410.396743][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.429035][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.448123][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.464162][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.536401][ T11] veth1_macvtap: left promiscuous mode [ 410.555102][ T11] veth0_macvtap: left promiscuous mode [ 410.561153][ T11] veth1_vlan: left promiscuous mode [ 410.576716][ T11] veth0_vlan: left promiscuous mode [ 410.732760][T16666] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 410.767499][T16666] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.788994][T16666] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.969491][ T5145] Bluetooth: hci2: command tx timeout [ 411.645533][ T11] team0 (unregistering): Port device team_slave_1 removed [ 411.691997][ T11] team0 (unregistering): Port device team_slave_0 removed [ 412.214784][T16679] pim6reg: entered allmulticast mode [ 412.235917][T16603] chnl_net:caif_netlink_parms(): no params data found [ 412.295205][T16677] pim6reg: left allmulticast mode [ 412.643491][T16603] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.653508][T16704] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.693992][T16603] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.708815][T16603] bridge_slave_0: entered allmulticast mode [ 412.725232][T16603] bridge_slave_0: entered promiscuous mode [ 412.742191][T16706] bridge0: port 3(macvlan0) entered blocking state [ 412.759189][T16706] bridge0: port 3(macvlan0) entered disabled state [ 412.769004][T16706] macvlan0: entered allmulticast mode [ 412.794871][T16706] veth1_vlan: entered allmulticast mode [ 412.816761][T16706] macvlan0: entered promiscuous mode [ 412.836614][T16706] bridge0: port 3(macvlan0) entered blocking state [ 412.843350][T16706] bridge0: port 3(macvlan0) entered forwarding state [ 412.863789][T16603] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.885782][T16603] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.900668][T16603] bridge_slave_1: entered allmulticast mode [ 412.919297][T16603] bridge_slave_1: entered promiscuous mode [ 413.049314][ T5145] Bluetooth: hci2: command tx timeout [ 413.070658][T16603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.093934][T16711] nbd: must specify at least one socket [ 413.121703][T16603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.267907][T16603] team0: Port device team_slave_0 added [ 413.311756][T16603] team0: Port device team_slave_1 added [ 413.389730][T16603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.399133][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.448913][T16603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.477027][T16603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.488696][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.528415][T16603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.551193][T16734] sctp: [Deprecated]: syz-executor.0 (pid 16734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.551193][T16734] Use struct sctp_sack_info instead [ 413.640640][T16603] hsr_slave_0: entered promiscuous mode [ 413.649914][T16603] hsr_slave_1: entered promiscuous mode [ 414.286741][T16753] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 414.429723][T16603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 414.460228][T16603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 414.487213][ T29] audit: type=1804 audit(1718455817.799:67): pid=16753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2620682863/syzkaller.M8wZCt/110/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 414.537461][T16603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 414.589467][T16603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 414.904278][T16603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.957868][T16603] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.992137][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.999396][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.065327][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.072551][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.130298][ T5145] Bluetooth: hci2: command tx timeout [ 415.163770][T16787] pim6reg: entered allmulticast mode [ 415.200831][T16787] pim6reg: left allmulticast mode [ 415.647701][T16809] bridge0: port 4(macvlan0) entered blocking state [ 415.666815][T16809] bridge0: port 4(macvlan0) entered disabled state [ 415.677685][T16809] macvlan0: entered allmulticast mode [ 415.699727][T16809] macvlan0: entered promiscuous mode [ 415.779669][T16603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.960906][T16603] veth0_vlan: entered promiscuous mode [ 416.030480][T16603] veth1_vlan: entered promiscuous mode [ 416.095130][T16603] veth0_macvtap: entered promiscuous mode [ 416.128536][T16603] veth1_macvtap: entered promiscuous mode [ 416.154788][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.186437][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 416.207282][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.234157][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.270370][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.291567][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.317342][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.338131][T16848] nbd: must specify at least one socket [ 416.338401][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.373528][T16603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.408468][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.437645][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.461395][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.483992][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.497276][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.508208][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.518324][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.529310][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.540188][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.551806][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.567078][T16603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.596958][T16846] bridge0: port 3(macvlan0) entered blocking state [ 416.611097][T16846] bridge0: port 3(macvlan0) entered disabled state [ 416.617933][T16846] macvlan0: entered allmulticast mode [ 416.625406][T16846] macvlan0: entered promiscuous mode [ 416.669850][T16603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.694067][T16603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.713324][T16603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.733577][T16603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.980263][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.988159][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.051418][T16873] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 417.069238][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.091453][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.191662][T16878] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 417.210972][ T5145] Bluetooth: hci2: command tx timeout [ 417.842154][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.935217][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.945596][T16909] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.557547][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.963989][T16966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.024906][T16975] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 419.073049][T16976] Bluetooth: MGMT ver 1.22 [ 419.100186][T16976] Bluetooth: hci3: invalid length 0, exp 2 for type 17 [ 419.274007][T16982] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 419.301964][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.816995][T17008] Bluetooth: hci3: invalid length 0, exp 2 for type 17 [ 420.229497][T17026] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 420.668291][T17045] syzkaller0: entered promiscuous mode [ 420.681989][T17045] syzkaller0: entered allmulticast mode [ 421.089984][T17060] Bluetooth: hci3: invalid length 0, exp 2 for type 17 [ 421.556760][T17074] team0: Port device dummy0 removed [ 421.624507][T17074] bridge_slave_0: left promiscuous mode [ 421.646764][T17074] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.698427][T17074] bridge_slave_1: left allmulticast mode [ 421.728101][T17074] bridge_slave_1: left promiscuous mode [ 421.756274][T17074] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.796961][T17074] bond5: (slave bond_slave_0): Releasing backup interface [ 421.823622][T17074] bond_slave_0: left promiscuous mode [ 421.856633][T17074] bond0: (slave bond_slave_1): Releasing backup interface [ 421.901676][T17074] team0: Port device team_slave_0 removed [ 421.933929][T17074] team0: Port device team_slave_1 removed [ 421.951736][T17074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.966477][T17074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.976322][T17074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.984476][T17074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.996135][T17074] macvlan0: left allmulticast mode [ 422.002137][T17074] macvlan0: left promiscuous mode [ 422.007547][T17074] bridge0: port 4(macvlan0) entered disabled state [ 422.024514][T17074] geneve1: left allmulticast mode [ 422.036861][T17074] geneve1: left promiscuous mode [ 422.043448][T17074] bridge0: port 3(geneve1) entered disabled state [ 422.061975][T17074] bond0: (slave team1): Releasing backup interface [ 422.094136][T17074] bond0: (slave team2): Releasing backup interface [ 422.170531][T17080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.186219][T17115] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 422.200090][T17080] team0: Port device bond0 added [ 422.326102][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.366691][T17117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.387281][T17117] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.661859][T17139] Bluetooth: MGMT ver 1.22 [ 422.834306][T17147] bridge_slave_0: left allmulticast mode [ 