last executing test programs: 40.092852418s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3e, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="7e626ec5b42d3fb473"]}]}, 0x28}}, 0x0) 40.00827142s ago: executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 39.701253846s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000180)="a8", 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x44}}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000580)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) 39.218764233s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0xfffffffffffffff2}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) 39.066809354s ago: executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) 38.96129262s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001140)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x87, r0}, 0x38) 34.021206487s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f0000000040)) 32.109592955s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001"], 0x18}}], 0x1, 0x0) 32.090642571s ago: executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) unshare(0x62040500) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000d40)={0x2fc, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0xcc, 0x7f, [@mesh_chsw={0x76, 0x6, {0x4, 0x4, 0x1b, 0x401}}, @measure_req={0x26, 0xae, {0x6, 0x1, 0x6, "8e0d1b8b4619dbfce9850a03dbf96209f8557be4ed6da4389404fb9539e39edbc88f14da4c7271758a9e3218a63b210955a6f23120649dda34fd13c7d95e7799ce9053126d87fbe45cfdbbaa737cd3c5a06766225fea5a1219fe7415dd234283e2d045bb8288f7999f40d2c5ac587a24696c370018ded04a5f2dcc825be2f5e13326ac3700d66acf04123c997c1329b090bf48f07f4447f0fb5587fcf134468cc2e6a21475ee41fe823f81"}}, @mesh_chsw={0x76, 0x6, {0x9, 0x1, 0x40, 0xff}}, @ibss={0x6, 0x2, 0x4}, @ibss={0x6, 0x2, 0xff01}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x26, 0x80, [@channel_switch={0x25, 0x3}, @gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0x1f, 0x8}}, @challenge={0x10, 0x1, 0x7f}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x60}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x1df, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x7, @default, 0x5881, @val={0x0, 0xb, @random="fcbcc1de22a3d75cbf5809"}, @void, @void, @val={0x4, 0x6, {0xa8, 0x80, 0x4, 0x4}}, @val={0x6, 0x2, 0x5}, @val={0x5, 0xa6, {0x8, 0x0, 0x3f, "5431a047b8491eb39c86850413b393217f57750d70606b80ca763fbeac88667639a53e0e6027e70791f268b73b10241d56cc6163174d50e5a051670507553aafbb2607711844d8cc7c1a5c0f1f2492d42608b14e83ebf08846a53ecf1e8f19f9f538f299f15a7a495be475b90ed78522cef09c94561cf34f3e376d07c733a6948274bac1570260ffe14ec29bcea2b0493130ba597b0ef6d13d9833fe8e161d503f7664"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x4000, 0x1, 0x1, 0x0, {0x8, 0x7f}, 0x1, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfa, 0x8}}, @val={0x76, 0x6, {0x0, 0x9, 0x2b, 0x2}}, [{0xdd, 0x37, "e799a1927b306dfd57e5bc03657b866049ca262c0e9629f0d5d791615c4028275dc188bbe70763fea4b5155c3dcb7bd1f08526eaaf8e9d"}, {0xdd, 0x1e, "327572b34e0927f74eb4230e86631adb04828d7b57424af633e7f2d7ea27"}, {0xdd, 0x63, "41756572751a84340dfaeb1e3e70a776fc355580eea7dc267a032fe5d79315078f8112a48ce7a29540d85cf6fd6829db8f1a0dd824654a8c4c4ccc269688b36941cc26fb781d1487df33f60407c527bd21bcfcf83a48610b61fe7a7e30140efe8bca07"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x8, 0x80, [@ibss={0x6, 0x2, 0x1ff}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x14000}, 0x4040980) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x8}, 0x14}}, 0x40004) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) 31.990119297s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000003c0), &(0x7f0000000440)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 31.828341395s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet6_opts(r0, 0x84, 0x6, 0x0, &(0x7f0000000200)) 31.814882396s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 31.812845367s ago: executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 31.664890528s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}]]}}}]}, 0x38}}, 0x0) 31.621429634s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f0000000040)) 31.507069906s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x8, 0xa, 0x0, 0xa, 0x0, @dev}]}}}}}}}}, 0x0) 31.455929887s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.394035742s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000000000800000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x26, &(0x7f00000001c0)=""/226}, 0x21) 31.290851388s ago: executing program 2: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{}, "2ec9cb40f0f680e5", "1d194f10570570130eb18d286fec4cf6", "844f4e45", "0b654fb967914c5e"}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000000000000000bbfe88000000000000000000000000000189"], 0xfce) 31.270266354s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0x76}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 31.17264791s ago: executing program 4: close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x2b, 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1a5c19}], 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) 30.281650594s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x26, 0x0, 0x0, @link_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.210688415s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000003c0), &(0x7f0000000440)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 30.144276295s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512da90b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d533ccaa01f2a6eac4994fed13cf19d0ad229e5752548300000000dbc2777df150dd488318b5790bee7ebd4745b7cdd77b85b941092314fd085f028f4e09d63781987af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede34677470b29a47fc813ce3d32cfc7a504c271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d00ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b5747932"], 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) 30.093610997s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) 30.038062642s ago: executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100), 0x8) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010526bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="46200100000000001400350076657468305f766c616e000000000a00080013"], 0x44}}, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="b0", 0x10, 0x0, &(0x7f0000000100)={0x11, 0xc, r4}, 0x14) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) recvmmsg(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r0}, 0xc) 1.42488281s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ee0000000000000000000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.243918608s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f0000000040)) 1.13453673s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb}}}}]}, 0x40}}, 0x0) 0s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. 2024/06/12 21:39:14 fuzzer started 2024/06/12 21:39:14 dialing manager at 10.128.0.169:30016 [ 71.811728][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.863774][ T5097] cgroup: Unknown subsys name 'net' [ 72.021657][ T5097] cgroup: Unknown subsys name 'rlimit' 2024/06/12 21:39:16 starting 5 executor processes [ 73.511392][ T5098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.552890][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.568923][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.577684][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.588439][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.599243][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.611192][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.632931][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.641534][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.651047][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.659285][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.663118][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.668908][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.682697][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.690410][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.693428][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.701407][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.707587][ T5130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.712554][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.719934][ T4489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.735232][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.738456][ T5130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.743784][ T5132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.750177][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.757371][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.764817][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.778209][ T4489] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.785927][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.797251][ T4489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.807477][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.815046][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.521300][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 75.585978][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 75.609420][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 75.655815][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 75.704588][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 75.910702][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.918988][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.926507][ T5116] bridge_slave_0: entered allmulticast mode [ 75.934243][ T5116] bridge_slave_0: entered promiscuous mode [ 75.982858][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.993750][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.001418][ T5116] bridge_slave_1: entered allmulticast mode [ 76.009529][ T5116] bridge_slave_1: entered promiscuous mode [ 76.032457][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.039868][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.047613][ T5119] bridge_slave_0: entered allmulticast mode [ 76.054839][ T5119] bridge_slave_0: entered promiscuous mode [ 76.063234][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.070920][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.078454][ T5128] bridge_slave_0: entered allmulticast mode [ 76.085932][ T5128] bridge_slave_0: entered promiscuous mode [ 76.133015][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.141061][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.148588][ T5119] bridge_slave_1: entered allmulticast mode [ 76.155718][ T5119] bridge_slave_1: entered promiscuous mode [ 76.176631][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.183799][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.191634][ T5128] bridge_slave_1: entered allmulticast mode [ 76.199284][ T5128] bridge_slave_1: entered promiscuous mode [ 76.219377][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.227372][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.234653][ T5122] bridge_slave_0: entered allmulticast mode [ 76.242431][ T5122] bridge_slave_0: entered promiscuous mode [ 76.295846][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.305438][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.312875][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.320561][ T5122] bridge_slave_1: entered allmulticast mode [ 76.328339][ T5122] bridge_slave_1: entered promiscuous mode [ 