last executing test programs: 33.091178304s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001bc0)={0xd0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0xa8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa1, 0x1, "8493a7e8efd9b65774e9660620b5a89ab4f68d36f8d40c7b7a8ed7cd739131efe1f47a728a1c55de38b2f456fedde5d4301a68bc119b2bfb34055be28f55c2b6ee31a712d69a46b448626682f0f6d0a6ab5bcb52d81457730f4a34e1a92897c2bf8cba11a2c894c05a2ee912cc4a6be9dd2e4887a8b08f2256b236959f08adb53c787eda6e352fab3e3eea99647d3a5a40813bb8b4321db88e1303d4c7"}]}]}, 0xd0}}, 0x0) 32.694667604s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0x9c}}, 0x0) 32.610464657s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.675098972s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffff, @empty}, 0x1c) 31.370073327s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0x1, 0x241, 0x0, 0x0) 31.302699413s ago: executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2714, 0x0, &(0x7f0000000080)) 31.184139637s ago: executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x500) write$cgroup_int(r2, &(0x7f0000000100), 0x12) 31.140002067s ago: executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89e0, &(0x7f0000000040)) 31.09726774s ago: executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r5, r1, 0x4, r1}, 0x10) 31.026802473s ago: executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 30.999218232s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000000c0)='+', 0x1, 0x241, 0x0, 0x0) 30.928164994s ago: executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x2}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 30.892570805s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) writev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 30.842885042s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.834667618s ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 30.784251959s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 30.763038438s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x5c, {0x2, 0x0, @multicast1=0xe000cc02}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$rxrpc(0x21, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x11, &(0x7f0000000800)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output, @initr0, @jmp={0x5, 0x0, 0x0, 0x5, 0x6, 0x6, 0xffffffffffffffff}, @generic={0x0, 0x0, 0x0, 0xfffa}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) listen(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.717977242s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 30.658944536s ago: executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bb81cabbbbbb0180c208000008060001080006040001bbbbbbbbbbbb0000000065b8ea7dec4bff"], 0x0) 30.641636368s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 30.548567183s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='h', 0x1, 0x4008010, 0x0, 0x0) shutdown(r0, 0x1) 30.507498989s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x32, &(0x7f0000000040), 0x10) 30.449478641s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffd59185671ca388a8250081000000080045000026000020"], 0x3c) 30.100478071s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fbdbdf2520fffffa08000300", @ANYRES32, @ANYBLOB="0c000600010000000100000044002d8005000400000000000500010081000000080002"], 0x74}}, 0x0) 30.015495297s ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 813.347212ms ago: executing program 3: bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4), 0xc) socket$inet(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000000010114000000000000000002000000240001801400018008000111e000000108000200000000000cb8cf01ea55db851c000000240002801400018008000100e000000108000200ac1e00010c000280050001000000000008000740000006800800010000000000000016517b40a001b9b6760000df135bd0928f0f5c47bd499f3dd6e31bd0a7f96298437eda736c1e1d02e1e42900320a623b07df41694723756b31c12d34ff00aee7c19add91dfa26570b9926e3189fc2b9dfed6927f66c0eeea47e7ca687b0739a54ce41a5e6a7e08d14e6681379961ce0f4bb997e86fcd42a8873de5a5451efd72b6ddca88dc1cca4ae547a6daff753600f732d635598622bcdbfea187bc798b3b17b3d32a5dd29a0bd5944920dbee8afbf2f19307e0815ce3a44a681556a3f3be73229d5593029e2f0f11d09b7f73f509f7f4860fc52344ad0598ed52607e9b06995f29c069dea5"], 0x70}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 721.472773ms ago: executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x0, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffd96, 0x8002}}]}, 0x34}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r4, 0x10d, 0x90, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x6, 0x0, 0x10000, 0x237c}, 0x14) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x5000) 435.646833ms ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xa89) sendto$inet(r0, &(0x7f0000000300)="a3", 0x1, 0x2c091, 0x0, 0x0) 83.514691ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000418995"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 0s ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa7d, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. 2024/06/05 00:10:44 fuzzer started 2024/06/05 00:10:44 dialing manager at 10.128.0.169:30018 [ 56.468260][ T5094] cgroup: Unknown subsys name 'net' [ 56.661790][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/06/05 00:10:46 starting 5 executor processes [ 57.841260][ T5102] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.820840][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.829561][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.837769][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.848611][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.856063][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.865527][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.867036][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.875416][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.887797][ T5126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.890417][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.903644][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.904121][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.911448][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.927965][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.929874][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.935392][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.945282][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.952490][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.956343][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.963751][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.971562][ T5122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.977746][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.985079][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.991945][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.997886][ T5131] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.012496][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.014419][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.022098][ T4493] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.035031][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.036645][ T4493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.518264][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 59.662115][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 59.738854][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 59.809951][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.824711][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.832306][ T5114] bridge_slave_0: entered allmulticast mode [ 59.839728][ T5114] bridge_slave_0: entered promiscuous mode [ 59.878439][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.886152][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.893416][ T5114] bridge_slave_1: entered allmulticast mode [ 59.900268][ T5114] bridge_slave_1: entered promiscuous mode [ 59.939113][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 59.950807][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 59.987426][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.031513][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.051266][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.059150][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.066485][ T5112] bridge_slave_0: entered allmulticast mode [ 60.073905][ T5112] bridge_slave_0: entered promiscuous mode [ 60.093362][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.100520][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.108266][ T5115] bridge_slave_0: entered allmulticast mode [ 60.115277][ T5115] bridge_slave_0: entered promiscuous mode [ 60.123628][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.130775][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.138090][ T5115] bridge_slave_1: entered allmulticast mode [ 60.145443][ T5115] bridge_slave_1: entered promiscuous mode [ 60.161119][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.171350][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.178920][ T5112] bridge_slave_1: entered allmulticast mode [ 60.186491][ T5112] bridge_slave_1: entered promiscuous mode [ 60.224656][ T5114] team0: Port device team_slave_0 added [ 60.275007][ T5114] team0: Port device team_slave_1 added [ 60.283517][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.303780][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.324599][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.343916][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.405769][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.412736][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.439305][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.493990][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.500971][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.527242][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.541544][ T5112] team0: Port device team_slave_0 added [ 60.553603][ T5112] team0: Port device team_slave_1 added [ 60.559755][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.567857][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.575616][ T5127] bridge_slave_0: entered allmulticast mode [ 60.582303][ T5127] bridge_slave_0: entered promiscuous mode [ 60.589828][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.597199][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.607846][ T5113] bridge_slave_0: entered allmulticast mode [ 60.614828][ T5113] bridge_slave_0: entered promiscuous mode [ 60.632329][ T5115] team0: Port device team_slave_0 added [ 60.669770][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.677772][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.685777][ T5127] bridge_slave_1: entered allmulticast mode [ 60.692655][ T5127] bridge_slave_1: entered promiscuous mode [ 60.711670][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.718859][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.726299][ T5113] bridge_slave_1: entered allmulticast mode [ 60.733293][ T5113] bridge_slave_1: entered promiscuous mode [ 60.766354][ T5115] team0: Port device team_slave_1 added [ 60.774691][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.781658][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.808387][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.841675][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.855359][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.874412][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.881383][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.907866][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.921637][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.936392][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.976348][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.983725][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.010043][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.028313][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.035535][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.062462][ T4493] Bluetooth: hci0: command tx timeout [ 61.063708][ T4493] Bluetooth: hci2: command tx timeout [ 61.068049][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.100757][ T5114] hsr_slave_0: entered promiscuous mode [ 61.107921][ T5114] hsr_slave_1: entered promiscuous mode [ 61.133992][ T53] Bluetooth: hci1: command tx timeout [ 61.134706][ T5122] Bluetooth: hci3: command tx timeout [ 61.139756][ T4493] Bluetooth: hci4: command tx timeout [ 61.184233][ T5113] team0: Port device team_slave_0 added [ 61.193811][ T5113] team0: Port device team_slave_1 added [ 61.212571][ T5127] team0: Port device team_slave_0 added [ 61.221248][ T5127] team0: Port device team_slave_1 added [ 61.249069][ T5112] hsr_slave_0: entered promiscuous mode [ 61.258328][ T5112] hsr_slave_1: entered promiscuous mode [ 61.264764][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.272558][ T5112] Cannot create hsr debugfs directory [ 61.367177][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.375477][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.401561][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.418725][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.426771][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.453364][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.479912][ T5115] hsr_slave_0: entered promiscuous mode [ 61.486662][ T5115] hsr_slave_1: entered promiscuous mode [ 61.493085][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.501589][ T5115] Cannot create hsr debugfs directory [ 61.507861][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.515369][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.542502][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.600282][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.607466][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.633813][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.671484][ T5127] hsr_slave_0: entered promiscuous mode [ 61.678656][ T5127] hsr_slave_1: entered promiscuous mode [ 61.685317][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.692907][ T5127] Cannot create hsr debugfs directory [ 61.850295][ T5113] hsr_slave_0: entered promiscuous mode [ 61.857094][ T5113] hsr_slave_1: entered promiscuous mode [ 61.863234][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.870822][ T5113] Cannot create hsr debugfs directory [ 62.157689][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.169112][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.181548][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.207754][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.246620][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.264095][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.274742][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.285332][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.381434][ T5127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.417269][ T5127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.428718][ T5127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.449493][ T5127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.501465][ T5115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.531457][ T5115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.541543][ T5115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.577120][ T5115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.657858][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.688821][ T5113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.701631][ T5113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.727770][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.744455][ T5113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.755012][ T5113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.806530][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.828793][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.836254][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.875389][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.882533][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.898813][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.961277][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.968583][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.027479][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.034744][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.076660][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.134185][ T4493] Bluetooth: hci2: command tx timeout [ 63.135938][ T5122] Bluetooth: hci0: command tx timeout [ 63.141334][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.195639][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.217268][ T5122] Bluetooth: hci4: command tx timeout [ 63.217704][ T53] Bluetooth: hci3: command tx timeout [ 63.228560][ T4493] Bluetooth: hci1: command tx timeout [ 63.272714][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.279945][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.354920][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.362183][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.417168][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.450437][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.500137][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.510663][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.517891][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.563085][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.581245][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.588462][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.656751][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.688981][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.696329][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.732890][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.772250][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.779527][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.906149][ T5114] veth0_vlan: entered promiscuous mode [ 63.974216][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.998541][ T5114] veth1_vlan: entered promiscuous mode [ 64.061592][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.199598][ T5114] veth0_macvtap: entered promiscuous mode [ 64.212129][ T5114] veth1_macvtap: entered promiscuous mode [ 64.262054][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.296230][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.326109][ T5127] veth0_vlan: entered promiscuous mode [ 64.341744][ T5112] veth0_vlan: entered promiscuous mode [ 64.358950][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.368478][ T5127] veth1_vlan: entered promiscuous mode [ 64.386939][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.397529][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.407376][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.417939][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.445432][ T5112] veth1_vlan: entered promiscuous mode [ 64.510233][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.599558][ T5112] veth0_macvtap: entered promiscuous mode [ 64.631035][ T5115] veth0_vlan: entered promiscuous mode [ 64.658289][ T5127] veth0_macvtap: entered promiscuous mode [ 64.672022][ T5112] veth1_macvtap: entered promiscuous mode [ 64.684799][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.694347][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.717163][ T5127] veth1_macvtap: entered promiscuous mode [ 64.730015][ T5115] veth1_vlan: entered promiscuous mode [ 64.798221][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.809192][ T953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.828141][ T953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.833313][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.848960][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.856755][ T5113] veth0_vlan: entered promiscuous mode [ 64.865063][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.875718][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.886101][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.897353][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.909150][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.927525][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.940903][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.954213][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.970304][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.988908][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.000985][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.011565][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.024072][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.039793][ T5113] veth1_vlan: entered promiscuous mode [ 65.068953][ T5127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.079276][ T5127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.088285][ T5127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.097406][ T5127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.129765][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.141930][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.151908][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.164903][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.207808][ T5115] veth0_macvtap: entered promiscuous mode [ 65.214618][ T4493] Bluetooth: hci0: command tx timeout [ 65.220464][ T53] Bluetooth: hci2: command tx timeout [ 65.228806][ T5198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.293585][ T53] Bluetooth: hci4: command tx timeout [ 65.304042][ T4493] Bluetooth: hci3: command tx timeout [ 65.310185][ T53] Bluetooth: hci1: command tx timeout [ 65.310857][ T5115] veth1_macvtap: entered promiscuous mode [ 65.390102][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.401199][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.411305][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.421783][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.431881][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.443870][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.463917][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.534942][ T5113] veth0_macvtap: entered promiscuous mode [ 65.550751][ T5167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.555843][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.577058][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.590785][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.594698][ T5167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.604239][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.629021][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.640210][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.652652][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.680736][ T5206] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.706329][ T5115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720102][ T5115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.731534][ T5115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.741481][ T5115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.810722][ T5113] veth1_macvtap: entered promiscuous mode [ 65.866171][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.880905][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.904951][ T2843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.912827][ T2843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.010122][ T5213] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.018946][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.034966][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.041271][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.060851][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.071172][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.082473][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.092529][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.109129][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.119478][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.129991][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.142190][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.188539][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.205245][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.235533][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.249917][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.263400][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.275533][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.285518][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.296269][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.308018][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.387589][ T5113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.389604][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.416564][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.428352][ T5113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.461267][ T5113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.480924][ T5113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.646618][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.673393][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.852819][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.937392][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.115519][ T5153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.138320][ T5153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.156589][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.295198][ T4493] Bluetooth: hci0: command tx timeout [ 67.300886][ T53] Bluetooth: hci2: command tx timeout [ 67.384949][ T53] Bluetooth: hci1: command tx timeout [ 67.391009][ T4493] Bluetooth: hci3: command tx timeout [ 67.391498][ T5122] Bluetooth: hci4: command tx timeout [ 68.155901][ T5269] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 68.738380][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.788926][ T5295] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 69.125170][ T5304] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 69.634004][ T5326] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 70.026663][ T5340] sock: sock_set_timeout: `syz-executor.2' (pid 5340) tries to set negative timeout [ 70.085579][ T5345] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSR]L3 index 0 [ 70.271122][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.291998][ T5354] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 70.351825][ T5356] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 70.383740][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.372086][ T5396] x_tables: ip_tables: osf match: only valid for protocol 6 [ 71.620080][ T5407] sock: sock_set_timeout: `syz-executor.4' (pid 5407) tries to set negative timeout [ 71.860102][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.870511][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.006456][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.527828][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.561459][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.640291][ T5451] x_tables: ip_tables: osf match: only valid for protocol 6 [ 72.682633][ T5454] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 73.034317][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.052778][ T5468] team0: Port device batadv0 added [ 73.174661][ T5476] sock: sock_set_timeout: `syz-executor.4' (pid 5476) tries to set negative timeout [ 73.354305][ T5484] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.508956][ T5492] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 73.586044][ T5496] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 74.491325][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.849616][ T5550] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 74.887200][ T5550] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.848796][ T5586] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 75.875646][ T5586] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.301290][ T5605] macsec0: entered promiscuous mode [ 76.331304][ T5605] macsec1: entered promiscuous mode [ 76.516096][ T5615] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 76.543515][ T5615] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.222426][ T5634] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 77.268792][ T5634] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 77.343058][ T5636] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 78.182162][ T5659] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.189089][ T5659] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.225005][ T5662] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 78.301093][ T5659] hsr_slave_0: left promiscuous mode [ 78.335022][ T2843] wlan0: Trigger new scan to find an IBSS to join [ 78.368845][ T5659] hsr_slave_1: left promiscuous mode [ 79.623974][ T5716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.743289][ T5718] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 79.749173][ T5718] pim6reg0: linktype set to 776 [ 80.169976][ T5725] syzkaller0: entered promiscuous mode [ 80.254413][ T5725] syzkaller0: entered allmulticast mode [ 80.605508][ T5752] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 80.612046][ T5752] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 80.674884][ T5756] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 81.295539][ T1108] wlan0: Trigger new scan to find an IBSS to join [ 82.116554][ T9] cfg80211: failed to load regulatory.db [ 82.803877][ T5752] hsr_slave_0: left promiscuous mode [ 82.810383][ T5752] hsr_slave_1: left promiscuous mode [ 83.081934][ T4548] udevd[4548]: worker [5104] terminated by signal 33 (Unknown signal 33) [ 83.124437][ T4548] udevd[4548]: worker [5104] failed while handling '/fs/nfs/net/nfs_client' [ 84.336250][ T2843] wlan0: Trigger new scan to find an IBSS to join [ 84.347785][ T5847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.929638][ T5865] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 85.133635][ T5122] Bluetooth: hci0: command 0x0c20 tx timeout [ 85.243053][ T5875] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 85.331456][ T1108] wlan0: Creating new IBSS network, BSSID 9e:0f:8d:53:fe:87 [ 85.352976][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 85.365970][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.394646][ T5879] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 85.484415][ T5875] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 85.506565][ T5875] bond1 (unregistering): Released all slaves [ 86.129391][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.155929][ T5905] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 86.337245][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.412063][ T5913] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.476466][ T5918] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 86.625277][ T5926] Bluetooth: MGMT ver 1.22 [ 86.913706][ T5935] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 86.981198][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.592791][ T5961] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.531285][ T5979] veth0_vlan: entered allmulticast mode [ 88.735979][ T5987] veth0_vlan: left promiscuous mode [ 88.746505][ T5987] veth0_vlan: entered promiscuous mode [ 89.314973][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802efaac00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 89.400662][ T6012] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 89.425101][ T6012] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 89.434368][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.763021][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.102899][ T29] audit: type=1800 audit(1717546278.672:2): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 90.176145][ T6022] syzkaller0: entered allmulticast mode [ 90.497794][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880182eb400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 91.522515][ T6081] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.721702][ T6089] veth0_vlan: entered allmulticast mode [ 91.838001][ T6093] veth0_vlan: left promiscuous mode [ 91.899739][ T6093] veth0_vlan: entered promiscuous mode [ 91.941842][ T6100] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 91.968746][ T6100] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.119104][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.394080][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.720421][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.899867][ T6154] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 94.191542][ T6174] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.304189][ T29] audit: type=1804 audit(1717546282.872:3): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir810094254/syzkaller.aSyuOj/92/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 94.446320][ T29] audit: type=1804 audit(1717546283.022:4): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir810094254/syzkaller.aSyuOj/92/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 94.780210][ T6189] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 94.842625][ T6189] bond1: entered promiscuous mode [ 94.873943][ T6196] bond0: (slave bond_slave_0): Releasing backup interface [ 94.966551][ T6196] bond1: (slave bond_slave_0): making interface the new active one [ 94.997999][ T6196] bond_slave_0: entered promiscuous mode [ 95.026284][ T6196] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.051830][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.089001][ T6189] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 95.111911][ T6189] bond_slave_0: left promiscuous mode [ 95.130274][ T6189] bond1 (unregistering): Released all slaves [ 95.307820][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.664278][ T6228] IPVS: length: 131 != 24 [ 95.971536][ T6243] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 96.112149][ T6243] bond1: entered promiscuous mode [ 96.119948][ T6246] bond0: (slave bond_slave_0): Releasing backup interface [ 96.152602][ T6246] bond1: (slave bond_slave_0): making interface the new active one [ 96.189299][ T6246] bond_slave_0: entered promiscuous mode [ 96.198541][ T6246] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.231563][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.249566][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.321954][ T6250] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 96.359058][ T6250] bond_slave_0: left promiscuous mode [ 96.386223][ T6250] bond1 (unregistering): Released all slaves [ 96.752256][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.773552][ T6269] netlink: 896 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.793359][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.818705][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.820528][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.831440][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.421104][ T6307] TCP: TCP segment has incorrect auth options set for 0.0.0.0.0->255.255.255.255.20002 [] [ 97.617450][ T6316] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 97.719374][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.731575][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.762315][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.774320][ T6322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.229367][ T6349] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 98.240165][ T6349] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 104.424159][ T6363] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 104.529041][ T6363] bond1: entered promiscuous mode [ 104.647991][ T6368] bond0: (slave bond_slave_0): Releasing backup interface [ 104.740948][ T6368] bond1: (slave bond_slave_0): making interface the new active one [ 104.762856][ T6368] bond_slave_0: entered promiscuous mode [ 104.773891][ T6368] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.789697][ T6363] __nla_validate_parse: 9 callbacks suppressed [ 104.789717][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.826341][ T6363] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 104.838634][ T6363] bond_slave_0: left promiscuous mode [ 104.877725][ T6363] bond1 (unregistering): Released all slaves [ 104.941764][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.537181][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.978037][ T6428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.671929][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.680481][ T5122] Bluetooth: hci4: link tx timeout [ 106.686928][ T5122] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.746759][ T6458] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.756073][ T6458] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.764896][ T6458] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.773748][ T6458] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.841138][ T6458] vxlan0: entered promiscuous mode [ 106.868468][ T6461] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 107.569692][ T6504] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.695249][ T6508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.739679][ T6512] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.237974][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.285215][ T4493] Bluetooth: hci4: link tx timeout [ 108.290503][ T4493] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.733425][ T4493] Bluetooth: hci4: command 0x0406 tx timeout [ 109.377397][ T6568] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.403284][ T6574] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.488643][ T6574] syz-executor.3 (6574) used greatest stack depth: 18960 bytes left [ 109.659612][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.502485][ T6619] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 110.731112][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.935957][ T6629] syzkaller0: entered promiscuous mode [ 110.949386][ T6629] syzkaller0: entered allmulticast mode [ 110.957453][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.526618][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.664189][ T6678] team0: Device bond0 is up. Set it down before adding it as a team port [ 112.720560][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.730382][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.749362][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.762209][ T6685] tipc: Started in network mode [ 112.774837][ T6685] tipc: Node identity 6, cluster identity 4711 [ 112.781263][ T6685] tipc: Node number set to 6 [ 112.866318][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.026524][ T6699] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.311153][ T6712] bridge1: entered promiscuous mode [ 113.344170][ T6712] bridge1: entered allmulticast mode [ 114.374701][ T6771] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 114.394963][ T6771] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 114.768334][ T6792] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.780707][ T6792] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.416274][ T2906] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 116.075944][ T6798] tun0: tun_chr_ioctl cmd 1074812117 [ 116.092304][ T6800] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 116.292718][ T6814] veth0_vlan: entered allmulticast mode [ 116.360031][ T6819] veth0_vlan: left promiscuous mode [ 116.386335][ T6819] veth0_vlan: entered promiscuous mode [ 116.481203][ T6823] pim6reg: entered allmulticast mode [ 116.495807][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.529734][ T6817] pim6reg: left allmulticast mode [ 116.573961][ T5122] Bluetooth: hci0: command 0x0c20 tx timeout [ 116.603491][ T6830] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 116.620354][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.791288][ T6841] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.307169][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.328521][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.345181][ T6866] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 118.348207][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.441046][ T6872] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 118.613718][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.615811][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.042501][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.327735][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.699196][ T6947] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 119.984860][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.846475][ T7018] sctp: [Deprecated]: syz-executor.1 (pid 7018) Use of int in maxseg socket option. [ 120.846475][ T7018] Use struct sctp_assoc_value instead [ 121.289712][ T7042] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.465796][ T7053] syzkaller1: entered promiscuous mode [ 121.471371][ T7053] syzkaller1: entered allmulticast mode [ 121.702239][ T7064] ip6gretap0: entered promiscuous mode [ 121.726022][ T7064] ip6gretap0: left promiscuous mode [ 121.953480][ T7078] __nla_validate_parse: 5 callbacks suppressed [ 121.953499][ T7078] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.645073][ T4493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.661875][ T4493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.678053][ T4493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.686914][ T4493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.706846][ T4493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.715163][ T4493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.021956][ T5114] syz-executor.1 (5114) used greatest stack depth: 18864 bytes left [ 126.114552][ T7164] syz_tun: entered promiscuous mode [ 126.123134][ T7164] syz_tun: left promiscuous mode [ 126.162964][ T7166] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.264558][ T2843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.597729][ T2843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.635262][ T7182] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 126.680314][ T7182] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 126.804861][ T2843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.823618][ T5122] Bluetooth: hci3: command tx timeout [ 126.869751][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.936884][ T2843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.980610][ T7202] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.031104][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.435365][ T7225] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 127.488978][ T7225] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 127.501562][ T2843] bridge_slave_1: left promiscuous mode [ 127.512034][ T2843] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.527472][ T2843] bridge_slave_0: left allmulticast mode [ 127.544398][ T2843] bridge_slave_0: left promiscuous mode [ 127.550728][ T2843] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.199708][ T2843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.217326][ T2843] bond0 (unregistering): Released all slaves [ 128.250361][ T7238] tipc: Started in network mode [ 128.270036][ T7238] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.295513][ T7238] tipc: Enabling of bearer rejected, failed to enable media [ 128.352007][ T7158] chnl_net:caif_netlink_parms(): no params data found [ 128.383482][ T2843] tipc: Left network mode [ 128.719669][ T7258] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 128.743084][ T7258] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.764150][ T7258] caif0: entered promiscuous mode [ 128.769646][ T7258] caif0: entered allmulticast mode [ 128.782860][ T7258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.894195][ T5122] Bluetooth: hci3: command tx timeout [ 128.942237][ T7158] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.963325][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.970595][ T7158] bridge_slave_0: entered allmulticast mode [ 128.991050][ T7158] bridge_slave_0: entered promiscuous mode [ 129.090620][ T7270] tipc: Started in network mode [ 129.098599][ T7270] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 129.119309][ T7270] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 129.156534][ T7270] tipc: Enabled bearer , priority 10 [ 129.173896][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.194146][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.201449][ T7158] bridge_slave_1: entered allmulticast mode [ 129.231517][ T7158] bridge_slave_1: entered promiscuous mode [ 129.267318][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.364180][ T7280] Bluetooth: hci0: load_link_keys: too big key_count value 17408 [ 129.386440][ T2843] hsr_slave_0: left promiscuous mode [ 129.420590][ T2843] hsr_slave_1: left promiscuous mode [ 129.428978][ T2843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.453058][ T2843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.471108][ T2843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.485975][ T2843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.532152][ T2843] veth1_macvtap: left promiscuous mode [ 129.539285][ T2843] veth0_macvtap: left promiscuous mode [ 129.547808][ T2843] veth1_vlan: left promiscuous mode [ 129.553755][ T2843] veth0_vlan: left promiscuous mode [ 130.281934][ T5170] tipc: Node number set to 1 [ 130.426079][ T2843] team0 (unregistering): Port device team_slave_1 removed [ 130.500980][ T2843] team0 (unregistering): Port device team_slave_0 removed [ 130.983981][ T5122] Bluetooth: hci3: command tx timeout [ 131.057741][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.073630][ T7158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.096425][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.142508][ T7158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.286629][ T7158] team0: Port device team_slave_0 added [ 131.317878][ T7158] team0: Port device team_slave_1 added [ 131.381708][ T7308] sctp: [Deprecated]: syz-executor.2 (pid 7308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.381708][ T7308] Use struct sctp_sack_info instead [ 131.451759][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.495210][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.549346][ T7158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.562321][ T7314] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.579867][ T7158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.600711][ T7158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.677261][ T7158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.862315][ T7158] hsr_slave_0: entered promiscuous mode [ 131.876945][ T7158] hsr_slave_1: entered promiscuous mode [ 132.576030][ T7374] sctp: [Deprecated]: syz-executor.3 (pid 7374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.576030][ T7374] Use struct sctp_sack_info instead [ 132.758781][ T7158] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.772915][ T7158] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.792491][ T7158] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.809605][ T7158] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.053696][ T5122] Bluetooth: hci3: command tx timeout [ 133.064616][ T7158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.120840][ T7158] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.155796][ T7400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.165100][ T7400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.174320][ T7400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.183060][ T7400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.206840][ T7400] Zero length message leads to an empty skb [ 133.223102][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.231155][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.276743][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.285114][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.298009][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309566][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.371498][ T7158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.456257][ T7414] sch_fq: defrate 0 ignored. [ 133.611501][ T7420] batadv0: entered promiscuous mode [ 133.624222][ T7420] batadv_slave_0: entered promiscuous mode [ 133.630770][ T7420] batadv_slave_0: left promiscuous mode [ 133.642869][ T7420] batadv0: left promiscuous mode [ 133.680201][ T7158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.830105][ T7158] veth0_vlan: entered promiscuous mode [ 133.870239][ T7158] veth1_vlan: entered promiscuous mode [ 133.949999][ T7158] veth0_macvtap: entered promiscuous mode [ 133.972898][ T7158] veth1_macvtap: entered promiscuous mode [ 134.006603][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.036535][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.065030][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.089051][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.114236][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.138533][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.168376][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.213696][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.239445][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.280185][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.301073][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.315106][ T7158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.330631][ T7158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.361537][ T7158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.381830][ T7434] bond0: option min_links: invalid value (18446744073709486080) [ 134.400449][ T7434] bond0: option min_links: allowed values 0 - 2147483647 [ 134.430153][ T7158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.459567][ T7158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.471682][ T7158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.503667][ T7158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.583362][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.682751][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.710982][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.804431][ T7448] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 134.834853][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.852000][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.141451][ T7458] dvmrp0: entered allmulticast mode [ 135.165466][ T7462] dvmrp0: left allmulticast mode [ 135.891241][ T7485] macvlan2: entered promiscuous mode [ 135.904752][ T7485] macvlan2: entered allmulticast mode [ 135.916658][ T7485] bridge0: entered promiscuous mode [ 135.929095][ T7485] bridge0: entered allmulticast mode [ 135.973762][ T7485] team0: Port device macvlan2 added [ 137.546397][ T7529] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.560348][ T7529] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.582925][ T7529] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.774387][ T7537] Bluetooth: MGMT ver 1.22 [ 138.110641][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.140790][ T7545] team0: Device bond0 failed to register rx_handler [ 138.237897][ T7548] bridge0: port 3(team0) entered blocking state [ 138.267207][ T7548] bridge0: port 3(team0) entered disabled state [ 138.289980][ T7548] team0: entered allmulticast mode [ 138.305163][ T7548] team_slave_0: entered allmulticast mode [ 138.323590][ T7548] team_slave_1: entered allmulticast mode [ 138.367840][ T7548] team0: entered promiscuous mode [ 138.387724][ T7548] team_slave_0: entered promiscuous mode [ 138.408039][ T7548] team_slave_1: entered promiscuous mode [ 138.446481][ T7548] bridge0: port 3(team0) entered blocking state [ 138.453470][ T7548] bridge0: port 3(team0) entered forwarding state [ 138.713023][ T7566] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.763727][ T7566] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.801080][ T7566] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.829161][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.064027][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.229269][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.546217][ T7646] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 140.607918][ T7650] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 140.617096][ T7650] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.627649][ T7650] bridge0: port 3(syz_tun) entered blocking state [ 140.634439][ T7650] bridge0: port 3(syz_tun) entered disabled state [ 140.641169][ T7650] syz_tun: entered allmulticast mode [ 140.649998][ T7650] syz_tun: entered promiscuous mode [ 140.657608][ T7650] bridge0: port 3(syz_tun) entered blocking state [ 140.664415][ T7650] bridge0: port 3(syz_tun) entered forwarding state [ 141.470628][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.585322][ T7693] tun0: tun_chr_ioctl cmd 2147767506 [ 141.771217][ T7704] dccp_invalid_packet: P.Data Offset(95) too large [ 141.836405][ T7709] tipc: Started in network mode [ 141.841475][ T7709] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 141.852713][ T7709] tipc: Enabling of bearer rejected, failed to enable media [ 141.945985][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.070814][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.080466][ T7725] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.095995][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.110786][ T7725] vlan0: entered allmulticast mode [ 142.125136][ T7725] veth0_vlan: entered allmulticast mode [ 142.409166][ T7729] team0: entered promiscuous mode [ 142.424680][ T7729] team_slave_0: entered promiscuous mode [ 142.443698][ T7729] team_slave_1: entered promiscuous mode [ 142.468994][ T7729] batadv0: entered promiscuous mode [ 142.569337][ T7729] team0: left promiscuous mode [ 142.575010][ T7729] team_slave_0: left promiscuous mode [ 142.586263][ T7729] team_slave_1: left promiscuous mode [ 142.596396][ T7729] batadv0: left promiscuous mode [ 142.662513][ T7739] tun0: tun_chr_ioctl cmd 2147767506 [ 142.933963][ T7759] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.951549][ T7759] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.183745][ T7774] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.201785][ T7774] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.260739][ T7777] tun0: tun_chr_ioctl cmd 2147767506 [ 144.237616][ T7835] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 144.310237][ T7835] bond0: entered promiscuous mode [ 144.323560][ T7835] bond_slave_0: entered promiscuous mode [ 144.360309][ T7835] bond_slave_1: entered promiscuous mode [ 144.382461][ T7835] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 144.440542][ T7835] bond0: left promiscuous mode [ 144.450758][ T7835] bond_slave_0: left promiscuous mode [ 144.461427][ T7835] bond_slave_1: left promiscuous mode [ 145.123914][ T7869] can: request_module (can-proto-0) failed. [ 145.308282][ T7882] __nla_validate_parse: 1 callbacks suppressed [ 145.308304][ T7882] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.451504][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.582597][ T7896] vxlan1: entered promiscuous mode [ 145.623331][ T7896] vxlan1: entered allmulticast mode [ 145.862982][ T7913] TCP segment has incorrect auth options set for [fe80::aa].0->[fe80::aa].20002 [] [ 145.907387][ T7916] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 145.936380][ T7916] bond0: entered promiscuous mode [ 145.950960][ T7916] bond_slave_0: entered promiscuous mode [ 145.957687][ T7916] bond_slave_1: entered promiscuous mode [ 145.969581][ T7916] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 145.979668][ T7916] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.999722][ T7916] bond0: left promiscuous mode [ 146.010166][ T7916] bond_slave_0: left promiscuous mode [ 146.020021][ T7916] bond_slave_1: left promiscuous mode [ 146.036663][ T7916] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 146.099026][ T7921] syz-executor.4[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.100369][ T7921] syz-executor.4[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.124995][ T7921] syz-executor.4[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.144993][ T7921] syz-executor.4[7921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.441969][ T1108] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 149.118800][ T7994] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 149.138567][ T7994] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.295983][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.999071][ T8054] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.039047][ T8057] syz-executor.3[8057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.039281][ T8057] syz-executor.3[8057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.108224][ T8061] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 151.145755][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.235213][ T8064] tap0: tun_chr_ioctl cmd 1074025673 [ 151.821140][ T8102] tipc: Started in network mode [ 151.827495][ T8102] tipc: Node identity 6f66663a2033360a, cluster identity 4711 [ 151.835420][ T8102] tipc: Enabling of bearer rejected, failed to enable media [ 151.957723][ T8110] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.012328][ T8114] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 152.021820][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.091071][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.153077][ T8122] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.242440][ T8127] tipc: Enabling of bearer rejected, failed to enable media [ 152.371167][ T8135] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.009414][ T8168] hsr_slave_0: left promiscuous mode [ 153.019394][ T8168] hsr_slave_1: left promiscuous mode [ 153.099564][ T8170] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.301301][ T8174] syzkaller1: entered promiscuous mode [ 153.328704][ T8174] syzkaller1: entered allmulticast mode [ 153.612468][ T8188] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 153.845412][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.871016][ T8201] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.883858][ T8188] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 155.664674][ T8254] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 156.952635][ T8254] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 156.975934][ T8254] __nla_validate_parse: 2 callbacks suppressed [ 156.975957][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.754746][ T8295] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.070129][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.366238][ T2914] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.465466][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 181.471641][ T5121] Bluetooth: hci2: command 0x0406 tx timeout [ 189.950483][ T4493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.965607][ T4493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.983456][ T4493] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.996577][ T4493] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.006660][ T4493] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 190.020976][ T4493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.053803][ T4493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.064301][ T4493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.086062][ T4493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.106658][ T4493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.116907][ T4493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 190.133549][ T4493] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.340897][ T4493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.375450][ T4493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.390553][ T4493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.398677][ T4493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.415612][ T4493] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 190.433474][ T4493] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.664328][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 190.678616][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 190.688596][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 190.696897][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 190.704818][ T5122] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 190.712185][ T5122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 190.770972][ T5122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 190.781273][ T5122] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 190.794502][ T5122] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 190.803783][ T5122] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 190.812272][ T5122] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 190.823326][ T5122] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 192.104043][ T5122] Bluetooth: hci5: command tx timeout [ 192.183784][ T5122] Bluetooth: hci6: command tx timeout [ 192.493615][ T5122] Bluetooth: hci7: command tx timeout [ 192.814009][ T5122] Bluetooth: hci8: command tx timeout [ 192.893323][ T5122] Bluetooth: hci9: command tx timeout [ 194.183534][ T5122] Bluetooth: hci5: command tx timeout [ 194.259889][ T5122] Bluetooth: hci6: command tx timeout [ 194.573399][ T5122] Bluetooth: hci7: command tx timeout [ 194.742314][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.753478][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.893433][ T5122] Bluetooth: hci8: command tx timeout [ 194.977049][ T5122] Bluetooth: hci9: command tx timeout [ 196.253497][ T5122] Bluetooth: hci5: command tx timeout [ 196.333559][ T5122] Bluetooth: hci6: command tx timeout [ 196.653863][ T5122] Bluetooth: hci7: command tx timeout [ 196.983814][ T5122] Bluetooth: hci8: command tx timeout [ 197.053326][ T5122] Bluetooth: hci9: command tx timeout [ 198.333552][ T5122] Bluetooth: hci5: command tx timeout [ 198.417699][ T5122] Bluetooth: hci6: command tx timeout [ 198.736598][ T5122] Bluetooth: hci7: command tx timeout [ 199.053294][ T5122] Bluetooth: hci8: command tx timeout [ 199.133421][ T5122] Bluetooth: hci9: command tx timeout [ 208.393393][ T2843] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.653494][ T4493] Bluetooth: hci4: command 0x0406 tx timeout [ 239.318255][ T2864] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 248.024783][ T4493] Bluetooth: hci3: command 0x0406 tx timeout [ 255.384202][ T4493] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 255.394830][ T4493] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 255.416858][ T5121] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 255.425210][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 255.443993][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 255.452572][ T5121] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 255.463704][ T5121] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 255.463800][ T5119] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 255.479005][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 255.479775][ T5119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 255.494574][ T5121] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 255.501733][ T5119] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 255.502468][ T5119] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 255.518866][ T5121] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 255.523758][ T5119] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 255.527648][ T5121] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 255.540426][ T5119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 255.541234][ T5121] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 255.718728][ T4493] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 255.728128][ T4493] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 255.737285][ T4493] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 255.746196][ T4493] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 255.755175][ T4493] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 255.762627][ T4493] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 255.870908][ T4493] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 255.880462][ T4493] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 255.898838][ T4493] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 255.908753][ T4493] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 255.921897][ T4493] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 255.929610][ T4493] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 256.186676][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.193038][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.613668][ T5121] Bluetooth: hci10: command tx timeout [ 257.619852][ T5121] Bluetooth: hci11: command tx timeout [ 257.626253][ T4493] Bluetooth: hci12: command tx timeout [ 257.853893][ T4493] Bluetooth: hci13: command tx timeout [ 258.013426][ T4493] Bluetooth: hci14: command tx timeout [ 259.693552][ T4493] Bluetooth: hci12: command tx timeout [ 259.700112][ T4493] Bluetooth: hci11: command tx timeout [ 259.706099][ T5121] Bluetooth: hci10: command tx timeout [ 259.933478][ T5131] Bluetooth: hci13: command tx timeout [ 260.093432][ T5131] Bluetooth: hci14: command tx timeout [ 261.783550][ T4493] Bluetooth: hci10: command tx timeout [ 261.789110][ T4493] Bluetooth: hci12: command tx timeout [ 261.794523][ T5131] Bluetooth: hci11: command tx timeout [ 262.023565][ T5131] Bluetooth: hci13: command tx timeout [ 262.177084][ T5131] Bluetooth: hci14: command tx timeout [ 263.853585][ T5131] Bluetooth: hci11: command tx timeout [ 263.859152][ T5131] Bluetooth: hci10: command tx timeout [ 263.864855][ T4493] Bluetooth: hci12: command tx timeout [ 264.103448][ T5131] Bluetooth: hci13: command tx timeout [ 264.253436][ T5131] Bluetooth: hci14: command tx timeout [ 270.242089][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 301.166776][ T2820] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.590654][ T5132] Bluetooth: hci5: command 0x0406 tx timeout [ 314.593439][ T5118] Bluetooth: hci6: command 0x0406 tx timeout [ 314.597453][ T5132] Bluetooth: hci7: command 0x0406 tx timeout [ 314.602855][ T5118] Bluetooth: hci8: command 0x0406 tx timeout [ 314.608828][ T5121] Bluetooth: hci9: command 0x0406 tx timeout [ 317.620372][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.632572][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.584398][ T5131] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 320.609787][ T5131] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 320.619220][ T5131] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 320.628603][ T5131] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 320.663728][ T5131] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 320.673314][ T5131] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 320.748287][ T5131] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 320.758193][ T5131] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 320.767030][ T5131] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 320.784009][ T5131] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 320.796002][ T5122] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 320.796330][ T4493] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 320.812362][ T4493] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 320.821663][ T4493] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 320.835573][ T4493] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 320.853973][ T5119] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 320.861938][ T5119] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 320.870465][ T5119] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 320.899214][ T5119] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 320.908610][ T5119] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 320.917670][ T5119] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 320.934768][ T5119] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 320.947444][ T5119] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 320.955231][ T5119] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 320.985134][ T4493] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 320.994835][ T4493] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 321.003040][ T4493] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 321.012346][ T4493] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 321.021320][ T4493] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 321.029035][ T4493] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 322.737168][ T30] INFO: task syz-executor.1:8389 blocked for more than 143 seconds. [ 322.746102][ T5131] Bluetooth: hci15: command tx timeout [ 322.763253][ T30] Not tainted 6.10.0-rc1-syzkaller-00260-g2b438c5774cc #0 [ 322.770929][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/05 00:15:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 322.782728][ T30] task:syz-executor.1 state:D stack:28496 pid:8389 tgid:8388 ppid:7158 flags:0x00000006 [ 322.793325][ T30] Call Trace: [ 322.796636][ T30] [ 322.799953][ T30] __schedule+0x17e8/0x4a20 [ 322.835165][ T30] ? __pfx___schedule+0x10/0x10 [ 322.840120][ T30] ? __pfx_lock_release+0x10/0x10 [ 322.853374][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 322.858906][ T30] ? schedule+0x90/0x320 [ 322.873336][ T30] schedule+0x14b/0x320 [ 322.878559][ T30] schedule_preempt_disabled+0x13/0x30 [ 322.893512][ T5131] Bluetooth: hci16: command tx timeout [ 322.899681][ T5131] Bluetooth: hci17: command tx timeout [ 322.913357][ T30] __mutex_lock+0x6a4/0xd70 [ 322.917920][ T30] ? __mutex_lock+0x527/0xd70 [ 322.922616][ T30] ? arp_ioctl+0x356/0x530 [ 322.943258][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 322.948360][ T30] ? __might_fault+0xc6/0x120 [ 322.953059][ T30] arp_ioctl+0x356/0x530 [ 322.973272][ T30] ? __pfx_arp_ioctl+0x10/0x10 [ 322.979091][ T30] inet_ioctl+0x2b5/0x4f0 [ 322.995202][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 323.000911][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 323.023406][ T30] sock_do_ioctl+0x158/0x460 [ 323.028057][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 323.046316][ T30] sock_ioctl+0x629/0x8e0 [ 323.050701][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 323.055962][ T5131] Bluetooth: hci18: command tx timeout [ 323.063553][ T4493] Bluetooth: hci19: command tx timeout [ 323.073240][ T30] ? __fget_files+0x29/0x470 [ 323.077883][ T30] ? __fget_files+0x3f6/0x470 [ 323.093284][ T30] ? __fget_files+0x29/0x470 [ 323.097920][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 323.102865][ T30] ? security_file_ioctl+0x87/0xb0 [ 323.123230][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 323.128169][ T30] __se_sys_ioctl+0xfc/0x170 [ 323.132773][ T30] do_syscall_64+0xf3/0x230 [ 323.156196][ T30] ? clear_bhb_loop+0x35/0x90 [ 323.160939][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.173238][ T30] RIP: 0033:0x7f2d39e7cee9 [ 323.177705][ T30] RSP: 002b:00007f2d3ab470c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.203236][ T30] RAX: ffffffffffffffda RBX: 00007f2d39fb3f80 RCX: 00007f2d39e7cee9 [ 323.230887][ T30] RDX: 0000000020000180 RSI: 0000000000008955 RDI: 0000000000000003 [ 323.253231][ T30] RBP: 00007f2d39eda6fe R08: 0000000000000000 R09: 0000000000000000 [ 323.261258][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.283335][ T30] R13: 000000000000000b R14: 00007f2d39fb3f80 R15: 00007ffc93b7f018 [