last executing test programs: 1m36.760723646s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x28, 0x107, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb2, 0x0, 0x9}}, @TCA_NETEM_DELAY_DIST={0x9, 0x2, "58d5c080bb"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0xcc}}, 0x0) 1m36.520572927s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000001b00000018000180140002"], 0x2c}}, 0x0) 1m35.812002243s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x28, 0x107, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb2, 0x0, 0x9}}, @TCA_NETEM_DELAY_DIST={0x9, 0x2, "58d5c080bb"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0xcc}}, 0x0) 1m35.430302248s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0703000000000000000001000000080001000000000008000100000000000c0006000000040001"], 0x3c}}, 0x0) 1m14.043199319s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000001b00000018000180140002"], 0x2c}}, 0x0) 1m12.682348015s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0703000000000000000001000000080001000000000008000100000000000c0006000000040001"], 0x3c}}, 0x0) 1m1.24632033s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000001b00000018000180140002"], 0x2c}}, 0x0) 1m0.69633608s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0703000000000000000001000000080001000000000008000100000000000c0006000000040001"], 0x3c}}, 0x0) 46.659483819s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000001b00000018000180140002"], 0x2c}}, 0x0) 45.775164333s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0703000000000000000001000000080001000000000008000100000000000c0006000000040001"], 0x3c}}, 0x0) 33.562284861s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000001b00000018000180140002"], 0x2c}}, 0x0) 32.5047875s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0703000000000000000001000000080001000000000008000100000000000c0006000000040001"], 0x3c}}, 0x0) 32.326078233s ago: executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, &(0x7f00000015c0)=[{&(0x7f0000000080)='\r', 0x1}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x39, 0x107, 0x0, 0x0, {0x1, 0x2}, [@nested={0x29}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4}]}, @typed={0x9, 0x2, 0x0, 0x0, @binary="f7820004eb"}]}, 0x2c}}, 0x0) 32.163561932s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000000c0)="751a75bb0a955bacea01e7eeb9d7327867", 0x11}], 0x3}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.894655285s ago: executing program 4: r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x9, 0x80, 0xc}}, {0x4}}]}]}, 0x68}}, 0x0) 31.853396692s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}}, 0x0) 31.76148356s ago: executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x5, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x16}, @initr0, @exit, @call={0x85, 0x0, 0x0, 0x79}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001480)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="dacbf310c07c41e77dbf5b85b870991171b8359db203128f433dd50edc3265a173789c", @ANYRES16=0x0, @ANYBLOB="000000000000000000006d0000000c0099000000000000000000"], 0x20}}, 0x8000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x30}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x4a6, {{0x2, 0x4e21, @empty}}}, 0x88) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}}, 0x0) 31.587215824s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) readv(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ff000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000080003002560afe947546d34e8fd9b982eebd0f72cccf3b233e51eaea1ea99ab2606813f08f5dc46b0f6d679920b069dfbf952f2f745aa7187a924c3150748580c7501b5432a10842fbf3ffb7edc77e427021a0fe7976ee804a6ab050cd5c77ff9cc2c37c420ed774a4b4c1d5a171fa45273b6ee7fb7a9f6d5e1638ed4005f2736626140add71e9e3805ffbd5b9c9732555c2bade83b3895470e80e3c37edd4feeb5a2b8059ba697b224e1f7e026cdc6f86bb755f8f168878fee7ddd6b604633bf78056a98a55296b776f29b9fdb98ff4a13b698d56c13217917355c494e56d59525d1ef", @ANYRES32=0x0, @ANYBLOB="88000e8081000200b99f927a9f5afc"], 0x100}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="07f4b829ebcb1013bde79e87bc1f639df492af1e8d2e9add5de40f317198f2e21fc22f3cf606910b0565e2cd752863f8f1a78d924916358807311b1220231dccaafe94ea8f5536bd703507cfccc65dcb4bd50c7433cea2faa271c39a4d72c58120493b68e9edcc8881a85b9bcb5e643f0f01aef9e42ef0267fca2679e75237601cc74473f876416400c24e19cc4f756cb93b91915471b2becf9fcfa4b9e3e154d3", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf2506000000080039000700000005003700000000000500380001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x48014) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x3af4701e) sendfile(r9, r8, 0x0, 0x10000a006) 31.291664295s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="e077494ceddc98fd3a7c67ab1a", 0xd}, {&(0x7f00000000c0)="3bf764bac88298e99ad46d79a52f48786c69c5689656c8a6e9af002e752498602595d2cee9ea5847ec4260acd66b9efd9880282d97f1d23b959fa5db77af419517d0a46cf85d6c706392a8dc33fbf61af711ea19a9820aa5d12123bf3460a846eb9f6d5f9720dcd27cd54399c0c7a24af2e63f", 0x73}], 0x2}, 0x0) 31.213922918s ago: executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {[{{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 31.088158881s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007916d80000000000c6000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 30.949764987s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.618803397s ago: executing program 4: socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000005000400010001006820595454c9f7ebbcb50d6b120520fd534494e10261a2c469131477141895919dd534a5cbefaba0e47de321bdd6c078b3d68a008072f046565927a0d435a7a315113be539023693d0028ef42659b618fe"], 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "9fdd3e", 0x29, 0x6, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@routing={0x29, 0x0, 0x1}, @fragment={0x0, 0x0, 0x46, 0x1, 0x0, 0x1c, 0x64}], @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x218, 0x0, 0x3, 0xf, 0x0, 0x0, 0x5, 0x50b6, 0x4, 0x4e23, 0x4e23}}, [0x0]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0xf401, r4, 0x9301}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}, 0x1, 0x500}, 0x0) 30.274334106s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 30.178903946s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) 30.11475333s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040), 0x4) 30.02404684s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x17}]}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x34}}, 0x0) 927.940938ms ago: executing program 1: getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) 578.898063ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random='\x00\x00\x00 \x00'}) 0s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c000880"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): a:aa:aa:3e) already exists on: batadv_slave_0 [ 83.419503][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.432465][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.460450][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.486519][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.497536][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.508972][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.519576][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.537688][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.559373][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.582513][ T5878] __nla_validate_parse: 5 callbacks suppressed [ 83.582530][ T5878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.607444][ T5539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.616935][ T5539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.627328][ T5539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637239][ T5539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.682512][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.840899][ T5884] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 83.998324][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.016591][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.018416][ T5655] veth0_vlan: entered promiscuous mode [ 84.044578][ T5115] Bluetooth: hci1: command tx timeout [ 84.162030][ T5655] veth1_vlan: entered promiscuous mode [ 84.196765][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.233762][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.310165][ T5655] veth0_macvtap: entered promiscuous mode [ 84.349291][ T5655] veth1_macvtap: entered promiscuous mode [ 84.418088][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.448051][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.465389][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.479256][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.489697][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.500882][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.511473][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.522223][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.536545][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.568085][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.599465][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.624365][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.651991][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.690940][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.729841][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.760243][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.784417][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.802020][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.830654][ T29] audit: type=1804 audit(1718387611.913:7): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2650660885/syzkaller.FG9xbb/3/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 84.868642][ T5655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.894619][ T5655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.913929][ T5655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.932656][ T5655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.206655][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.368323][ T2855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.370010][ T5941] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 85.410498][ T2855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.630646][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.643616][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.689467][ T29] audit: type=1804 audit(1718387612.773:8): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2350886205/syzkaller.roDrhA/65/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 86.793200][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.091885][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.757202][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.845403][ T6063] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.855094][ T6063] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.041744][ T6069] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 88.122325][ T6075] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.412462][ T6086] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.461906][ T6088] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.909202][ T6102] __nla_validate_parse: 1 callbacks suppressed [ 88.909221][ T6102] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.161394][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.687193][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.531455][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.813978][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.854230][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.863523][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.600158][ T6244] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.623775][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.634804][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.614208][ T6287] macsec0: entered allmulticast mode [ 93.619612][ T6287] veth1_macvtap: entered allmulticast mode [ 94.342226][ T6323] macsec0: entered allmulticast mode [ 94.356254][ T6323] veth1_macvtap: entered allmulticast mode [ 94.415359][ T6328] __nla_validate_parse: 5 callbacks suppressed [ 94.415379][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.711178][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.893421][ T6350] Zero length message leads to an empty skb [ 95.340541][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.674882][ T6377] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.350811][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.521459][ T6407] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.373886][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.386156][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.394986][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.424311][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.433950][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.442180][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.610384][ T6441] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.716316][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.746273][ T29] audit: type=1804 audit(1718387624.833:9): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=B5 dev="sda1" ino=1956 res=1 errno=0 [ 97.809945][ T6447] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 