422.858702][T17147] bridge_slave_0: left promiscuous mode [ 422.879952][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.907364][T17149] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 423.155794][T17147] bridge_slave_1: left allmulticast mode [ 423.288877][T17147] bridge_slave_1: left promiscuous mode [ 423.294703][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.548273][T17147] bond0: (slave bond_slave_0): Releasing backup interface [ 423.772860][T17147] bond0: (slave bond_slave_1): Releasing backup interface [ 423.834936][T17147] team0: Port device team_slave_0 removed [ 423.868997][T17147] team0: Port device team_slave_1 removed [ 423.875366][T17147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.884475][T17147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.892270][T17147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.906627][T17147] macvlan0: left allmulticast mode [ 423.912373][T17147] veth1_vlan: left allmulticast mode [ 423.917676][T17147] macvlan0: left promiscuous mode [ 423.923959][T17147] bridge0: port 3(macvlan0) entered disabled state [ 423.943485][T17147] bond0: (slave team1): Releasing backup interface [ 423.969643][T17147] veth1_to_hsr: left promiscuous mode [ 423.988662][T17147] team0: Port device vlan2 removed [ 424.003457][T17150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.020452][T17150] team0: Port device bond0 added [ 424.027802][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 424.691577][T17213] unknown channel width for channel at 909000KHz? [ 424.794147][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 425.188281][T17242] unknown channel width for channel at 909000KHz? [ 425.207146][T17245] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 425.333341][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.373446][T17248] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 425.499479][T17256] syzkaller0: entered promiscuous mode [ 425.532313][T17256] syzkaller0: entered allmulticast mode [ 425.754214][T17271] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 425.777911][ T29] audit: type=1804 audit(1718455829.089:68): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/892/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 425.940388][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.958977][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.998722][T17282] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.106637][T17293] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 426.217850][T17298] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 426.345683][ T29] audit: type=1804 audit(1718455829.649:69): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3214821263/syzkaller.3Pefee/852/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 426.617687][T17319] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.1'. [ 426.633074][T17319] caif0: entered allmulticast mode [ 427.890804][T17393] __nla_validate_parse: 1 callbacks suppressed [ 427.890824][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 427.898322][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 427.956460][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 428.002053][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 428.345422][T17414] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 428.913052][T17447] ipt_ECN: cannot use operation on non-tcp rule [ 429.240290][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 429.251169][ T29] audit: type=1804 audit(1718455832.559:70): pid=17462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2620682863/syzkaller.M8wZCt/182/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 429.526817][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 429.542247][T17474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.087661][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 431.061432][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 431.557040][T17547] ipt_ECN: cannot use operation on non-tcp rule [ 431.919928][T17559] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.935037][T17559] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.091848][T17564] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 432.132774][T17567] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.153573][T17567] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 432.293161][T17572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.777884][ T29] audit: type=1804 audit(1718455836.089:71): pid=17599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1731708752/syzkaller.dSQVtV/426/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 433.017562][T17607] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (57800) [ 433.041623][T17607] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 433.214220][T17612] ebtables: ebtables: counters copy to user failed while replacing table [ 433.280426][T17617] syz-executor.4[17617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.280573][T17617] syz-executor.4[17617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.396121][T17624] bridge0: port 2(bridge_slave_1) entered listening state [ 433.462441][T17625] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.489549][T17625] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.845493][T17634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.846747][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.866200][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.874864][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.885171][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.918790][ T5160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 434.930756][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.676276][T17663] chnl_net:caif_netlink_parms(): no params data found [ 435.725183][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 435.745235][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 435.755339][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 435.765372][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.773903][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 435.781997][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.835372][T17692] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.009945][T17701] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.030133][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.040570][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.047919][T17663] bridge_slave_0: entered allmulticast mode [ 436.069697][T17663] bridge_slave_0: entered promiscuous mode [ 436.078463][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.085943][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.095089][T17663] bridge_slave_1: entered allmulticast mode [ 436.102612][T17663] bridge_slave_1: entered promiscuous mode [ 436.189467][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.216882][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.321368][T17663] team0: Port device team_slave_0 added [ 436.364803][T17663] team0: Port device team_slave_1 added [ 436.500726][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.507710][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.556575][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.573793][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.581876][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.608076][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.734363][T17684] chnl_net:caif_netlink_parms(): no params data found [ 436.825633][T17663] hsr_slave_0: entered promiscuous mode [ 436.836378][T17663] hsr_slave_1: entered promiscuous mode [ 436.846984][T17663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.865333][T17663] Cannot create hsr debugfs directory [ 437.050371][ T5145] Bluetooth: hci3: command tx timeout [ 437.162938][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.176421][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.195026][T17684] bridge_slave_0: entered allmulticast mode [ 437.207115][T17684] bridge_slave_0: entered promiscuous mode [ 437.246078][T17754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.282899][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.312067][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.322227][T17684] bridge_slave_1: entered allmulticast mode [ 437.330232][T17684] bridge_slave_1: entered promiscuous mode [ 437.380692][T17759] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.549983][T17684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.662216][T17781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.688476][T17663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.751646][T17684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.849479][ T5145] Bluetooth: hci1: command tx timeout [ 437.852319][T17663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.035971][T17663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.066487][T17684] team0: Port device team_slave_0 added [ 438.091687][T17684] team0: Port device team_slave_1 added [ 438.124855][T17799] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 438.277678][T17663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.310238][T17684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.317444][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.348121][T17684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.391458][T17684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.400176][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.434976][T17684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.478290][T17813] debugfs: Directory 'netdev:nicvf0' with parent 'phy43' already present! [ 438.526824][T17813] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.129205][ T5145] Bluetooth: hci3: command tx timeout [ 439.933760][ T5145] Bluetooth: hci1: command tx timeout [ 440.336646][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.485549][T17684] hsr_slave_0: entered promiscuous mode [ 440.519190][T17684] hsr_slave_1: entered promiscuous mode [ 440.528628][T17684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.536207][T17684] Cannot create hsr debugfs directory [ 440.558077][T17663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.576422][T17663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.623546][T17663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.644459][T17663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.845094][T17846] debugfs: Directory 'netdev:nicvf0' with parent 'phy43' already present! [ 440.887359][T17846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 441.072382][T17684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.105765][T17684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.209128][ T5145] Bluetooth: hci3: command tx timeout [ 441.279935][T17684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.291242][T17684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.009218][ T5145] Bluetooth: hci1: command tx timeout [ 443.043802][T17684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.068221][T17684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.160905][T17663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.207533][T17684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.236072][T17684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.253285][T17874] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.270114][T17869] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.289141][ T5145] Bluetooth: hci3: command tx timeout [ 443.291512][T17875] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.310002][T17880] RDS: rds_bind could not find a transport for ::1200:0:c001:20:0:0, load rds_tcp or rds_rdma? [ 443.391268][T17663] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.423677][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.430931][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.447147][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.470213][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.477364][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.601620][T17891] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 443.637895][T17891] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.687846][T17684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 443.711450][T17684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 443.772018][T17684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 443.785602][T17684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 444.078510][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.089276][ T5145] Bluetooth: hci1: command tx timeout [ 444.157554][T17684] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.285784][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.293009][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.343077][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.350302][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.385926][T17919] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.432621][T17917] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.470251][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.750187][T17925] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.800379][T17663] veth0_vlan: entered promiscuous mode [ 444.807379][T17929] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 444.853630][T17663] veth1_vlan: entered promiscuous mode [ 444.860389][T17929] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 444.981378][T17663] veth0_macvtap: entered promiscuous mode [ 445.011887][T17663] veth1_macvtap: entered promiscuous mode [ 445.065713][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.096785][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.115964][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.140376][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.165017][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.193687][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.213318][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.254404][T17684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.279810][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.319653][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.348879][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.369056][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.391485][T17952] RDS: rds_bind could not find a transport for ::1200:0:c001:20:0:0, load rds_tcp or rds_rdma? [ 445.392851][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.413937][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.424581][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.436759][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.505001][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.568196][T17663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.605392][T17663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.623696][T17663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.642173][T17663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.009887][ T4098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.050540][ T4098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.121283][T17684] veth0_vlan: entered promiscuous mode [ 446.165397][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.182978][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.184055][T17684] veth1_vlan: entered promiscuous mode [ 446.315444][T17684] veth0_macvtap: entered promiscuous mode [ 446.336154][T17976] x_tables: duplicate underflow at hook 1 [ 446.371140][T17684] veth1_macvtap: entered promiscuous mode [ 446.436630][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.457692][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.483169][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.514880][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.545435][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.576144][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.619782][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.631636][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 446.658779][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.701733][T17684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.719494][T17982] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 446.734193][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 446.843089][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.878220][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.914822][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.941515][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.962487][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.984358][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.994433][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.025722][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.036042][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.046833][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.076919][T17998] openvswitch: netlink: Unknown nsh attribute 0 [ 447.098416][T17684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.143441][T17684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.167303][T17684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.191703][T17684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.207863][T17684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.217542][T18009] x_tables: duplicate underflow at hook 1 [ 447.398202][ T4098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.423647][ T4098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.521627][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.538975][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.699318][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.729423][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.760784][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.936650][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 448.767150][T18060] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.031887][T18080] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 449.050632][T18080] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.076152][T18080] bridge0: entered promiscuous mode [ 449.234918][ T29] audit: type=1804 audit(1718455852.549:72): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2620682863/syzkaller.M8wZCt/267/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 449.541051][T18107] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 449.563458][T18107] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 449.815967][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 450.461863][T18136] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 450.473983][T18134] dccp_close: ABORT with 4771 bytes unread [ 451.012436][T18172] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 451.040834][T18170] dccp_close: ABORT with 4771 bytes unread [ 451.098553][T18182] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.245422][ T29] audit: type=1804 audit(1718455854.549:73): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2409643597/syzkaller.H7OhiD/965/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 451.517964][T18207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.610566][T18213] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 451.632438][T18212] dccp_close: ABORT with 4771 bytes unread [ 451.675312][T18218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 452.375551][T18250] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 452.384695][T18250] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.188263][T18265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.844671][T18257] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.044468][T18280] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 455.181500][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.270945][ T1543] IPVS: starting estimator thread 0... [ 455.378965][T18301] IPVS: using max 19 ests per chain, 45600 per kthread [ 455.412796][T18305] pim6reg9: entered allmulticast mode [ 455.449574][T18310] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 455.615609][T18319] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 455.823006][T18331] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 