last executing test programs: 2.997280268s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) 2.745947768s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 2.248838935s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x44b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x0, 0x7}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xffe6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f00000005c0), 0x12) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002600)={0x0, 0x2, 0x0, 0x187}) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0'}, 0xb) write$cgroup_int(r6, &(0x7f0000000200), 0x42400) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7}]}, 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x24004005) 1.218547714s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.053733592s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000018000100000000000000000002000000000000090000000006001500060000000c0016"], 0x30}}, 0x0) 907.072689ms ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x44b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet6(r1, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x0, 0x7}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xffe6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f00000005c0), 0x12) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000002600)={0x0, 0x2, 0x0, 0x187}) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0'}, 0xb) write$cgroup_int(r6, &(0x7f0000000200), 0x42400) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7}]}, 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x24004005) 799.364568ms ago: executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000700)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x1, &(0x7f0000000940)=@raw=[@exit], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x90) 758.887376ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x50}}, 0x0) 684.402228ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000040)=0x4, 0x4) 659.07791ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) 622.180458ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 589.639235ms ago: executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000016c0)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x34060044) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70200000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 546.690722ms ago: executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000200000000000000000085000000070000001801000020646c2500000000002020607b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011140100000000000400000008004b80"], 0x18}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x8a, &(0x7f0000000380)=""/138, 0x41000, 0x1}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x259c77257bd2dca7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080), 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000005c0)={&(0x7f0000001180)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2, 0x40000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x8000) 455.804278ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2c, 0x0, "6970db5e1a5e59ab54053861b182c1aa5bfa09d21b699379ab04eb29ee95bfd4aa2e83662eefcca878e3677208de36650006bfdf10d35ddf3148573cbc274287f6f94c55fc2a25f51f91b69e87873ea1"}, 0xd8) syz_emit_ethernet(0x17b, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 432.783212ms ago: executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 411.90642ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 382.239567ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) 324.358401ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b402000000000000611148000000000085000000760000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 311.919453ms ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000280)) 278.448283ms ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000005000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 269.770494ms ago: executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcae2342aec1f706e105000000894f000f11020008000082973d2bd4b8bf4a8291a14b8a34f90186cee8440000000800000000", 0x41}, {&(0x7f0000000640)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b3325440000904b7b31789d65c0e0d3333ce2ef362056d154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff7811", 0x6b}, {&(0x7f0000000280)="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", 0x1a1}, {0x0}], 0x4}, 0x200400c4) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x3, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) listen(0xffffffffffffffff, 0x80080400) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4a}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e30, @remote}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xf1, &(0x7f0000000000), &(0x7f0000000240)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {0x6, 0x0, 0x7, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xa4}}, 0x0) 246.933298ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8d}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 209.921621ms ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='U\x00\x00\x00\a'], 0xd) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 189.368965ms ago: executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="ad929efe0531cf4c", 0x8, 0x10, &(0x7f0000000100)={0xa, 0x101, 0x2, @empty, 0x8000}, 0x1c) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)="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", 0x1000) socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000080)="276d8c087b087c00661ee4456dc7a8dec74c87ccd6489fc2642357c4a783087343f7fcaa7a4971bf0fdb30975fefc4ea43b84878", 0xfdb3, 0x0, &(0x7f00000000c0), 0x10) 164.205039ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14}}, 0xc8}}, 0x0) 89.333266ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 80.298481ms ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) 75.828079ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000000000000000000850000002a000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000100)=r0, 0x4) 53.064658ms ago: executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 0s ago: executing program 3: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000001e00)=""/4088}, 0x90) kernel console output (not intermixed with test programs): TU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.292119][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.305646][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.334910][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.346249][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.397266][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.404440][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.430983][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.480362][ T5115] team0: Port device team_slave_0 added [ 57.489032][ T5113] team0: Port device team_slave_0 added [ 57.498621][ T5113] team0: Port device team_slave_1 added [ 57.505405][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.512344][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.538262][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.552800][ T5111] team0: Port device team_slave_0 added [ 57.562381][ T5111] team0: Port device team_slave_1 added [ 57.570752][ T5115] team0: Port device team_slave_1 added [ 57.624712][ T5119] Bluetooth: hci0: command tx timeout [ 57.663633][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.671375][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.697600][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.708362][ T5119] Bluetooth: hci4: command tx timeout [ 57.716374][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.723316][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.749570][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.761505][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.768668][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.784432][ T4490] Bluetooth: hci2: command tx timeout [ 57.794823][ T5119] Bluetooth: hci3: command tx timeout [ 57.800465][ T4490] Bluetooth: hci1: command tx timeout [ 57.811653][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.839991][ T5114] hsr_slave_0: entered promiscuous mode [ 57.846214][ T5114] hsr_slave_1: entered promiscuous mode [ 57.853429][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.860552][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.886522][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.912622][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.919837][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.945792][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.975190][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.982138][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.008099][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.036244][ T5109] hsr_slave_0: entered promiscuous mode [ 58.042458][ T5109] hsr_slave_1: entered promiscuous mode [ 58.048710][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.057190][ T5109] Cannot create hsr debugfs directory [ 58.158194][ T5113] hsr_slave_0: entered promiscuous mode [ 58.164571][ T5113] hsr_slave_1: entered promiscuous mode [ 58.170533][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.178191][ T5113] Cannot create hsr debugfs directory [ 58.189759][ T5111] hsr_slave_0: entered promiscuous mode [ 58.196179][ T5111] hsr_slave_1: entered promiscuous mode [ 58.202143][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.209731][ T5111] Cannot create hsr debugfs directory [ 58.309039][ T5115] hsr_slave_0: entered promiscuous mode [ 58.315459][ T5115] hsr_slave_1: entered promiscuous mode [ 58.321436][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.329053][ T5115] Cannot create hsr debugfs directory [ 58.685707][ T5114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.696666][ T5114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.717928][ T5114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.736228][ T5114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.775168][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.785458][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.795982][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.807523][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.877098][ T5113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.930235][ T5113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.941265][ T5113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.953734][ T5113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.017676][ T5111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.051509][ T5111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.062521][ T5111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.102166][ T5111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.150565][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.173397][ T5115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.185204][ T5115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.212579][ T5115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.226681][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.239223][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.253539][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.261032][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.270448][ T5115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.310168][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.317330][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.369857][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.410827][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.418023][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.430766][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.437863][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.463247][ T5114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.479764][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.619801][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.706202][ T4490] Bluetooth: hci0: command tx timeout [ 59.715838][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.781037][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.788203][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.795821][ T4490] Bluetooth: hci4: command tx timeout [ 59.803472][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.810566][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.847012][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.866021][ T4490] Bluetooth: hci1: command tx timeout [ 59.866049][ T5112] Bluetooth: hci2: command tx timeout [ 59.873932][ T5119] Bluetooth: hci3: command tx timeout [ 59.929806][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.965904][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.975500][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.015161][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.030162][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.037263][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.051734][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.096391][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.103531][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.122980][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.150999][ T5114] veth0_vlan: entered promiscuous mode [ 60.186696][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.193881][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.210557][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.217722][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.276035][ T5114] veth1_vlan: entered promiscuous mode [ 60.422032][ T5114] veth0_macvtap: entered promiscuous mode [ 60.452568][ T5114] veth1_macvtap: entered promiscuous mode [ 60.531597][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.550906][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.565526][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.578151][ T5114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.588815][ T5114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.598270][ T5114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.607597][ T5114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.636897][ T5109] veth0_vlan: entered promiscuous mode [ 60.692665][ T5109] veth1_vlan: entered promiscuous mode [ 60.850351][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.866879][ T2797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.883007][ T2797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.902254][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.911725][ T5113] veth0_vlan: entered promiscuous mode [ 60.936271][ T5109] veth0_macvtap: entered promiscuous mode [ 60.955345][ T5113] veth1_vlan: entered promiscuous mode [ 60.955427][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.983663][ T5109] veth1_macvtap: entered promiscuous mode [ 60.990550][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.063618][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.077841][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.100441][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.130706][ T5113] veth0_macvtap: entered promiscuous mode [ 61.161502][ T5193] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 61.173545][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.184963][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.202226][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.243682][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.260518][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.284629][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.293339][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.311730][ T5111] veth0_vlan: entered promiscuous mode [ 61.328112][ T5115] veth0_vlan: entered promiscuous mode [ 61.342476][ T5113] veth1_macvtap: entered promiscuous mode [ 61.406181][ T5115] veth1_vlan: entered promiscuous mode [ 61.427412][ T5111] veth1_vlan: entered promiscuous mode [ 61.459475][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.471967][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.494024][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.514669][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.528519][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.600928][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.611990][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.622982][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.648133][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.678528][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.711059][ T5113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.721271][ T5113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.730038][ T5113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.738865][ T5113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.786515][ T5119] Bluetooth: hci0: command tx timeout [ 61.809883][ T5111] veth0_macvtap: entered promiscuous mode [ 61.864083][ T5119] Bluetooth: hci4: command tx timeout [ 61.883081][ T5111] veth1_macvtap: entered promiscuous mode [ 61.921498][ T5115] veth0_macvtap: entered promiscuous mode [ 61.944433][ T5119] Bluetooth: hci2: command tx timeout [ 61.945282][ T5112] Bluetooth: hci3: command tx timeout [ 61.949845][ T5119] Bluetooth: hci1: command tx timeout [ 61.955394][ T2848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.955433][ T2848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.039433][ T5115] veth1_macvtap: entered promiscuous mode [ 62.071711][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.091485][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.118890][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.130095][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.140490][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.153569][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.174692][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.191453][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.203508][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.246293][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.256935][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.270854][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.281788][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.292349][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.302847][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.312746][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.323240][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.336566][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.346936][ T5218] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.401326][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.443849][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.453677][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.477278][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.494427][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.513510][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.555535][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.585551][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.608859][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.619197][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.630019][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.640218][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.651040][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.661154][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.671683][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.685120][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.692924][ T2797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.699476][ T5115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.709793][ T2797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.717853][ T5115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.726797][ T5115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.738367][ T5115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.750775][ T5111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.759680][ T5111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.768526][ T5111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.779015][ T5111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.855160][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.865119][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.170464][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.202195][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.234637][ T2797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.259548][ T2797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.351187][ T2797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.376358][ T2797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.421798][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.464756][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.864337][ T5119] Bluetooth: hci0: command tx timeout [ 63.954470][ T5119] Bluetooth: hci4: command tx timeout [ 64.024245][ T4490] Bluetooth: hci2: command tx timeout [ 64.026214][ T5112] Bluetooth: hci1: command tx timeout [ 64.029722][ T5119] Bluetooth: hci3: command tx timeout [ 64.641697][ T5260] syz-executor.0 (5260) used greatest stack depth: 17552 bytes left [ 66.338100][ T5363] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 66.374396][ T5363] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 66.392791][ T5363] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 66.426451][ T5363] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 66.464928][ T5363] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 66.581834][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.617300][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.097866][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.541943][ T5463] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.559276][ T5465] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.721135][ T5477] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.931970][ T5488] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.230856][ T5501] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.558062][ T5527] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 69.858274][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.885022][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.913635][ T5547] Illegal XDP return value 4294967282 on prog (id 47) dev N/A, expect packet loss! [ 69.945353][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.983042][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.993135][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.005847][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.020554][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.050029][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.356259][ T5561] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.572226][ T5576] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 71.488911][ T5606] net_ratelimit: 2 callbacks suppressed [ 71.488928][ T5606] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 71.547763][ T5606] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 71.628305][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.644493][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.459268][ T5639] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 72.501780][ T5639] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 72.540379][ T5642] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 72.568631][ T5642] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 73.250830][ T5669] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.281672][ T5670] TCP: MD5 Hash failed for 172.20.20.187.0->255.255.255.255.20002 [FR] L3 index 0 [ 73.299085][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.310784][ T5670] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 73.354421][ T5672] TCP: Unexpected MD5 Hash found for [fe80::bb].0->[ff02::1].20002 [FS] [ 73.724042][ T5689] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 73.794325][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.168774][ T5711] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.238580][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.510895][ T5726] batadv_slave_1: entered promiscuous mode [ 74.520798][ T5725] batadv_slave_1: left promiscuous mode [ 74.697074][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.761845][ T5738] TCP: Unexpected MD5 Hash found for [fe80::bb].0->[ff02::1].20002 [FS] [ 75.247750][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.259715][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.424968][ T5776] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 75.433563][ T5776] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 75.763915][ T5794] batadv_slave_1: entered promiscuous mode [ 75.777474][ T5791] batadv_slave_1: left promiscuous mode [ 75.886719][ T35] wlan1: Trigger new scan to find an IBSS to join [ 75.992951][ T35] wlan1: Trigger new scan to find an IBSS to join [ 76.094484][ T51] wlan1: Trigger new scan to find an IBSS to join [ 76.197555][ T35] wlan1: Trigger new scan to find an IBSS to join [ 76.296909][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 76.404329][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 76.498707][ T2848] wlan1: Trigger new scan to find an IBSS to join [ 76.601106][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 76.678750][ T5841] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 76.711428][ T35] wlan1: Trigger new scan to find an IBSS to join [ 76.756179][ T927] cfg80211: failed to load regulatory.db [ 76.805906][ T35] wlan1: Trigger new scan to find an IBSS to join [ 76.866381][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.908459][ T35] wlan1: Trigger new scan to find an IBSS to join [ 77.010989][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 77.072020][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.113358][ T51] wlan1: Trigger new scan to find an IBSS to join [ 77.217126][ T35] wlan1: Trigger new scan to find an IBSS to join [ 77.318217][ T12] wlan1: Trigger new scan to find an IBSS to join [ 77.420492][ T35] wlan1: Trigger new scan to find an IBSS to join [ 77.525545][ T12] wlan1: Trigger new scan to find an IBSS to join [ 77.625997][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 77.744741][ T2905] wlan1: Trigger new scan to find an IBSS to join [ 77.829906][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 77.932669][ T12] wlan1: Trigger new scan to find an IBSS to join [ 78.108673][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.370925][ T5912] Zero length message leads to an empty skb [ 79.050700][ T5948] batadv_slave_0: entered allmulticast mode [ 79.153201][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.193090][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.249337][ T5948] pim6reg: entered allmulticast mode [ 79.316442][ T5944] batadv_slave_0: left allmulticast mode [ 79.329663][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.479099][ T5941] pim6reg: left allmulticast mode [ 79.731411][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.886735][ T5990] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.668159][ T6020] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 80.915585][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.971020][ T6038] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.197756][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.688643][ T6070] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.945904][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.161348][ T6092] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.564254][ T29] audit: type=1804 audit(1717221254.564:2): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/82/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 82.638232][ T6116] syz-executor.2[6116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.638387][ T6116] syz-executor.2[6116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.087048][ T6138] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 83.343557][ T6153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.496862][ T6163] IPVS: Error joining to the multicast group [ 83.641185][ T6168] bridge0: port 3(team0) entered blocking state [ 83.685080][ T6168] bridge0: port 3(team0) entered disabled state [ 83.716012][ T6168] team0: entered allmulticast mode [ 83.733644][ T6168] team_slave_0: entered allmulticast mode [ 83.765222][ T6168] team_slave_1: entered allmulticast mode [ 83.788314][ T6168] team0: entered promiscuous mode [ 83.793610][ T6168] team_slave_0: entered promiscuous mode [ 83.807003][ T6168] team_slave_1: entered promiscuous mode [ 83.820840][ T6168] bridge0: port 3(team0) entered blocking state [ 83.827618][ T6168] bridge0: port 3(team0) entered forwarding state [ 84.004815][ T6184] bridge0: port 3(team0) entered blocking state [ 84.017152][ T6184] bridge0: port 3(team0) entered disabled state [ 84.040887][ T6184] team0: entered allmulticast mode [ 84.069906][ T6184] team_slave_0: entered allmulticast mode [ 84.098953][ T6184] team_slave_1: entered allmulticast mode [ 84.131706][ T6184] team0: entered promiscuous mode [ 84.142613][ T6184] team_slave_0: entered promiscuous mode [ 84.156676][ T6184] team_slave_1: entered promiscuous mode [ 84.171317][ T6184] bridge0: port 3(team0) entered blocking state [ 84.177729][ T6184] bridge0: port 3(team0) entered forwarding state [ 84.317908][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.518073][ T6206] IPVS: Error joining to the multicast group [ 84.942310][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.619994][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.985306][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.048016][ T6340] bridge0: entered promiscuous mode [ 87.077160][ T6340] bridge0: left promiscuous mode [ 87.428644][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.438877][ T6363] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 87.651433][ T6371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.657446][ T6422] bridge0: entered promiscuous mode [ 88.698109][ T6422] bridge0: left promiscuous mode [ 88.965996][ T6436] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.112474][ T6502] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 91.098622][ T6554] dccp_invalid_packet: P.Data Offset(144) too large [ 92.629431][ T6636] ip6gre1: entered allmulticast mode [ 93.449761][ T6677] ip6gre1: entered allmulticast mode [ 93.938263][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.338337][ T6722] Bluetooth: MGMT ver 1.22 [ 94.510011][ T6738] pimreg: entered allmulticast mode [ 94.610854][ T6740] ip6gre2: entered allmulticast mode [ 94.743312][ T6737] pimreg: left allmulticast mode [ 95.166240][ T6771] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 95.397462][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.766865][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.100751][ T6825] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 96.164616][ T6827] ip6gre1: entered allmulticast mode [ 96.397145][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.767830][ T6863] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 96.939127][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.967889][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.991443][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.577779][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.840826][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.099096][ T6937] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 98.134988][ T6937] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.249594][ T6945] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 98.397466][ T6953] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 98.993193][ T6988] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 99.035942][ T6988] __nla_validate_parse: 2 callbacks suppressed [ 99.035960][ T6988] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.269277][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.307820][ T7005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.348869][ T7006] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 99.849320][ T7043] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.277641][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.395319][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.507936][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.645990][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.893195][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.904964][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.917160][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.919235][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.949563][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.957982][ T12] bridge_slave_1: left allmulticast mode [ 100.974904][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.984330][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.992517][ T12] bridge_slave_1: left promiscuous mode [ 101.032606][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.052644][ T12] bridge_slave_0: left allmulticast mode [ 101.066238][ T12] bridge_slave_0: left promiscuous mode [ 101.072164][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.169086][ T7094] IPVS: persistence engine module ip_vs_pe_€ not found [ 101.721354][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.734297][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.745725][ T12] bond0 (unregistering): Released all slaves [ 102.268909][ T12] hsr_slave_0: left promiscuous mode [ 102.277947][ T12] hsr_slave_1: left promiscuous mode [ 102.293303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.301167][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.321144][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.328858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.360936][ T12] veth1_macvtap: left promiscuous mode [ 102.369214][ T12] veth0_macvtap: left promiscuous mode [ 102.375150][ T12] veth1_vlan: left promiscuous mode [ 102.380712][ T12] veth0_vlan: left promiscuous mode [ 102.792391][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.827739][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.068699][ T5119] Bluetooth: hci4: command tx timeout [ 103.139161][ T7139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.170639][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 103.438525][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.459605][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.491397][ T7079] bridge_slave_0: entered allmulticast mode [ 103.499341][ T7162] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 103.507761][ T7162] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.508480][ T7079] bridge_slave_0: entered promiscuous mode [ 103.519385][ T7162] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 103.534730][ T7162] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.548803][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.573552][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.592184][ T7079] bridge_slave_1: entered allmulticast mode [ 103.617148][ T7079] bridge_slave_1: entered promiscuous mode [ 103.696641][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.739530][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.819944][ T7079] team0: Port device team_slave_0 added [ 103.848736][ T7079] team0: Port device team_slave_1 added [ 103.898727][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.908463][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.939498][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.971659][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.982563][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.015131][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.071367][ T7079] hsr_slave_0: entered promiscuous mode [ 104.079854][ T7079] hsr_slave_1: entered promiscuous mode [ 104.091643][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.104568][ T7079] Cannot create hsr debugfs directory [ 104.727790][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.866582][ T7217] team_slave_0: entered promiscuous mode [ 104.884984][ T7215] team_slave_0: left promiscuous mode [ 104.920044][ T7079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.947107][ T7079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.963884][ T7079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.988927][ T7079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.143926][ T5119] Bluetooth: hci4: command tx timeout [ 105.202180][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.251838][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.268963][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.276143][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.296641][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.303784][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.388077][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.762096][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.894720][ T7079] veth0_vlan: entered promiscuous mode [ 105.918707][ T7079] veth1_vlan: entered promiscuous mode [ 106.002133][ T7079] veth0_macvtap: entered promiscuous mode [ 106.025636][ T7079] veth1_macvtap: entered promiscuous mode [ 106.072147][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.093911][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.112737][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.125817][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.136906][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.155056][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.171703][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.190675][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.220920][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.256417][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.283932][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.308490][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.337787][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.363085][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.390604][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.419325][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.436647][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.454562][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.477175][ T7079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.489445][ T7079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.518237][ T7079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.528099][ T7079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.716948][ T5116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.731013][ T5116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.802603][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.817351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.918667][ T7294] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 107.224144][ T5119] Bluetooth: hci4: command tx timeout [ 108.135401][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.152270][ T7372] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.200663][ T7371] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 108.275885][ T29] audit: type=1804 audit(1717221280.274:3): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir616656291/syzkaller.5DqVmH/193/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 108.327994][ T7383] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 108.412442][ T7386] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 108.571057][ T7386] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 109.296461][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.303893][ T5119] Bluetooth: hci4: command tx timeout [ 109.307056][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.547688][ T29] audit: type=1804 audit(1717221281.554:4): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2813012386/syzkaller.ogl1GT/215/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 109.789113][ T29] audit: type=1804 audit(1717221281.794:5): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2813012386/syzkaller.ogl1GT/216/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 110.018504][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.050643][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.384470][ T7383] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.403800][ T7383] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.412698][ T7383] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.427436][ T7383] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.540047][ T7410] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 110.608655][ T7410] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 111.031143][ T7450] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 111.061780][ T7453] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 111.145438][ T7456] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 111.230585][ T7461] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 111.944947][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.288541][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.319038][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.642478][ T7456] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.659889][ T7456] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.675360][ T7456] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.693869][ T7456] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.905704][ T7474] Bluetooth: MGMT ver 1.22 [ 113.155774][ T29] audit: type=1804 audit(1717221285.154:6): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir616656291/syzkaller.5DqVmH/201/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 