last executing test programs: 2.079384153s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 1.859009315s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.796863517s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711014000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003880)={0x14, 0xa, 0xa, 0x401}, 0x14}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) close(r2) 1.611057034s ago: executing program 0: socket$inet6(0xa, 0x6, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'vxcan0\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) 1.562075391s ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000009}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="ef", 0x1}], 0x1) write$binfmt_script(r2, 0x0, 0xb) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000000ff00000141000000200017010000000000000069623a6261746164765f798030391d8dc7c492c8"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0xa, 0x73) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x1d, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 1.445099476s ago: executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x0, 0xc7, 0x20, @empty, @rand_addr=' \x01\x00', 0x8, 0x80, 0x4, 0x2}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="4902a70951e60deda4a378103c6ac2fd14c9b9727b146a5354672b58a31a3d5bc78e0365cc156a9919852532506e20c9be558c4818a6196df69c7b914512678d64103fd743b66edc771f3a77ea68726d75733e1d07baad26c871b51dd42c63b9bcbddcbab2373db83bf72cfdef6d", 0x6e, 0x20008000, &(0x7f0000000380)={0x11, 0xd, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) recvmsg(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/24, 0x18}], 0x1}, 0x8002a0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="1800000069006bcd8e3fe3dc6e3640030000000100000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x8, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1.359117337s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.20526947s ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000009}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="ef", 0x1}], 0x1) write$binfmt_script(r2, 0x0, 0xb) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000000ff00000141000000200017010000000000000069623a6261746164765f798030391d8dc7c492c8"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0xa, 0x73) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x1d, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 1.163068341s ago: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x0) 1.11749801s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'wg2\x00'}) 1.019219128s ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000009}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="ef", 0x1}], 0x1) write$binfmt_script(r2, 0x0, 0xb) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000000ff00000141000000200017010000000000000069623a6261746164765f798030391d8dc7c492c8"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0xa, 0x73) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x1d, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 972.93836ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x2c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000b, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="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", 0x901}], 0x1}}], 0x1, 0x4008440) 962.172114ms ago: executing program 2: socket$inet6(0xa, 0x6, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'vxcan0\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) 883.569161ms ago: executing program 1: socket$inet6(0xa, 0x6, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'vxcan0\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) 841.428314ms ago: executing program 0: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="23000000010001", 0x7) 784.763732ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e3f00000000000040007400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 741.38366ms ago: executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711211000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000071105a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1f, 0x0, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000f1be3631f6cdf4d7dfcd4dcc35dfd6d736146d9e6126c50a8876"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000880)=""/38, 0x0, 0x26, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000280)="fd072be0914df52c1bf6883bd9e7448691b10ab5b3b51921aee5eedfc59c5a2f8be7ef232e2476b2fd30c5f7ac85862fe82ceda7794df3a05b69bc4850b379272a8b9ea4e9547f9ad3957e5c434d850e32779c25c639b601216b121ed9feb7ecad572fe182cfdb0397580274ec352bbfcdff0a74bc99522af07db391c5af28b0593aae8a9358d73cd58d98af8be951a8cc05c24537b5243e70868837b0d4282737c6177004922459e941959d9ec2950606a56daad90b", &(0x7f0000000340)=""/207, &(0x7f00000004c0)="3cdad7bb4b430d5a1942c75d354586cc641f2661a2baa276e8f8b34c5beb20f6123e1b76bba2de1d1ebf5b8c0afe57e10739cdf8a16a8cb19adc837cc06838ed4209176c5100b995a6c79d801c3d18a53cc13bf4f69ab676b5a8be5dc19d111ccbe7048444fbfc29ef6a9967bde2b9fa2e2f04fae91da5073efd32be1ad7b66d0813b5ad443a5f8d0e82e87e52c5c4aa2796fd49c6a518b3eb4cfcabdf18a9395afd2e0b5723d87db0856930e5abb1746e00e0f5c29fdf7ae047ebf5ef79cd59d12a98d9f40f38a79a10f02b2f46ec14d9e63f1eb10958a561f472778c7ea9634afa27ec504b914271ff892e39c016528dbb20315e", 0x0, 0x2, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000002000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="0094b3621580000072beec12fa33", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 715.027035ms ago: executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) 596.816771ms ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1c8, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000009}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="ef", 0x1}], 0x1) write$binfmt_script(r2, 0x0, 0xb) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x0, 0x300) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000000ff00000141000000200017010000000000000069623a6261746164765f798030391d8dc7c492c8"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0xa, 0x73) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x1d, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 596.0595ms ago: executing program 2: r0 = epoll_create(0x9c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x4, r1, &(0x7f0000000080)={0x30000004}) 450.547039ms ago: executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'wg2\x00'}) 448.474125ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x1aa3}]}, 0x44}}, 0x0) 349.225185ms ago: executing program 2: r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450) 301.527777ms ago: executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x5411, &(0x7f00000013c0)={'netdevsim0\x00'}) 271.915613ms ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 247.843912ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}}, 0x0) 176.203471ms ago: executing program 2: socket$inet6(0xa, 0x6, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'vxcan0\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) 42.34042ms ago: executing program 1: socket$inet6(0xa, 0x6, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xb, 0x1, 'vxcan0\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) 41.061582ms ago: executing program 4: socket(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0cc4c53e52cd4f1e2787e1cd1e55684e749d3b21ae068680fadc5cc648c79186f3d98ccd3a5b1732936dcf74538ffc97a9f82112023f2567972515712c7ec4e0ed2220f5425ba6ed76928e28b07ec50b135954b94c32030210aa0e2f4645f46be81d746c6b", 0x65}, {&(0x7f0000000340)="9c89ca312f027074ae7d79f183f678fc695c50a34d0e4133881f084b6d440ab6868186a9eabf0b8e5760adbc5a349da9d1620af787745bee2d6d2e6a84ee1fe7132e692fed0e0fe948d775263f5b67a91c4bd74ceeb68e733b2389262377b79861ddf5d86ca1a6388ab7257d5f1271a35a8c79a96e3e28f094fdfa96736ef41516bd3fbec3fd955247007a18dd527d224592b6fc09a05d5628e73b", 0x7fffef9b}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="23000000010001", 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. 2024/06/03 09:30:18 fuzzer started 2024/06/03 09:30:18 dialing manager at 10.128.0.169:30016 [ 67.561933][ T5094] cgroup: Unknown subsys name 'net' [ 67.769769][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/06/03 09:30:20 starting 5 executor processes [ 69.126452][ T5103] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.065331][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.074275][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.076096][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.082795][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.090941][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.096553][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.105969][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.110616][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.117194][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.125289][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.132682][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.137450][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.145341][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.152996][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.160250][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.166557][ T5131] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.172982][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.179508][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.186567][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.202334][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.210439][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.221055][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.229168][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.237357][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.244892][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.255665][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.263344][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.270983][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.278208][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.293434][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.722204][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 70.929092][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 70.964072][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.972003][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.980223][ T5114] bridge_slave_0: entered allmulticast mode [ 70.988902][ T5114] bridge_slave_0: entered promiscuous mode [ 71.062162][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.069552][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.077099][ T5114] bridge_slave_1: entered allmulticast mode [ 71.084275][ T5114] bridge_slave_1: entered promiscuous mode [ 71.097082][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 71.162573][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.197761][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 71.216750][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.238656][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 71.293059][ T5114] team0: Port device team_slave_0 added [ 71.335665][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.342901][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.350905][ T5112] bridge_slave_0: entered allmulticast mode [ 71.358231][ T5112] bridge_slave_0: entered promiscuous mode [ 71.371433][ T5114] team0: Port device team_slave_1 added [ 71.437537][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.444921][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.452055][ T5112] bridge_slave_1: entered allmulticast mode [ 71.459202][ T5112] bridge_slave_1: entered promiscuous mode [ 71.495793][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.502946][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.510503][ T5113] bridge_slave_0: entered allmulticast mode [ 71.517581][ T5113] bridge_slave_0: entered promiscuous mode [ 71.527487][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.534741][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.542104][ T5113] bridge_slave_1: entered allmulticast mode [ 71.549433][ T5113] bridge_slave_1: entered promiscuous mode [ 71.559351][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.566023][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.609181][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.616338][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.642457][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.692262][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.706579][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.732109][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.739552][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.766112][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.798426][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.808795][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.817584][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.825211][ T5121] bridge_slave_0: entered allmulticast mode [ 71.832174][ T5121] bridge_slave_0: entered promiscuous mode [ 71.841697][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.848937][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.856246][ T5121] bridge_slave_1: entered allmulticast mode [ 71.863111][ T5121] bridge_slave_1: entered promiscuous mode [ 71.908859][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.916340][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.923510][ T5118] bridge_slave_0: entered allmulticast mode [ 71.931112][ T5118] bridge_slave_0: entered promiscuous mode [ 71.940141][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.947404][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.954790][ T5118] bridge_slave_1: entered allmulticast mode [ 71.962090][ T5118] bridge_slave_1: entered promiscuous mode [ 71.970713][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.996796][ T5112] team0: Port device team_slave_0 added [ 72.019592][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.053273][ T5112] team0: Port device team_slave_1 added [ 72.085984][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.123886][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.164823][ T5114] hsr_slave_0: entered promiscuous mode [ 72.171397][ T5114] hsr_slave_1: entered promiscuous mode [ 72.195592][ T5124] Bluetooth: hci2: command tx timeout [ 72.196565][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.226340][ T5113] team0: Port device team_slave_0 added [ 72.246985][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.253965][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.280475][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.296946][ T5121] team0: Port device team_slave_0 added [ 72.316438][ T5113] team0: Port device team_slave_1 added [ 72.326669][ T5118] team0: Port device team_slave_0 added [ 72.336056][ T5118] team0: Port device team_slave_1 added [ 72.342633][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.350251][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.354752][ T5124] Bluetooth: hci3: command tx timeout [ 72.376369][ T5131] Bluetooth: hci4: command tx timeout [ 72.381882][ T4490] Bluetooth: hci1: command tx timeout [ 72.387817][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.393253][ T5119] Bluetooth: hci0: command tx timeout [ 72.413591][ T5121] team0: Port device team_slave_1 added [ 72.533655][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.540912][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.566945][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.580949][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.588197][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.615197][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.626990][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.633943][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.660095][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.694416][ T5112] hsr_slave_0: entered promiscuous mode [ 72.701287][ T5112] hsr_slave_1: entered promiscuous mode [ 72.707711][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.715706][ T5112] Cannot create hsr debugfs directory [ 72.721923][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.729269][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.755244][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.800239][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.807431][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.835201][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.858357][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.865428][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.891486][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.929855][ T5113] hsr_slave_0: entered promiscuous mode [ 72.936666][ T5113] hsr_slave_1: entered promiscuous mode [ 72.943006][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.951200][ T5113] Cannot create hsr debugfs directory [ 73.025268][ T5121] hsr_slave_0: entered promiscuous mode [ 73.032121][ T5121] hsr_slave_1: entered promiscuous mode [ 73.038697][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.046504][ T5121] Cannot create hsr debugfs directory [ 73.183715][ T5118] hsr_slave_0: entered promiscuous mode [ 73.191181][ T5118] hsr_slave_1: entered promiscuous mode [ 73.197838][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.206000][ T5118] Cannot create hsr debugfs directory [ 73.571881][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.590329][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.600683][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.616099][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.680518][ T5113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.691187][ T5113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.702672][ T5113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.712938][ T5113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.808028][ T5121] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.818415][ T5121] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.859145][ T5121] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.870763][ T5121] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.933448][ T5112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.963218][ T5112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.976431][ T5112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.988927][ T5112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.130485][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.145465][ T5118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.156020][ T5118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.167882][ T5118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.179243][ T5118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.275901][ T5119] Bluetooth: hci2: command tx timeout [ 74.293088][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.315854][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.362270][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.379438][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.398645][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.405983][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.435802][ T4490] Bluetooth: hci4: command tx timeout [ 74.441252][ T4490] Bluetooth: hci1: command tx timeout [ 74.447644][ T5124] Bluetooth: hci3: command tx timeout [ 74.453372][ T5119] Bluetooth: hci0: command tx timeout [ 74.474644][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.494145][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.501322][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.510515][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.517678][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.528941][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.536138][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.550100][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.557215][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.570358][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.577512][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.662010][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.748397][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.781358][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.788651][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.823526][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.830711][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.968101][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.048170][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.157473][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.178821][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.229323][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.236533][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.298158][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.305325][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.358043][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.398849][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.561899][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.589417][ T5114] veth0_vlan: entered promiscuous mode [ 75.614320][ T5114] veth1_vlan: entered promiscuous mode [ 75.655662][ T5121] veth0_vlan: entered promiscuous mode [ 75.712100][ T5114] veth0_macvtap: entered promiscuous mode [ 75.741000][ T5113] veth0_vlan: entered promiscuous mode [ 75.750970][ T5114] veth1_macvtap: entered promiscuous mode [ 75.760467][ T5121] veth1_vlan: entered promiscuous mode [ 75.780525][ T5113] veth1_vlan: entered promiscuous mode [ 75.880524][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.923486][ T5121] veth0_macvtap: entered promiscuous mode [ 75.944408][ T5112] veth0_vlan: entered promiscuous mode [ 75.960953][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.979508][ T5113] veth0_macvtap: entered promiscuous mode [ 75.998089][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.007256][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.016470][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.027818][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040341][ T5121] veth1_macvtap: entered promiscuous mode [ 76.055309][ T5113] veth1_macvtap: entered promiscuous mode [ 76.075363][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.086187][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.098116][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.113590][ T5112] veth1_vlan: entered promiscuous mode [ 76.140953][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.151794][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.163067][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.174178][ T5121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.183381][ T5121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.192223][ T5121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.201620][ T5121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.224380][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.310919][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.322146][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.332435][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.343277][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.355300][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.357588][ T4490] Bluetooth: hci2: command tx timeout [ 76.434146][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.447941][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.458256][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.470924][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.482474][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.496779][ T5113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.507944][ T5113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.515082][ T5124] Bluetooth: hci3: command tx timeout [ 76.519861][ T5131] Bluetooth: hci4: command tx timeout [ 76.522146][ T5119] Bluetooth: hci0: command tx timeout [ 76.527566][ T5113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.532839][ T4490] Bluetooth: hci1: command tx timeout [ 76.542272][ T5113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583691][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.607386][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.620242][ T2457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.633316][ T2457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.657096][ T5112] veth0_macvtap: entered promiscuous mode [ 76.667486][ T5118] veth0_vlan: entered promiscuous mode [ 76.718638][ T5112] veth1_macvtap: entered promiscuous mode [ 76.740042][ T5118] veth1_vlan: entered promiscuous mode [ 76.746769][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.766912][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.830237][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.848197][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.858736][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.869489][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.879634][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.891277][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.903753][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.916340][ T2457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.932257][ T2457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.964655][ T5118] veth0_macvtap: entered promiscuous mode [ 76.974364][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.987422][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.997723][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.008564][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.018886][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.035309][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.047484][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.111304][ T5118] veth1_macvtap: entered promiscuous mode [ 77.125278][ T5112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.136381][ T5112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.145711][ T5112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154430][ T5112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162269][ T5200] net_ratelimit: 2 callbacks suppressed [ 77.162286][ T5200] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 77.190569][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.208167][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.219781][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.233419][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.247057][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.258141][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.268631][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.279664][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.292255][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.340292][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.364763][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.367488][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.389926][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.404011][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.415728][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.430341][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.443292][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.453705][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.465345][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.477958][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.543463][ T5207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.583414][ T5118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.593076][ T5118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.602533][ T5118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.612847][ T5118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.691186][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.712598][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.877885][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.906975][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.023830][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.033828][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.041885][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.044750][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.250028][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.250061][ T5221] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.292852][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.321384][ T5221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.435512][ T4490] Bluetooth: hci2: command tx timeout [ 78.496890][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.546546][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.594882][ T5119] Bluetooth: hci0: command tx timeout [ 78.595718][ T5131] Bluetooth: hci3: command tx timeout [ 78.600407][ T4490] Bluetooth: hci1: command tx timeout [ 78.607138][ T5131] Bluetooth: hci4: command tx timeout [ 78.696775][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.730026][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.755656][ T5240] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 78.779375][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.812407][ T5243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.465042][ T5270] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 80.458168][ T5320] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 81.271275][ T5356] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.705882][ T5423] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.790241][ T5426] hsr0: entered promiscuous mode [ 84.063201][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.072404][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.082364][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.092078][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.104802][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.118258][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.191369][ T5466] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 84.780016][ T5486] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.913858][ T5492] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.944885][ T5495] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.989716][ T5460] chnl_net:caif_netlink_parms(): no params data found [ 85.028724][ T29] audit: type=1804 audit(1717407036.101:2): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1902973479/syzkaller.R02QT1/31/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 85.183137][ T5460] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.225382][ T5460] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.232693][ T5460] bridge_slave_0: entered allmulticast mode [ 85.263680][ T5460] bridge_slave_0: entered promiscuous mode [ 85.296231][ T5460] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.304224][ T5460] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.329377][ T5460] bridge_slave_1: entered allmulticast mode [ 85.361770][ T5460] bridge_slave_1: entered promiscuous mode [ 85.619050][ T5460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.727753][ T5460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.869879][ T5460] team0: Port device team_slave_0 added [ 85.908837][ T5460] team0: Port device team_slave_1 added [ 85.929277][ T29] audit: type=1804 audit(1717407037.001:3): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir946460643/syzkaller.EkSZn2/29/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 85.957924][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.988499][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.004097][ T5533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.042666][ T5533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.101373][ T5533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.194699][ T5131] Bluetooth: hci3: command tx timeout [ 86.340243][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.382691][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.484171][ T5460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.568020][ T5460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.593372][ T5460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.669232][ T5460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.717925][ T5558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.740205][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.752842][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.804115][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.828330][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.881013][ T5559] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.928279][ T58] cfg80211: failed to load regulatory.db [ 87.053034][ T5460] hsr_slave_0: entered promiscuous mode [ 87.078558][ T5460] hsr_slave_1: entered promiscuous mode [ 87.102423][ T5460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.112562][ T5460] Cannot create hsr debugfs directory [ 87.471324][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.575890][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.981971][ T5460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.209181][ T5460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.276561][ T5131] Bluetooth: hci3: command tx timeout [ 88.440913][ T5460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.466695][ T5624] Bluetooth: MGMT ver 1.22 [ 88.590749][ T5460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.633880][ T5628] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.914338][ T5638] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.991172][ T5643] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.119591][ T5460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.143509][ T5460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.200859][ T5460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.235817][ T5460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.564265][ T5460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.590310][ T5460] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.637615][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.644944][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.677982][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.685186][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.349089][ T5460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.356039][ T5131] Bluetooth: hci3: command tx timeout [ 90.522271][ T5460] veth0_vlan: entered promiscuous mode [ 90.582527][ T5460] veth1_vlan: entered promiscuous mode [ 90.710532][ T5460] veth0_macvtap: entered promiscuous mode [ 90.762922][ T5460] veth1_macvtap: entered promiscuous mode [ 90.846859][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.904558][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.914416][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.951674][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.963918][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.977015][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.989305][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.052349][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.076697][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.088275][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.099437][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.109768][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.123267][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.145930][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.177139][ T5710] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.214318][ T5460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.250963][ T5460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.263605][ T5460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.324696][ T5460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.373414][ T5715] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.667148][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.712136][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.745258][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.845760][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.853623][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.975731][ T5740] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.115592][ T5745] gre0: entered promiscuous mode [ 92.137381][ T5745] vlan2: entered promiscuous mode [ 92.182736][ T5745] gre0: left promiscuous mode [ 92.252206][ T5748] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.437319][ T5131] Bluetooth: hci3: command tx timeout [ 92.922081][ T5783] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.014681][ T5788] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 93.035255][ T5789] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.081810][ T5788] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 95.257890][ T5880] vxcan2: entered promiscuous mode [ 95.279323][ T5880] vxcan2: entered allmulticast mode [ 95.397672][ T5887] vxcan2: entered promiscuous mode [ 95.407327][ T5887] vxcan2: entered allmulticast mode [ 96.257808][ T5930] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 96.745445][ T5945] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 97.475800][ T5131] Bluetooth: hci3: command tx timeout [ 97.631550][ T5990] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 98.928502][ T6039] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 100.168088][ T6093] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 100.900612][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.087532][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.190769][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.203413][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.211571][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.224886][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.236180][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 101.245264][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.329039][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.514944][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.916649][ T51] bridge_slave_1: left allmulticast mode [ 101.922556][ T51] bridge_slave_1: left promiscuous mode [ 101.939834][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.962883][ T51] bridge_slave_0: left allmulticast mode [ 101.987266][ T51] bridge_slave_0: left promiscuous mode [ 101.996750][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.418509][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.441524][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.453729][ T51] bond0 (unregistering): Released all slaves [ 102.513315][ T6171] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 102.781572][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 103.119325][ T6199] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 103.289501][ T51] hsr_slave_0: left promiscuous mode [ 103.315359][ T5131] Bluetooth: hci3: command tx timeout [ 103.332384][ T51] hsr_slave_1: left promiscuous mode [ 103.351730][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.364690][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.380304][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.388040][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.421446][ T51] veth1_macvtap: left promiscuous mode [ 103.427757][ T51] veth0_macvtap: left promiscuous mode [ 103.433538][ T51] veth1_vlan: left promiscuous mode [ 103.442819][ T51] veth0_vlan: left promiscuous mode [ 104.183750][ T51] team0 (unregistering): Port device team_slave_1 removed [ 104.225886][ T51] team0 (unregistering): Port device team_slave_0 removed [ 104.625651][ T6239] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 104.706269][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.735296][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.742565][ T6129] bridge_slave_0: entered allmulticast mode [ 104.770170][ T6129] bridge_slave_0: entered promiscuous mode [ 104.803192][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.828148][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.865389][ T6129] bridge_slave_1: entered allmulticast mode [ 104.884127][ T6129] bridge_slave_1: entered promiscuous mode [ 104.989245][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.006429][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.071108][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.253347][ T6129] team0: Port device team_slave_0 added [ 105.317400][ T6129] team0: Port device team_slave_1 added [ 105.396161][ T5131] Bluetooth: hci3: command tx timeout [ 105.412941][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.422255][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.451121][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.481440][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.495697][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.530441][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.548553][ T6290] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 105.679869][ T6129] hsr_slave_0: entered promiscuous mode [ 105.711358][ T6129] hsr_slave_1: entered promiscuous mode [ 105.721879][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.733645][ T6129] Cannot create hsr debugfs directory [ 105.991371][ T29] audit: type=1800 audit(1717407057.071:4): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1942 res=0 errno=0 [ 106.437506][ T6129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.465351][ T6129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.505861][ T6129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.531613][ T6129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.733479][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.790799][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.813885][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.821139][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.840477][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.847642][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.858768][ T29] audit: type=1800 audit(1717407057.941:5): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 107.323910][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.449916][ T6129] veth0_vlan: entered promiscuous mode [ 107.474663][ T5131] Bluetooth: hci3: command tx timeout [ 107.508459][ T6129] veth1_vlan: entered promiscuous mode [ 107.561896][ T6129] veth0_macvtap: entered promiscuous mode [ 107.582793][ T6129] veth1_macvtap: entered promiscuous mode [ 107.611373][ T29] audit: type=1800 audit(1717407058.691:6): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 107.639406][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.677089][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.690392][ T29] audit: type=1800 audit(1717407058.721:7): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 107.711216][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.764877][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.775356][ T29] audit: type=1800 audit(1717407058.821:8): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 107.793439][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.815591][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.825687][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.840644][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.902110][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.904114][ T29] audit: type=1800 audit(1717407058.971:9): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 107.970671][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.017800][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.045677][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.065765][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.086015][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.112773][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.131301][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.171163][ T6129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.181235][ T6129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.192735][ T6129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.210745][ T6129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.381509][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.404795][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.423419][ T29] audit: type=1800 audit(1717407059.501:10): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 108.493969][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.513739][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.464374][ T29] audit: type=1800 audit(1717407060.541:11): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 109.555756][ T5131] Bluetooth: hci3: command tx timeout [ 109.569723][ T29] audit: type=1800 audit(1717407060.651:12): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 109.742594][ T29] audit: type=1800 audit(1717407060.821:13): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 110.636419][ T5195] IPVS: starting estimator thread 0... [ 110.744690][ T6493] IPVS: using max 19 ests per chain, 45600 per kthread [ 111.155780][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 111.155798][ T29] audit: type=1800 audit(1717407062.241:19): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 111.778043][ T6532] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 112.295835][ T5166] IPVS: starting estimator thread 0... [ 112.394732][ T6559] IPVS: using max 17 ests per chain, 40800 per kthread [ 112.474106][ T5298] IPVS: starting estimator thread 0... [ 112.566339][ T6565] IPVS: using max 18 ests per chain, 43200 per kthread [ 113.178178][ T6591] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 113.771680][ T5164] IPVS: starting estimator thread 0... [ 113.864959][ T6638] IPVS: using max 18 ests per chain, 43200 per kthread [ 114.345345][ T6666] dccp_invalid_packet: P.Data Offset(116) too large [ 115.263712][ T6705] dccp_invalid_packet: P.Data Offset(116) too large [ 116.669647][ T6776] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 117.415123][ T6811] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 117.915415][ T6840] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 118.474743][ T29] audit: type=1800 audit(1717407069.551:20): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 118.969629][ T29] audit: type=1800 audit(1717407070.051:21): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 121.147278][ T7010] netlink: 'syz-executor.3': attribute type 58 has an invalid length. [ 121.720992][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.820844][ T7038] Bluetooth: MGMT ver 1.22 [ 121.835903][ T7038] Bluetooth: hci3: invalid len left 7, exp >= 111 [ 121.982824][ T7044] wg2: entered promiscuous mode [ 121.994110][ T7044] wg2: entered allmulticast mode [ 123.135012][ T7075] dccp_invalid_packet: P.Data Offset(116) too large [ 123.156750][ T7074] Bluetooth: hci3: invalid len left 7, exp >= 111 [ 123.760446][ T7107] Bluetooth: hci3: invalid len left 7, exp >= 111 [ 124.109565][ T7119] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.146298][ T7119] tipc: Invalid UDP bearer configuration [ 124.146359][ T7119] tipc: Enabling of bearer rejected, failed to enable media [ 124.615624][ T7139] Bluetooth: hci3: invalid len left 7, exp >= 111 [ 124.992028][ T7152] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.020004][ T7152] tipc: Invalid UDP bearer configuration [ 125.020083][ T7152] tipc: Enabling of bearer rejected, failed to enable media [ 125.049686][ T7154] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.078680][ T7154] tipc: Invalid UDP bearer configuration [ 125.078733][ T7154] tipc: Enabling of bearer rejected, failed to enable media [ 125.337223][ T7166] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.366155][ T7166] tipc: Invalid UDP bearer configuration [ 125.366213][ T7166] tipc: Enabling of bearer rejected, failed to enable media [ 125.479499][ T7175] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.491988][ T7175] tipc: Invalid UDP bearer configuration [ 125.492039][ T7175] tipc: Enabling of bearer rejected, failed to enable media [ 125.599245][ T7177] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.639580][ T7177] tipc: Invalid UDP bearer configuration [ 125.639637][ T7177] tipc: Enabling of bearer rejected, failed to enable media [ 126.558096][ T7194] wg2: left promiscuous mode [ 126.562955][ T7194] wg2: left allmulticast mode [ 126.656701][ T7195] wg2: entered promiscuous mode [ 126.683080][ T7195] wg2: entered allmulticast mode [ 126.746093][ T7197] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.768703][ T7197] tipc: Invalid UDP bearer configuration [ 126.768757][ T7197] tipc: Enabling of bearer rejected, failed to enable media [ 127.180033][ T7212] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.204535][ T7212] tipc: Invalid UDP bearer configuration [ 127.204589][ T7212] tipc: Enabling of bearer rejected, failed to enable media [ 127.582364][ T7237] wg2: entered promiscuous mode [ 127.601040][ T7237] wg2: entered allmulticast mode [ 127.801930][ T7246] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.843088][ T7246] tipc: Invalid UDP bearer configuration [ 127.843146][ T7246] tipc: Enabling of bearer rejected, failed to enable media [ 128.788234][ T7264] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.814551][ T7264] tipc: Invalid UDP bearer configuration [ 128.814605][ T7264] tipc: Enabling of bearer rejected, failed to enable media [ 128.881520][ T7268] netlink: 'syz-executor.1': attribute type 58 has an invalid length. [ 128.953934][ T7270] wg2: entered promiscuous mode [ 128.959851][ T7270] wg2: entered allmulticast mode [ 130.471331][ T7295] netlink: 'syz-executor.1': attribute type 58 has an invalid length. [ 130.749273][ T7313] Bluetooth: hci3: invalid len left 7, exp >= 111 [ 131.160261][ T7340] Bluetooth: hci3: invalid len left 7, exp >= 111 [ 131.817542][ T7370] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 132.319223][ T7388] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.346859][ T7388] tipc: Invalid UDP bearer configuration [ 132.346922][ T7388] tipc: Enabling of bearer rejected, failed to enable media [ 133.012105][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.015088][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.030132][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.650072][ T7439] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 133.713440][ T7439] netem: change failed [ 134.221195][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.262309][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.271530][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.297874][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.307072][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 134.314872][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.600016][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.841037][ T7485] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.017894][ T7456] chnl_net:caif_netlink_parms(): no params data found [ 135.182361][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.338839][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.346654][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.354031][ T7456] bridge_slave_0: entered allmulticast mode [ 135.361787][ T7456] bridge_slave_0: entered promiscuous mode [ 135.377190][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.384802][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.392128][ T7456] bridge_slave_1: entered allmulticast mode [ 135.407251][ T7456] bridge_slave_1: entered promiscuous mode [ 135.525109][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.553833][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.696382][ T7456] team0: Port device team_slave_0 added [ 135.711601][ T7456] team0: Port device team_slave_1 added [ 135.718086][ T7525] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.833371][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.850447][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.882461][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.899489][ T7531] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 135.899593][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.899610][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.942935][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.123259][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.197962][ T7456] hsr_slave_0: entered promiscuous mode [ 136.226105][ T7456] hsr_slave_1: entered promiscuous mode [ 136.245801][ T7456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.257105][ T7456] Cannot create hsr debugfs directory [ 136.355698][ T4490] Bluetooth: hci4: command tx timeout [ 136.787507][ T7456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.797344][ T7560] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.823096][ T7560] unsupported nlmsg_type 40 [ 136.867938][ T7563] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 136.959893][ T7456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.071102][ T7456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.183534][ T7456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.414153][ T7456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.431202][ T7456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.442926][ T7456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.459324][ T7456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.587300][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.634351][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.665519][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.672686][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.686166][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.693818][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.141849][ T7604] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.161863][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.387788][ T7456] veth0_vlan: entered promiscuous mode [ 138.413669][ T7456] veth1_vlan: entered promiscuous mode [ 138.434863][ T4490] Bluetooth: hci4: command tx timeout [ 138.512848][ T7456] veth0_macvtap: entered promiscuous mode [ 138.542706][ T7456] veth1_macvtap: entered promiscuous mode [ 138.577813][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.609289][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.644549][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.668692][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.700915][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.721477][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.744497][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.787318][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.803501][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.846759][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.880207][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.906355][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.921087][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.941201][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.953905][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.970708][ T7456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.982260][ T7456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.005816][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.057261][ T7456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.079361][ T7456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.099310][ T7456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.111748][ T7456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.151716][ T7636] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.302062][ T7641] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 139.308300][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.334041][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.390096][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.416221][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.842266][ T7656] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.882314][ T7659] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.897534][ T7662] Illegal XDP return value 4294967262 on prog (id 252) dev N/A, expect packet loss! [ 139.918377][ T7660] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.082727][ T7665] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.302710][ T7673] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 140.516094][ T4490] Bluetooth: hci4: command tx timeout [ 140.606980][ T7690] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.707598][ T7693] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.832891][ T7695] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.165338][ T7706] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 141.357194][ T7716] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 141.519181][ T7719] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.932203][ T7738] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 142.384010][ T7763] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 142.523566][ T7771] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 142.605495][ T4490] Bluetooth: hci4: command tx timeout [ 143.208130][ T7812] __nla_validate_parse: 1 callbacks suppressed [ 143.208152][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.260366][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.525936][ T7826] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.398710][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.429478][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.535221][ T7868] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.584744][ T7870] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.759284][ T7876] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.944248][ T7884] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.999876][ T7884] Κό: entered promiscuous mode [ 145.035803][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.755680][ T7929] Κό: entered promiscuous mode [ 145.769919][ T7928] Κό: entered promiscuous mode [ 145.777959][ T7930] openvswitch: Κό: Dropping previously announced user features [ 145.981596][ T7940] openvswitch: Κό: Dropping previously announced user features [ 146.133154][ T7942] openvswitch: Κό: Dropping previously announced user features [ 146.327956][ T7957] openvswitch: Κό: Dropping previously announced user features [ 146.336025][ T7958] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 146.502447][ T7964] openvswitch: Κό: Dropping previously announced user features [ 146.522284][ T7965] Κό: entered promiscuous mode [ 146.734363][ T7973] openvswitch: Κό: Dropping previously announced user features [ 146.929567][ T7985] Κό: entered promiscuous mode [ 147.089016][ T7994] openvswitch: Κό: Dropping previously announced user features [ 147.180834][ T7997] openvswitch: Κό: Dropping previously announced user features [ 147.363036][ T8007] openvswitch: Κό: Dropping previously announced user features [ 150.796853][ T8218] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 150.821529][ T8218] __nla_validate_parse: 23 callbacks suppressed [ 150.821549][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.876754][ T8218] Zero length message leads to an empty skb [ 151.270224][ T8235] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.522676][ T8255] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 151.547261][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.544903][ T8295] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 152.571438][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.553510][ T8345] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.567592][ T8345] openvswitch: Κό: Dropping previously announced user features [ 153.708036][ T8349] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 153.746363][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.767978][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.876142][ T5131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.887757][ T5131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.897377][ T5131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.908096][ T5131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.920878][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.933963][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.420513][ T8546] chnl_net:caif_netlink_parms(): no params data found [ 159.613161][ T8546] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.630679][ T8546] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.638664][ T8546] bridge_slave_0: entered allmulticast mode [ 159.646487][ T8546] bridge_slave_0: entered promiscuous mode [ 159.657307][ T8546] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.666789][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.678009][ T8546] bridge_slave_1: entered allmulticast mode [ 159.703402][ T8546] bridge_slave_1: entered promiscuous mode [ 159.897127][ T8546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.914219][ T8546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.083721][ T8546] team0: Port device team_slave_0 added [ 160.110558][ T8546] team0: Port device team_slave_1 added [ 160.206160][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.213171][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.247752][ T8546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.275073][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.302506][ T8546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.318589][ T8546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.367703][ T8546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.549852][ T8546] hsr_slave_0: entered promiscuous mode [ 160.562488][ T8546] hsr_slave_1: entered promiscuous mode [ 160.571742][ T8546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.579791][ T8546] Cannot create hsr debugfs directory [ 160.585988][ T8606] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 160.599661][ T8606] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.996153][ T4490] Bluetooth: hci0: command tx timeout [ 161.023446][ T8546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.160112][ T8546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.328418][ T8546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.371203][ T8633] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 161.392379][ T8633] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.471049][ T8546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.725186][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.854290][ T8546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 161.880025][ T8546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 161.910728][ T8546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 161.939064][ T8660] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 161.959884][ T8546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.987553][ T8664] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 162.003104][ T8664] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.280409][ T8546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.373745][ T8546] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.415356][ T8682] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 162.442135][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.449349][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.451941][ T8682] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.508302][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.515552][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.534205][ T8686] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 162.697245][ T8691] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 162.726096][ T8691] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.074744][ T4490] Bluetooth: hci0: command tx timeout [ 163.203887][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.223733][ T8715] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 163.251322][ T8719] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 163.263483][ T8715] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.348940][ T8723] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 163.371647][ T8723] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.067512][ T8546] veth0_vlan: entered promiscuous mode [ 164.113056][ T8546] veth1_vlan: entered promiscuous mode [ 164.125465][ T8760] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.149321][ T8763] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.236852][ T8546] veth0_macvtap: entered promiscuous mode [ 164.263186][ T8546] veth1_macvtap: entered promiscuous mode [ 164.333223][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.372045][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.402072][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.424795][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.448246][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.460805][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.492392][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.512497][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.534227][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.551637][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.593172][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.643661][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.667853][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.697442][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.711664][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.742652][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.772554][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.786855][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.817106][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.838839][ T8546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.876423][ T8546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.901054][ T8546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.953200][ T8546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.964309][ T8546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.978819][ T8546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.991372][ T8546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.155153][ T4490] Bluetooth: hci0: command tx timeout [ 165.191741][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.206986][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.273876][ T8793] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.291426][ T5165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.328729][ T5165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.023022][ T8823] validate_nla: 3 callbacks suppressed [ 166.023045][ T8823] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 166.057122][ T8823] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.263251][ T8832] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.392953][ T8834] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.199656][ T8868] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.234749][ T4490] Bluetooth: hci0: command tx timeout [ 167.456511][ T8878] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.691622][ T8889] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 167.700222][ T8889] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 167.710919][ T8889] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 167.721595][ T8889] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 167.730396][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.355833][ T8910] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.610656][ T8923] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 168.627585][ T8923] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 168.649864][ T8923] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 168.677991][ T8923] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 169.459859][ T8956] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.691218][ T8967] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 169.700597][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.284244][ T8990] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.672347][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.576470][ T9052] validate_nla: 8 callbacks suppressed [ 171.576495][ T9052] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 171.615345][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.617524][ T9101] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 172.636797][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.448486][ T9133] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 173.471259][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.118628][ T9164] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.185334][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.441388][ T9182] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 174.456878][ T9182] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 174.479174][ T9182] netlink: 187184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.673878][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.808684][ T9200] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.100831][ T9206] can: request_module (can-proto-0) failed. [ 175.149780][ T9206] C: renamed from lo [ 175.171274][ T9206] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.190413][ T9206] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.339227][ T9219] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 175.356885][ T9219] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 175.377039][ T9219] netlink: 187184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.708724][ T9231] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.737202][ T9237] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.811680][ T9239] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.114082][ T9256] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 176.124646][ T9256] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 176.156516][ T9252] can: request_module (can-proto-0) failed. [ 176.174696][ T9256] netlink: 187184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.249069][ T9252] C: renamed from lo (while UP) [ 176.288550][ T9252] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.294957][ T9259] can: request_module (can-proto-0) failed. [ 176.306578][ T9252] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.372834][ T9259] C: renamed from lo (while UP) [ 176.399033][ T9259] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.861797][ T9288] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 176.892734][ T9288] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 177.112083][ T9295] can: request_module (can-proto-0) failed. [ 177.205191][ T9295] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.224575][ T9302] can: request_module (can-proto-0) failed. [ 177.296663][ T9302] C: renamed from lo [ 177.320448][ T9302] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 177.354899][ T9313] IPv6: Can't replace route, no match found [ 177.994686][ T9338] can: request_module (can-proto-0) failed. [ 178.022391][ T9346] IPv6: Can't replace route, no match found [ 178.083235][ T9338] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 178.113662][ T9345] can: request_module (can-proto-0) failed. [ 178.202102][ T9345] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 178.901336][ T9378] IPv6: Can't replace route, no match found [ 178.973011][ T29] audit: type=1804 audit(1717407130.051:22): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir902854567/syzkaller.eeQYx5/60/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 179.090019][ T9383] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 179.438021][ T9396] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 179.490977][ T9399] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 179.504935][ T9400] __nla_validate_parse: 18 callbacks suppressed [ 179.504957][ T9400] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.565149][ T9400] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.793558][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.926992][ T9414] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 180.165734][ T29] audit: type=1804 audit(1717407131.241:23): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir946460643/syzkaller.EkSZn2/368/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 180.432476][ T9432] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 180.677907][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.738070][ T9447] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 180.835035][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.902804][ T9456] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 181.104370][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.160520][ T9464] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 181.551482][ T29] audit: type=1804 audit(1717407132.631:24): pid=9476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2631541869/syzkaller.RNFzkC/279/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 181.556133][ T9477] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.773574][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.801565][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.007086][ T9491] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 182.042777][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.119658][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.141045][ T9499] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 182.151585][ T9498] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 182.474731][ T9509] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 182.657853][ T9515] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 183.011306][ T29] audit: type=1804 audit(1717407134.091:25): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir902854567/syzkaller.eeQYx5/73/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 184.276009][ T9569] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 184.503221][ T9579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 185.041132][ T9604] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 185.459674][ T9619] __nla_validate_parse: 4 callbacks suppressed [ 185.459699][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.491943][ T9619] (unnamed net_device) (uninitialized): peer notification delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 185.913480][ T9634] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 186.145769][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.238099][ T9651] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 186.284635][ T9651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.479058][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.661303][ T9671] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 186.731297][ T9675] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 186.933801][ T9685] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.104812][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.124291][ T9696] xt_TCPMSS: Only works on TCP SYN packets [ 187.176952][ T9698] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 187.272942][ T9704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.459404][ T9709] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 187.469064][ T9712] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 187.756139][ T9724] xt_TCPMSS: Only works on TCP SYN packets [ 187.860583][ T9729] bridge0: port 3(team0) entered blocking state [ 187.884761][ T9729] bridge0: port 3(team0) entered disabled state [ 187.891564][ T9729] team0: entered allmulticast mode [ 187.902424][ T9729] team_slave_0: entered allmulticast mode [ 187.913683][ T9729] team_slave_1: entered allmulticast mode [ 187.938752][ T9729] team0: entered promiscuous mode [ 187.954759][ T9729] team_slave_0: entered promiscuous mode [ 187.961716][ T9729] team_slave_1: entered promiscuous mode [ 187.965006][ T9739] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 187.993499][ T9729] bridge0: port 3(team0) entered blocking state [ 188.001047][ T9729] bridge0: port 3(team0) entered forwarding state [ 188.026830][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.071588][ T9740] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 188.117801][ T9739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.326306][ T9746] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 188.686515][ T9762] xt_TCPMSS: Only works on TCP SYN packets [ 188.883435][ T9768] bridge0: port 3(team0) entered blocking state [ 188.900280][ T9768] bridge0: port 3(team0) entered disabled state [ 188.921443][ T9768] team0: entered allmulticast mode [ 188.946069][ T9768] team_slave_0: entered allmulticast mode [ 188.971262][ T9768] team_slave_1: entered allmulticast mode [ 189.003534][ T9768] team0: entered promiscuous mode [ 189.026239][ T9778] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 189.034766][ T9768] team_slave_0: entered promiscuous mode [ 189.054819][ T9768] team_slave_1: entered promiscuous mode [ 189.070521][ T9768] bridge0: port 3(team0) entered blocking state [ 189.077045][ T9768] bridge0: port 3(team0) entered forwarding state [ 189.243601][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.399236][ T9794] xt_TCPMSS: Only works on TCP SYN packets [ 189.530837][ T29] audit: type=1804 audit(1717407140.611:26): pid=9800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir902854567/syzkaller.eeQYx5/95/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 189.690642][ T9812] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 189.709797][ T9814] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 189.801076][ T9815] bridge0: port 3(team0) entered blocking state [ 189.834827][ T9815] bridge0: port 3(team0) entered disabled state [ 189.865879][ T9815] team0: entered allmulticast mode [ 189.880416][ T9815] team_slave_0: entered allmulticast mode [ 189.896316][ T9815] team_slave_1: entered allmulticast mode [ 189.927776][ T9815] team0: entered promiscuous mode [ 189.933887][ T9815] team_slave_0: entered promiscuous mode [ 189.956233][ T9815] team_slave_1: entered promiscuous mode [ 189.977118][ T9815] bridge0: port 3(team0) entered blocking state [ 189.983691][ T9815] bridge0: port 3(team0) entered forwarding state [ 190.005612][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.026878][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.034222][ T9823] bridge0: port 2(bridge_slave_1) entered listening state [ 190.041772][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.049053][ T9823] bridge0: port 1(bridge_slave_0) entered listening state [ 190.051295][ T9831] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.072774][ T9829] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 190.433698][ T9850] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 190.457748][ T9852] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 190.640328][ T9856] bridge0: port 3(team0) entered blocking state [ 190.664012][ T9856] bridge0: port 3(team0) entered disabled state [ 190.676615][ T9856] team0: entered allmulticast mode [ 190.688969][ T9856] team_slave_0: entered allmulticast mode [ 190.702832][ T9856] team_slave_1: entered allmulticast mode [ 190.745439][ T9856] team0: entered promiscuous mode [ 190.773769][ T9856] team_slave_0: entered promiscuous mode [ 190.789874][ T9856] team_slave_1: entered promiscuous mode [ 190.803472][ T9856] bridge0: port 3(team0) entered blocking state [ 190.810122][ T9856] bridge0: port 3(team0) entered listening state [ 190.823027][ T9866] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 190.987246][ T9870] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 191.054002][ T9873] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 191.100252][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.135326][ T9875] (unnamed net_device) (uninitialized): peer notification delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 191.355939][ T9884] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 191.418534][ T9889] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 191.583001][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.663018][ T9899] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 191.680036][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.756987][ T9900] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 191.787095][ T9907] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 192.133942][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.242885][ T9927] (unnamed net_device) (uninitialized): option arp_validate: invalid value (7) [ 192.413922][ T9937] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 192.497585][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.612507][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.767181][ T9944] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 192.786585][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.868674][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.446564][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.499197][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.447729][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456786][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.282483][T10059] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 196.515217][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 196.521334][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 196.564012][T10130] __nla_validate_parse: 9 callbacks suppressed [ 196.564036][T10130] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.639912][T10131] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.918809][T10174] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.203261][T10182] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.551410][T10225] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.611712][T10220] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.202019][T10255] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 200.246447][T10252] geneve0: entered promiscuous mode [ 200.303148][T10252] geneve0: left promiscuous mode [ 200.858642][T10283] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 201.004843][T10282] IPv4: Oversized IP packet from 127.202.26.0 [ 201.349693][T10299] geneve0: entered promiscuous mode [ 201.364015][T10299] geneve0: left promiscuous mode [ 201.427898][T10304] geneve0: entered promiscuous mode [ 201.454281][T10304] geneve0: left promiscuous mode [ 201.929290][T10330] IPv4: Oversized IP packet from 127.202.26.0 [ 201.940530][T10332] IPv4: Oversized IP packet from 127.202.26.0 [ 202.253789][T10353] geneve0: entered promiscuous mode [ 202.277314][T10353] geneve0: left promiscuous mode [ 202.358004][T10359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.534338][T10367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.599279][T10369] IPv4: Oversized IP packet from 127.202.26.0 [ 202.823376][T10375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.860632][T10372] IPv4: Oversized IP packet from 127.202.26.0 [ 202.998519][T10384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.302266][T10394] geneve0: entered promiscuous mode [ 203.330286][T10394] geneve0: left promiscuous mode [ 203.511223][T10402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.526019][T10398] IPv4: Oversized IP packet from 127.202.26.0 [ 203.786905][T10412] nft_compat: unsupported protocol 0 [ 203.847275][T10414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.022578][T10416] IPv4: Oversized IP packet from 127.202.26.0 [ 204.170792][T10426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.368746][T10436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.466198][T10441] nft_compat: unsupported protocol 0 [ 204.492381][T10443] nft_compat: unsupported protocol 0 [ 204.584400][T10446] Bluetooth: MGMT ver 1.22 [ 204.800893][T10457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.170984][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.223356][T10473] nft_compat: unsupported protocol 0 [ 205.314444][ C0] [ 205.318423][ C0] ============================= [ 205.323397][ C0] WARNING: suspicious RCU usage [ 205.328333][ C0] 6.10.0-rc1-syzkaller-00115-g33700a0c9b56 #0 Not tainted [ 205.335515][ C0] ----------------------------- [ 205.340402][ C0] net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage! [ 205.349260][ C0] [ 205.349260][ C0] other info that might help us debug this: [ 205.349260][ C0] [ 205.359774][ C0] [ 205.359774][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 205.368038][ C0] 6 locks held by syz-executor.2/10473: [ 205.373618][ C0] #0: ffff888078a16a18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x159/0xc80 [ 205.382842][ C0] #1: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 205.392485][ C0] #2: ffff888079de3b58 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0x1ba/0x300 [ 205.400135][T10478] nft_compat: unsupported protocol 0 [ 205.403216][ C0] #3: ffffc90000007c00 ((&p->forward_delay_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 205.418938][ C0] #4: ffff8880610f0cb8 (&br->lock){+.-.}-{2:2}, at: br_forward_delay_timer_expired+0x50/0x440 [ 205.429471][ C0] #5: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: br_mst_set_state+0x171/0x7a0 [ 205.439230][ C0] [ 205.439230][ C0] stack backtrace: [ 205.445234][ C0] CPU: 0 PID: 10473 Comm: syz-executor.2 Not tainted 6.10.0-rc1-syzkaller-00115-g33700a0c9b56 #0 [ 205.455756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 205.465831][ C0] Call Trace: [ 205.469125][ C0] [ 205.471984][ C0] dump_stack_lvl+0x241/0x360 [ 205.476775][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.481978][ C0] ? __pfx__printk+0x10/0x10 [ 205.486582][ C0] lockdep_rcu_suspicious+0x221/0x340 [ 205.492053][ C0] br_mst_set_state+0x29e/0x7a0 [ 205.496919][ C0] ? br_mst_set_state+0x171/0x7a0 [ 205.501956][ C0] ? __pfx_br_mst_set_state+0x10/0x10 [ 205.507355][ C0] br_set_state+0x28a/0x7b0 [ 205.511870][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 205.516900][ C0] ? __pfx_br_set_state+0x10/0x10 [ 205.521937][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.527323][ C0] br_forward_delay_timer_expired+0x176/0x440 [ 205.533390][ C0] ? call_timer_fn+0x161/0x650 [ 205.538191][ C0] call_timer_fn+0x18e/0x650 [ 205.542789][ C0] ? call_timer_fn+0xc0/0x650 [ 205.547474][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 205.554167][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 205.559386][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 205.565982][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 205.572570][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 205.579160][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.584461][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 205.589666][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 205.596271][ C0] __run_timer_base+0x66a/0x8e0 [ 205.601154][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 205.606558][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.612899][ C0] run_timer_softirq+0xb7/0x170 [ 205.617760][ C0] handle_softirqs+0x2c4/0x970 [ 205.622526][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 205.627296][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 205.632582][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 205.637786][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 205.642371][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 205.647573][ C0] irq_exit_rcu+0x9/0x30 [ 205.651812][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 205.657456][ C0] [ 205.660391][ C0] [ 205.663324][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.669317][ C0] RIP: 0010:unmap_page_range+0x16a8/0x4d00 [ 205.675136][ C0] Code: 8b 5c 24 28 48 89 de 48 83 e6 20 31 ff e8 40 19 b4 ff 48 89 d8 48 83 e0 20 75 07 e8 52 14 b4 ff eb 59 48 8b 94 24 d8 00 00 00 <48> 89 d0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 [ 205.694743][ C0] RSP: 0018:ffffc90002dbf300 EFLAGS: 00000202 [ 205.700811][ C0] RAX: 0000000000000020 RBX: 0000000073c58025 RCX: ffff88801ee9bc00 [ 205.708786][ C0] RDX: ffff88802e2a28d8 RSI: 0000000000000020 RDI: 0000000000000000 [ 205.716756][ C0] RBP: ffffc90002dbf650 R08: ffffffff81e20220 R09: 1ffffffff1f5a89d [ 205.724730][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a89e R12: ffffea0001cf1600 [ 205.732702][ C0] R13: ffffc90002dbf520 R14: 0400000000000040 R15: 1ffff1100b730e00 [ 205.740685][ C0] ? unmap_page_range+0x1690/0x4d00 [ 205.745921][ C0] ? mark_lock+0x9a/0x350 [ 205.750278][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 205.755676][ C0] ? mas_next_slot+0xeab/0xf90 [ 205.760467][ C0] ? uprobe_munmap+0x183/0x410 [ 205.765247][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 205.770288][ C0] unmap_vmas+0x3cc/0x5f0 [ 205.774637][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 205.779511][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 205.784976][ C0] exit_mmap+0x264/0xc80 [ 205.789229][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 205.793989][ C0] ? __asan_memset+0x23/0x50 [ 205.798600][ C0] ? uprobe_clear_state+0x277/0x290 [ 205.803802][ C0] ? mm_update_next_owner+0x53c/0x660 [ 205.809188][ C0] __mmput+0x115/0x3c0 [ 205.813264][ C0] exit_mm+0x220/0x310 [ 205.817344][ C0] ? __pfx_exit_mm+0x10/0x10 [ 205.821941][ C0] ? taskstats_exit+0x348/0xa70 [ 205.826796][ C0] ? tty_audit_exit+0x155/0x200 [ 205.831665][ C0] do_exit+0x9aa/0x27e0 [ 205.835854][ C0] ? __pfx_do_exit+0x10/0x10 [ 205.840454][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.845839][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 205.851824][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.858182][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 205.863312][ C0] do_group_exit+0x207/0x2c0 [ 205.867910][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.873117][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 205.878329][ C0] get_signal+0x16a1/0x1740 [ 205.882859][ C0] ? __pfx_get_signal+0x10/0x10 [ 205.887727][ C0] arch_do_signal_or_restart+0x96/0x860 [ 205.893282][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 205.899441][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 205.905435][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 205.911159][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 205.916716][ C0] do_syscall_64+0x100/0x230 [ 205.921307][ C0] ? clear_bhb_loop+0x35/0x90 [ 205.925987][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.931878][ C0] RIP: 0033:0x7ff5d287cee9 [ 205.936302][ C0] Code: Unable to access opcode bytes at 0x7ff5d287cebf. [ 205.943315][ C0] RSP: 002b:00007ff5d359d178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.951732][ C0] RAX: 0000000000000001 RBX: 00007ff5d29b3fa8 RCX: 00007ff5d287cee9 [ 205.959714][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff5d29b3fac [ 205.967784][ C0] RBP: 00007ff5d29b3fa0 R08: 7fffffffffffffff R09: 00007ff5d359d6c0 [ 205.975764][ C0] R10: 0000000000000030 R11: 0000000000000246 R12: 00007ff5d29b3fac [ 205.983738][ C0] R13: 000000000000000b R14: 00007ffd0aeb2400 R15: 00007ffd0aeb24e8 [ 205.991746][ C0] [ 205.995500][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 206.003736][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 206.014089][ C0] bridge0: port 3(team0) entered learning state 2024/06/03 09:32:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 206.674788][ T4490] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 206.685160][ T5131] Bluetooth: hci0: command 0x0401 tx timeout