456.049830][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 456.971773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.907171][T18350] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 458.015885][T18350] bond1: entered promiscuous mode [ 458.039885][T18357] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 458.082022][T18360] bond0: (slave bond_slave_0): Releasing backup interface [ 458.126411][T18360] bond1: (slave bond_slave_0): making interface the new active one [ 458.136347][T18360] bond_slave_0: entered promiscuous mode [ 458.144334][T18360] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.200107][T18365] tap0: tun_chr_ioctl cmd 1074025677 [ 458.205637][T18365] tap0: linktype set to 1 [ 458.482819][T18384] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 458.915790][T18413] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.936684][T18416] tap0: tun_chr_ioctl cmd 1074025677 [ 458.965191][T18416] tap0: linktype set to 1 [ 459.193506][T18425] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 459.206924][T18430] Cannot find del_set index 2 as target [ 459.579006][T18448] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.629477][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 459.706512][T18448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.119200][T18486] tap0: tun_chr_ioctl cmd 1074025677 [ 460.124708][T18486] tap0: linktype set to 1 [ 460.141713][T18490] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.219161][T18492] cannot load conntrack support for proto=3 [ 460.776152][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.827729][T18538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.921051][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.994546][T18548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.141996][T18558] Cannot find add_set index 0 as target [ 461.216916][T18563] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 461.254285][T18567] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 461.427719][T18576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.524943][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.567687][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.631453][T18589] Cannot find add_set index 0 as target [ 461.886442][T18602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 462.591312][T18634] Cannot find del_set index 2 as target [ 462.930280][T18656] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 463.088417][T18656] bond2: entered promiscuous mode [ 463.189866][T18665] bond1: (slave bond_slave_0): Releasing active interface [ 463.197047][T18665] bond_slave_0: left promiscuous mode [ 463.289883][T18665] bond2: (slave bond_slave_0): making interface the new active one [ 463.313708][T18665] bond_slave_0: entered promiscuous mode [ 463.323541][T18665] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.678978][T18701] xt_TCPMSS: Only works on TCP SYN packets [ 464.762628][T18754] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 464.874239][T18761] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 464.943678][T18761] bond1: entered promiscuous mode [ 464.959766][T18767] bond0: (slave bond_slave_0): Releasing backup interface [ 465.050017][T18767] bond1: (slave bond_slave_0): making interface the new active one [ 465.077952][T18767] bond_slave_0: entered promiscuous mode [ 465.095813][T18767] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.257618][T18782] netlink: 'syz-executor.1': attribute type 58 has an invalid length. [ 465.267079][T18782] __nla_validate_parse: 7 callbacks suppressed [ 465.267096][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.293589][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.353460][T18789] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 465.446388][T18794] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 466.074116][T18821] netlink: 'syz-executor.4': attribute type 58 has an invalid length. [ 466.109028][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.231871][T18831] xt_TCPMSS: Only works on TCP SYN packets [ 466.709733][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.932127][T18875] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 466.946644][T18875] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 466.965948][T18872] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 466.993407][T18872] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.067200][T18884] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 467.371091][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.489477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.964977][T18945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 469.045167][T18464] tipc: Subscription rejected, illegal request [ 470.095132][T18973] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.796597][T18993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.013081][T18993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.171374][T18993] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.316924][T18993] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.502350][T18993] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.551446][T18993] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.581013][T18993] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.633054][T18993] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.261333][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 472.500265][T19030] ieee802154 phy1 wpan1: encryption failed: -90 [ 472.911729][T19053] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.032494][T19057] ieee802154 phy1 wpan1: encryption failed: -90 [ 473.280830][T19071] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 473.319491][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.376278][T18470] tipc: Subscription rejected, illegal request [ 473.586361][T19082] pim6reg1: entered allmulticast mode [ 473.606026][T19087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.609069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.715777][T19082] pim6reg1: entered promiscuous mode [ 473.828788][T19089] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.991888][T19094] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 474.002654][T19094] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 474.012974][T19094] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 474.019235][T19089] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.065344][T19096] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 474.205322][T19089] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.278174][T19102] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 474.286634][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 474.398462][T19089] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.594116][T19089] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.644727][T19089] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.690427][T19089] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.740230][T19089] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.181672][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.485002][T19141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.585937][T19141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.680677][T19141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.794522][T19141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.938767][T19141] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.977834][T19141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.017701][T19141] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.081270][T19141] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.122047][T19152] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 476.315641][T19164] sctp: [Deprecated]: syz-executor.1 (pid 19164) Use of int in maxseg socket option. [ 476.315641][T19164] Use struct sctp_assoc_value instead [ 476.713492][T19181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.788277][T19183] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 476.796976][T19183] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 477.227153][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 477.236765][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 477.245231][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 477.292255][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 477.302094][ T5160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 477.312414][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.692487][T19214] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 477.848250][T19187] chnl_net:caif_netlink_parms(): no params data found [ 478.099387][T19187] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.106552][T19187] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.123746][T19187] bridge_slave_0: entered allmulticast mode [ 478.136196][T19187] bridge_slave_0: entered promiscuous mode [ 478.147232][T19187] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.162255][T19187] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.178211][T19187] bridge_slave_1: entered allmulticast mode [ 478.185868][T19187] bridge_slave_1: entered promiscuous mode [ 478.235813][T19187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.251705][T19241] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 478.262377][T19187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.324989][T19187] team0: Port device team_slave_0 added [ 478.336238][T19187] team0: Port device team_slave_1 added [ 478.396334][T19187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.414550][T19245] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 478.428064][T19187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.456414][T19187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.470534][T19187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.477603][T19187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.505806][T19187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.578448][T19187] hsr_slave_0: entered promiscuous mode [ 478.585760][T19187] hsr_slave_1: entered promiscuous mode [ 478.592475][T19187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.600605][T19187] Cannot create hsr debugfs directory [ 478.762780][T19187] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.851573][T19187] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.918454][T19187] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.968291][T19258] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 479.018236][T19187] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.175487][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 479.370751][ T5160] Bluetooth: hci3: command tx timeout [ 479.581275][T19290] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 481.127525][T19331] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 481.355051][T19343] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 481.384979][T19339] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 481.449670][ T5160] Bluetooth: hci3: command tx timeout [ 481.824873][T19187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 481.854368][T19187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 481.861357][T19374] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 481.900416][T19187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 481.920307][T19187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 482.143470][T19187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.207726][T19187] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.237973][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.245242][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.283607][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.290836][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.834549][T19187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.999463][T19187] veth0_vlan: entered promiscuous mode [ 483.042359][T19187] veth1_vlan: entered promiscuous mode [ 483.078910][T19421] macvlan2: entered promiscuous mode [ 483.097186][T19421] macvlan2: entered allmulticast mode [ 483.128056][T19421] team0: Port device macvlan2 added [ 483.283835][T19187] veth0_macvtap: entered promiscuous mode [ 483.330443][T19187] veth1_macvtap: entered promiscuous mode [ 483.402862][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.431602][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.468928][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.494656][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.527788][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.538910][ T5160] Bluetooth: hci3: command tx timeout [ 483.568255][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.609881][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.640337][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.671956][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.703605][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.737225][T19187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.804806][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.838837][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.870995][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.894032][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.925838][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.952018][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.972324][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.997421][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.032205][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.055981][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.084412][T19187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.108583][T19187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.144897][T19187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.199676][T19443] vlan2: entered promiscuous mode [ 484.204765][T19443] team0: entered promiscuous mode [ 484.228099][T19443] team_slave_0: entered promiscuous mode [ 484.236142][T19443] team_slave_1: entered promiscuous mode [ 484.244314][T19443] vlan2: entered allmulticast mode [ 484.254232][T19443] team0: entered allmulticast mode [ 484.265509][T19443] team_slave_0: entered allmulticast mode [ 484.278813][T19443] team_slave_1: entered allmulticast mode [ 484.319755][T19443] team0: left allmulticast mode [ 484.326089][T19443] team_slave_0: left allmulticast mode [ 484.331944][T19443] team_slave_1: left allmulticast mode [ 484.368701][T19443] team0: left promiscuous mode [ 484.373528][T19443] team_slave_0: left promiscuous mode [ 484.398830][T19443] team_slave_1: left promiscuous mode [ 484.521311][T19187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.540893][T19187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.562624][T19187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.584360][T19187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.608237][T19454] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 484.982049][ T949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.997655][ T949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.088301][T18470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.104981][T18470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.375445][T19482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.561678][T19499] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 485.609552][ T5160] Bluetooth: hci3: command tx timeout [ 485.975130][T19516] delete_channel: no stack [ 486.970252][T19538] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 487.011946][T19482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.071961][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 487.139799][T19541] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.148187][T19541] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.156684][T19541] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.165102][T19541] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.193801][T19541] vxlan0: entered promiscuous mode [ 487.620883][T19482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.781219][T19482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.954769][T19482] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.965568][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.000029][T19482] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.039502][T19482] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.066543][T19482] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.251575][T19552] delete_channel: no stack [ 488.686243][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.747223][T19568] syz_tun: entered promiscuous mode [ 488.773223][T19568] macvtap1: entered promiscuous mode [ 488.793375][T19568] macvtap1: entered allmulticast mode [ 488.821193][T19568] syz_tun: entered allmulticast mode [ 490.179001][T19611] delete_channel: no stack [ 490.330736][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.341168][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.359152][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.383999][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.392801][ T5145] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 490.402303][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.742594][T19628] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 490.768690][T19628] netlink: 46 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.935783][T19614] chnl_net:caif_netlink_parms(): no params data found [ 491.254168][T19614] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.278975][T19614] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.299342][T19614] bridge_slave_0: entered allmulticast mode [ 491.307775][T19614] bridge_slave_0: entered promiscuous mode [ 491.332705][T19614] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.348734][T19614] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.367136][T19614] bridge_slave_1: entered allmulticast mode [ 491.375626][T19614] bridge_slave_1: entered promiscuous mode [ 491.401276][T19646] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.475236][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.516426][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.553309][T19614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.581763][T19614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.739736][T19614] team0: Port device team_slave_0 added [ 491.795925][T19614] team0: Port device team_slave_1 added [ 491.810033][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.849226][T19661] syz_tun: entered promiscuous mode [ 491.859710][T19661] macvtap1: entered promiscuous mode [ 491.870078][T19661] macvtap1: entered allmulticast mode [ 491.886129][T19661] syz_tun: entered allmulticast mode [ 492.051934][T19614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.068968][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.131654][T19614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.180050][T19614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.187046][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.275259][T19614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.399813][T19614] hsr_slave_0: entered promiscuous mode [ 492.421130][T19614] hsr_slave_1: entered promiscuous mode [ 492.458841][T19614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.490341][ T5160] Bluetooth: hci0: command tx timeout [ 492.497505][T19614] Cannot create hsr debugfs directory [ 492.972470][T19614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.997691][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.091835][T19614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.138427][T19681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.257532][T19614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.353701][T19614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.603840][T19614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.628284][T19614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.664038][T19614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.692723][T19614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.953624][T19710] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 494.007407][T19614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.069575][T19614] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.101196][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.108360][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.132692][T19714] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 494.138036][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.148070][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.189026][T19714] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 494.217587][T19714] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 494.262758][T19714] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 494.305758][T19714] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 494.329130][T19714] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 494.356280][T19714] netlink: 149468 bytes leftover after parsing attributes in process `syz-executor.0'. [ 494.457026][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.515394][T19728] syz_tun: entered promiscuous mode [ 494.541971][T19728] macvtap1: entered promiscuous mode [ 494.547578][T19728] macvtap1: entered allmulticast mode [ 494.570960][ T5160] Bluetooth: hci0: command tx timeout [ 494.599396][T19728] syz_tun: entered allmulticast mode [ 494.640525][T19740] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.720438][T19614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.757654][T19743] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.981154][T19614] veth0_vlan: entered promiscuous mode [ 495.036437][T19614] veth1_vlan: entered promiscuous mode [ 495.108127][T19614] veth0_macvtap: entered promiscuous mode [ 495.120134][T19614] veth1_macvtap: entered promiscuous mode [ 495.165952][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.202662][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.216077][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.227895][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.238353][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.262485][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.289580][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.312783][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.335542][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.362546][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.389349][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.400954][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.414944][T19614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.433115][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.453226][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.465769][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.476620][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.487354][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.498082][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.509732][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.535299][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.550710][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.563069][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.573166][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.583987][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.607735][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.620393][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.642766][T19614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.660620][T19772] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 495.696926][T19614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.722980][T19614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.740225][T19614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.750844][T19614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.835795][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.871958][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.967998][T18464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.991170][T18464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.065817][T18470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.078736][T18470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.283519][T19799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 496.322547][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.358714][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.431968][T19809] nbd: socks must be embedded in a SOCK_ITEM attr [ 496.666372][ T5160] Bluetooth: hci0: command tx timeout [ 497.098216][T19843] nbd: socks must be embedded in a SOCK_ITEM attr [ 497.789558][T19884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.796869][T19884] IPv6: NLM_F_CREATE should be set when creating new route [ 497.821855][T19891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.829212][T19891] IPv6: NLM_F_CREATE should be set when creating new route [ 498.180780][T19898] Â: renamed from pim6reg1 [ 498.731199][ T5160] Bluetooth: hci0: command tx timeout [ 498.903938][T19935] Â: renamed from pim6reg1 [ 498.939424][T19941] __nla_validate_parse: 7 callbacks suppressed [ 498.939443][T19941] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 498.956989][T19941] openvswitch: netlink: Message has 2 unknown bytes. [ 498.986939][T19943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.002640][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.226163][T19951] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.274155][T19951] netlink: 8438 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.427319][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 500.041175][T19979] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.097247][T19979] netlink: 8438 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.533362][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 500.623231][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 500.809885][ T5160] Bluetooth: hci0: command tx timeout [ 501.102283][T20027] vcan0: entered allmulticast mode [ 501.128936][T20027] vcan0: left allmulticast mode [ 501.610223][T20060] sctp: [Deprecated]: syz-executor.4 (pid 20060) Use of int in maxseg socket option. [ 501.610223][T20060] Use struct sctp_assoc_value instead [ 501.777922][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.841235][T20069] macvtap2: entered promiscuous mode [ 501.865161][T20069] macvtap2: entered allmulticast mode [ 502.381284][T20098] vlan2: entered promiscuous mode [ 502.397465][T20098] batman_adv: batadv0: Adding interface: vlan2 [ 502.428506][T20098] batman_adv: batadv0: The MTU of interface vlan2 is too small (1480) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.485479][T20098] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 502.563302][T20109] Â: renamed from pim6reg1 [ 503.252345][T20149] openvswitch: netlink: Message has 2 unknown bytes. [ 503.310291][T20136] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 503.520144][T20157] Â: renamed from pim6reg1 [ 503.695750][T20170] vcan0: entered allmulticast mode [ 503.703548][T20170] vcan0: left allmulticast mode [ 504.105354][T20187] tls_set_device_offload_rx: netdev not found [ 504.210552][T20191] vlan3: entered allmulticast mode [ 504.220627][T20191] bridge0: port 1(vlan3) entered blocking state [ 504.233965][T20191] bridge0: port 1(vlan3) entered disabled state [ 504.380470][T20194] __nla_validate_parse: 5 callbacks suppressed [ 504.380489][T20194] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 504.993906][T20212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.009592][T20210] Bluetooth: MGMT ver 1.22 [ 505.344280][T20227] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.378996][T20223] can: request_module (can-proto-0) failed. [ 505.456671][T20223] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 505.555819][T20223] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 506.530376][T20265] Bluetooth: MGMT ver 1.22 [ 506.799143][T20283] x_tables: unsorted underflow at hook 3 [ 506.895256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.088982][T20289] batadv0: entered promiscuous mode [ 507.095045][T20289] macsec1: entered promiscuous mode [ 507.159282][T20289] macsec1: entered allmulticast mode [ 507.164631][T20289] batadv0: entered allmulticast mode [ 507.187114][T20304] rdma_op ffff8880151309f0 conn xmit_rdma 0000000000000000 [ 507.299095][T20289] batadv0: left allmulticast mode [ 507.304410][T20289] batadv0: left promiscuous mode [ 507.456547][ T949] bridge_slave_1: left allmulticast mode [ 507.462832][ T949] bridge_slave_1: left promiscuous mode [ 507.481233][ T949] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.519046][ T949] bridge_slave_0: left allmulticast mode [ 507.524790][ T949] bridge_slave_0: left promiscuous mode [ 507.553722][ T949] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.839549][ T949] ip6gretap0 (unregistering): left promiscuous mode [ 508.425517][ T949] bond0 (unregistering): left promiscuous mode [ 508.432142][ T949] bond_slave_0: left promiscuous mode [ 508.437818][ T949] bond_slave_1: left promiscuous mode [ 508.480115][ T949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.502971][ T949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.528437][ T949] bond0 (unregistering): Released all slaves [ 508.688498][T20318] x_tables: unsorted underflow at hook 3 [ 508.775913][ T949] tipc: Left network mode [ 509.016337][T20331] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 509.049015][T20331] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.090879][T20331] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 509.091564][T20337] xt_l2tp: missing protocol rule (udp|l2tpip) [ 509.107463][T20331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.418343][T20347] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 509.599917][ T949] hsr_slave_0: left promiscuous mode [ 509.655070][T20363] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 509.664830][ T949] hsr_slave_1: left promiscuous mode [ 509.688018][T20365] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 509.736919][ T949] veth1_macvtap: left promiscuous mode [ 509.749673][ T949] veth0_macvtap: left promiscuous mode [ 509.765948][ T949] veth1_vlan: left promiscuous mode [ 510.101461][T20383] xt_l2tp: missing protocol rule (udp|l2tpip) [ 510.592268][ T949] team0 (unregistering): Port device team_slave_1 removed [ 510.641986][ T949] team0 (unregistering): Port device team_slave_0 removed [ 511.201265][T20373] sit0: entered allmulticast mode [ 511.236888][T20377] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.2'. [ 511.327007][T20393] can: request_module (can-proto-0) failed. [ 511.347040][T20387] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 511.391439][T20388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.400645][T20388] bond0: (slave bond1): Enslaving as an active interface with an up link [ 511.451643][T20389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.479343][T20389] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 511.504022][T20389] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 511.552522][T20395] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 511.563073][T20393] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 511.680688][T20393] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 512.073404][T20417] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.221699][ T949] IPVS: stop unused estimator thread 0... [ 512.310134][T20422] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 512.417061][T20426] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 512.436198][ T29] audit: type=1804 audit(1718455915.749:74): pid=20429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1502752444/syzkaller.UdEcPG/90/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 512.825454][T20438] can: request_module (can-proto-0) failed. [ 512.828383][T20442] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 512.914493][T20438] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 513.333343][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.355990][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.663186][T20482] xt_TCPMSS: Only works on TCP SYN packets [ 514.081731][ T29] audit: type=1804 audit(1718455917.389:75): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1502752444/syzkaller.UdEcPG/97/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 514.112014][T20502] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 514.502781][T20519] xt_TCPMSS: Only works on TCP SYN packets [ 516.317067][T20578] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 516.346037][T20578] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 516.371326][T20578] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.578009][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.817152][T20595] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 516.981430][T20605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 517.037008][T20600] wg2: entered promiscuous mode [ 517.055351][T20600] wg2: entered allmulticast mode [ 517.081882][T20607] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 517.561618][T20638] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 517.617077][T20641] pim6reg1: entered promiscuous mode [ 517.643544][T20641] pim6reg1: entered allmulticast mode [ 518.012377][T20656] vlan2: entered promiscuous mode [ 518.017547][T20656] bridge0: entered promiscuous mode [ 518.023668][T20656] vlan2: entered allmulticast mode [ 518.029470][T20656] bridge0: entered allmulticast mode [ 518.039866][T20656] bridge0: left allmulticast mode [ 518.044960][T20656] bridge0: left promiscuous mode [ 518.460304][T20683] tipc: Started in network mode [ 518.465484][T20683] tipc: Node identity team_sla, cluster identity 4711 [ 518.480571][T20683] tipc: Enabling of bearer rejected, failed to enable media [ 518.530518][T20687] netlink: 4552 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.561903][T20687] netlink: 4552 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.674625][T20692] xt_CT: No such helper "syz0" [ 518.737123][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.900221][T20705] netem: incorrect ge model size [ 518.905687][T20705] netem: change failed [ 518.936591][T20705] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 518.971264][T20705] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.984728][T20705] bond0: (slave team0): Enslaving as an active interface with an up link [ 519.045162][T20705] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 519.078048][T20705] bond0: (slave team0): Releasing backup interface [ 519.106931][T20705] bridge0: port 3(team0) entered blocking state [ 519.117789][T20705] bridge0: port 3(team0) entered disabled state [ 519.125638][T20705] team0: entered allmulticast mode [ 519.136232][T20705] team_slave_0: entered allmulticast mode [ 519.147921][T20705] team_slave_1: entered allmulticast mode [ 519.175925][T20705] team0: entered promiscuous mode [ 519.192646][T20705] team_slave_0: entered promiscuous mode [ 519.204198][T20705] team_slave_1: entered promiscuous mode [ 519.668006][T20728] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 519.734579][T20728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.744126][T20728] bond0: (slave bond2): Enslaving as an active interface with an up link [ 519.865967][T20728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.895241][T20728] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 519.928296][T20728] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 520.320060][T20767] wg2: left promiscuous mode [ 520.329957][T20767] wg2: left allmulticast mode [ 520.364439][T20767] wg2: entered promiscuous mode [ 520.388808][T20767] wg2: entered allmulticast mode [ 520.670678][T20796] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 520.708791][T20796] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 521.028477][T20816] bond0: (slave wlan1): Releasing backup interface [ 521.586247][T20849] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 521.898460][T20868] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 521.927365][T20868] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 522.071195][T20878] syz-executor.3[20878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.071416][T20878] syz-executor.3[20878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.243398][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 522.330814][T20887] nlmon0: Master is either lo or non-ether device [ 522.712770][T20915] dccp_xmit_packet: Payload too large (65475) for featneg. [ 523.325196][T20945] ip6t_srh: unknown srh invflags 5F00 [ 523.332146][T20941] ɶƣ0GC¦: entered promiscuous mode [ 523.407457][T20950] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 523.420074][T20952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 523.438979][T20952] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 524.282105][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 524.309050][T20993] nlmon0: Master is either lo or non-ether device [ 525.382021][T21071] netlink: 4552 bytes leftover after parsing attributes in process `syz-executor.1'. [ 525.415681][T21071] netlink: 4552 bytes leftover after parsing attributes in process `syz-executor.1'. [ 525.527117][T21083] sch_fq: defrate 0 ignored. [ 525.580067][T21071] xt_CT: No such helper "syz0" [ 525.636977][T21086] sch_fq: defrate 0 ignored. [ 525.661176][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 525.816372][T21092] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 525.828431][T21092] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 525.838826][T21092] gretap1: entered promiscuous mode [ 525.844242][T21092] gretap1: entered allmulticast mode [ 525.864983][T21099] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 525.900558][T21101] wg2: left promiscuous mode [ 525.905268][T21101] wg2: left allmulticast mode [ 525.934024][T21101] wg2: entered promiscuous mode [ 525.944385][T21101] wg2: entered allmulticast mode [ 525.995247][T21103] netem: incorrect ge model size [ 526.016396][T21103] netem: change failed [ 526.082218][T21103] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 526.133955][T21103] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 526.160814][T21103] bridge0: port 1(team0) entered blocking state [ 526.169455][T21103] bridge0: port 1(team0) entered disabled state [ 526.180769][T21103] team0: entered allmulticast mode [ 526.188898][T21103] bond0: entered allmulticast mode [ 526.198764][T21103] team0: left allmulticast mode [ 526.203768][T21103] bond0: left allmulticast mode [ 526.209257][T21112] tipc: Enabling of bearer rejected, failed to enable media [ 526.288654][T21115] geneve2: entered promiscuous mode [ 526.308603][T21115] geneve2: entered allmulticast mode [ 527.164217][T21157] ɶƣ0GC¦: entered promiscuous mode [ 527.202632][T21159] sch_fq: defrate 0 ignored. [ 527.271254][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.303514][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.378849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.725663][T21183] pimreg: entered allmulticast mode [ 527.825527][T21188] geneve2: entered promiscuous mode [ 527.843673][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.858391][T21188] geneve2: entered allmulticast mode [ 528.420911][T21201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.762519][T21229] geneve2: entered promiscuous mode [ 528.767810][T21229] geneve2: entered allmulticast mode [ 528.845319][T21233] tipc: Enabled bearer , priority 10 [ 529.140500][T21246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.165595][T21246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.300683][T21255] pimreg: entered allmulticast mode [ 529.424258][T21263] geneve2: entered promiscuous mode [ 529.431451][T21263] geneve2: entered allmulticast mode [ 529.683390][T21276] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 529.946103][T21293] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 529.968614][ T5237] tipc: Node number set to 722865420 [ 530.110791][T21298] netem: incorrect ge model size [ 530.138021][T21298] netem: change failed [ 530.238317][T21298] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 530.301537][T21298] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.303183][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 530.334124][T21298] bond0: (slave team0): Enslaving as an active interface with an up link [ 530.361723][T21314] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 530.377204][T21315] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 530.398314][T21315] bond0: (slave team0): Releasing backup interface [ 530.456324][T21315] bridge0: port 3(team0) entered blocking state [ 530.469501][T21315] bridge0: port 3(team0) entered disabled state [ 530.484216][T21315] team0: entered allmulticast mode [ 530.499233][T21315] team_slave_0: entered allmulticast mode [ 530.512536][T21315] team_slave_1: entered allmulticast mode [ 530.530861][T21315] team0: entered promiscuous mode [ 530.544965][T21315] team_slave_0: entered promiscuous mode [ 530.562193][T21315] team_slave_1: entered promiscuous mode [ 530.979708][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.045280][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 531.331800][T21373] geneve2: entered promiscuous mode [ 531.354277][T21373] geneve2: entered allmulticast mode [ 532.773025][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 534.569970][ T5160] Bluetooth: hci2: command 0x0406 tx timeout [ 562.511510][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.523479][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.532849][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.542556][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.551421][ T5160] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 562.559550][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.597940][ T5147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 562.628839][ T5147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 562.649286][ T5147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 562.657262][ T5147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 562.671864][ T5147] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 562.700549][ T5147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 562.771615][ T5147] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 562.795636][ T5145] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 562.799521][ T5159] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 562.804914][ T5145] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 562.811715][ T5159] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 562.826433][ T5159] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 562.836189][ T5159] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 562.844592][ T5159] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 562.853384][ T5159] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 562.864001][ T5160] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 562.873273][ T5160] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 562.882022][ T5160] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 563.175020][ T5160] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 563.184722][ T5160] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 563.194178][ T5160] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 563.220276][ T5160] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 563.228720][ T5160] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 563.239322][ T5160] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 564.649495][ T5147] Bluetooth: hci5: command tx timeout [ 564.729541][ T5147] Bluetooth: hci6: command tx timeout [ 564.888760][ T5147] Bluetooth: hci7: command tx timeout [ 564.977508][ T5147] Bluetooth: hci8: command tx timeout [ 565.290691][ T5147] Bluetooth: hci9: command tx timeout [ 566.730330][ T5147] Bluetooth: hci5: command tx timeout [ 566.810365][ T5147] Bluetooth: hci6: command tx timeout [ 566.969478][ T5147] Bluetooth: hci7: command tx timeout [ 567.049285][ T5147] Bluetooth: hci8: command tx timeout [ 567.369005][ T5147] Bluetooth: hci9: command tx timeout [ 568.808875][ T5147] Bluetooth: hci5: command tx timeout [ 568.888908][ T5147] Bluetooth: hci6: command tx timeout [ 569.049207][ T5147] Bluetooth: hci7: command tx timeout [ 569.129025][ T5147] Bluetooth: hci8: command tx timeout [ 569.449146][ T5147] Bluetooth: hci9: command tx timeout [ 570.889107][ T5147] Bluetooth: hci5: command tx timeout [ 570.968762][ T5147] Bluetooth: hci6: command tx timeout [ 571.129056][ T5147] Bluetooth: hci7: command tx timeout [ 571.208897][ T5147] Bluetooth: hci8: command tx timeout [ 571.528894][ T5147] Bluetooth: hci9: command tx timeout [ 578.570927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.648814][ T5160] Bluetooth: hci1: command 0x0406 tx timeout [ 601.133682][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 614.412385][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 627.550163][ T5147] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 627.560951][ T5147] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 627.569710][ T5147] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 627.578398][ T5147] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 627.586674][ T5147] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 627.596537][ T5147] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 627.770668][ T5160] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 627.781602][ T5160] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 627.791322][ T5160] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 627.810097][ T5160] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 627.842010][ T5160] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 627.860196][ T5160] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 627.941172][ T5160] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 627.954532][ T5160] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 627.969339][ T5160] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 627.977532][ T5160] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 628.005625][ T5160] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 628.014527][ T5160] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 628.260121][ T5160] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 628.270154][ T5160] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 628.281785][ T5160] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 628.290819][ T5160] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 628.299166][ T5160] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 628.307705][ T5160] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 628.405849][ T5160] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 628.421410][ T5160] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 628.430863][ T5160] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 628.442522][ T5160] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 628.450925][ T5160] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 628.463768][ T5160] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 629.689654][ T5160] Bluetooth: hci10: command tx timeout [ 629.928756][ T5160] Bluetooth: hci11: command tx timeout [ 630.089325][ T5160] Bluetooth: hci12: command tx timeout [ 630.409496][ T5160] Bluetooth: hci13: command tx timeout [ 630.489197][ T5160] Bluetooth: hci14: command tx timeout [ 631.769343][ T5160] Bluetooth: hci10: command tx timeout [ 632.008661][ T5160] Bluetooth: hci11: command tx timeout [ 632.169151][ T5160] Bluetooth: hci12: command tx timeout [ 632.488826][ T5160] Bluetooth: hci13: command tx timeout [ 632.580182][ T5160] Bluetooth: hci14: command tx timeout [ 633.859234][ T5160] Bluetooth: hci10: command tx timeout [ 634.088813][ T5160] Bluetooth: hci11: command tx timeout [ 634.251109][ T5160] Bluetooth: hci12: command tx timeout [ 634.568658][ T5160] Bluetooth: hci13: command tx timeout [ 634.648985][ T5160] Bluetooth: hci14: command tx timeout [ 635.929208][ T5160] Bluetooth: hci10: command tx timeout [ 636.178836][ T5160] Bluetooth: hci11: command tx timeout [ 636.329072][ T5160] Bluetooth: hci12: command tx timeout [ 636.648646][ T5160] Bluetooth: hci13: command tx timeout [ 636.728988][ T5160] Bluetooth: hci14: command tx timeout [ 640.008783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.208953][ T5160] Bluetooth: hci0: command 0x0406 tx timeout [ 686.728972][ T30] INFO: task syz-executor.1:21410 blocked for more than 143 seconds. [ 686.737098][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 686.757342][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/15 12:54:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 686.779178][ T30] task:syz-executor.1 state:D stack:23800 pid:21410 tgid:21409 ppid:16603 flags:0x00000006 [ 686.810341][ T30] Call Trace: [ 686.813682][ T30] [ 686.816725][ T30] __schedule+0x17e8/0x4a20 [ 686.831757][ T30] ? __pfx___schedule+0x10/0x10 [ 686.836673][ T30] ? __pfx_lock_release+0x10/0x10 [ 686.859189][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 686.864796][ T30] ? schedule+0x90/0x320 [ 686.879853][ T30] schedule+0x14b/0x320 [ 686.884342][ T30] schedule_preempt_disabled+0x13/0x30 [ 686.909119][ T30] __mutex_lock+0x6a4/0xd70 [ 686.913675][ T30] ? __mutex_lock+0x527/0xd70 [ 686.930175][ T30] ? ppp_ioctl+0x78b/0x1cd0 [ 686.934729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 686.949147][ T30] ppp_ioctl+0x78b/0x1cd0 [ 686.953531][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 686.958320][ T30] ? __fget_files+0x3f6/0x470 [ 686.979168][ T30] ? __fget_files+0x29/0x470 [ 686.983819][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 686.999372][ T30] ? security_file_ioctl+0x87/0xb0 [ 687.004520][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 687.019066][ T30] __se_sys_ioctl+0xfc/0x170 [ 687.023699][ T30] do_syscall_64+0xf3/0x230 [ 687.028210][ T30] ? clear_bhb_loop+0x35/0x90 [ 687.049358][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.055371][ T30] RIP: 0033:0x7f6ca747cea9 [ 687.069173][ T30] RSP: 002b:00007f6ca82160c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.077621][ T30] RAX: ffffffffffffffda RBX: 00007f6ca75b3f80 RCX: 00007f6ca747cea9 [ 687.109353][ T30] RDX: 0000000020000140 RSI: 00000000c004743e RDI: 0000000000000003 [ 687.117386][ T30] RBP: 00007f6ca74ebff4 R08: 0000000000000000 R09: 0000000000000000 [