113.180192][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.418741][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.467160][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.511112][ T7514] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 113.817478][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.080995][ T7545] macvlan2: entered promiscuous mode [ 114.091982][ T7545] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 114.108507][ T7545] macvlan2: entered allmulticast mode [ 114.119610][ T7545] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 114.142442][ T7545] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 114.163200][ T7545] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 114.302146][ T7556] vlan2: entered promiscuous mode [ 114.310358][ T7556] bond0: entered promiscuous mode [ 114.333965][ T7556] bond_slave_0: entered promiscuous mode [ 114.339850][ T7556] bond_slave_1: entered promiscuous mode [ 114.354306][ T7567] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.370918][ T7567] unsupported nlmsg_type 40 [ 114.377069][ T7556] bond0: left promiscuous mode [ 114.381863][ T7556] bond_slave_0: left promiscuous mode [ 114.403095][ T7556] bond_slave_1: left promiscuous mode [ 114.463602][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.531108][ T7576] veth0_vlan: entered allmulticast mode [ 114.664142][ T7580] veth0_vlan: left promiscuous mode [ 114.709869][ T7580] veth0_vlan: entered promiscuous mode [ 114.772245][ T7588] macvlan2: entered promiscuous mode [ 114.788252][ T7588] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 114.808651][ T7588] macvlan2: entered allmulticast mode [ 114.816689][ T7588] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 114.876708][ T7588] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 114.906164][ T7588] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 115.052157][ T5162] IPVS: starting estimator thread 0... [ 115.154088][ T7607] IPVS: using max 22 ests per chain, 52800 per kthread [ 115.441380][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.447974][ T7634] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 115.465168][ T7634] macvlan2: entered promiscuous mode [ 115.477746][ T7634] macvlan2: entered allmulticast mode [ 115.499301][ T7634] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 115.535555][ T7634] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 115.543519][ T7634] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 115.561996][ T5162] IPVS: starting estimator thread 0... [ 115.589448][ T5116] IPVS: starting estimator thread 0... [ 115.664364][ T7643] IPVS: using max 18 ests per chain, 43200 per kthread [ 115.684253][ T7645] IPVS: using max 20 ests per chain, 48000 per kthread [ 116.069664][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.498455][ T7712] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 116.508510][ T7712] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.003512][ T7745] syz-executor.1[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.003656][ T7745] syz-executor.1[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.635626][ T7778] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 117.675537][ T7778] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.854335][ T7791] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 117.925274][ T7797] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 117.936482][ T7797] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 118.014144][ T7803] Cannot find set identified by id 0 to match [ 118.241662][ T7812] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.407378][ T7822] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 118.575295][ T7832] ɶƣ0GC¦: entered promiscuous mode [ 118.588086][ T7836] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 118.598575][ T7834] syz-executor.3[7834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.598715][ T7834] syz-executor.3[7834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.615695][ T7836] __nla_validate_parse: 1 callbacks suppressed [ 118.615711][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.669031][ T7839] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 118.777713][ T7846] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.109196][ T7866] ɶƣ0GC¦: entered promiscuous mode [ 119.180851][ T7870] ɶƣ0GC¦: entered promiscuous mode [ 119.380645][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.388604][ T7887] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 119.391196][ T7884] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 119.406018][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.418985][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.436394][ T7886] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.445535][ T7886] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.454377][ T7886] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.463085][ T7886] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.482912][ T7886] vxlan0: entered promiscuous mode [ 119.872519][ T7909] ɶƣ0GC¦: entered promiscuous mode [ 120.112783][ T7925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 120.133568][ T7925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 120.143720][ T7925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 120.173096][ T7925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 120.621828][ T7959] Cannot find set identified by id 0 to match [ 120.635156][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.677542][ T7960] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.686606][ T7960] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.695402][ T7960] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.704211][ T7960] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.730129][ T7960] vxlan0: entered promiscuous mode [ 120.948873][ T7974] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.953302][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.166699][ T7986] IPv6: Can't replace route, no match found [ 121.250742][ T7992] syz_tun: entered promiscuous mode [ 121.265908][ T7992] syz_tun: left promiscuous mode [ 121.448640][ T8000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.668367][ T8013] IPv6: Can't replace route, no match found [ 122.099456][ T8044] IPv6: Can't replace route, no match found [ 122.238668][ T8038] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.309402][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.860544][ T8082] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.222057][ T8098] validate_nla: 4 callbacks suppressed [ 123.222075][ T8098] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 123.249647][ T8098] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.258707][ T8098] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.267672][ T8098] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.276458][ T8098] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.285496][ T8098] vxlan0: entered promiscuous mode [ 123.776736][ T8131] __nla_validate_parse: 2 callbacks suppressed [ 123.776755][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.314334][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.720409][ T8179] syz-executor.0[8179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.720646][ T8179] syz-executor.0[8179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.915124][ T1038] bridge_slave_1: left allmulticast mode [ 124.953285][ T1038] bridge_slave_1: left promiscuous mode [ 124.962883][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.001179][ T1038] bridge_slave_0: left allmulticast mode [ 125.016349][ T1038] bridge_slave_0: left promiscuous mode [ 125.032210][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.376985][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.391180][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.399898][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.409055][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.423613][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.432389][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.513290][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.523727][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.537519][ T1038] bond0 (unregistering): Released all slaves [ 125.840955][ T8225] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 125.862987][ T8225] netlink: 9280 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.889999][ T8225] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 125.933969][ T8225] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.076179][ T1038] hsr_slave_0: left promiscuous mode [ 126.087389][ T1038] hsr_slave_1: left promiscuous mode [ 126.125416][ T29] audit: type=1804 audit(1717221298.134:7): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2024955167/syzkaller.DII8tP/254/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 126.151810][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.163682][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.186834][ T8242] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 126.208855][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.308666][ T8247] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.527865][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.675491][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 126.710850][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 127.202844][ T8209] chnl_net:caif_netlink_parms(): no params data found [ 127.252154][ T8272] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 127.275343][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.447917][ T8284] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.522371][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.540386][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.547721][ T5112] Bluetooth: hci4: command tx timeout [ 127.568844][ T8209] bridge_slave_0: entered allmulticast mode [ 127.584706][ T8209] bridge_slave_0: entered promiscuous mode [ 127.616506][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.623649][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.641549][ T8209] bridge_slave_1: entered allmulticast mode [ 127.655215][ T8209] bridge_slave_1: entered promiscuous mode [ 127.718179][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.722888][ T1038] IPVS: stop unused estimator thread 0... [ 127.817865][ T8209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.866104][ T8209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.992875][ T8209] team0: Port device team_slave_0 added [ 128.029764][ T8209] team0: Port device team_slave_1 added [ 128.047313][ T8312] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 128.173141][ T8209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.208154][ T8209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.266814][ T8209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.287408][ T8209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.302267][ T8209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.366256][ T8209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.519656][ T8209] hsr_slave_0: entered promiscuous mode [ 128.542821][ T8209] hsr_slave_1: entered promiscuous mode [ 128.558688][ T8209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.579200][ T8209] Cannot create hsr debugfs directory [ 128.679123][ T29] audit: type=1804 audit(1717221300.684:8): pid=8347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/304/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 128.952998][ T8366] __nla_validate_parse: 5 callbacks suppressed [ 128.953016][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.122978][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.135782][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.252614][ T8378] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.283321][ T8209] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.317557][ T8209] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.348198][ T8209] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.372241][ T8209] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.432999][ T8383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.624462][ T5112] Bluetooth: hci4: command tx timeout [ 129.642796][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.679620][ T8209] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.693658][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.700839][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.719443][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.726607][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.152052][ T8209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.285447][ T8209] veth0_vlan: entered promiscuous mode [ 130.329524][ T8209] veth1_vlan: entered promiscuous mode [ 130.422088][ T8209] veth0_macvtap: entered promiscuous mode [ 130.463693][ T8209] veth1_macvtap: entered promiscuous mode [ 130.544707][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.559886][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.571908][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.582913][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.613922][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.635849][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.677235][ T8209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.705923][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.728813][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.741118][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.756302][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.766383][ T8209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.789175][ T8209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.816797][ T8209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.837612][ T8209] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.848375][ T8209] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.861858][ T8209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.874826][ T8209] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.071517][ T2797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.091471][ T2797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.177370][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.204633][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.301679][ T8462] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 131.330962][ T8462] bond0: entered promiscuous mode [ 131.354558][ T8462] bond_slave_0: entered promiscuous mode [ 131.360678][ T8462] bond_slave_1: entered promiscuous mode [ 131.447207][ T8462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.612190][ T8461] bond0: left promiscuous mode [ 131.623041][ T8461] bond_slave_0: left promiscuous mode [ 131.630000][ T8461] bond_slave_1: left promiscuous mode [ 131.704941][ T5119] Bluetooth: hci4: command tx timeout [ 132.188638][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.397016][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.604908][ T8540] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.643376][ T8540] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.673474][ T8540] 0ªX¹¦D: renamed from gretap0 [ 132.705621][ T8540] 0ªX¹¦D: entered allmulticast mode [ 132.712705][ T8540] A link change request failed with some changes committed already. Interface 50ªX¹¦D may have been left with an inconsistent configuration, please check. [ 133.068513][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075689][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.353892][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.544072][ T5112] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.553065][ T5112] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.785448][ T5112] Bluetooth: hci4: command tx timeout [ 134.274060][ T8605] ieee802154 phy0 wpan0: encryption failed: -90 [ 134.621967][ T8624] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 134.648593][ T8624] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.599165][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.824073][ T8684] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 135.917756][ T8690] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 135.951853][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.962072][ T8693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.247305][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.365232][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.372411][ T8710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.717709][ T8740] ieee802154 phy0 wpan0: encryption failed: -90 [ 136.953417][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.996476][ T8759] team_slave_0: entered promiscuous mode [ 137.002573][ T8759] team_slave_1: entered promiscuous mode [ 137.021789][ T8759] macvtap1: entered promiscuous mode [ 137.034526][ T8759] team0: entered promiscuous mode [ 137.046802][ T8759] macvtap1: entered allmulticast mode [ 137.058352][ T8759] team0: entered allmulticast mode [ 137.068917][ T8759] team_slave_0: entered allmulticast mode [ 137.097974][ T8759] team_slave_1: entered allmulticast mode [ 137.113418][ T8759] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 137.532675][ T8790] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 137.573608][ T8790] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 137.826411][ T8794] vlan2: entered promiscuous mode [ 138.218462][ T8815] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 138.232097][ T29] audit: type=1804 audit(1717221310.224:9): pid=8810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/358/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 138.319487][ T8816] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 138.405090][ T8819] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 138.464301][ T8821] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 138.839663][ T29] audit: type=1804 audit(1717221310.844:10): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir616656291/syzkaller.5DqVmH/313/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 139.216892][ T8867] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 139.261617][ T8874] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 139.326781][ T29] audit: type=1804 audit(1717221311.324:11): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir616656291/syzkaller.5DqVmH/316/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 139.435077][ T29] audit: type=1804 audit(1717221311.444:12): pid=8877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2024955167/syzkaller.DII8tP/305/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 139.728661][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.763819][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.771030][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.062906][ T8915] gretap0: entered promiscuous mode [ 140.093203][ T8915] gretap0: left promiscuous mode [ 140.301468][ T8927] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 140.343569][ T8927] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 140.368513][ T8929] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.465320][ T8931] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.802829][ T8953] No such timeout policy "syz1" [ 140.890643][ T8959] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.909672][ T8961] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 140.931015][ T8961] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 140.942495][ T8961] debugfs: Directory 'netdev:' with parent 'phy7' already present! [ 141.009006][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.019064][ T8961] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 141.080432][ T8963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.412119][ T8985] No such timeout policy "syz1" [ 141.609502][ T8996] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 141.645329][ T9001] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.661195][ T9005] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 141.691089][ T9005] debugfs: Directory 'netdev:' with parent 'phy9' already present! [ 141.770607][ T8996] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 141.820095][ T9013] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.071483][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.249634][ T9042] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 142.269158][ T9042] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 142.284473][ T9042] debugfs: Directory 'netdev:' with parent 'phy7' already present! [ 142.354198][ T9042] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 142.375323][ T9048] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.589535][ T9058] batadv_slave_1: entered promiscuous mode [ 142.612560][ T9055] batadv_slave_1: left promiscuous mode [ 142.892502][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.961358][ T9153] veth1_to_bridge: entered allmulticast mode [ 144.067962][ T9153] veth1_to_bridge: left allmulticast mode [ 144.315656][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.331702][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.340960][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.354786][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.362929][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.379369][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.076327][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 145.086337][ T29] audit: type=1804 audit(1717221317.094:13): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/401/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 145.360149][ T1038] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.502711][ T1038] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.616611][ T1038] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.702733][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.742540][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.765423][ T9168] bridge_slave_0: entered allmulticast mode [ 145.772749][ T9168] bridge_slave_0: entered promiscuous mode [ 145.814181][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.835419][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.845853][ T29] audit: type=1804 audit(1717221317.854:14): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/407/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 145.887482][ T9168] bridge_slave_1: entered allmulticast mode [ 145.904972][ T9168] bridge_slave_1: entered promiscuous mode [ 145.956846][ T1038] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.068534][ T9247] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 146.091545][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.148659][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.161230][ T9252] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 146.198970][ T9252] debugfs: Directory 'netdev:' with parent 'phy7' already present! [ 146.290960][ T9257] __nla_validate_parse: 1 callbacks suppressed [ 146.290977][ T9257] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.351237][ T9257] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.351599][ T9247] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 146.394937][ T9254] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.409006][ T9168] team0: Port device team_slave_0 added [ 146.423927][ T5119] Bluetooth: hci4: command tx timeout [ 146.531353][ T9168] team0: Port device team_slave_1 added [ 146.631769][ T9265] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.719387][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.736690][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.818540][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.851170][ T1038] bridge_slave_1: left allmulticast mode [ 146.880248][ T1038] bridge_slave_1: left promiscuous mode [ 146.906580][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.923233][ T1038] bridge_slave_0: left allmulticast mode [ 146.942496][ T1038] bridge_slave_0: left promiscuous mode [ 146.965931][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.405312][ T9292] validate_nla: 7 callbacks suppressed [ 147.405330][ T9292] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 147.455068][ T9292] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 147.727919][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.746659][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.765172][ T1038] bond0 (unregistering): Released all slaves [ 147.793570][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.805848][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.838318][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.205601][ T9168] hsr_slave_0: entered promiscuous mode [ 148.234431][ T9168] hsr_slave_1: entered promiscuous mode [ 148.254124][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.274546][ T9168] Cannot create hsr debugfs directory [ 148.391006][ T1038] hsr_slave_0: left promiscuous mode [ 148.406717][ T1038] hsr_slave_1: left promiscuous mode [ 148.422458][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.449162][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.468590][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.481052][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.513952][ T5119] Bluetooth: hci4: command tx timeout [ 148.528990][ T1038] veth1_macvtap: left promiscuous mode [ 148.539342][ T1038] veth0_macvtap: left promiscuous mode [ 148.546249][ T1038] veth1_vlan: left promiscuous mode [ 148.559067][ T1038] veth0_vlan: left promiscuous mode [ 149.180813][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 149.236012][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 149.420931][ T9324] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 149.429558][ T9324] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 149.676215][ T9317] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 150.088722][ T9344] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.201357][ T9350] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 150.202400][ T9348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.242318][ T9350] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 150.252998][ T9350] debugfs: Directory 'netdev:' with parent 'phy7' already present! [ 150.349809][ T9350] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 150.376057][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.393840][ T9357] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.403221][ T9357] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.524956][ T5162] IPVS: starting estimator thread 0... [ 150.583966][ T5119] Bluetooth: hci4: command tx timeout [ 150.624528][ T9366] IPVS: using max 19 ests per chain, 45600 per kthread [ 150.745321][ T9168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.784219][ T9168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.808955][ T9168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.816301][ T9378] delete_channel: no stack [ 150.858306][ T9168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.864748][ T9382] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 150.873199][ T9382] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 151.005100][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.148727][ T9395] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 151.156105][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.186997][ T9395] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 151.191180][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.235200][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.242332][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.300323][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.307499][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.383259][ T9168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.424338][ T9168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.682579][ T9417] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.808307][ T29] audit: type=1804 audit(1717221323.814:15): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir616656291/syzkaller.5DqVmH/374/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 151.849482][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.974922][ T9437] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.664074][ T5119] Bluetooth: hci4: command tx timeout [ 153.875914][ T9492] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 154.034845][ T9168] veth0_vlan: entered promiscuous mode [ 154.062684][ T9168] veth1_vlan: entered promiscuous mode [ 154.148486][ T9168] veth0_macvtap: entered promiscuous mode [ 154.162016][ T9168] veth1_macvtap: entered promiscuous mode [ 154.208055][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.233939][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.270380][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.307307][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.334640][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.358646][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.381121][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.415829][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.438617][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.455742][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.476008][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.507199][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.523719][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.549357][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.581912][ T9168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.603572][ T9168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.623939][ T9168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.644242][ T9168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.619724][ T1805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.653945][ T1805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.721989][ T1805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.731430][ T1805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.805654][ T9578] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 157.639335][ T9622] IPv6: Can't replace route, no match found [ 157.656142][ T29] audit: type=1804 audit(1717221329.654:16): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/465/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 157.747350][ T29] audit: type=1800 audit(1717221329.664:17): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 158.000077][ T9642] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 158.062196][ T9642] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.222421][ T29] audit: type=1804 audit(1717221330.224:18): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4249496884/syzkaller.iua13T/469/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 158.270532][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.271082][ T29] audit: type=1800 audit(1717221330.224:19): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 158.399533][ T9670] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 158.563978][ T29] audit: type=1804 audit(1717221330.564:20): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2813012386/syzkaller.ogl1GT/393/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 158.595076][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.637616][ T9664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.651614][ T29] audit: type=1800 audit(1717221330.564:21): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 159.074403][ T29] audit: type=1804 audit(1717221331.084:22): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2024955167/syzkaller.DII8tP/387/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 159.147752][ T29] audit: type=1800 audit(1717221331.084:23): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 159.240433][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.363144][ T9714] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 159.453575][ T9723] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 159.486057][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.535766][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.558814][ T9714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.892803][ T9801] sctp: [Deprecated]: syz-executor.1 (pid 9801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 160.892803][ T9801] Use struct sctp_sack_info instead [ 161.674290][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.211763][ T9879] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 162.233621][ T9879] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (255) [ 162.642612][ T9913] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 162.667356][ T9913] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (255) [ 163.072675][ T9928] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 163.106331][ T9928] digital: digital_start_poll: Unknown protocol [ 163.417549][ T9959] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 163.442188][ T9961] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 163.721218][ T9982] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 163.762676][ T9982] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 163.811773][ T9990] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 164.087740][T10004] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 164.136682][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.898330][T10052] validate_nla: 3 callbacks suppressed [ 164.898350][T10052] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 164.919135][T10052] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 164.935498][T10052] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 165.478749][T10088] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.764326][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.156948][T10129] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 166.172964][T10129] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 166.440165][T10148] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.745450][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.964229][T10178] bond0: (slave bond_slave_0): Releasing backup interface [ 167.461684][T10217] sctp: [Deprecated]: syz-executor.2 (pid 10217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.461684][T10217] Use struct sctp_sack_info instead [ 167.651320][T10233] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 167.828140][T10249] tipc: Started in network mode [ 167.833159][T10249] tipc: Node identity ac14142a, cluster identity 4711 [ 167.856095][T10249] tipc: Enabled bearer , priority 10 [ 168.966485][ T5160] tipc: Node number set to 2886997034 [ 169.097001][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.277926][T10344] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.411322][T10353] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 169.525951][T10366] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.547383][T10366] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 169.568297][T10365] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 169.585176][T10370] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.606203][T10370] bond0: option lp_interval: invalid value (0) [ 169.621740][T10370] bond0: option lp_interval: allowed values 1 - 2147483647 [ 169.959197][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.228483][T10415] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 170.307696][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.325007][T10422] vlan2: entered promiscuous mode [ 171.156757][T10480] skbuff: bad partial csum: csum=65504/2 headroom=144 headlen=65534 [ 171.283393][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.771661][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.876297][T10519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.341024][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.370728][ T2797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.457274][T10558] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.490829][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.557816][ T2797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.637869][T10570] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 172.698376][ T2797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.892202][ T2797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.029140][T10590] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.171322][T10598] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 173.202372][ T2797] bridge_slave_1: left allmulticast mode [ 173.204002][T10598] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.208383][ T2797] bridge_slave_1: left promiscuous mode [ 173.242422][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.250546][T10598] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 173.259852][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.270894][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.279796][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.290916][ T2797] bridge_slave_0: left allmulticast mode [ 173.297231][ T2797] bridge_slave_0: left promiscuous mode [ 173.304691][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.314147][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 173.321588][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.331414][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.638554][T10625] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 173.973242][T10639] TCP: TCP_TX_DELAY enabled [ 174.227924][ T2797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.239195][ T2797] bond0 (unregistering): Released all slaves [ 174.252718][ T2797] bond1 (unregistering): Released all slaves [ 174.378388][ T2797] tipc: Disabling bearer [ 174.404693][ T2797] tipc: Left network mode [ 174.522386][T10660] bond0: Unable to set down delay as MII monitoring is disabled [ 174.837224][T10600] chnl_net:caif_netlink_parms(): no params data found [ 174.858984][T10678] IPVS: length: 192 != 8 [ 175.069650][ T2797] hsr_slave_0: left promiscuous mode [ 175.078274][ T2797] hsr_slave_1: left promiscuous mode [ 175.084640][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.092165][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.101925][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.110652][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.139772][ T2797] veth1_macvtap: left promiscuous mode [ 175.145647][ T2797] veth0_macvtap: left promiscuous mode [ 175.151310][ T2797] veth1_vlan: left promiscuous mode [ 175.156779][ T2797] veth0_vlan: left promiscuous mode [ 175.384074][ T5119] Bluetooth: hci4: command tx timeout [ 175.609016][ T2797] team0 (unregistering): Port device team_slave_1 removed [ 175.648529][ T2797] team0 (unregistering): Port device team_slave_0 removed [ 176.008100][T10689] bond0: Unable to set down delay as MII monitoring is disabled [ 176.124133][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.162083][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.175638][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.210637][T10600] bridge_slave_0: entered allmulticast mode [ 176.223928][T10600] bridge_slave_0: entered promiscuous mode [ 176.249989][T10600] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.278405][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.297720][T10600] bridge_slave_1: entered allmulticast mode [ 176.324126][T10600] bridge_slave_1: entered promiscuous mode [ 176.452977][T10600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.470304][T10600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.506120][T10724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.566989][T10729] bond0: Unable to set down delay as MII monitoring is disabled [ 176.600964][T10600] team0: Port device team_slave_0 added [ 176.630156][T10600] team0: Port device team_slave_1 added [ 176.704638][T10600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.712319][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.763780][T10600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.807144][T10600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.830901][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.901378][T10600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.934167][T10742] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.944847][T10738] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.043622][T10600] hsr_slave_0: entered promiscuous mode [ 177.062529][T10600] hsr_slave_1: entered promiscuous mode [ 177.069662][T10600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.079948][T10600] Cannot create hsr debugfs directory [ 177.204783][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.223700][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.260611][T10762] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.464254][ T5119] Bluetooth: hci4: command tx timeout [ 177.666457][T10600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.681932][T10600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.699303][T10600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.719782][T10600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.853072][T10600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.902220][T10600] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.946616][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.953803][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.025992][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.033154][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.109027][T10789] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.212036][T10600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.263125][T10600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.321733][T10795] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.645070][T10821] macsec1: entered promiscuous mode [ 178.650712][T10821] macvlan1: entered promiscuous mode [ 178.656956][T10821] macsec1: entered allmulticast mode [ 178.662269][T10821] macvlan1: entered allmulticast mode [ 178.674691][T10821] veth1_vlan: entered allmulticast mode [ 178.683168][T10821] macvlan1: left allmulticast mode [ 178.696313][T10821] veth1_vlan: left allmulticast mode [ 178.701704][T10821] macvlan1: left promiscuous mode [ 178.769413][T10600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.858240][T10600] veth0_vlan: entered promiscuous mode [ 178.878136][T10600] veth1_vlan: entered promiscuous mode [ 178.932318][T10600] veth0_macvtap: entered promiscuous mode [ 178.944847][T10600] veth1_macvtap: entered promiscuous mode [ 178.964964][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.975567][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.986065][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.006974][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.020213][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.038309][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.049904][T10600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.080580][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.091314][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.104998][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.115700][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.125769][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.138292][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.184826][T10600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.251314][T10600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.284223][T10600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.317224][T10600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.343917][T10600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.406755][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.434153][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.545374][ T5125] Bluetooth: hci4: command tx timeout [ 179.594608][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.635975][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.676327][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.687188][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.018201][T10937] bond0: Unable to set down delay as MII monitoring is disabled [ 181.026367][T10933] syzkaller1: entered promiscuous mode [ 181.032096][T10933] syzkaller1: entered allmulticast mode [ 181.045842][T10933] x_tables: duplicate underflow at hook 3 [ 181.224919][ T5125] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.230961][ T5125] Bluetooth: hci2: command 0x0406 tx timeout [ 181.234876][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 181.237669][ T5125] Bluetooth: hci3: command 0x0406 tx timeout [ 181.624754][ T5118] Bluetooth: hci4: command tx timeout [ 181.986045][T11001] __nla_validate_parse: 6 callbacks suppressed [ 181.986063][T11001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.062500][T11007] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.089318][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.102316][T11009] vxcan1: tx address claim with different name [ 182.392980][T11029] syzkaller1: entered promiscuous mode [ 182.402039][T11029] syzkaller1: entered allmulticast mode [ 182.423668][T11029] x_tables: duplicate underflow at hook 3 [ 183.075387][ T2848] wlan1: Trigger new scan to find an IBSS to join [ 183.213424][ T29] audit: type=1804 audit(1717221355.214:24): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2024955167/syzkaller.DII8tP/507/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 183.415140][T11090] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.450237][T11090] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.585348][T11097] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 184.066052][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.218464][T11136] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.360062][T11148] vxcan1: tx address claim with different name [ 184.532350][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.294462][T11207] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.111843][ T2797] wlan1: Trigger new scan to find an IBSS to join [ 188.350853][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.363043][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.371019][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.379231][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.391218][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 188.402839][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.505818][ T2797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.657199][ T2797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.772307][ T2797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.917490][ T2797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.064399][ T12] wlan1: Creating new IBSS network, BSSID fa:1d:a7:68:77:22 [ 189.147326][T11356] vlan3: entered promiscuous mode [ 189.167146][T11356] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 189.192043][ T29] audit: type=1804 audit(1717221361.194:25): pid=11360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2813012386/syzkaller.ogl1GT/531/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 189.219142][T11356] vlan3: entered allmulticast mode [ 189.226781][T11356] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 189.245392][T11356] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 189.252540][T11356] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 189.611873][ T2797] bridge_slave_1: left allmulticast mode [ 189.627438][ T2797] bridge_slave_1: left promiscuous mode [ 189.635462][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.655365][ T2797] bridge_slave_0: left allmulticast mode [ 189.666729][ T2797] bridge_slave_0: left promiscuous mode [ 189.681482][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.722685][T11380] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 190.108029][ T2797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.120662][ T2797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.131296][ T2797] bond0 (unregistering): Released all slaves [ 190.142811][T11341] chnl_net:caif_netlink_parms(): no params data found [ 190.152990][T11380] bond0: entered promiscuous mode [ 190.170722][T11380] bond_slave_0: entered promiscuous mode [ 190.198631][T11380] bond_slave_1: entered promiscuous mode [ 190.209324][T11395] syz-executor.4[11395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.209545][T11395] syz-executor.4[11395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.239329][T11388] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.283530][T11390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.452560][T11379] bond0: left promiscuous mode [ 190.461347][T11379] bond_slave_0: left promiscuous mode [ 190.471873][T11379] bond_slave_1: left promiscuous mode [ 190.484769][T11403] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 190.504203][ T5118] Bluetooth: hci4: command tx timeout [ 190.655006][T11406] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 190.733231][ T2797] hsr_slave_0: left promiscuous mode [ 190.752378][ T2797] hsr_slave_1: left promiscuous mode [ 190.771199][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.781653][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.796019][ T2797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.806528][ T2797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.853542][ T2797] veth1_macvtap: left promiscuous mode [ 190.859898][ T2797] veth0_macvtap: left promiscuous mode [ 190.869092][T11425] syz-executor.1[11425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.869228][T11425] syz-executor.1[11425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.882526][ T2797] veth1_vlan: left promiscuous mode [ 190.907627][ T2797] veth0_vlan: left promiscuous mode [ 191.472659][ T2797] team0 (unregistering): Port device team_slave_1 removed [ 191.495888][T11445] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 191.529885][ T2797] team0 (unregistering): Port device team_slave_0 removed [ 191.990936][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.007605][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.024542][T11341] bridge_slave_0: entered allmulticast mode [ 192.032484][T11341] bridge_slave_0: entered promiscuous mode [ 192.049937][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.063334][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.072610][T11341] bridge_slave_1: entered allmulticast mode [ 192.082391][T11453] syz-executor.1[11453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.082530][T11453] syz-executor.1[11453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.096220][T11341] bridge_slave_1: entered promiscuous mode [ 192.135719][T11448] tipc: Started in network mode [ 192.140620][T11448] tipc: Node identity 6c5f73697a653a2, cluster identity 4711 [ 192.155347][T11448] tipc: Enabling of bearer rejected, failed to enable media [ 192.257653][T11341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.282855][ T29] audit: type=1804 audit(1717221364.284:26): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir616656291/syzkaller.5DqVmH/557/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 192.366353][T11341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.498212][T11341] team0: Port device team_slave_0 added [ 192.540033][T11341] team0: Port device team_slave_1 added [ 192.584087][ T5118] Bluetooth: hci4: command tx timeout [ 192.602305][T11341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.621221][T11470] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 192.635551][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.662665][T11341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.689813][ T29] audit: type=1804 audit(1717221364.694:27): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2813012386/syzkaller.ogl1GT/541/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 192.697085][T11341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.753304][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.781065][T11341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.920724][T11341] hsr_slave_0: entered promiscuous mode [ 192.931332][T11341] hsr_slave_1: entered promiscuous mode [ 192.945232][T11341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.952807][T11341] Cannot create hsr debugfs directory [ 193.011161][T11493] syz-executor.1[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.011314][T11493] syz-executor.1[11493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.387795][T11341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.410141][T11341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.443391][T11341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.476279][T11341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.739027][T11341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.803203][T11341] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.839626][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.846811][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.881604][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.888795][ T5116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.977311][ T29] audit: type=1804 audit(1717221365.974:28): pid=11518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2024955167/syzkaller.DII8tP/544/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 194.045942][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.072129][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.285165][T11341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.382302][T11341] veth0_vlan: entered promiscuous mode [ 194.402986][T11341] veth1_vlan: entered promiscuous mode [ 194.482344][T11341] veth0_macvtap: entered promiscuous mode [ 194.511193][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.517922][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.549062][T11341] veth1_macvtap: entered promiscuous mode [ 194.608124][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.635417][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.645648][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.657502][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.669151][ T5118] Bluetooth: hci4: command tx timeout [ 194.688624][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.702387][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.718789][T11341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.785914][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.805237][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.826673][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.843933][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.864611][T11341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.876552][T11341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.889401][T11341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.958197][T11341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.978245][T11341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.987577][T11341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.998021][T11341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.263538][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.285049][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.322706][ T5116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.347076][ T5116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.729049][T11654] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.754799][ T5118] Bluetooth: hci4: command tx timeout [ 196.854604][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.960095][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.293395][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.339868][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.395260][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.487022][T11758] bridge_slave_0 (unregistering): left allmulticast mode [ 198.510463][T11758] bridge_slave_0 (unregistering): left promiscuous mode [ 198.527198][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.587089][T11777] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.717372][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.799316][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.070060][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.272051][T11815] netlink: zone id is out of range [ 199.290644][T11815] netlink: zone id is out of range [ 199.300947][T11815] netlink: zone id is out of range [ 199.312261][T11815] netlink: zone id is out of range [ 199.339432][T11815] netlink: zone id is out of range [ 199.351148][T11815] netlink: zone id is out of range [ 199.387422][T11815] netlink: set zone limit has 4 unknown bytes [ 199.492112][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.541973][T11831] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 199.573913][T11831] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 200.010892][T11859] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 200.036642][T11859] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 200.048435][T11857] netlink: zone id is out of range [ 200.077411][T11857] netlink: zone id is out of range [ 200.092128][T11857] netlink: zone id is out of range [ 200.697529][T11886] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 201.056784][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 201.063441][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 201.070009][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 201.076563][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 201.083083][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 201.558676][T11931] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 201.603999][T11933] bond0: entered promiscuous mode [ 201.609727][T11933] bond_slave_0: entered promiscuous mode [ 201.617559][T11933] bond_slave_1: entered promiscuous mode [ 201.671725][T11935] bond0: entered promiscuous mode [ 201.685566][T11935] bond_slave_0: entered promiscuous mode [ 201.691554][T11935] bond_slave_1: entered promiscuous mode [ 201.702868][T11935] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 201.839587][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880610e8800: rx timeout, send abort [ 202.354994][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880610e8800: abort rx timeout. Force session deactivation [ 204.381702][T11963] __nla_validate_parse: 6 callbacks suppressed [ 204.381721][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.414178][T11965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.461104][T11965] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 204.474173][T11963] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 204.501967][T11965] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 204.514589][T11963] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.538622][T11965] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 204.554426][T11965] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 204.587630][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cff1000: rx timeout, send abort [ 204.622115][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.656871][T11965] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 205.041578][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.095928][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cff1000: abort rx timeout. Force session deactivation [ 205.450766][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.563691][T12038] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 205.585870][T12038] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 205.845454][T12059] validate_nla: 2 callbacks suppressed [ 205.845474][T12059] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 205.892157][T12059] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 205.912224][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.926298][T12059] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 206.336559][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.363023][T12096] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 206.385262][T12096] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 206.403640][T12096] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 206.530452][T12107] net_ratelimit: 4 callbacks suppressed [ 206.530469][T12107] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [.]L3 index 0 [ 206.869578][T12132] ------------[ cut here ]------------ [ 206.875478][T12132] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 206.899078][T12132] WARNING: CPU: 1 PID: 12132 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 206.910230][T12132] Modules linked in: [ 206.914474][T12132] CPU: 1 PID: 12132 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 206.925093][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 206.935240][T12132] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 206.942381][T12132] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 5e 86 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 206.962873][T12132] RSP: 0018:ffffc90013a47318 EFLAGS: 00010246 2024/06/01 05:56:18 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 206.969817][T12132] RAX: 2927199000ebc100 RBX: 1ffff1100f7d5a9e RCX: 0000000000040000 [ 206.977878][T12132] RDX: ffffc90004f61000 RSI: 000000000000532b RDI: 000000000000532c [ 206.986285][T12132] RBP: ffff88807beac130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 206.994387][T12132] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 207.002377][T12132] R13: 0000000002000000 R14: ffff88807beacca0 R15: ffff88807bead4f0 [ 207.010429][T12132] FS: 00007fb2ddd4f6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 207.019452][T12132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.026099][T12132] CR2: 000055557571e8f8 CR3: 000000007ca6a000 CR4: 00000000003506f0 [ 207.034154][T12132] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.042142][T12132] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.050238][T12132] Call Trace: [ 207.053546][T12132] [ 207.056569][T12132] ? __warn+0x163/0x4e0 [ 207.061472][T12132] ? ieee80211_link_info_change_notify+0x273/0x330 [ 207.068745][T12132] ? report_bug+0x2b3/0x500 [ 207.073289][T12132] ? ieee80211_link_info_change_notify+0x273/0x330 [ 207.079923][T12132] ? handle_bug+0x3e/0x70 [ 207.084319][T12132] ? exc_invalid_op+0x1a/0x50 [ 207.089022][T12132] ? asm_exc_invalid_op+0x1a/0x20 [ 207.094165][T12132] ? __warn_printk+0x292/0x360 [ 207.098957][T12132] ? ieee80211_link_info_change_notify+0x273/0x330 [ 207.105572][T12132] ? ieee80211_link_info_change_notify+0x272/0x330 [ 207.112113][T12132] ieee80211_set_mcast_rate+0x46/0x60 [ 207.117582][T12132] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 207.123680][T12132] nl80211_set_mcast_rate+0xaff/0xeb0 [ 207.129144][T12132] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 207.135208][T12132] genl_rcv_msg+0xb14/0xec0 [ 207.139742][T12132] ? mark_lock+0x9a/0x350 [ 207.144230][T12132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.149308][T12132] ? __pfx_lock_acquire+0x10/0x10 [ 207.154587][T12132] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 207.159983][T12132] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 207.166707][T12132] ? __pfx_nl80211_post_doit+0x10/0x10 [ 207.172196][T12132] ? __pfx___might_resched+0x10/0x10 [ 207.178575][T12132] netlink_rcv_skb+0x1e3/0x430 [ 207.183376][T12132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.188499][T12132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.193897][T12132] genl_rcv+0x28/0x40 [ 207.197899][T12132] netlink_unicast+0x7ea/0x980 [ 207.202703][T12132] ? __pfx_netlink_unicast+0x10/0x10 [ 207.208059][T12132] ? __virt_addr_valid+0x183/0x520 [ 207.213203][T12132] ? __check_object_size+0x49c/0x900 [ 207.218613][T12132] ? bpf_lsm_netlink_send+0x9/0x10 [ 207.223846][T12132] netlink_sendmsg+0x8db/0xcb0 [ 207.228650][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.234020][T12132] ? __import_iovec+0x536/0x820 [ 207.238992][T12132] ? aa_sock_msg_perm+0x91/0x160 [ 207.244010][T12132] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.249311][T12132] ? security_socket_sendmsg+0x87/0xb0 [ 207.254882][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.260182][T12132] __sock_sendmsg+0x221/0x270 [ 207.265687][T12132] ____sys_sendmsg+0x525/0x7d0 [ 207.270491][T12132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.276555][T12132] __sys_sendmsg+0x2b0/0x3a0 [ 207.281173][T12132] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.286435][T12132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.292781][T12132] ? do_syscall_64+0x100/0x230 [ 207.297625][T12132] ? do_syscall_64+0xb6/0x230 [ 207.302322][T12132] do_syscall_64+0xf3/0x230 [ 207.309377][T12132] ? clear_bhb_loop+0x35/0x90 [ 207.314627][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.320548][T12132] RIP: 0033:0x7fb2dd07cee9 [ 207.325085][T12132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 207.344777][T12132] RSP: 002b:00007fb2ddd4f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.353216][T12132] RAX: ffffffffffffffda RBX: 00007fb2dd1b3fa0 RCX: 00007fb2dd07cee9 [ 207.361264][T12132] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 207.370062][T12132] RBP: 00007fb2dd0c947f R08: 0000000000000000 R09: 0000000000000000 [ 207.378765][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.386833][T12132] R13: 000000000000000b R14: 00007fb2dd1b3fa0 R15: 00007ffe00215fe8 [ 207.394878][T12132] [ 207.397909][T12132] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.405190][T12132] CPU: 1 PID: 12132 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 207.415699][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 207.425760][T12132] Call Trace: [ 207.429048][T12132] [ 207.431981][T12132] dump_stack_lvl+0x241/0x360 [ 207.436678][T12132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.441887][T12132] ? __pfx__printk+0x10/0x10 [ 207.446484][T12132] ? _printk+0xd5/0x120 [ 207.450655][T12132] ? vscnprintf+0x5d/0x90 [ 207.455003][T12132] panic+0x349/0x860 [ 207.458914][T12132] ? __warn+0x172/0x4e0 [ 207.463067][T12132] ? __pfx_panic+0x10/0x10 [ 207.467478][T12132] ? show_trace_log_lvl+0x4e6/0x520 [ 207.472704][T12132] __warn+0x346/0x4e0 [ 207.476843][T12132] ? ieee80211_link_info_change_notify+0x273/0x330 [ 207.483366][T12132] report_bug+0x2b3/0x500 [ 207.487703][T12132] ? ieee80211_link_info_change_notify+0x273/0x330 [ 207.494203][T12132] handle_bug+0x3e/0x70 [ 207.498351][T12132] exc_invalid_op+0x1a/0x50 [ 207.502846][T12132] asm_exc_invalid_op+0x1a/0x20 [ 207.507700][T12132] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 207.514811][T12132] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 5e 86 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 207.534413][T12132] RSP: 0018:ffffc90013a47318 EFLAGS: 00010246 [ 207.540493][T12132] RAX: 2927199000ebc100 RBX: 1ffff1100f7d5a9e RCX: 0000000000040000 [ 207.548467][T12132] RDX: ffffc90004f61000 RSI: 000000000000532b RDI: 000000000000532c [ 207.556449][T12132] RBP: ffff88807beac130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 207.564418][T12132] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 207.572384][T12132] R13: 0000000002000000 R14: ffff88807beacca0 R15: ffff88807bead4f0 [ 207.580360][T12132] ? __warn_printk+0x292/0x360 [ 207.585134][T12132] ? ieee80211_link_info_change_notify+0x272/0x330 [ 207.591634][T12132] ieee80211_set_mcast_rate+0x46/0x60 [ 207.596999][T12132] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 207.603059][T12132] nl80211_set_mcast_rate+0xaff/0xeb0 [ 207.608434][T12132] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 207.614334][T12132] genl_rcv_msg+0xb14/0xec0 [ 207.618832][T12132] ? mark_lock+0x9a/0x350 [ 207.623164][T12132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.628204][T12132] ? __pfx_lock_acquire+0x10/0x10 [ 207.633220][T12132] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 207.638582][T12132] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 207.644469][T12132] ? __pfx_nl80211_post_doit+0x10/0x10 [ 207.649922][T12132] ? __pfx___might_resched+0x10/0x10 [ 207.655209][T12132] netlink_rcv_skb+0x1e3/0x430 [ 207.659967][T12132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.664989][T12132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.670294][T12132] genl_rcv+0x28/0x40 [ 207.674276][T12132] netlink_unicast+0x7ea/0x980 [ 207.679045][T12132] ? __pfx_netlink_unicast+0x10/0x10 [ 207.684326][T12132] ? __virt_addr_valid+0x183/0x520 [ 207.689436][T12132] ? __check_object_size+0x49c/0x900 [ 207.694718][T12132] ? bpf_lsm_netlink_send+0x9/0x10 [ 207.699827][T12132] netlink_sendmsg+0x8db/0xcb0 [ 207.704594][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.709871][T12132] ? __import_iovec+0x536/0x820 [ 207.714714][T12132] ? aa_sock_msg_perm+0x91/0x160 [ 207.719643][T12132] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.724917][T12132] ? security_socket_sendmsg+0x87/0xb0 [ 207.730371][T12132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.735644][T12132] __sock_sendmsg+0x221/0x270 [ 207.740316][T12132] ____sys_sendmsg+0x525/0x7d0 [ 207.745085][T12132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.750378][T12132] __sys_sendmsg+0x2b0/0x3a0 [ 207.754960][T12132] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.760101][T12132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.766421][T12132] ? do_syscall_64+0x100/0x230 [ 207.771203][T12132] ? do_syscall_64+0xb6/0x230 [ 207.775873][T12132] do_syscall_64+0xf3/0x230 [ 207.780368][T12132] ? clear_bhb_loop+0x35/0x90 [ 207.785047][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.790933][T12132] RIP: 0033:0x7fb2dd07cee9 [ 207.795339][T12132] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 207.814937][T12132] RSP: 002b:00007fb2ddd4f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.823430][T12132] RAX: ffffffffffffffda RBX: 00007fb2dd1b3fa0 RCX: 00007fb2dd07cee9 [ 207.831392][T12132] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 207.839351][T12132] RBP: 00007fb2dd0c947f R08: 0000000000000000 R09: 0000000000000000 [ 207.847310][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.855276][T12132] R13: 000000000000000b R14: 00007fb2dd1b3fa0 R15: 00007ffe00215fe8 [ 207.863257][T12132] [ 207.866480][T12132] Kernel Offset: disabled [ 207.870871][T12132] Rebooting in 86400 seconds..