76.337878][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.345168][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.352597][ T5126] bridge_slave_0: entered allmulticast mode [ 76.359776][ T5126] bridge_slave_0: entered promiscuous mode [ 76.368868][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.376047][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.384056][ T5126] bridge_slave_1: entered allmulticast mode [ 76.392393][ T5126] bridge_slave_1: entered promiscuous mode [ 76.402370][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.428392][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.502489][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.530008][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.558916][ T5119] team0: Port device team_slave_0 added [ 76.568654][ T5116] team0: Port device team_slave_0 added [ 76.605850][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.629622][ T5119] team0: Port device team_slave_1 added [ 76.641901][ T5116] team0: Port device team_slave_1 added [ 76.663645][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.675939][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.728012][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.743927][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.767857][ T5123] Bluetooth: hci0: command tx timeout [ 76.770899][ T5128] team0: Port device team_slave_0 added [ 76.802834][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.811027][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.838904][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.846847][ T53] Bluetooth: hci3: command tx timeout [ 76.849747][ T5130] Bluetooth: hci4: command tx timeout [ 76.855028][ T5120] Bluetooth: hci1: command tx timeout [ 76.861807][ T5123] Bluetooth: hci2: command tx timeout [ 76.918634][ T5128] team0: Port device team_slave_1 added [ 76.929388][ T5126] team0: Port device team_slave_0 added [ 76.938122][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.945253][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.972044][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.984461][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.992562][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.019558][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.041870][ T5122] team0: Port device team_slave_0 added [ 77.051901][ T5122] team0: Port device team_slave_1 added [ 77.072816][ T5126] team0: Port device team_slave_1 added [ 77.080129][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.087636][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.114110][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.245992][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.254032][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.281661][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.294731][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.302340][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.328713][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.341837][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.349300][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.375919][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.389857][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.397094][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.423169][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.452182][ T5116] hsr_slave_0: entered promiscuous mode [ 77.460698][ T5116] hsr_slave_1: entered promiscuous mode [ 77.469863][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.477707][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.503978][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.522713][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.530492][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.556911][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.587362][ T5119] hsr_slave_0: entered promiscuous mode [ 77.594494][ T5119] hsr_slave_1: entered promiscuous mode [ 77.602186][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.610661][ T5119] Cannot create hsr debugfs directory [ 77.755104][ T5126] hsr_slave_0: entered promiscuous mode [ 77.762661][ T5126] hsr_slave_1: entered promiscuous mode [ 77.770274][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.778215][ T5126] Cannot create hsr debugfs directory [ 77.791820][ T5122] hsr_slave_0: entered promiscuous mode [ 77.800316][ T5122] hsr_slave_1: entered promiscuous mode [ 77.812793][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.822008][ T5122] Cannot create hsr debugfs directory [ 77.848873][ T5128] hsr_slave_0: entered promiscuous mode [ 77.855682][ T5128] hsr_slave_1: entered promiscuous mode [ 77.863125][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.870999][ T5128] Cannot create hsr debugfs directory [ 78.476267][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.489537][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.503009][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.514930][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.592490][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.611000][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.644417][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.675766][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.715857][ T5119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.734753][ T5119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.759609][ T5119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.770220][ T5119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.856251][ T5123] Bluetooth: hci0: command tx timeout [ 78.881150][ T5128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.901361][ T5128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.927742][ T5123] Bluetooth: hci1: command tx timeout [ 78.928039][ T5120] Bluetooth: hci2: command tx timeout [ 78.933209][ T53] Bluetooth: hci3: command tx timeout [ 78.944803][ T5130] Bluetooth: hci4: command tx timeout [ 78.947594][ T5128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.963288][ T5128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.082024][ T5126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.092788][ T5126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.109005][ T5126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.125088][ T5126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.174651][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.298391][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.370618][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.378395][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.403048][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.417264][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.424516][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.444854][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.543715][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.582662][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.621273][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.649136][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.664285][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.671653][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.685435][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.693152][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.729261][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.736519][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.813649][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.820874][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.842610][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.858636][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.935439][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.943126][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.004358][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.011596][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.043311][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.050545][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.060811][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.068014][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.104237][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.334746][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.501077][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.589234][ T5122] veth0_vlan: entered promiscuous mode [ 80.673908][ T5122] veth1_vlan: entered promiscuous mode [ 80.702706][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.900202][ T5122] veth0_macvtap: entered promiscuous mode [ 80.913884][ T5122] veth1_macvtap: entered promiscuous mode [ 80.929059][ T5130] Bluetooth: hci0: command tx timeout [ 80.973631][ T5119] veth0_vlan: entered promiscuous mode [ 81.007735][ T5130] Bluetooth: hci2: command tx timeout [ 81.007948][ T5123] Bluetooth: hci4: command tx timeout [ 81.013201][ T5130] Bluetooth: hci1: command tx timeout [ 81.019586][ T53] Bluetooth: hci3: command tx timeout [ 81.054474][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.079048][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.094997][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.122037][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.139637][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.149795][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.160602][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.192130][ T5119] veth1_vlan: entered promiscuous mode [ 81.214120][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.384873][ T5116] veth0_vlan: entered promiscuous mode [ 81.436327][ T5128] veth0_vlan: entered promiscuous mode [ 81.465426][ T5126] veth0_vlan: entered promiscuous mode [ 81.472248][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.490309][ T5116] veth1_vlan: entered promiscuous mode [ 81.496888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.542253][ T5128] veth1_vlan: entered promiscuous mode [ 81.572665][ T5119] veth0_macvtap: entered promiscuous mode [ 81.588502][ T5126] veth1_vlan: entered promiscuous mode [ 81.610397][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.613235][ T5119] veth1_macvtap: entered promiscuous mode [ 81.627290][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.700595][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.719420][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.734932][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.769955][ T5116] veth0_macvtap: entered promiscuous mode [ 81.787875][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.799751][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.813693][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.828969][ T5116] veth1_macvtap: entered promiscuous mode [ 81.862825][ T5119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.874385][ T5119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.885904][ T5119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.900185][ T5119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.922332][ T5128] veth0_macvtap: entered promiscuous mode [ 81.954031][ T5126] veth0_macvtap: entered promiscuous mode [ 81.972716][ T5128] veth1_macvtap: entered promiscuous mode [ 81.999285][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.019384][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.031927][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.044318][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.061969][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.083516][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.102614][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.113606][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.134593][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.162579][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.206002][ T5126] veth1_macvtap: entered promiscuous mode [ 82.268659][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.279955][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.290291][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.302526][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.313534][ T5209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.385936][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.490441][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.505810][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.518155][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.529115][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.539448][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.550176][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.565644][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.588982][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.600888][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.612217][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.622831][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.635063][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.647050][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.657221][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.669113][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.682379][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.702920][ T5211] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.722567][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.735462][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.748511][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.763928][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.775438][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.788864][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.803554][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.855024][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.880759][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.904467][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.942197][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.952824][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.963492][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.974561][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.987857][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.000342][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.024520][ T5123] Bluetooth: hci0: command tx timeout [ 83.050528][ T5126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.084606][ T5126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.087332][ T5123] Bluetooth: hci4: command tx timeout [ 83.101674][ T53] Bluetooth: hci3: command tx timeout [ 83.106876][ T5120] Bluetooth: hci1: command tx timeout [ 83.110027][ T53] Bluetooth: hci2: command tx timeout [ 83.129979][ T5126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.141723][ T5126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.156219][ T5128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.176301][ T5128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.203070][ T5128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.212659][ T5128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.357289][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.367348][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.441945][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.455611][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.528466][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.554900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.613752][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.648263][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.725366][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.758082][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.885549][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.936201][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.113125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.145796][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.236082][ T954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.238154][ T5239] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 84.248154][ T954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.294003][ T5239] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.734068][ T5252] ɶƣ0GC¦: entered promiscuous mode [ 84.963846][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.285736][ T5259] vlan2: entered promiscuous mode [ 85.297600][ T5259] team0: Device vlan2 is already an upper device of the team interface [ 85.409981][ T5268] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.458777][ T5303] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.853347][ T5316] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.901497][ T5312] vlan2: entered promiscuous mode [ 86.916889][ T5312] team0: Device vlan2 is already an upper device of the team interface [ 87.171837][ T930] cfg80211: failed to load regulatory.db [ 87.539275][ T5334] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 88.077933][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.462152][ T5359] IPVS: length: 215 != 24 [ 88.585289][ T5373] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 88.837037][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.135095][ T5391] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.725737][ T5425] xt_l2tp: v2 tid > 0xffff: 100794368 [ 89.845618][ T5426] tap0: tun_chr_ioctl cmd 1074812118 [ 89.969538][ T5435] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 89.976831][ T5426] team0: Cannot enslave team device to itself [ 89.989924][ T5430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.074763][ T5430] vlan2: entered promiscuous mode [ 90.090238][ T5430] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 90.117891][ T5430] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 90.990332][ T5463] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.677421][ T5497] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.712086][ T5496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.020967][ T5513] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 92.651969][ T5537] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 92.687573][ T53] Bluetooth: hci0: command tx timeout [ 92.977737][ T5549] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.651665][ T5570] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 93.721703][ T5572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.779342][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.799135][ T5572] vlan2: entered promiscuous mode [ 93.816846][ T5572] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 93.867556][ T5572] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 94.195876][ T5589] tap0: tun_chr_ioctl cmd 1074812118 [ 94.233601][ T5589] team0: Cannot enslave team device to itself [ 94.510486][ T5603] Bluetooth: MGMT ver 1.22 [ 94.527101][ T5603] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 95.209768][ T5631] bridge0: port 3(netdevsim1) entered blocking state [ 95.234304][ T5631] bridge0: port 3(netdevsim1) entered disabled state [ 95.260480][ T5631] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 95.289379][ T5631] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 95.318591][ T5631] bridge0: port 3(netdevsim1) entered blocking state [ 95.325965][ T5631] bridge0: port 3(netdevsim1) entered forwarding state [ 96.286842][ T53] Bluetooth: hci4: command tx timeout [ 96.359494][ T5679] bridge0: port 3(netdevsim1) entered blocking state [ 96.367669][ T5679] bridge0: port 3(netdevsim1) entered disabled state [ 96.375595][ T5679] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 96.416295][ T5679] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 96.432926][ T5679] bridge0: port 3(netdevsim1) entered blocking state [ 96.439865][ T5679] bridge0: port 3(netdevsim1) entered forwarding state [ 96.467196][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.823115][ T5697] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 96.970358][ T5696] team0: Port device team_slave_0 removed [ 97.039384][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 97.047159][ T5696] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 97.102545][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.171627][ T5700] team0: No ports can be present during mode change [ 97.243429][ T5691] bridge0: entered allmulticast mode [ 97.414510][ T5717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.901481][ T5728] Bluetooth: hci3: invalid length 0, exp 2 for type 6 [ 98.376169][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.412417][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.430181][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.443456][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.467565][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.477873][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.511215][ T5747] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 98.525720][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.865073][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.965538][ T5765] Illegal XDP return value 854655076 on prog (id 45) dev N/A, expect packet loss! [ 99.201559][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.317584][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.337607][ T5781] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 99.347305][ T5781] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.413652][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.705202][ T5786] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 99.756775][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.935089][ T5743] chnl_net:caif_netlink_parms(): no params data found [ 100.527094][ T53] Bluetooth: hci4: command tx timeout [ 100.550651][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.569743][ T5828] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 100.586365][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.625847][ T5743] bridge_slave_0: entered allmulticast mode [ 100.655872][ T5743] bridge_slave_0: entered promiscuous mode [ 100.733794][ T12] bridge_slave_1: left allmulticast mode [ 100.761735][ T12] bridge_slave_1: left promiscuous mode [ 100.788455][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.899518][ T12] bridge_slave_0: left allmulticast mode [ 100.905363][ T12] bridge_slave_0: left promiscuous mode [ 100.946304][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.256911][ T29] audit: type=1804 audit(1718228384.593:2): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3190071002/syzkaller.vLcxHK/50/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 101.703735][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.735856][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.758511][ T12] bond0 (unregistering): Released all slaves [ 101.785725][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.800090][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.809619][ T5743] bridge_slave_1: entered allmulticast mode [ 101.823454][ T5743] bridge_slave_1: entered promiscuous mode [ 101.907635][ T5841] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 101.980012][ T5863] team0: Port device team_slave_0 removed [ 102.017735][ T5863] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 102.218453][ T5862] team0: No ports can be present during mode change [ 102.255200][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.285889][ T5863] bridge0: entered allmulticast mode [ 102.324890][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.611959][ T5743] team0: Port device team_slave_0 added [ 102.617225][ T53] Bluetooth: hci4: command tx timeout [ 102.622498][ T5743] team0: Port device team_slave_1 added [ 102.694543][ T12] hsr_slave_0: left promiscuous mode [ 102.722828][ T12] hsr_slave_1: left promiscuous mode [ 102.757086][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.764631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.818446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.837531][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.895943][ T12] veth1_macvtap: left promiscuous mode [ 102.915521][ T12] veth0_macvtap: left promiscuous mode [ 102.949277][ T12] veth1_vlan: left promiscuous mode [ 102.987716][ T12] veth0_vlan: left promiscuous mode [ 103.404207][ T5927] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 103.436815][ T5927] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.058760][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.103401][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.545272][ T5921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.682386][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.697382][ T53] Bluetooth: hci4: command tx timeout [ 104.707048][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.736248][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.774822][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.806694][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.880562][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.244456][ T5743] hsr_slave_0: entered promiscuous mode [ 105.297760][ T5743] hsr_slave_1: entered promiscuous mode [ 105.338231][ T5743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.363063][ T5743] Cannot create hsr debugfs directory [ 105.724517][ T5983] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 105.731957][ T5983] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 105.789759][ T5983] hsr_slave_0: left promiscuous mode [ 105.808929][ T5983] hsr_slave_1: left promiscuous mode [ 106.766918][ T53] Bluetooth: hci4: command tx timeout [ 106.818212][ T6026] Bluetooth: MGMT ver 1.22 [ 107.130790][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.156109][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.213621][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.242081][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.624631][ T6048] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 107.701718][ T6052] team0: No ports can be present during mode change [ 107.745787][ T6062] veth0_to_hsr: entered promiscuous mode [ 107.817425][ T6061] veth0_to_hsr: left promiscuous mode [ 108.034370][ T6075] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 108.067593][ T6075] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.111049][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.200346][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.285041][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.292384][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.318765][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.326063][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.735422][ T6105] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 108.760842][ T6105] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.165397][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.322240][ T5743] veth0_vlan: entered promiscuous mode [ 109.344312][ T6140] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 109.392630][ T5743] veth1_vlan: entered promiscuous mode [ 109.421788][ T6142] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 109.517245][ T6142] team0: No ports can be present during mode change [ 109.559221][ T5743] veth0_macvtap: entered promiscuous mode [ 109.583147][ T5743] veth1_macvtap: entered promiscuous mode [ 109.587190][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.653289][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.683912][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.718565][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.743972][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.770967][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.791821][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.821411][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.839630][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.852227][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.908718][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.938515][ T6161] syz-executor.4[6161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.938692][ T6161] syz-executor.4[6161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.943511][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.991524][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.008439][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.024003][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.041390][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.056012][ T5743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.073259][ T5743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.106420][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.139795][ T5743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.159775][ T5743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.169422][ T5743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.200905][ T5743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.281881][ T6171] veth0_to_hsr: entered promiscuous mode [ 110.296302][ T6172] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 110.305416][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.324207][ T6169] veth0_to_hsr: left promiscuous mode [ 110.467838][ T6176] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 110.590460][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.614869][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.732415][ T6174] team0: No ports can be present during mode change [ 110.755351][ T2446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.806597][ T2446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.196635][ T29] audit: type=1800 audit(1718228394.533:3): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 111.244647][ T29] audit: type=1804 audit(1718228394.563:4): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir490073303/syzkaller.9XMYNc/1/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 111.298962][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.324716][ T29] audit: type=1804 audit(1718228394.603:5): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir490073303/syzkaller.9XMYNc/1/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 111.520093][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.952976][ T6235] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.986848][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.093216][ T6243] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 112.760076][ T29] audit: type=1800 audit(1718228396.103:6): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 112.803231][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.830008][ T6295] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 112.881455][ T29] audit: type=1804 audit(1718228396.103:7): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir217326273/syzkaller.YKXrw5/95/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 112.963975][ T29] audit: type=1804 audit(1718228396.173:8): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir217326273/syzkaller.YKXrw5/95/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 113.635103][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.889874][ T6341] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.023725][ T6407] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 115.915826][ T6457] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 116.328407][ T6483] debugfs: Directory 'netdev:nicvf0' with parent 'phy13' already present! [ 116.372468][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.395413][ T6487] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 116.525988][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.568947][ T6495] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 116.609076][ T6495] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 116.657169][ T6501] netlink: 64122 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.706689][ T6495] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.716005][ T6495] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.725140][ T6495] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.734501][ T6495] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.787338][ T6495] vxlan0: entered promiscuous mode [ 117.071083][ T6522] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.261545][ T6495] syz-executor.3 (6495) used greatest stack depth: 19344 bytes left [ 117.555547][ T6552] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 117.922912][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.940748][ T6573] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 117.967783][ T6573] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 118.011075][ T6573] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.020208][ T6573] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.029056][ T6573] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.037957][ T6573] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.065809][ T6573] vxlan0: entered promiscuous mode [ 118.205322][ T6586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 118.325081][ T6589] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 121.405132][ T6615] bond0: (slave bond_slave_1): Releasing backup interface [ 121.455080][ T6616] bond0: (slave bond_slave_0): Releasing backup interface [ 121.520624][ T6623] debugfs: Directory 'netdev:nicvf0' with parent 'phy6' already present! [ 121.545702][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.927661][ T6638] bridge0: entered allmulticast mode [ 122.007478][ T6638] pim6reg: entered allmulticast mode [ 122.177638][ T6652] syz-executor.1[6652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.177916][ T6652] syz-executor.1[6652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.490229][ T6672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.685535][ T6683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 122.716218][ T6683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 122.726187][ T6683] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 122.737097][ T6683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 122.754843][ T6683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 122.786144][ T6683] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 122.994206][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.071186][ T6695] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 123.355116][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.690825][ T6727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 123.706264][ T6727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 123.726492][ T6727] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 123.885000][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.271361][ T6754] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.304907][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.316026][ T6754] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.589739][ T6769] syz-executor.2[6769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.590018][ T6769] syz-executor.2[6769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.679355][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.290906][ T6812] syz-executor.4[6812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.291189][ T6812] syz-executor.4[6812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.365863][ T6815] tap0: tun_chr_ioctl cmd 1074025673 [ 125.501752][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.938489][ T6850] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.436447][ T6881] atomic_op ffff88802d5b0998 conn xmit_atomic 0000000000000000 [ 127.113062][ T6923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.261644][ T6933] __nla_validate_parse: 1 callbacks suppressed [ 127.261666][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.457686][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.608425][ T6954] tap0: tun_chr_ioctl cmd 1074025673 [ 127.947752][ T6974] atomic_op ffff888022863198 conn xmit_atomic 0000000000000000 [ 128.265774][ T6995] validate_nla: 28 callbacks suppressed [ 128.265804][ T6995] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 128.827435][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.864947][ T7029] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 129.501991][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.966159][ T7083] tap0: tun_chr_ioctl cmd 1074025673 [ 130.586475][ T7117] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 130.738691][ T7126] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 130.754643][ T7126] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 130.765550][ T7126] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.161685][ T5170] IPVS: starting estimator thread 0... [ 131.281934][ T7141] IPVS: using max 16 ests per chain, 38400 per kthread [ 132.175494][ T25] IPVS: starting estimator thread 0... [ 132.288500][ T7180] IPVS: using max 16 ests per chain, 38400 per kthread [ 132.390462][ T7190] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 132.552804][ T7199] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 132.584217][ T7202] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 132.772693][ T7211] ieee802154 phy0 wpan0: encryption failed: -90 [ 133.237523][ T7226] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 133.251808][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.260823][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.072870][ T7269] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 134.622741][ T7299] ieee802154 phy0 wpan0: encryption failed: -90 [ 135.064867][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.112130][ T7313] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.121192][ T7313] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.130113][ T7313] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.138964][ T7313] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.157965][ T7313] vxlan0: entered promiscuous mode [ 135.543208][ T7332] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 135.569304][ T7335] ieee802154 phy0 wpan0: encryption failed: -90 [ 136.001821][ T7343] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 136.412611][ T7372] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 136.552227][ T7376] batadv1: entered allmulticast mode [ 136.852341][ T29] audit: type=1804 audit(1718228420.193:9): pid=7390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir490073303/syzkaller.9XMYNc/103/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 137.304176][ T7410] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 137.315156][ T7410] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.343243][ T7409] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 137.495397][ T29] audit: type=1804 audit(1718228420.833:10): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir217326273/syzkaller.YKXrw5/196/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 137.603577][ T7422] syzkaller0: entered promiscuous mode [ 137.610376][ T7422] syzkaller0: entered allmulticast mode [ 137.821791][ T7435] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.839525][ T7435] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.853363][ T7435] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.822979][ T7439] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 139.831449][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.005241][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.278397][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.078430][ T7526] pimreg: entered allmulticast mode [ 141.961151][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.971457][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.984618][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.994676][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.005523][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.013820][ T7562] pimreg: entered allmulticast mode [ 142.020448][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.241070][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.365102][ T7580] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.392137][ T7580] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 142.412545][ T7580] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.432667][ T7580] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.448027][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.629922][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.689760][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.793174][ T7601] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 142.809167][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.931710][ T7607] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 142.955017][ T7607] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.344967][ T51] bridge_slave_1: left allmulticast mode [ 143.351153][ T51] bridge_slave_1: left promiscuous mode [ 143.357363][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.370573][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.407670][ T51] bridge_slave_0: left allmulticast mode [ 143.423527][ T51] bridge_slave_0: left promiscuous mode [ 143.434421][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.507556][ T7640] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 144.047307][ T53] Bluetooth: hci1: command tx timeout [ 144.320212][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.465809][ T51] bond0 (unregistering): Released all slaves [ 144.658465][ T7656] syzkaller0: entered promiscuous mode [ 144.665521][ T7656] syzkaller0: entered allmulticast mode [ 144.674247][ T7674] Zero length message leads to an empty skb [ 144.778142][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.126960][ T53] Bluetooth: hci1: command tx timeout [ 147.001918][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 147.132682][ T51] hsr_slave_0: left promiscuous mode [ 147.165708][ T51] hsr_slave_1: left promiscuous mode [ 147.189308][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.220909][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.243126][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.273006][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.369804][ T51] veth1_macvtap: left promiscuous mode [ 147.382454][ T51] veth0_macvtap: left promiscuous mode [ 147.389609][ T51] veth1_vlan: left promiscuous mode [ 147.395673][ T51] veth0_vlan: left promiscuous mode [ 147.416128][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.043570][ T51] team0 (unregistering): Port device team_slave_1 removed [ 148.089270][ T51] team0 (unregistering): Port device team_slave_0 removed [ 148.207074][ T53] Bluetooth: hci1: command tx timeout [ 148.479051][ T7765] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 148.783415][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.807252][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.814571][ T7564] bridge_slave_0: entered allmulticast mode [ 148.861250][ T7564] bridge_slave_0: entered promiscuous mode [ 148.875769][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.886365][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.894864][ T7564] bridge_slave_1: entered allmulticast mode [ 148.903467][ T7564] bridge_slave_1: entered promiscuous mode [ 149.004133][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.048892][ T7796] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 149.074579][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.093634][ T7798] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.162849][ T7564] team0: Port device team_slave_0 added [ 149.171613][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.189422][ T7564] team0: Port device team_slave_1 added [ 149.235647][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.244019][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.272089][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.286047][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.296998][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.367968][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.493455][ T7564] hsr_slave_0: entered promiscuous mode [ 149.505254][ T7564] hsr_slave_1: entered promiscuous mode [ 149.900641][ T7822] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.164155][ T7834] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 150.212296][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.286869][ T53] Bluetooth: hci1: command tx timeout [ 150.451624][ T7851] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.551248][ T7564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.575230][ T7564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.627843][ T7564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.644011][ T7564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.856104][ T7564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.899292][ T7869] tun0: tun_chr_ioctl cmd 1074025681 [ 150.991051][ T7564] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.024911][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.032187][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.064180][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.071506][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.159795][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.214023][ T7881] bond1: entered promiscuous mode [ 151.242397][ T7879] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.297291][ T7881] bridge2: entered promiscuous mode [ 151.303210][ T7881] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 151.332533][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.347124][ T7888] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 151.395920][ T7888] bridge2: left promiscuous mode [ 151.454418][ T7888] bond1 (unregistering): Released all slaves [ 151.490844][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.836985][ T7907] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 151.883391][ T7564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.920439][ T7912] bridge0: port 4(team0) entered blocking state [ 151.940449][ T7912] bridge0: port 4(team0) entered disabled state [ 151.948337][ T7912] team0: entered allmulticast mode [ 151.958391][ T7912] team_slave_1: entered allmulticast mode [ 151.970521][ T7912] team0: entered promiscuous mode [ 151.975630][ T7912] team_slave_1: entered promiscuous mode [ 151.988298][ T7912] bridge0: port 4(team0) entered blocking state [ 151.994859][ T7912] bridge0: port 4(team0) entered forwarding state [ 152.166685][ T7564] veth0_vlan: entered promiscuous mode [ 152.195151][ T7564] veth1_vlan: entered promiscuous mode [ 152.317861][ T7564] veth0_macvtap: entered promiscuous mode [ 152.346021][ T7564] veth1_macvtap: entered promiscuous mode [ 152.411910][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.426201][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.462426][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.480849][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.496364][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.518043][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.547861][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.578891][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.619573][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.655702][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.691936][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.726590][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.758555][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.781795][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.793779][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.807403][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.821079][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.855328][ T7564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.897996][ T7564] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.915845][ T7564] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.934400][ T7564] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.947818][ T7564] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.389977][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.434860][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.572428][ T954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.591603][ T7974] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.608046][ T954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.068161][ T8001] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 154.195966][ T8009] bridge0: port 3(team0) entered blocking state [ 154.213502][ T8009] bridge0: port 3(team0) entered disabled state [ 154.241024][ T8009] team0: entered allmulticast mode [ 154.274919][ T8009] team_slave_1: entered allmulticast mode [ 154.284150][ T8009] team0: entered promiscuous mode [ 154.293839][ T8009] team_slave_1: entered promiscuous mode [ 154.320501][ T8009] bridge0: port 3(team0) entered blocking state [ 154.328081][ T8009] bridge0: port 3(team0) entered forwarding state [ 154.361395][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.528707][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.595672][ T8030] bond1: entered promiscuous mode [ 154.759423][ T8030] bridge1: entered promiscuous mode [ 154.795774][ T8030] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 154.801204][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.860509][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.947362][ T8050] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 154.997669][ T8050] bridge1: left promiscuous mode [ 155.042171][ T8050] bond1 (unregistering): Released all slaves [ 155.485100][ T8081] tun0: tun_chr_ioctl cmd 1074025681 [ 155.501373][ T8083] nbd: must specify a size in bytes for the device [ 155.547415][ T8086] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.637301][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.847955][ T8155] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.866930][ T8155] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 157.076052][ T8165] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 157.188334][ T8178] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.421756][ T8188] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.435249][ T8188] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 157.774319][ T8207] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 158.012535][ T8216] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 158.171452][ T8228] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 158.182672][ T8230] nbd: must specify a size in bytes for the device [ 158.544006][ T8251] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 158.741847][ T8264] __nla_validate_parse: 7 callbacks suppressed [ 158.741871][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.781572][ T8264] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.789268][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.793690][ T8264] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 158.810076][ T8264] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.985764][ T8273] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 158.994829][ T8273] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.354445][ T8291] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 159.381876][ T8291] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 159.394310][ T8291] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.579339][ T8302] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.600850][ T8302] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.642793][ T8302] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 159.676754][ T8302] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.090716][ T8329] x_tables: duplicate underflow at hook 4 [ 160.285548][ T8344] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 160.326683][ T8344] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 160.898541][ T8374] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 160.967777][ T8377] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 161.603365][ T8409] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 161.633084][ T8413] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 161.645291][ T8409] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 162.355968][ T8445] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 162.365615][ T8445] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 162.550909][ T8452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.558754][ T8452] IPv6: NLM_F_CREATE should be set when creating new route [ 163.085349][ T8485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.092742][ T8485] IPv6: NLM_F_CREATE should be set when creating new route [ 163.422460][ T8505] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 163.772786][ T8520] Cannot find add_set index 0 as target [ 164.096185][ T8539] __nla_validate_parse: 13 callbacks suppressed [ 164.096210][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.136955][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.572513][ T8555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.584112][ T29] audit: type=1107 audit(1718228447.923:11): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 164.786395][ T8569] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.813155][ T8569] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 164.829578][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.463357][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.593301][ T8605] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.610484][ T8605] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 165.733257][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.591452][ T8640] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 166.626748][ T8640] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.042421][ T8662] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.088209][ T8665] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 167.096373][ T8665] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.101026][ T8693] sctp: [Deprecated]: syz-executor.3 (pid 8693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.101026][ T8693] Use struct sctp_sack_info instead [ 168.185888][ T8696] sctp: [Deprecated]: syz-executor.3 (pid 8696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.185888][ T8696] Use struct sctp_sack_info instead [ 168.582884][ T2446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.649151][ T8708] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 168.804997][ T2446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.856421][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.880973][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.894228][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.914925][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.924952][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.934555][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.063493][ T2446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.191448][ T2446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.349256][ T8731] __nla_validate_parse: 5 callbacks suppressed [ 169.349280][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.369106][ T8731] tc_dump_action: action bad kind [ 169.636912][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.686214][ T2446] bridge_slave_1: left allmulticast mode [ 169.693601][ T2446] bridge_slave_1: left promiscuous mode [ 169.700261][ T2446] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.711919][ T2446] bridge_slave_0: left allmulticast mode [ 169.718662][ T2446] bridge_slave_0: left promiscuous mode [ 169.724493][ T2446] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.092679][ T2446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.105724][ T2446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.121565][ T2446] bond0 (unregistering): Released all slaves [ 170.232974][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 170.453347][ T8756] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.745659][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.762793][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.772871][ T8712] bridge_slave_0: entered allmulticast mode [ 170.790636][ T8712] bridge_slave_0: entered promiscuous mode [ 170.811790][ T8773] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 170.821470][ T8773] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.823201][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.849114][ T2446] hsr_slave_0: left promiscuous mode [ 170.861160][ T8775] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.871075][ T2446] hsr_slave_1: left promiscuous mode [ 170.881807][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.890302][ T8775] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 170.895770][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.920289][ T8775] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.985050][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.005089][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.014121][ T53] Bluetooth: hci1: command tx timeout [ 171.048458][ T2446] veth1_macvtap: left promiscuous mode [ 171.049241][ T8775] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.055305][ T2446] veth0_macvtap: left promiscuous mode [ 171.070223][ T2446] veth1_vlan: left promiscuous mode [ 171.076065][ T2446] veth0_vlan: left promiscuous mode [ 172.054610][ T2446] team0 (unregistering): Port device team_slave_1 removed [ 172.103286][ T2446] team0 (unregistering): Port device team_slave_0 removed [ 