97.951261][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.237196][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.396269][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.441096][ T6473] bridge0: port 3(gretap0) entered blocking state [ 98.449952][ T6473] bridge0: port 3(gretap0) entered disabled state [ 98.457567][ T6473] gretap0: entered allmulticast mode [ 98.467481][ T6473] gretap0: entered promiscuous mode [ 98.474237][ T6473] bridge0: port 3(gretap0) entered blocking state [ 98.481122][ T6473] bridge0: port 3(gretap0) entered forwarding state [ 98.596755][ T6477] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.800696][ T6481] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 98.995092][ T11] bridge_slave_1: left allmulticast mode [ 99.000795][ T11] bridge_slave_1: left promiscuous mode [ 99.044355][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.099135][ T11] bridge_slave_0: left allmulticast mode [ 99.134228][ T11] bridge_slave_0: left promiscuous mode [ 99.151394][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.370815][ T6514] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.484823][ T5115] Bluetooth: hci1: command tx timeout [ 99.931082][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.959948][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.982214][ T11] bond0 (unregistering): Released all slaves [ 100.007298][ T6431] chnl_net:caif_netlink_parms(): no params data found [ 100.464356][ T6541] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 100.696127][ T6552] bridge0: port 3(gretap0) entered blocking state [ 100.709068][ T6552] bridge0: port 3(gretap0) entered disabled state [ 100.718549][ T6552] gretap0: entered allmulticast mode [ 100.728489][ T6552] gretap0: entered promiscuous mode [ 100.741924][ T6552] bridge0: port 3(gretap0) entered blocking state [ 100.748551][ T6552] bridge0: port 3(gretap0) entered forwarding state [ 100.833757][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.871827][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.897242][ T6431] bridge_slave_0: entered allmulticast mode [ 100.942923][ T6431] bridge_slave_0: entered promiscuous mode [ 100.975721][ T6563] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2047) [ 101.008151][ T6563] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 101.061691][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.092392][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.116076][ T6431] bridge_slave_1: entered allmulticast mode [ 101.137361][ T6431] bridge_slave_1: entered promiscuous mode [ 101.202748][ T11] hsr_slave_0: left promiscuous mode [ 101.213456][ T11] hsr_slave_1: left promiscuous mode [ 101.236424][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.248931][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.268821][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.281327][ T29] audit: type=1804 audit(1718387628.363:10): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=B5 dev="sda1" ino=1960 res=1 errno=0 [ 101.288483][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.414877][ T11] veth1_macvtap: left promiscuous mode [ 101.428379][ T11] veth0_macvtap: left promiscuous mode [ 101.444456][ T11] veth1_vlan: left promiscuous mode [ 101.452019][ T11] veth0_vlan: left promiscuous mode [ 101.566397][ T5115] Bluetooth: hci1: command tx timeout [ 101.983053][ T11] team0 (unregistering): Port device team_slave_1 removed [ 102.021208][ T11] team0 (unregistering): Port device team_slave_0 removed [ 102.326524][ T6567] hsr_slave_0: left promiscuous mode [ 102.333925][ T6567] hsr_slave_1: left promiscuous mode [ 102.372499][ T6574] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 102.382066][ T6574] netlink: 'syz-executor.3': attribute type 44 has an invalid length. [ 102.481966][ T6592] €: renamed from bond0 (while UP) [ 102.543071][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.593495][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.730328][ T6431] team0: Port device team_slave_0 added [ 102.789734][ T6431] team0: Port device team_slave_1 added [ 103.057025][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.064016][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.169103][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.216612][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.223698][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.262890][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.332297][ T6633] €: renamed from bond0 (while UP) [ 103.503061][ T6642] No such timeout policy "syz1" [ 103.644553][ T5115] Bluetooth: hci1: command tx timeout [ 103.677869][ T6431] hsr_slave_0: entered promiscuous mode [ 103.727677][ T6431] hsr_slave_1: entered promiscuous mode [ 103.748911][ T6431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.780512][ T6431] Cannot create hsr debugfs directory [ 103.903655][ T6662] veth0_to_hsr: entered promiscuous mode [ 103.950356][ T6660] veth0_to_hsr: left promiscuous mode [ 104.344031][ T6679] No such timeout policy "syz1" [ 105.015150][ T6709] No such timeout policy "syz1" [ 105.373613][ T6431] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.411142][ T6431] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.437022][ T6732] veth0_to_hsr: entered promiscuous mode [ 105.457041][ T6729] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2047) [ 105.485748][ T6729] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 105.523750][ T6431] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.550679][ T6431] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.600940][ T6736] hsr_slave_0: left promiscuous mode [ 105.618301][ T6736] hsr_slave_1: left promiscuous mode [ 105.676969][ T6730] veth0_to_hsr: left promiscuous mode [ 105.725197][ T5115] Bluetooth: hci1: command tx timeout [ 105.767820][ T6750] No such timeout policy "syz1" [ 105.991790][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.030669][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.125999][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.133168][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.183800][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.191052][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.265579][ T29] audit: type=1804 audit(1718387633.353:11): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=B5 dev="sda1" ino=1960 res=1 errno=0 [ 106.930033][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.119575][ T6431] veth0_vlan: entered promiscuous mode [ 107.159856][ T6431] veth1_vlan: entered promiscuous mode [ 107.318378][ T6431] veth0_macvtap: entered promiscuous mode [ 107.346237][ T6431] veth1_macvtap: entered promiscuous mode [ 107.416975][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.454752][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.476055][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.492809][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.546824][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.573978][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.589915][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.612605][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.651255][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.672820][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.683668][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.697792][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.713810][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.741576][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.774621][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.803418][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.828859][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.843382][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.879691][ T6431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.911615][ T6431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.950889][ T6431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.991038][ T6431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.243326][ T6850] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2047) [ 108.284857][ T6850] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 108.337578][ T6850] hsr_slave_0: left promiscuous mode [ 108.354374][ T6850] hsr_slave_1: left promiscuous mode [ 108.424674][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.432542][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.547786][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.579370][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.736301][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.401950][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.470547][ T7028] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.588933][ T7033] xt_ipcomp: unknown flags 12 [ 111.686734][ T7036] ieee802154 phy0 wpan0: encryption failed: -90 [ 112.265484][ T7064] bridge0: port 3(team0) entered blocking state [ 112.282432][ T7064] bridge0: port 3(team0) entered disabled state [ 112.297295][ T7064] team0: entered allmulticast mode [ 112.322826][ T7064] team_slave_0: entered allmulticast mode [ 112.343335][ T7068] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 112.360947][ T7064] team_slave_1: entered allmulticast mode [ 112.402414][ T7064] team0: entered promiscuous mode [ 112.445243][ T7064] team_slave_0: entered promiscuous mode [ 112.473662][ T7064] team_slave_1: entered promiscuous mode [ 112.513034][ T7064] bridge0: port 3(team0) entered blocking state [ 112.519545][ T7064] bridge0: port 3(team0) entered forwarding state [ 112.579559][ T7078] xt_ipcomp: unknown flags 12 [ 113.093283][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.165049][ T7104] bridge0: port 3(team0) entered blocking state [ 113.171432][ T7104] bridge0: port 3(team0) entered disabled state [ 113.214465][ T7104] team0: entered allmulticast mode [ 113.245042][ T7104] team_slave_0: entered allmulticast mode [ 113.250818][ T7104] team_slave_1: entered allmulticast mode [ 113.317059][ T7104] team0: entered promiscuous mode [ 113.374472][ T7104] team_slave_0: entered promiscuous mode [ 113.381140][ T7104] team_slave_1: entered promiscuous mode [ 113.408117][ T7104] bridge0: port 3(team0) entered blocking state [ 113.414605][ T7104] bridge0: port 3(team0) entered forwarding state [ 113.675117][ T7125] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 113.710842][ T7127] Bluetooth: MGMT ver 1.22 [ 113.880023][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.181708][ T7149] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 114.209127][ T7149] pim6reg0: linktype set to 0 [ 114.536166][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.902803][ T7185] syzkaller0: entered promiscuous mode [ 114.912669][ T7185] syzkaller0: entered allmulticast mode [ 115.326294][ T7206] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 116.473934][ T7184] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 116.479811][ T7184] pim6reg0: linktype set to 0 [ 116.502006][ T7215] bridge0: port 4(team0) entered blocking state [ 116.523679][ T7215] bridge0: port 4(team0) entered disabled state [ 116.532696][ T7215] team0: entered allmulticast mode [ 116.538627][ T7215] team_slave_0: entered allmulticast mode [ 116.550285][ T7215] team_slave_1: entered allmulticast mode [ 116.562468][ T7215] team0: entered promiscuous mode [ 116.570643][ T7215] team_slave_0: entered promiscuous mode [ 116.577297][ T7215] team_slave_1: entered promiscuous mode [ 116.605402][ T7215] bridge0: port 4(team0) entered blocking state [ 116.611849][ T7215] bridge0: port 4(team0) entered forwarding state [ 116.654559][ T7218] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.703638][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.717945][ T7222] bond1 (unregistering): Released all slaves [ 117.083597][ T7247] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 117.109936][ T7251] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 117.118177][ T7251] pim6reg0: linktype set to 0 [ 117.197669][ T7257] xt_HMARK: proto mask must be zero with L3 mode [ 117.981737][ T7293] Bluetooth: MGMT ver 1.22 [ 118.133206][ T7308] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.330886][ T7319] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 118.774797][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.360752][ T7383] netlink: 571 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.632427][ T7398] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 119.739144][ T7392] syzkaller0: entered promiscuous mode [ 119.749744][ T7392] syzkaller0: entered allmulticast mode [ 119.799511][ T7400] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 121.181036][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.193349][ T7407] bond1 (unregistering): Released all slaves [ 121.208563][ T7428] netlink: 571 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.229482][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.531487][ T7450] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.558731][ T7450] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.111116][ T7461] syzkaller0: entered promiscuous mode [ 122.119566][ T7461] syzkaller0: entered allmulticast mode [ 122.133123][ T7467] netlink: 571 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.151824][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.694300][ T7503] netlink: 571 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.152603][ T7529] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.203155][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.211155][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.457554][ T7539] syzkaller0: entered promiscuous mode [ 124.469959][ T7539] syzkaller0: entered allmulticast mode [ 124.880041][ T7561] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 125.001534][ T7566] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [FP] [ 126.082080][ T7551] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 126.090811][ T7551] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 126.095980][ T7559] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.115851][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.132983][ T7576] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 126.260628][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.327112][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.584535][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.658726][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.665959][ T7599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.907651][ T7607] syzkaller0: entered promiscuous mode [ 126.923260][ T7607] syzkaller0: entered allmulticast mode [ 126.952130][ T7611] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 128.451344][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.465433][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.472627][ T7640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.573568][ T7658] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 128.651010][ T7660] vlan0: entered promiscuous mode [ 128.756645][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.946372][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.059206][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.323887][ T7704] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 129.623191][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.955504][ T7738] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 130.149172][ T2855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.302012][ T2855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.462664][ T2855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.748047][ T2855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.799948][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.822533][ T7761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.848572][ T7761] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 130.965611][ T7766] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 131.017793][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.026909][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.036052][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.051141][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.060800][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.068521][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.442998][ T2855] gretap0: left allmulticast mode [ 131.454135][ T2855] gretap0: left promiscuous mode [ 131.459311][ T2855] bridge0: port 3(gretap0) entered disabled state [ 131.498145][ T2855] bridge_slave_1: left allmulticast mode [ 131.507377][ T2855] bridge_slave_1: left promiscuous mode [ 131.513164][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.551827][ T2855] bridge_slave_0: left allmulticast mode [ 131.579299][ T2855] bridge_slave_0: left promiscuous mode [ 131.591014][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.067517][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.078099][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.086586][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.099630][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.112053][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.123924][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.191528][ T2855] € (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.202340][ T2855] € (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.213414][ T2855] € (unregistering): Released all slaves [ 132.227259][ T7784] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 132.637713][ T7817] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 132.696114][ T7824] vlan0: entered promiscuous mode [ 132.764332][ T7769] chnl_net:caif_netlink_parms(): no params data found [ 133.023097][ T7845] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 133.157415][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.168228][ T5115] Bluetooth: hci2: command tx timeout [ 133.174870][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.181186][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.233746][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.285519][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.310190][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.383073][ T2855] veth1_macvtap: left promiscuous mode [ 133.391926][ T2855] veth0_macvtap: left promiscuous mode [ 133.398722][ T2855] veth1_vlan: left promiscuous mode [ 133.405335][ T2855] veth0_vlan: left promiscuous mode [ 134.202452][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 134.204694][ T5115] Bluetooth: hci3: command tx timeout [ 134.241423][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 134.551536][ T7850] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 134.600464][ T7865] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 134.767318][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.787372][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.804193][ T7871] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 134.822967][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.839226][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.848113][ T7769] bridge_slave_0: entered allmulticast mode [ 134.903362][ T7769] bridge_slave_0: entered promiscuous mode [ 134.960462][ T7876] vlan0: entered promiscuous mode [ 135.003265][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.023999][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.035975][ T7769] bridge_slave_1: entered allmulticast mode [ 135.043342][ T7769] bridge_slave_1: entered promiscuous mode [ 135.175896][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.188951][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.246331][ T5115] Bluetooth: hci2: command tx timeout [ 135.300207][ T7769] team0: Port device team_slave_0 added [ 135.380664][ T7769] team0: Port device team_slave_1 added [ 135.663532][ T7891] syzkaller0: entered promiscuous mode [ 135.677519][ T7891] syzkaller0: entered allmulticast mode [ 135.695490][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.725236][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.780501][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.792756][ T7805] chnl_net:caif_netlink_parms(): no params data found [ 135.990577][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.012787][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.064814][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.284312][ T5115] Bluetooth: hci3: command tx timeout [ 137.265036][ T7911] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 137.316329][ T7921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.324249][ T5115] Bluetooth: hci2: command tx timeout [ 137.342370][ T7921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.366673][ T7921] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 137.719693][ T2855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.966167][ T7769] hsr_slave_0: entered promiscuous mode [ 138.014733][ T7769] hsr_slave_1: entered promiscuous mode [ 138.121188][ T7769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.139162][ T5160] IPVS: starting estimator thread 0... [ 138.164089][ T7769] Cannot create hsr debugfs directory [ 138.264317][ T7937] IPVS: using max 18 ests per chain, 43200 per kthread [ 138.359218][ T2855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.369835][ T5115] Bluetooth: hci3: command tx timeout [ 138.639589][ T2855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.717534][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.743503][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.764452][ T7805] bridge_slave_0: entered allmulticast mode [ 138.771841][ T7805] bridge_slave_0: entered promiscuous mode [ 138.898288][ T7955] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 139.041435][ T2855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.080139][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.090303][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.110600][ T7805] bridge_slave_1: entered allmulticast mode [ 139.142465][ T7805] bridge_slave_1: entered promiscuous mode [ 139.281283][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.292374][ T7978] xt_TCPMSS: Only works on TCP SYN packets [ 139.337334][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.404440][ T5115] Bluetooth: hci2: command tx timeout [ 139.428190][ T7805] team0: Port device team_slave_0 added [ 139.501848][ T7805] team0: Port device team_slave_1 added [ 139.608726][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.634132][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.664822][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.722533][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.731982][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.761011][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.885199][ T2855] team0: left allmulticast mode [ 139.890099][ T2855] team_slave_0: left allmulticast mode [ 139.934162][ T2855] team_slave_1: left allmulticast mode [ 139.941550][ T2855] team0: left promiscuous mode [ 139.947254][ T2855] team_slave_0: left promiscuous mode [ 139.955435][ T2855] team_slave_1: left promiscuous mode [ 139.961973][ T2855] bridge0: port 3(team0) entered disabled state [ 140.015345][ T2855] bridge_slave_1: left allmulticast mode [ 140.032817][ T2855] bridge_slave_1: left promiscuous mode [ 140.062661][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.120699][ T2855] bridge_slave_0: left allmulticast mode [ 140.140155][ T2855] bridge_slave_0: left promiscuous mode [ 140.165487][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.444447][ T5115] Bluetooth: hci3: command tx timeout [ 141.054702][ T2855] € (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.066687][ T2855] € (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.078492][ T2855] € (unregistering): Released all slaves [ 141.148422][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.173589][ T8023] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.396992][ T8026] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 141.419210][ T7805] hsr_slave_0: entered promiscuous mode [ 141.443178][ T7805] hsr_slave_1: entered promiscuous mode [ 141.458385][ T7805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.490012][ T7805] Cannot create hsr debugfs directory [ 142.031279][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.054480][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.079074][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.100978][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.153118][ T2855] veth1_macvtap: left promiscuous mode [ 142.169055][ T2855] veth0_macvtap: left promiscuous mode [ 142.179286][ T2855] veth1_vlan: left promiscuous mode [ 142.194726][ T2855] veth0_vlan: left promiscuous mode [ 142.953131][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.981539][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.119422][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 143.154973][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 143.188087][ T8062] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 143.521705][ T8064] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 143.597344][ T8069] tap0: tun_chr_ioctl cmd 35108 [ 144.281782][ T7769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.306995][ T7769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.382100][ T7769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.445366][ T7769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.512356][ T8123] xt_hashlimit: invalid rate [ 144.606544][ T2855] IPVS: stop unused estimator thread 0... [ 144.909803][ T29] audit: type=1800 audit(1718387671.993:12): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 145.044127][ T29] audit: type=1804 audit(1718387672.023:13): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir593588197/syzkaller.JV0GEK/249/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 145.197802][ T7769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.268185][ T7769] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.314522][ T7805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.316751][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.335296][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.343735][ T7805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.357086][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.369806][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.384995][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.392478][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.445078][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.452247][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.463103][ T7805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 145.482728][ T7805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 145.512946][ T8146] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 145.522937][ T8146] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.537057][ T8146] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 145.546081][ T8146] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.563193][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.570399][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.735551][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.861088][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.970400][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.137212][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.286264][ T29] audit: type=1800 audit(1718387673.373:14): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 146.333500][ T29] audit: type=1804 audit(1718387673.413:15): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir593588197/syzkaller.JV0GEK/255/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 146.396125][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.523271][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.559817][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 146.601496][ T7769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.623482][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.630698][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.652380][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.659574][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.773712][ T12] team0: left allmulticast mode [ 146.782950][ T12] team_slave_0: left allmulticast mode [ 146.794336][ T12] team_slave_1: left allmulticast mode [ 146.802548][ T12] team0: left promiscuous mode [ 146.807597][ T12] team_slave_0: left promiscuous mode [ 146.813367][ T12] team_slave_1: left promiscuous mode [ 146.819697][ T12] bridge0: port 3(team0) entered disabled state [ 146.830043][ T12] bridge_slave_1: left allmulticast mode [ 146.841204][ T12] bridge_slave_1: left promiscuous mode [ 146.850088][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.867519][ T12] bridge_slave_0: left allmulticast mode [ 146.873183][ T12] bridge_slave_0: left promiscuous mode [ 146.889337][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.372781][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.387210][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.398456][ T12] bond0 (unregistering): Released all slaves [ 147.484420][ T5115] Bluetooth: hci1: command tx timeout [ 147.688567][ T8215] syzkaller0: entered promiscuous mode [ 147.699417][ T8215] syzkaller0: entered allmulticast mode [ 147.781765][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.797038][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.805305][ T8141] bridge_slave_0: entered allmulticast mode [ 147.812133][ T8141] bridge_slave_0: entered promiscuous mode [ 147.821339][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.830088][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.838660][ T8141] bridge_slave_1: entered allmulticast mode [ 147.846300][ T8141] bridge_slave_1: entered promiscuous mode [ 148.995548][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.056102][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.113800][ T12] hsr_slave_0: left promiscuous mode [ 149.122677][ T12] hsr_slave_1: left promiscuous mode [ 149.146893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.156089][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.180753][ T12] veth1_macvtap: left promiscuous mode [ 149.186667][ T12] veth0_macvtap: left promiscuous mode [ 149.192335][ T12] veth1_vlan: left promiscuous mode [ 149.199942][ T12] veth0_vlan: left promiscuous mode [ 149.565021][ T5115] Bluetooth: hci1: command tx timeout [ 149.768692][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.818739][ T12] team0 (unregistering): Port device team_slave_0 removed [ 150.155784][ T8141] team0: Port device team_slave_0 added [ 150.176050][ T8141] team0: Port device team_slave_1 added [ 150.213443][ T7769] veth0_vlan: entered promiscuous mode [ 150.311170][ T7769] veth1_vlan: entered promiscuous mode [ 150.359425][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.376542][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.420494][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.438343][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.446068][ T8242] sctp: [Deprecated]: syz-executor.4 (pid 8242) Use of int in max_burst socket option. [ 150.446068][ T8242] Use struct sctp_assoc_value instead [ 150.461273][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.526851][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.722571][ T8141] hsr_slave_0: entered promiscuous mode [ 150.728198][ T8248] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.738252][ T8248] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 150.738546][ T8141] hsr_slave_1: entered promiscuous mode [ 150.761719][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.781033][ T8141] Cannot create hsr debugfs directory [ 150.789808][ T7769] veth0_macvtap: entered promiscuous mode [ 150.801075][ T7769] veth1_macvtap: entered promiscuous mode [ 150.860318][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.963685][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.978819][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.004105][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.020161][ T7769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.030983][ T7769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.042763][ T7769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.129664][ T7769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.145778][ T7769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.159477][ T7769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.173618][ T7769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.336055][ T7805] veth0_vlan: entered promiscuous mode [ 151.417194][ T8272] veth2: entered allmulticast mode [ 151.493379][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.510413][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.526261][ T7805] veth1_vlan: entered promiscuous mode [ 151.574212][ T8274] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.583632][ T8274] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 151.609882][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.628791][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.645810][ T5115] Bluetooth: hci1: command tx timeout [ 151.686499][ T7805] veth0_macvtap: entered promiscuous mode [ 151.742788][ T7805] veth1_macvtap: entered promiscuous mode [ 151.862831][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.875673][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.888222][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.896615][ T8141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.918575][ T8141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.938024][ T8141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.955424][ T8141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.969231][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.982113][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.994384][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.007850][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.017874][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.028498][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.043021][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.071468][ T7805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.094206][ T7805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.102942][ T7805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.134411][ T7805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.260714][ T2855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.480475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.498324][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.601213][ T2855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.621026][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.631984][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.644646][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.653372][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.653407][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.674410][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.682478][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.691545][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.720427][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.812470][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.848205][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.855426][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.929066][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.936241][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.053312][ T2855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.208837][ T2855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.273773][ T8282] chnl_net:caif_netlink_parms(): no params data found [ 153.489566][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.585006][ T2855] bridge_slave_1: left allmulticast mode [ 153.590700][ T2855] bridge_slave_1: left promiscuous mode [ 153.607983][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.656474][ T2855] bridge_slave_0: left allmulticast mode [ 153.662170][ T2855] bridge_slave_0: left promiscuous mode [ 153.690177][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.724867][ T5115] Bluetooth: hci1: command tx timeout [ 153.729541][ T8320] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.743091][ T8320] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 153.854617][ T8322] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.959363][ T8324] syz-executor.3 uses old SIOCAX25GETINFO [ 154.060885][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.077569][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.087526][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.098873][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.108627][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.117359][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.290630][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.303014][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.318492][ T2855] bond0 (unregistering): Released all slaves [ 154.436507][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.443742][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.460045][ T8282] bridge_slave_0: entered allmulticast mode [ 154.492850][ T8282] bridge_slave_0: entered promiscuous mode [ 154.512439][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.519706][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.527075][ T8335] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 154.527182][ T8282] bridge_slave_1: entered allmulticast mode [ 154.541458][ T8335] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.542866][ T8282] bridge_slave_1: entered promiscuous mode [ 154.552100][ T8335] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 154.566155][ T8335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.691852][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.714762][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.764625][ T5115] Bluetooth: hci2: command tx timeout [ 154.808809][ T2855] hsr_slave_0: left promiscuous mode [ 154.817316][ T2855] hsr_slave_1: left promiscuous mode [ 154.823476][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.832961][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.841045][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.850307][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.875045][ T2855] veth1_macvtap: left promiscuous mode [ 154.880870][ T2855] veth0_macvtap: left promiscuous mode [ 154.886660][ T2855] veth1_vlan: left promiscuous mode [ 154.892223][ T2855] veth0_vlan: left promiscuous mode [ 155.401238][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 155.439895][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 155.830028][ T8282] team0: Port device team_slave_0 added [ 155.873897][ T8282] team0: Port device team_slave_1 added [ 155.942824][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.949882][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.978040][ T8282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.008841][ T8359] lo: entered allmulticast mode [ 156.018362][ T8360] pimreg: entered allmulticast mode [ 156.036476][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.043497][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.071078][ T8282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.101242][ T8359] lo: left allmulticast mode [ 156.106786][ T8359] pimreg: left allmulticast mode [ 156.171263][ T8141] veth0_vlan: entered promiscuous mode [ 156.204438][ T5115] Bluetooth: hci3: command tx timeout [ 156.318302][ T8141] veth1_vlan: entered promiscuous mode [ 156.340309][ T8282] hsr_slave_0: entered promiscuous mode [ 156.350680][ T8282] hsr_slave_1: entered promiscuous mode [ 156.360243][ T8282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.376836][ T8282] Cannot create hsr debugfs directory [ 156.567728][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 156.666062][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.763008][ T8141] veth0_macvtap: entered promiscuous mode [ 156.809417][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.854433][ T5115] Bluetooth: hci2: command tx timeout [ 156.953042][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.977930][ T8141] veth1_macvtap: entered promiscuous mode [ 156.987747][ T8327] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.997154][ T8327] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.005890][ T8327] bridge_slave_0: entered allmulticast mode [ 157.012670][ T8327] bridge_slave_0: entered promiscuous mode [ 157.026498][ T8327] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.033619][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.040887][ T8327] bridge_slave_1: entered allmulticast mode [ 157.048414][ T8327] bridge_slave_1: entered promiscuous mode [ 157.089702][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.149961][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.166075][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.178036][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.189979][ T8327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.209290][ T8327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.225054][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.242209][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.253680][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.265362][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.276631][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.287607][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.301869][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.363638][ T8141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.373112][ T8141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.382769][ T8141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.395338][ T8141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.497085][ T8327] team0: Port device team_slave_0 added [ 157.519481][ T35] bridge_slave_1: left allmulticast mode [ 157.525837][ T35] bridge_slave_1: left promiscuous mode [ 157.531608][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.551054][ T35] bridge_slave_0: left allmulticast mode [ 157.557213][ T35] bridge_slave_0: left promiscuous mode [ 157.573266][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.013591][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.028192][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.040093][ T35] bond0 (unregistering): Released all slaves [ 158.055096][ T8327] team0: Port device team_slave_1 added [ 158.237988][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.252338][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.294218][ T5115] Bluetooth: hci3: command tx timeout [ 158.299726][ T8327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.358843][ T8327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.369578][ T8327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.396506][ T8327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.536945][ T8327] hsr_slave_0: entered promiscuous mode [ 158.543594][ T8327] hsr_slave_1: entered promiscuous mode [ 158.550845][ T8327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.558690][ T8327] Cannot create hsr debugfs directory [ 158.578154][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.589487][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.608064][ T35] hsr_slave_0: left promiscuous mode [ 158.616239][ T35] hsr_slave_1: left promiscuous mode [ 158.630960][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.642391][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.658379][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.666239][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.701433][ T35] veth1_macvtap: left promiscuous mode [ 158.707639][ T35] veth0_macvtap: left promiscuous mode [ 158.713378][ T35] veth1_vlan: left promiscuous mode [ 158.719464][ T35] veth0_vlan: left promiscuous mode [ 158.929140][ T5115] Bluetooth: hci2: command tx timeout [ 159.219560][ T35] team0 (unregistering): Port device team_slave_1 removed [ 159.266533][ T35] team0 (unregistering): Port device team_slave_0 removed [ 159.615221][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.632293][ T8448] syzkaller1: entered promiscuous mode [ 159.643258][ T8448] syzkaller1: entered allmulticast mode [ 159.756623][ T8282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.818130][ T8282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.833793][ T8282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.868693][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.887426][ T8282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.890266][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.234367][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.265848][ T8282] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.294513][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.301674][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.331951][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.339144][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.367975][ T5115] Bluetooth: hci3: command tx timeout [ 160.408079][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.452843][ T8282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.484703][ T8282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.742403][ T8327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.761810][ T8327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.810023][ T8327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.833089][ T8327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.898663][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.004691][ T5115] Bluetooth: hci2: command tx timeout [ 161.080815][ T8282] veth0_vlan: entered promiscuous mode [ 161.096236][ T8282] veth1_vlan: entered promiscuous mode [ 161.242052][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.342685][ T8509] could not set up IPv6 listen sock [ 161.365819][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.373950][ T8282] veth0_macvtap: entered promiscuous mode [ 161.408882][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.416009][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.533694][ T8282] veth1_macvtap: entered promiscuous mode [ 161.562931][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.570125][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.603300][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.622052][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.640711][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.682517][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.696191][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.706335][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.716887][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.738364][ T8282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.749218][ T8282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.760823][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.798377][ T8525] Dead loop on virtual device ipvlan1, fix it urgently! [ 161.803852][ T8282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.838573][ T8282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.851573][ T8525] syz-executor.3 (8525) used greatest stack depth: 8824 bytes left [ 161.856473][ T8282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.889478][ T8282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.178478][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.198993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.295975][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.320986][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.333297][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.392718][ T8542] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 162.445242][ T5115] Bluetooth: hci3: command tx timeout [ 162.493146][ T8545] netlink: 'syz-executor.1': attribute type 322 has an invalid length. [ 162.541428][ T8327] veth0_vlan: entered promiscuous mode [ 162.567961][ T8327] veth1_vlan: entered promiscuous mode [ 162.621693][ T8327] veth0_macvtap: entered promiscuous mode [ 162.653261][ T8327] veth1_macvtap: entered promiscuous mode [ 162.691934][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.703591][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.716669][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.728088][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.739255][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.751928][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.763538][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.774558][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.785562][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.798746][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.810543][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.820843][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.833160][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.858462][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.890158][ T8553] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 162.925379][ T8553] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.963661][ T8553] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 162.986435][ T8553] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 163.000353][ T8553] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.026302][ T8327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.035993][ T8327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.045790][ T8327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.056296][ T8327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.266927][ T2855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.294253][ T2855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.360113][ T2855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.377091][ T2855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.718883][ T8603] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 164.727250][ T8603] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.739425][ T8603] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 164.747986][ T8603] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 164.756459][ T8603] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.900265][ T2855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.476133][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.488871][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.497078][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.507886][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.524297][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.541223][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.590793][ T8625] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 165.927526][ T2855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.146201][ T8640] netlink: 'syz-executor.4': attribute type 322 has an invalid length. [ 166.146535][ T2855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.417780][ T2855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.483808][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.493074][ T5115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.504277][ T5115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.536424][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.545528][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.553779][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.620174][ T8620] chnl_net:caif_netlink_parms(): no params data found [ 166.730603][ T8653] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.749179][ T8653] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.928583][ T2855] bridge_slave_1: left allmulticast mode [ 166.956255][ T2855] bridge_slave_1: left promiscuous mode [ 166.962042][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.999878][ T2855] bridge_slave_0: left allmulticast mode [ 167.036187][ T2855] bridge_slave_0: left promiscuous mode [ 167.041981][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.498674][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.512721][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.532166][ T2855] bond0 (unregistering): Released all slaves [ 167.644892][ T5118] Bluetooth: hci2: command tx timeout [ 167.678333][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.686956][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.701294][ T8620] bridge_slave_0: entered allmulticast mode [ 167.711265][ T8620] bridge_slave_0: entered promiscuous mode [ 167.854713][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.861955][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.885614][ T8620] bridge_slave_1: entered allmulticast mode [ 167.892866][ T8620] bridge_slave_1: entered promiscuous mode [ 167.953398][ T8670] validate_nla: 3 callbacks suppressed [ 167.953418][ T8670] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 168.006982][ T8620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.086562][ T8620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.264420][ T2855] hsr_slave_0: left promiscuous mode [ 168.270729][ T2855] hsr_slave_1: left promiscuous mode [ 168.277496][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.286100][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.296932][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.309777][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.347563][ T2855] veth1_macvtap: left promiscuous mode [ 168.353153][ T2855] veth0_macvtap: left promiscuous mode [ 168.364043][ T2855] veth1_vlan: left promiscuous mode [ 168.383185][ T2855] veth0_vlan: left promiscuous mode [ 168.616309][ T5118] Bluetooth: hci3: command tx timeout [ 168.779377][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 168.817554][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 169.152829][ T8620] team0: Port device team_slave_0 added [ 169.169920][ T8620] team0: Port device team_slave_1 added [ 169.198300][ T8694] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 169.308414][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.318933][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.350828][ T8620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.371905][ T8620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.380543][ T8620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.415204][ T8620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.428078][ T8649] chnl_net:caif_netlink_parms(): no params data found [ 169.459472][ T8706] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 169.484156][ T8706] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.501651][ T8706] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 169.516631][ T8706] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 169.549024][ T8706] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.729511][ T5118] Bluetooth: hci2: command tx timeout [ 169.856634][ T8620] hsr_slave_0: entered promiscuous mode [ 169.867779][ T8620] hsr_slave_1: entered promiscuous mode [ 169.873851][ T8620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.882321][ T8620] Cannot create hsr debugfs directory [ 170.010819][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.025991][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.033266][ T8649] bridge_slave_0: entered allmulticast mode [ 170.060703][ T8649] bridge_slave_0: entered promiscuous mode [ 170.157233][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.185743][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.201318][ T8649] bridge_slave_1: entered allmulticast mode [ 170.211106][ T8649] bridge_slave_1: entered promiscuous mode [ 170.292170][ T8743] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 170.337579][ T8649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.383128][ T8649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.498943][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.517731][ T8751] tc_dump_action: action bad kind [ 170.533188][ T8649] team0: Port device team_slave_0 added [ 170.592455][ T2855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.642124][ T8649] team0: Port device team_slave_1 added [ 170.694767][ T5118] Bluetooth: hci3: command tx timeout [ 170.762165][ T2855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.808845][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.815981][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.853305][ T8649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.923957][ T2855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.938116][ T8766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.953328][ T8649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.963323][ T8649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.998948][ T8649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.046410][ T2855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.196679][ T8649] hsr_slave_0: entered promiscuous mode [ 171.214713][ T8649] hsr_slave_1: entered promiscuous mode [ 171.224123][ T8649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.231692][ T8649] Cannot create hsr debugfs directory [ 171.424267][ T2855] bridge_slave_1: left allmulticast mode [ 171.429943][ T2855] bridge_slave_1: left promiscuous mode [ 171.448053][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.472178][ T2855] bridge_slave_0: left allmulticast mode [ 171.483310][ T2855] bridge_slave_0: left promiscuous mode [ 171.491811][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.810591][ T5118] Bluetooth: hci2: command tx timeout [ 172.082829][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.104684][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.138999][ T2855] bond0 (unregistering): Released all slaves [ 172.714211][ T8620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.746225][ T8620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.764955][ T5118] Bluetooth: hci3: command tx timeout [ 172.829546][ T2855] hsr_slave_0: left promiscuous mode [ 172.865514][ T2855] hsr_slave_1: left promiscuous mode [ 172.887547][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.923512][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.945804][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.961723][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.003278][ T2855] veth1_macvtap: left promiscuous mode [ 173.009761][ T2855] veth0_macvtap: left promiscuous mode [ 173.015644][ T2855] veth1_vlan: left promiscuous mode [ 173.021106][ T2855] veth0_vlan: left promiscuous mode [ 173.032116][ T8819] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.609612][ T29] audit: type=1804 audit(1718387700.693:16): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir593588197/syzkaller.JV0GEK/344/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 173.728352][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 173.777668][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 173.894355][ T5118] Bluetooth: hci2: command tx timeout [ 174.114213][ T8620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.149028][ T8826] batman_adv: batadv0: Adding interface: macvlan2 [ 174.165013][ T8826] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.198180][ T8826] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 174.251447][ T8620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.365857][ T8840] IPVS: Error joining to the multicast group [ 174.680921][ T8620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.731353][ T8649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.762028][ T8859] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 174.789744][ T8649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.816684][ T8649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.844900][ T5118] Bluetooth: hci3: command tx timeout [ 174.875685][ T8620] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.882711][ T8649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.955110][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.962290][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.015791][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.022963][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.109567][ T8649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.173080][ T8649] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.215539][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.222679][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.247461][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.254665][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.281459][ T8620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.325138][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.431925][ T8649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.453902][ T8649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.713985][ T8620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.743972][ T29] audit: type=1804 audit(1718387702.823:17): pid=8906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1075299432/syzkaller.O1lQZw/354/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 175.903287][ T8620] veth0_vlan: entered promiscuous mode [ 175.977595][ T8620] veth1_vlan: entered promiscuous mode [ 176.039935][ T8921] batman_adv: batadv0: Adding interface: macvlan3 [ 176.050729][ T8921] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.088064][ T8921] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 176.139794][ T8649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.260401][ T8620] veth0_macvtap: entered promiscuous mode [ 176.301441][ T8649] veth0_vlan: entered promiscuous mode [ 176.327076][ T8620] veth1_macvtap: entered promiscuous mode [ 176.381232][ T8649] veth1_vlan: entered promiscuous mode [ 176.401860][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.419660][ T8933] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 176.449925][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.470158][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.498865][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.515304][ T8940] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.539333][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.551582][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.562472][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.573633][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.583966][ T8620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.596746][ T8620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.610371][ T8620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.622852][ T8620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.639589][ T8620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.653893][ T8620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.674148][ T8620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.813622][ T8952] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 176.928811][ T8649] veth0_macvtap: entered promiscuous mode [ 176.982798][ T8649] veth1_macvtap: entered promiscuous mode [ 177.011169][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.030291][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.130448][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.152051][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.173100][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.184711][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.199734][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.217504][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.240794][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.264066][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.278973][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.305443][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.326135][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.344662][ T8649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.362974][ T8649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.389955][ T8649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.424374][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.428695][ T8649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.448418][ T8974] syz-executor.4[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.448567][ T8974] syz-executor.4[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.463293][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.475262][ T8649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.475298][ T8649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.475325][ T8649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.522885][ T8974] syz-executor.4[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.523030][ T8974] syz-executor.4[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.932048][ T2814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.965319][ T2814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.035505][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.066031][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.788482][ T9028] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 178.798158][ T9028] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.982575][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.461559][ T2855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.550126][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.917679][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.144777][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.174355][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.197265][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.198344][ T2855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.231206][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.250493][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 180.264328][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.437794][ T2855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.495046][ T9100] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 180.522620][ T9100] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.642950][ T2855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.011483][ T9086] chnl_net:caif_netlink_parms(): no params data found [ 181.176101][ T2855] bridge_slave_1: left allmulticast mode [ 181.189436][ T2855] bridge_slave_1: left promiscuous mode [ 181.208008][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.219168][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.231341][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.241237][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.250085][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.258205][ T5122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 