172.623375][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.636705][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.644109][ T8712] bridge_slave_1: entered allmulticast mode [ 172.653625][ T8712] bridge_slave_1: entered promiscuous mode [ 172.831373][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.862220][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.942454][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.013994][ T8815] 8021q: adding VLAN 0 to HW filter on device team1 [ 173.073223][ T8823] SET target dimension over the limit! [ 173.080982][ T8815] bond0: (slave team1): Enslaving as an active interface with an up link [ 173.093612][ T53] Bluetooth: hci1: command tx timeout [ 173.111190][ T8823] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.203578][ T8712] team0: Port device team_slave_0 added [ 173.239268][ T8712] team0: Port device team_slave_1 added [ 173.365022][ T8830] can: request_module (can-proto-0) failed. [ 173.409808][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.427899][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.463038][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.479103][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.488975][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.518086][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.692626][ T8712] hsr_slave_0: entered promiscuous mode [ 173.723162][ T8712] hsr_slave_1: entered promiscuous mode [ 174.014973][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.129448][ T8857] 8021q: adding VLAN 0 to HW filter on device team1 [ 174.155493][ T8857] bond0: (slave team1): Enslaving as an active interface with an up link [ 174.339373][ T8873] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 174.721389][ T8712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.737443][ T8712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.752003][ T8712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.773931][ T8712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.933488][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.949153][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.978848][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.995102][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.002634][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.021992][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.029295][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.169416][ T53] Bluetooth: hci1: command tx timeout [ 175.216484][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.286320][ T8895] 8021q: adding VLAN 0 to HW filter on device team1 [ 175.305396][ T8895] bond0: (slave team1): Enslaving as an active interface with an up link [ 175.382313][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.505688][ T8712] veth0_vlan: entered promiscuous mode [ 175.556174][ T8712] veth1_vlan: entered promiscuous mode [ 175.606838][ T8903] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 175.649674][ T8712] veth0_macvtap: entered promiscuous mode [ 175.679335][ T8712] veth1_macvtap: entered promiscuous mode [ 175.752836][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.767573][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.778797][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.799998][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.820573][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.841571][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.866234][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.912347][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.942126][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.989770][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.042652][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.071441][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.092771][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.117047][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.137920][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.156604][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.191575][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.225461][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.264390][ T8712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.301442][ T8712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.311331][ T8712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.322003][ T8712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.335324][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.356140][ T8924] team0: left allmulticast mode [ 176.362478][ T8924] team_slave_1: left allmulticast mode [ 176.370904][ T8924] team0: left promiscuous mode [ 176.379381][ T8924] team_slave_1: left promiscuous mode [ 176.387227][ T8924] bridge0: port 3(team0) entered disabled state [ 176.410461][ T8924] bridge_slave_1: left allmulticast mode [ 176.422267][ T8924] bridge_slave_1: left promiscuous mode [ 176.428505][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.452230][ T8924] bridge_slave_0: left allmulticast mode [ 176.460758][ T8924] bridge_slave_0: left promiscuous mode [ 176.480178][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.568316][ T8924] bridge0 (unregistering): left allmulticast mode [ 176.891617][ T954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.936328][ T954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.038356][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.077100][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.137185][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.244168][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.263686][ T53] Bluetooth: hci1: command tx timeout [ 177.453867][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.514296][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.550379][ T8967] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FR]L3 index 0 [ 177.602520][ T29] audit: type=1804 audit(1718228460.943:12): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir217326273/syzkaller.YKXrw5/357/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 177.885744][ T8982] SET target dimension over the limit! [ 177.921884][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.925775][ T8982] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.138463][ T8996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.302485][ T9004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.351860][ T8965] syz-executor.1 (8965) used greatest stack depth: 18872 bytes left [ 178.444649][ T9007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.486714][ T29] audit: type=1804 audit(1718228461.823:13): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir217326273/syzkaller.YKXrw5/361/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 178.541153][ T9010] x_tables: duplicate underflow at hook 3 [ 178.560344][ T9010] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 178.575974][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.723636][ T9014] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 178.754422][ T9014] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 179.079989][ T9032] netlink: zone id is out of range [ 179.365726][ T9051] xt_bpf: check failed: parse error [ 180.033953][ T9090] x_tables: duplicate underflow at hook 3 [ 180.073536][ T9090] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 180.096022][ T9090] __nla_validate_parse: 3 callbacks suppressed [ 180.096046][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.852953][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.085626][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.099591][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.113985][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.132026][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.140061][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.153477][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.154511][ T9135] syz-executor.1 uses old SIOCAX25GETINFO [ 181.265386][ T2446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.279276][ T2446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.399633][ T9141] dccp_invalid_packet: P.Data Offset(172) too large [ 181.441006][ T2446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.451676][ T2446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.562135][ T2446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.573667][ T2446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.635297][ T9149] xt_bpf: check failed: parse error [ 181.676982][ T2446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.687883][ T2446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.854789][ T9159] x_tables: duplicate underflow at hook 3 [ 181.881470][ T9159] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 181.897068][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.945725][ T9131] chnl_net:caif_netlink_parms(): no params data found [ 183.247074][ T5123] Bluetooth: hci2: command tx timeout [ 183.343311][ T2446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.387059][ T2446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.413009][ T2446] bond0 (unregistering): Released all slaves [ 183.468138][ T9181] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.584122][ T9202] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.603081][ T9207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.613884][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.624385][ T9207] bridge0: port 2(bridge_slave_1) entered listening state [ 183.636374][ T2446] ɶƣ0GC¦: left promiscuous mode [ 183.755008][ T9198] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.810293][ T9131] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.830368][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.840393][ T9131] bridge_slave_0: entered allmulticast mode [ 183.862729][ T9131] bridge_slave_0: entered promiscuous mode [ 183.880800][ T9131] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.898013][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.905517][ T9131] bridge_slave_1: entered allmulticast mode [ 183.922010][ T9131] bridge_slave_1: entered promiscuous mode [ 183.981829][ T9228] xt_bpf: check failed: parse error [ 184.230838][ T9131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.300681][ T9131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.320329][ T9239] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.631370][ T9131] team0: Port device team_slave_0 added [ 184.732619][ T2446] hsr_slave_0: left promiscuous mode [ 184.807867][ T2446] hsr_slave_1: left promiscuous mode [ 184.843009][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.857129][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.891652][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.918468][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.140318][ T2446] veth1_macvtap: left promiscuous mode [ 185.160955][ T2446] veth0_macvtap: left promiscuous mode [ 185.179341][ T2446] veth1_vlan: left promiscuous mode [ 185.188236][ T2446] veth0_vlan: left promiscuous mode [ 185.326916][ T5123] Bluetooth: hci2: command tx timeout [ 185.575625][ T2446] pimreg (unregistering): left allmulticast mode [ 186.325296][ T2446] team0 (unregistering): Port device team_slave_1 removed [ 186.875392][ T9131] team0: Port device team_slave_1 added [ 186.925220][ T9275] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.050009][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.075715][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.136931][ T9131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.158941][ T9131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.165954][ T9131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.202725][ T9131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.405181][ T9131] hsr_slave_0: entered promiscuous mode [ 187.406962][ T5123] Bluetooth: hci2: command tx timeout [ 187.463027][ T9131] hsr_slave_1: entered promiscuous mode [ 187.538805][ T9131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.548737][ T9131] Cannot create hsr debugfs directory [ 187.685771][ T2446] IPVS: stop unused estimator thread 0... [ 187.773824][ T9340] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 188.140951][ T9357] sctp: [Deprecated]: syz-executor.0 (pid 9357) Use of int in maxseg socket option. [ 188.140951][ T9357] Use struct sctp_assoc_value instead [ 188.800845][ T9374] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.487205][ T5123] Bluetooth: hci2: command tx timeout [ 190.208266][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 194.690957][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.887090][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 205.576636][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.582653][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.593103][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.602695][ T5130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.611529][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.638660][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.640008][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.648217][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.654032][ T5132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.662708][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.676728][ T5130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.677304][ T4489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.684655][ T5130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.692101][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.707050][ T4489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.713663][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.729588][ T5130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.747211][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.761658][ T5130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.439569][ T5130] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 219.449391][ T5130] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 219.458364][ T5130] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 219.466701][ T5130] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 219.474977][ T5130] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 219.482493][ T5130] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 220.767433][ T5130] Bluetooth: hci5: command tx timeout [ 220.767467][ T5120] Bluetooth: hci6: command tx timeout [ 220.846820][ T5130] Bluetooth: hci7: command tx timeout [ 221.567562][ T5130] Bluetooth: hci8: command tx timeout [ 222.846830][ T5130] Bluetooth: hci5: command tx timeout [ 222.852483][ T5120] Bluetooth: hci6: command tx timeout [ 222.926775][ T5120] Bluetooth: hci7: command tx timeout [ 223.647100][ T5120] Bluetooth: hci8: command tx timeout [ 224.926773][ T5120] Bluetooth: hci6: command tx timeout [ 224.932267][ T5120] Bluetooth: hci5: command tx timeout [ 225.007119][ T5120] Bluetooth: hci7: command tx timeout [ 225.726699][ T5120] Bluetooth: hci8: command tx timeout [ 227.006701][ T5130] Bluetooth: hci6: command tx timeout [ 227.012286][ T5120] Bluetooth: hci5: command tx timeout [ 227.086661][ T5120] Bluetooth: hci7: command tx timeout [ 227.806760][ T5120] Bluetooth: hci8: command tx timeout [ 245.942079][ T5130] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 245.955074][ T5130] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 245.967014][ T5130] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 245.976421][ T5130] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 245.988266][ T5130] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 245.995727][ T5130] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 248.046712][ T5130] Bluetooth: hci9: command tx timeout [ 250.126674][ T5130] Bluetooth: hci9: command tx timeout [ 252.213203][ T5130] Bluetooth: hci9: command tx timeout [ 254.286606][ T5130] Bluetooth: hci9: command tx timeout [ 256.132254][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.332294][ T5130] Bluetooth: hci4: command 0x0406 tx timeout [ 283.757812][ T5130] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 283.772307][ T5130] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 283.781653][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 283.791243][ T5130] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 283.805517][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 283.817364][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 283.826865][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 283.834589][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 283.842366][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 283.851421][ T5130] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 283.867370][ T5130] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 283.875857][ T5130] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 283.925155][ T5123] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 283.935359][ T5123] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 283.944383][ T5123] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 283.953908][ T5123] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 283.962778][ T5123] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 283.970523][ T5123] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 284.596262][ T5130] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 284.606041][ T5130] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 284.621435][ T5130] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 284.631069][ T5130] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 284.644994][ T5130] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 284.652561][ T5130] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 285.886791][ T5123] Bluetooth: hci10: command tx timeout [ 285.966682][ T5123] Bluetooth: hci11: command tx timeout [ 286.054475][ T5123] Bluetooth: hci12: command tx timeout [ 286.686640][ T5123] Bluetooth: hci13: command tx timeout [ 287.966743][ T5123] Bluetooth: hci10: command tx timeout [ 288.049734][ T5123] Bluetooth: hci11: command tx timeout [ 288.126756][ T5123] Bluetooth: hci12: command tx timeout [ 288.766583][ T5123] Bluetooth: hci13: command tx timeout [ 290.049609][ T5123] Bluetooth: hci10: command tx timeout [ 290.126727][ T5123] Bluetooth: hci11: command tx timeout [ 290.217167][ T5123] Bluetooth: hci12: command tx timeout [ 290.847082][ T5123] Bluetooth: hci13: command tx timeout [ 292.130112][ T5123] Bluetooth: hci10: command tx timeout [ 292.206866][ T5123] Bluetooth: hci11: command tx timeout [ 292.292782][ T5123] Bluetooth: hci12: command tx timeout [ 292.932970][ T5123] Bluetooth: hci13: command tx timeout [ 294.046750][ T5123] Bluetooth: hci1: command 0x0405 tx timeout [ 304.286621][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 311.237859][ T5123] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 311.253943][ T5123] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 311.263204][ T5123] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 311.273534][ T5123] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 311.281534][ T5123] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 311.291382][ T5123] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 313.336738][ T5123] Bluetooth: hci14: command tx timeout [ 315.407753][ T5123] Bluetooth: hci14: command tx timeout [ 317.486747][ T5123] Bluetooth: hci14: command tx timeout [ 317.574511][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.568792][ T5123] Bluetooth: hci14: command tx timeout [ 338.048821][ T30] INFO: task kworker/u8:7:2446 blocked for more than 143 seconds. [ 338.066609][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 338.074388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.088382][ T30] task:kworker/u8:7 state:D stack:19632 pid:2446 tgid:2446 ppid:2 flags:0x00004000 2024/06/12 21:43:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 338.105304][ T30] Workqueue: netns cleanup_net [ 338.113817][ T30] Call Trace: [ 338.120934][ T30] [ 338.123935][ T30] __schedule+0x17e8/0x4a20 [ 338.167734][ T30] ? __pfx___schedule+0x10/0x10 [ 338.172686][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.202339][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.216710][ T30] ? kthread_data+0x52/0xd0 [ 338.221278][ T30] ? schedule+0x90/0x320 [ 338.225557][ T30] ? wq_worker_sleeping+0x66/0x240 [ 338.246551][ T30] ? schedule+0x90/0x320 [ 338.250897][ T30] schedule+0x14b/0x320 [ 338.255125][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.276520][ T30] __mutex_lock+0x6a4/0xd70 [ 338.281099][ T30] ? __mutex_lock+0x527/0xd70 [ 338.285805][ T30] ? gate_exit_net+0x30/0x100 [ 338.306543][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.311653][ T30] ? __pfx_call_rcu+0x10/0x10 [ 338.316378][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 338.336533][ T30] gate_exit_net+0x30/0x100 [ 338.341116][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 338.346263][ T30] cleanup_net+0x89d/0xcc0 [ 338.360409][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 338.365435][ T30] ? process_scheduled_works+0x945/0x1830 [ 338.386569][ T30] process_scheduled_works+0xa2c/0x1830 [ 338.392322][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.416490][ T30] ? assign_work+0x364/0x3d0 [ 338.421158][ T30] worker_thread+0x86d/0xd70 [ 338.425800][ T30] ? __kthread_parkme+0x169/0x1d0 [ 338.442506][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.456655][ T30] kthread+0x2f0/0x390 [ 338.460794][ T30] ? __pfx_worker_thread+0x10/0x10 [ 338.466029][ T30] ? __pfx_kthread+0x10/0x10 [ 338.486556][ T30] ret_from_fork+0x4b/0x80 [ 338.491057][ T30] ? __pfx_kthread+0x10/0x10 [ 338.495745][ T30] ret_from_fork_asm+0x1a/0x30 [ 338.516547][ T30] [ 338.519677][ T30] INFO: task kworker/0:5:5170 blocked for more than 143 seconds. [ 338.536562][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 338.544253][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.553034][ T30] task:kworker/0:5 state:D stack:23464 pid:5170 tgid:5170 ppid:2 flags:0x00004000 [ 338.563391][ T30] Workqueue: events linkwatch_event [ 338.568753][ T30] Call Trace: [ 338.572069][ T30] [ 338.575038][ T30] __schedule+0x17e8/0x4a20 [ 338.580952][ T30] ? __pfx___schedule+0x10/0x10 [ 338.585862][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 338.592046][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.597333][ T30] ? kick_pool+0x45c/0x620 [ 338.601801][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.622246][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 338.627574][ T30] ? schedule+0x90/0x320 [ 338.631888][ T30] schedule+0x14b/0x320 [ 338.636106][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.646484][ T30] __mutex_lock+0x6a4/0xd70 [ 338.651106][ T30] ? __mutex_lock+0x527/0xd70 [ 338.655823][ T30] ? linkwatch_event+0xe/0x60 [ 338.665586][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.670764][ T30] ? process_scheduled_works+0x945/0x1830 [ 338.683287][ T30] linkwatch_event+0xe/0x60 [ 338.688762][ T30] process_scheduled_works+0xa2c/0x1830 [ 338.694412][ T30] ? __p