181.266522][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.325108][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 181.326521][ T5127] Bluetooth: hci0: command 0x0406 tx timeout [ 181.358730][ T2855] bridge_slave_0: left allmulticast mode [ 181.374874][ T2855] bridge_slave_0: left promiscuous mode [ 181.380804][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.180052][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.191969][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.203160][ T2855] bond0 (unregistering): Released all slaves [ 182.270987][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.286629][ T9138] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.292137][ T5115] Bluetooth: hci2: command tx timeout [ 182.484681][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.503674][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.512690][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.531021][ T9086] bridge_slave_0: entered allmulticast mode [ 182.545479][ T9086] bridge_slave_0: entered promiscuous mode [ 182.554993][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.562993][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.571155][ T9086] bridge_slave_1: entered allmulticast mode [ 182.581810][ T9086] bridge_slave_1: entered promiscuous mode [ 182.609484][ T9153] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.619309][ T9153] caif0: entered allmulticast mode [ 182.720284][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.753682][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.853143][ T2855] hsr_slave_0: left promiscuous mode [ 182.880227][ T2855] hsr_slave_1: left promiscuous mode [ 182.896848][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.915884][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.934534][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.942058][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.994511][ T9175] Dead loop on virtual device ipvlan1, fix it urgently! [ 183.034290][ T9179] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.035186][ T2855] veth1_macvtap: left promiscuous mode [ 183.069604][ T2855] veth0_macvtap: left promiscuous mode [ 183.075436][ T2855] veth1_vlan: left promiscuous mode [ 183.089383][ T2855] veth0_vlan: left promiscuous mode [ 183.327348][ T5115] Bluetooth: hci3: command tx timeout [ 183.585277][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 183.619398][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 183.995878][ T9086] team0: Port device team_slave_0 added [ 184.037881][ T9086] team0: Port device team_slave_1 added [ 184.172684][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.188652][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.232738][ T9086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.256865][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.299777][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.334344][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.367143][ T5115] Bluetooth: hci2: command tx timeout [ 184.389026][ T9086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.441234][ T9206] netem: incorrect gi model size [ 184.453503][ T9206] netem: change failed [ 184.607392][ T9086] hsr_slave_0: entered promiscuous mode [ 184.615508][ T9086] hsr_slave_1: entered promiscuous mode [ 184.628922][ T9086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.638860][ T9086] Cannot create hsr debugfs directory [ 184.659661][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 185.013171][ T9244] ipt_ECN: cannot use operation on non-tcp rule [ 185.128741][ T2855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.175097][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.182387][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.190472][ T9125] bridge_slave_0: entered allmulticast mode [ 185.198472][ T9125] bridge_slave_0: entered promiscuous mode [ 185.209288][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.243353][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.261697][ T9125] bridge_slave_1: entered allmulticast mode [ 185.277491][ T9125] bridge_slave_1: entered promiscuous mode [ 185.382737][ T2855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.404947][ T5115] Bluetooth: hci3: command tx timeout [ 185.459760][ T9266] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 185.529696][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.556649][ T9270] ipt_ECN: cannot use operation on non-tcp rule [ 185.657456][ T2855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.682855][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.758746][ T2855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.792665][ T9125] team0: Port device team_slave_0 added [ 185.807350][ T9125] team0: Port device team_slave_1 added [ 185.955119][ T9289] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.979631][ T9289] caif0: entered allmulticast mode [ 185.984562][ T9292] xt_CT: No such helper "snmp_trap" [ 185.994136][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.019600][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.062927][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.089948][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.102726][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.135666][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.346199][ T9125] hsr_slave_0: entered promiscuous mode [ 186.361275][ T9125] hsr_slave_1: entered promiscuous mode [ 186.370360][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.385709][ T9125] Cannot create hsr debugfs directory [ 186.444349][ T5115] Bluetooth: hci2: command tx timeout [ 186.480106][ T2855] bridge_slave_1: left allmulticast mode [ 186.488646][ T2855] bridge_slave_1: left promiscuous mode [ 186.507676][ T2855] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.522564][ T2855] bridge_slave_0: left allmulticast mode [ 186.528655][ T2855] bridge_slave_0: left promiscuous mode [ 186.535222][ T2855] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.839594][ T2855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.858448][ T2855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.870653][ T2855] bond0 (unregistering): Released all slaves [ 186.881172][ T9315] IPv6: Can't replace route, no match found [ 187.032259][ T9086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.052885][ T9086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.081183][ T9086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.107594][ T9086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.318470][ T2855] hsr_slave_0: left promiscuous mode [ 187.331999][ T2855] hsr_slave_1: left promiscuous mode [ 187.348065][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.375431][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.392371][ T2855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.402133][ T2855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.465348][ T2855] veth1_macvtap: left promiscuous mode [ 187.470926][ T2855] veth0_macvtap: left promiscuous mode [ 187.477470][ T2855] veth1_vlan: left promiscuous mode [ 187.482818][ T2855] veth0_vlan: left promiscuous mode [ 187.484622][ T5115] Bluetooth: hci3: command tx timeout [ 187.902100][ T2855] team0 (unregistering): Port device team_slave_1 removed [ 187.945728][ T2855] team0 (unregistering): Port device team_slave_0 removed [ 188.367366][ T9348] netem: incorrect gi model size [ 188.372685][ T9348] netem: change failed [ 188.524684][ T5115] Bluetooth: hci2: command tx timeout [ 188.568385][ T9358] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 188.830684][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.898369][ T9086] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.923582][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.930775][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.038157][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.039779][ T9382] Dead loop on virtual device ipvlan1, fix it urgently! [ 189.045347][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.138424][ T9385] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.207607][ T9125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.240978][ T9125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.303797][ T9125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.327932][ T9125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.480959][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.527480][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.564345][ T5115] Bluetooth: hci3: command tx timeout [ 189.567632][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.576931][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.607474][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.614690][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.651424][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.752277][ T9086] veth0_vlan: entered promiscuous mode [ 189.782480][ T9086] veth1_vlan: entered promiscuous mode [ 189.871122][ T9086] veth0_macvtap: entered promiscuous mode [ 189.893595][ T9086] veth1_macvtap: entered promiscuous mode [ 189.938912][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.973965][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.993064][ T9086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.011326][ T9413] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 190.030449][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.042606][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.062857][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.081234][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.091402][ T9086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.112405][ T9086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.127884][ T9086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.147235][ T9086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.165565][ T9086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.176993][ T9086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.188819][ T9086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.265985][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.301022][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.331315][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.506697][ T9125] veth0_vlan: entered promiscuous mode [ 190.517838][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.531788][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.539184][ T9125] veth1_vlan: entered promiscuous mode [ 190.615284][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.655524][ T2855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.668910][ T2855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.686136][ T9125] veth0_macvtap: entered promiscuous mode [ 190.719648][ T9125] veth1_macvtap: entered promiscuous mode [ 190.792734][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.804363][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.814780][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.826399][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.838595][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.853377][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.865819][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.877869][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.888991][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.900172][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.910957][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.921194][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.932141][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.943987][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.955677][ T9439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.973806][ T9125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.986995][ T9125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.001236][ T9125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.011020][ T9125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.125464][ T2855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.133652][ T2855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.162048][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.167305][ T9444] Dead loop on virtual device ipvlan1, fix it urgently! [ 191.176921][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.238916][ T9444] syz-executor.3 (9444) used greatest stack depth: 7920 bytes left [ 191.472681][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.544726][ T9463] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 191.586181][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.121570][ T9494] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.177900][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.186729][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.259517][ T9498] xt_nfacct: accounting object `syz1' does not exists [ 192.561592][ T2814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.822766][ T29] audit: type=1804 audit(1718387719.903:18): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1064107542/syzkaller.xqs4ul/123/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 192.891924][ T29] audit: type=1804 audit(1718387719.933:19): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1064107542/syzkaller.xqs4ul/123/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 193.115625][ T9534] xt_nfacct: accounting object `syz1' does not exists [ 193.240824][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.251967][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.262194][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.271560][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.280072][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.287860][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.635730][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 193.823567][ T9559] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 193.934392][ T2814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.167354][ T2814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.224437][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.231610][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.254462][ T9537] bridge_slave_0: entered allmulticast mode [ 194.262064][ T9537] bridge_slave_0: entered promiscuous mode [ 194.270462][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.332390][ T2814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.356633][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.364334][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.372779][ T9537] bridge_slave_1: entered allmulticast mode [ 194.389003][ T9537] bridge_slave_1: entered promiscuous mode [ 194.416565][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.430609][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.441104][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.460634][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.471411][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.479192][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.499688][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.520531][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.607110][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.610071][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 194.613630][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.674912][ T9537] team0: Port device team_slave_0 added [ 194.683514][ T9537] team0: Port device team_slave_1 added [ 194.864281][ T29] audit: type=1804 audit(1718387721.943:20): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir593588197/syzkaller.JV0GEK/452/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 194.924650][ T29] audit: type=1804 audit(1718387721.943:21): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir593588197/syzkaller.JV0GEK/452/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 194.971976][ T2814] bridge_slave_1: left allmulticast mode [ 194.988081][ T2814] bridge_slave_1: left promiscuous mode [ 195.025465][ T2814] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.056410][ T2814] bridge_slave_0: left allmulticast mode [ 195.062099][ T2814] bridge_slave_0: left promiscuous mode [ 195.082763][ T2814] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.327109][ T5115] Bluetooth: hci2: command tx timeout [ 195.662301][ T2814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.673905][ T2814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.685873][ T2814] bond0 (unregistering): Released all slaves [ 195.697552][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.705160][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.732981][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.524759][ T5115] Bluetooth: hci3: command tx timeout [ 197.404902][ T5115] Bluetooth: hci2: command tx timeout [ 198.607473][ T5115] Bluetooth: hci3: command tx timeout [ 199.484262][ T5115] Bluetooth: hci2: command tx timeout [ 200.687601][ T5115] Bluetooth: hci3: command tx timeout [ 201.564153][ T5115] Bluetooth: hci2: command tx timeout [ 202.769493][ T5115] Bluetooth: hci3: command tx timeout [ 225.563413][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.579209][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.587183][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.595952][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.604647][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.612015][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.850082][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.858851][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.868083][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.878543][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.887864][ T5115] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.895921][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.421702][ T5118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.430456][ T5118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.442247][ T5118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.452717][ T5118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.460508][ T5118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 226.468301][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 227.644295][ T5115] Bluetooth: hci5: command tx timeout [ 227.974112][ T5115] Bluetooth: hci6: command tx timeout [ 228.524444][ T5115] Bluetooth: hci7: command tx timeout [ 229.724386][ T5115] Bluetooth: hci5: command tx timeout [ 230.045830][ T5115] Bluetooth: hci6: command tx timeout [ 230.604270][ T5115] Bluetooth: hci7: command tx timeout [ 231.805429][ T5115] Bluetooth: hci5: command tx timeout [ 232.124227][ T5115] Bluetooth: hci6: command tx timeout [ 232.685163][ T5115] Bluetooth: hci7: command tx timeout [ 233.885465][ T5115] Bluetooth: hci5: command tx timeout [ 234.204505][ T5115] Bluetooth: hci6: command tx timeout [ 234.765548][ T5115] Bluetooth: hci7: command tx timeout [ 256.049333][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.055873][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.262303][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 258.275730][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 258.288702][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 258.297060][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 258.305156][ T5118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 258.312479][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 259.402223][ T5115] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 259.411282][ T5115] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 259.419239][ T5115] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 259.428190][ T5115] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 259.437545][ T5115] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 259.446938][ T5115] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 260.364389][ T5115] Bluetooth: hci8: command tx timeout [ 261.494193][ T5115] Bluetooth: hci9: command tx timeout [ 262.444892][ T5115] Bluetooth: hci8: command tx timeout [ 263.564286][ T5115] Bluetooth: hci9: command tx timeout [ 264.524349][ T5115] Bluetooth: hci8: command tx timeout [ 265.644489][ T5115] Bluetooth: hci9: command tx timeout [ 266.604092][ T5118] Bluetooth: hci8: command tx timeout [ 267.734225][ T5118] Bluetooth: hci9: command tx timeout [ 268.364139][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 290.524445][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 290.547505][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 290.555816][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 290.565109][ T5118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 290.572899][ T5118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 290.581660][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 290.830576][ T5115] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 290.840096][ T5115] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 290.849581][ T5115] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 290.857873][ T5115] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 290.866287][ T5115] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 290.873724][ T5115] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 291.452950][ T5118] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 291.469735][ T5118] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 291.480620][ T5118] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 291.495060][ T5118] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 291.510574][ T5118] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 291.518958][ T5118] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 292.684230][ T5118] Bluetooth: hci10: command tx timeout [ 292.926677][ T5118] Bluetooth: hci11: command tx timeout [ 293.564563][ T5118] Bluetooth: hci12: command tx timeout [ 294.764239][ T5118] Bluetooth: hci10: command tx timeout [ 295.004425][ T5118] Bluetooth: hci11: command tx timeout [ 295.645434][ T5118] Bluetooth: hci12: command tx timeout [ 296.844129][ T5118] Bluetooth: hci10: command tx timeout [ 297.085463][ T5118] Bluetooth: hci11: command tx timeout [ 297.724238][ T5118] Bluetooth: hci12: command tx timeout [ 298.924207][ T5118] Bluetooth: hci10: command tx timeout [ 299.164397][ T5118] Bluetooth: hci11: command tx timeout [ 299.804257][ T5118] Bluetooth: hci12: command tx timeout [ 317.500609][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.507176][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.572472][ T5118] Bluetooth: hci3: command 0x0406 tx timeout [ 319.574125][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 323.428406][ T5115] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 323.444271][ T5115] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 323.454540][ T5115] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 323.464820][ T5115] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 323.472509][ T5115] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 323.480082][ T5115] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 324.620636][ T5127] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 324.630499][ T5127] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 324.641161][ T5127] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 324.652051][ T5127] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 324.660176][ T5127] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 324.668420][ T5127] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 325.574139][ T5127] Bluetooth: hci13: command tx timeout [ 326.769867][ T5127] Bluetooth: hci14: command tx timeout [ 327.644439][ T5127] Bluetooth: hci13: command tx timeout [ 328.844233][ T5127] Bluetooth: hci14: command tx timeout [ 329.730495][ T5127] Bluetooth: hci13: command tx timeout [ 330.934005][ T5127] Bluetooth: hci14: command tx timeout [ 331.804202][ T5127] Bluetooth: hci13: command tx timeout [ 332.844718][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 333.021601][ T5127] Bluetooth: hci14: command tx timeout [ 341.164347][ T30] INFO: task kworker/u8:8:2814 blocked for more than 143 seconds. [ 341.173339][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 341.181142][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.189919][ T30] task:kworker/u8:8 state:D stack:18416 pid:2814 tgid:2814 ppid:2 flags:0x00004000 [ 341.200272][ T30] Workqueue: netns cleanup_net [ 341.206145][ T30] Call Trace: [ 341.209438][ T30] 2024/06/14 17:57:48 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 341.212378][ T30] __schedule+0x17e8/0x4a20 [ 341.226230][ T30] ? __pfx___schedule+0x10/0x10 [ 341.231152][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.266424][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.273052][ T30] ? kthread_data+0x52/0xd0 [ 341.277654][ T30] ? schedule+0x90/0x320 [ 341.281944][ T30] ? wq_worker_sleeping+0x66/0x240 [ 341.304025][ T30] ? schedule+0x90/0x320 [ 341.308589][ T30] schedule+0x14b/0x320 [ 341.312772][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.344222][ T30] __mutex_lock+0x6a4/0xd70 [ 341.348790][ T30] ? __mutex_lock+0x527/0xd70 [ 341.364177][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 341.369778][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.383992][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 341.389942][ T30] ? rcu_is_watching+0x15/0xb0 [ 341.403979][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 341.409398][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 341.424007][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 341.430130][ T30] hwsim_exit_net+0x5c1/0x670 [ 341.454049][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 341.459295][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 341.473968][ T30] cleanup_net+0x802/0xcc0 [ 341.478435][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 341.483393][ T30] ? process_scheduled_works+0x945/0x1830 [ 341.504087][ T30] process_scheduled_works+0xa2c/0x1830 [ 341.509708][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.523967][ T30] ? assign_work+0x364/0x3d0 [ 341.528592][ T30] worker_thread+0x86d/0xd70 [ 341.533211][ T30] ? __kthread_parkme+0x169/0x1d0 [ 341.554058][ T30] ? __pfx_worker_thread+0x10/0x10 [ 341.559213][ T30] kthread+0x2f0/0x390 [ 341.563294][ T30] ? __pfx_worker_thread+0x10/0x10 [ 341.584001][ T30] ? __pfx_kthread+0x10/0x10 [ 341.588635][ T30] ret_from_fork+0x4b/0x80 [ 341.593067][ T30] ? __pfx_kthread+0x10/0x10 [ 341.614026][ T30] ret_from_fork_asm+0x1a/0x30 [ 341.618846][ T30] [ 341.632663][ T30] INFO: task kworker/1:4:5160 blocked for more than 143 seconds. [ 341.643957][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 341.651638][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [