last executing test programs: 32.167881461s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x30, 0x0, 0x0, 0x401}, {0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) 32.047060077s ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x7}, 0x0) 32.012577734s ago: executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x0, 0x0) 31.917895515s ago: executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x82, 0x0, 0x0) 31.887920964s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r1, 0x307, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 31.86496727s ago: executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}}) 31.828038941s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 31.707389501s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) 31.671023085s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x1000000f, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0) 31.610331666s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 31.544305145s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 31.515728421s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) 31.496219204s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.399848192s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x80}}, 0x0) 31.356534424s ago: executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) 31.100818838s ago: executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x0, 0x0) 31.026924606s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000002000000000000000000000181100000c09a2a450f484b4953639d5a6918dd38611fb6707cc4d8b373516cfef0c8aca914277e99be799635c7f753ebe7a86bf8bd87affeab9e37d4adc3851ec11b238b810bb2406ea0f7661c229db90b9de6ec7d9095bdc7476e1b3886f73d551223afd0b9c105193f840723efa66403de237359348df8d5df5c2f0e1361df04a080defb0af3380628fc31144783e8c1b03e08a43f4e05849413b97f973d9aeddfdc875fd62fb6bc9c531ebb8fcc44a5086fce03d94e57bf6cd4daa6756f54542d5d417178a2539f79cd478b97be22233880aae1d3b5de51ea5", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.927310972s ago: executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x82, 0x0, 0x0) 30.857417659s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x106, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r2, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) 30.747779137s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) 30.633844441s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.633057261s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001980)=@newtaction={0x5c, 0x30, 0x109, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 30.52041389s ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.3824856s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$kcm(0x2, 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/238, 0xc0, 0x0, 0x0}, &(0x7f0000000c00)=0xfffffffffffffef4) 30.027640686s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) 1.475535915s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.377781801s ago: executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) 1.341573134s ago: executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x82, 0x0, 0x0) 616.09729ms ago: executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000300)=0x185, 0x4) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) 0s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4a}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. 2024/06/12 21:14:07 fuzzer started 2024/06/12 21:14:07 dialing manager at 10.128.0.169:30018 [ 53.332600][ T5090] cgroup: Unknown subsys name 'net' [ 53.528107][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/06/12 21:14:09 starting 5 executor processes [ 54.572743][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.585886][ T5095] syz-executor (5095) used greatest stack depth: 18968 bytes left [ 55.390336][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.399081][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.401249][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.409210][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.415405][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.424259][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.428458][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.435401][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.442624][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.454205][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.461316][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.469854][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.499481][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.508024][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.516521][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.526549][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.535656][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.543331][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.550539][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.565052][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.573272][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.586362][ T4491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.595051][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.602975][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.629876][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.640078][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.650031][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.675069][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.682945][ T5118] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.691327][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.805203][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 55.954035][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.961183][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.969386][ T5112] bridge_slave_0: entered allmulticast mode [ 55.977140][ T5112] bridge_slave_0: entered promiscuous mode [ 55.989113][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.996332][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.003506][ T5112] bridge_slave_1: entered allmulticast mode [ 56.010837][ T5112] bridge_slave_1: entered promiscuous mode [ 56.050890][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.090323][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.137184][ T5112] team0: Port device team_slave_0 added [ 56.181353][ T5112] team0: Port device team_slave_1 added [ 56.229717][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.236935][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.263042][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.278369][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.286254][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.312416][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.342151][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 56.405815][ T5112] hsr_slave_0: entered promiscuous mode [ 56.412583][ T5112] hsr_slave_1: entered promiscuous mode [ 56.597360][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.605525][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.612673][ T5111] bridge_slave_0: entered allmulticast mode [ 56.619952][ T5111] bridge_slave_0: entered promiscuous mode [ 56.630067][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.637697][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.645864][ T5111] bridge_slave_1: entered allmulticast mode [ 56.653073][ T5111] bridge_slave_1: entered promiscuous mode [ 56.702711][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 56.738336][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.764493][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 56.795099][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.920796][ T5111] team0: Port device team_slave_0 added [ 56.967198][ T5111] team0: Port device team_slave_1 added [ 56.980173][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 57.028089][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.035653][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.042820][ T5115] bridge_slave_0: entered allmulticast mode [ 57.050220][ T5115] bridge_slave_0: entered promiscuous mode [ 57.066405][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.073530][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.080912][ T5119] bridge_slave_0: entered allmulticast mode [ 57.088337][ T5119] bridge_slave_0: entered promiscuous mode [ 57.096227][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.103297][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.110644][ T5119] bridge_slave_1: entered allmulticast mode [ 57.118135][ T5119] bridge_slave_1: entered promiscuous mode [ 57.147164][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.155656][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.162826][ T5115] bridge_slave_1: entered allmulticast mode [ 57.169758][ T5115] bridge_slave_1: entered promiscuous mode [ 57.204506][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.211473][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.238060][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.283155][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.290245][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.317032][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.338726][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.363008][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.388100][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.421511][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.447188][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.500328][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.512310][ T5115] team0: Port device team_slave_0 added [ 57.518245][ T53] Bluetooth: hci0: command tx timeout [ 57.518493][ T53] Bluetooth: hci1: command tx timeout [ 57.536356][ T5115] team0: Port device team_slave_1 added [ 57.542444][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.550218][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.557585][ T5123] bridge_slave_0: entered allmulticast mode [ 57.564880][ T5123] bridge_slave_0: entered promiscuous mode [ 57.572525][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.579794][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.587145][ T5123] bridge_slave_1: entered allmulticast mode [ 57.594057][ T5123] bridge_slave_1: entered promiscuous mode [ 57.602850][ T5119] team0: Port device team_slave_0 added [ 57.620764][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.664163][ T5119] team0: Port device team_slave_1 added [ 57.673072][ T5111] hsr_slave_0: entered promiscuous mode [ 57.682066][ T5111] hsr_slave_1: entered promiscuous mode [ 57.683956][ T5118] Bluetooth: hci2: command tx timeout [ 57.687730][ T53] Bluetooth: hci3: command tx timeout [ 57.699906][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.708064][ T5111] Cannot create hsr debugfs directory [ 57.713654][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.730562][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.737656][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.763604][ T53] Bluetooth: hci4: command tx timeout [ 57.769338][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.829650][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.836847][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.862952][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.880837][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.894782][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.905525][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.912468][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.938960][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.952151][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.959252][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.985578][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.063675][ T5115] hsr_slave_0: entered promiscuous mode [ 58.070580][ T5115] hsr_slave_1: entered promiscuous mode [ 58.076945][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.085186][ T5115] Cannot create hsr debugfs directory [ 58.109847][ T5123] team0: Port device team_slave_0 added [ 58.142792][ T5123] team0: Port device team_slave_1 added [ 58.184954][ T5119] hsr_slave_0: entered promiscuous mode [ 58.191352][ T5119] hsr_slave_1: entered promiscuous mode [ 58.198508][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.207132][ T5119] Cannot create hsr debugfs directory [ 58.222791][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.229919][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.256299][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.275363][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.282417][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.308983][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.437987][ T5123] hsr_slave_0: entered promiscuous mode [ 58.448282][ T5123] hsr_slave_1: entered promiscuous mode [ 58.454814][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.462364][ T5123] Cannot create hsr debugfs directory [ 58.792089][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.799328][ T5111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.820017][ T5111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.848323][ T5111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.859817][ T5111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.903368][ T5115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.914405][ T5115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.930156][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.939209][ T5115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.949154][ T5115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.978635][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.985955][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.031719][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.039039][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.111373][ T5119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.121533][ T5119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.157713][ T5119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.197553][ T5119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.236382][ T5123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.247717][ T5123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.260095][ T5123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.285945][ T5123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.416667][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.453289][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.473593][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.512666][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.519970][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.558987][ T2524] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.566182][ T2524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.594078][ T53] Bluetooth: hci1: command tx timeout [ 59.595192][ T5118] Bluetooth: hci0: command tx timeout [ 59.616999][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.682008][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.689202][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.712143][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.733627][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.740824][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.756452][ T53] Bluetooth: hci3: command tx timeout [ 59.761963][ T5118] Bluetooth: hci2: command tx timeout [ 59.786060][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.817343][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.834281][ T5118] Bluetooth: hci4: command tx timeout [ 59.853202][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.912799][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.920032][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.937818][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.951855][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.959122][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.040334][ T5112] veth0_vlan: entered promiscuous mode [ 60.057795][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.064935][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.079831][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.087118][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.111260][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.137876][ T5123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.149586][ T5123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.172173][ T5112] veth1_vlan: entered promiscuous mode [ 60.262394][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.333479][ T5112] veth0_macvtap: entered promiscuous mode [ 60.394960][ T5112] veth1_macvtap: entered promiscuous mode [ 60.471476][ T5115] veth0_vlan: entered promiscuous mode [ 60.487132][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.547822][ T5115] veth1_vlan: entered promiscuous mode [ 60.585489][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.618379][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.629101][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.639043][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.650047][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.673518][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.757763][ T5115] veth0_macvtap: entered promiscuous mode [ 60.783027][ T5123] veth0_vlan: entered promiscuous mode [ 60.803416][ T5123] veth1_vlan: entered promiscuous mode [ 60.820555][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.858705][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.874992][ T5115] veth1_macvtap: entered promiscuous mode [ 60.922293][ T5123] veth0_macvtap: entered promiscuous mode [ 60.953463][ T5123] veth1_macvtap: entered promiscuous mode [ 60.965925][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.980151][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.992334][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.033252][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.053921][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.074225][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.089141][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.099182][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.109759][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.121662][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.147533][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.158952][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.170730][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.190359][ T5115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.199821][ T5115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.211719][ T5115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.221308][ T5115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.280630][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.291606][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.301928][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.312518][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.326189][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.346054][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.356708][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.399850][ T5123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.409613][ T5123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.419033][ T5123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.427980][ T5123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.446348][ T5111] veth0_vlan: entered promiscuous mode [ 61.511660][ T5111] veth1_vlan: entered promiscuous mode [ 61.587850][ T5119] veth0_vlan: entered promiscuous mode [ 61.648908][ T5119] veth1_vlan: entered promiscuous mode [ 61.676174][ T5118] Bluetooth: hci1: command tx timeout [ 61.684107][ T5118] Bluetooth: hci0: command tx timeout [ 61.712432][ T5195] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 61.712836][ T5111] veth0_macvtap: entered promiscuous mode [ 61.771345][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.780208][ T5111] veth1_macvtap: entered promiscuous mode [ 61.812851][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.835193][ T53] Bluetooth: hci3: command tx timeout [ 61.841067][ T5118] Bluetooth: hci2: command tx timeout [ 61.853638][ T5119] veth0_macvtap: entered promiscuous mode [ 61.911867][ T5119] veth1_macvtap: entered promiscuous mode [ 61.922285][ T5118] Bluetooth: hci4: command tx timeout [ 61.947493][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.957371][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.016492][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.032908][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.044284][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.055799][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.067161][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.078055][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.091083][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.103094][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.114797][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.125431][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.136431][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.146379][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.157909][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.169287][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.340043][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.348772][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.633656][ T5201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.651061][ T5201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.888510][ T5201] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.898272][ T5201] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.920761][ T5201] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.939616][ T5201] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.048092][ T5201] syz-executor.1 (5201) used greatest stack depth: 18032 bytes left [ 63.069947][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.083012][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.097436][ T5111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.117916][ T5111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.127273][ T5111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.139365][ T5111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.185980][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.211230][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.211627][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.230006][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.241729][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.258224][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.272267][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.293746][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.314923][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.325855][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.337989][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.349437][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.376279][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.393518][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.416437][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.436268][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.442337][ T5226] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.479945][ T5119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.519022][ T5228] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.525436][ T5119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.537698][ T5119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.547754][ T5119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.699874][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.754909][ T53] Bluetooth: hci1: command tx timeout [ 63.757959][ T5118] Bluetooth: hci0: command tx timeout [ 63.785336][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.793195][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.858705][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.869859][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.913941][ T5118] Bluetooth: hci2: command tx timeout [ 63.914060][ T53] Bluetooth: hci3: command tx timeout [ 63.983244][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.992994][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.007061][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.010333][ T53] Bluetooth: hci4: command tx timeout [ 64.022100][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.283138][ T5245] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 64.330820][ T5245] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 64.365677][ T5245] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 64.374547][ T5251] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 64.419183][ T5245] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 65.338821][ T5293] net_ratelimit: 2 callbacks suppressed [ 65.338840][ T5293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.635744][ T29] audit: type=1804 audit(1718226860.113:2): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir705884466/syzkaller.Xvd7T3/6/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 65.963064][ T5319] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 66.360414][ T5337] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.885221][ T5365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.052521][ T5375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.062246][ T5376] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.227641][ T5380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.243564][ T29] audit: type=1804 audit(1718226861.713:3): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3263826522/syzkaller.95ujNg/17/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 67.969207][ T5417] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.213278][ T5428] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.533248][ T5441] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.575827][ T5446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.664275][ T5447] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.757860][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.064896][ T5471] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 69.366674][ T5486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.414983][ T5490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.891868][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.820249][ T5561] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 71.423993][ T5588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.774712][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.781466][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.902336][ T5606] __nla_validate_parse: 4 callbacks suppressed [ 71.902354][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.903106][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.197067][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.213147][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.224126][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.234953][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.243504][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.251686][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.692203][ T5643] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 72.700768][ T5643] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.787393][ T5619] chnl_net:caif_netlink_parms(): no params data found [ 72.925561][ T1104] bridge_slave_1: left allmulticast mode [ 72.931456][ T1104] bridge_slave_1: left promiscuous mode [ 72.995145][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.032981][ T1104] bridge_slave_0: left allmulticast mode [ 73.053813][ T1104] bridge_slave_0: left promiscuous mode [ 73.061649][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.862482][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.910459][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.951727][ T1104] bond0 (unregistering): Released all slaves [ 74.078560][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.110559][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.158374][ T5619] bridge_slave_0: entered allmulticast mode [ 74.186985][ T5619] bridge_slave_0: entered promiscuous mode [ 74.311925][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.320998][ T53] Bluetooth: hci1: command tx timeout [ 74.336708][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.365807][ T5619] bridge_slave_1: entered allmulticast mode [ 74.373666][ T5619] bridge_slave_1: entered promiscuous mode [ 74.727651][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.807582][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.116163][ T5619] team0: Port device team_slave_0 added [ 75.170034][ T1104] hsr_slave_0: left promiscuous mode [ 75.191245][ T1104] hsr_slave_1: left promiscuous mode [ 75.209134][ T5732] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.226570][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.248402][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.726986][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 75.762812][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 76.071220][ T5619] team0: Port device team_slave_1 added [ 76.079613][ T5741] bridge0: port 3(team0) entered blocking state [ 76.113909][ T5741] bridge0: port 3(team0) entered disabled state [ 76.134159][ T5741] team0: entered allmulticast mode [ 76.139430][ T5741] team_slave_0: entered allmulticast mode [ 76.149902][ T5741] team_slave_1: entered allmulticast mode [ 76.161503][ T5741] team0: entered promiscuous mode [ 76.167023][ T5741] team_slave_0: entered promiscuous mode [ 76.173517][ T5741] team_slave_1: entered promiscuous mode [ 76.200916][ T5741] bridge0: port 3(team0) entered blocking state [ 76.207651][ T5741] bridge0: port 3(team0) entered forwarding state [ 76.315619][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.349868][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.404636][ T53] Bluetooth: hci1: command tx timeout [ 76.422298][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.449007][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.464969][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.492233][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.669712][ T5619] hsr_slave_0: entered promiscuous mode [ 76.706333][ T5619] hsr_slave_1: entered promiscuous mode [ 76.734388][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.852625][ T5767] tipc: Enabling of bearer rejected, failed to enable media [ 76.916672][ T25] cfg80211: failed to load regulatory.db [ 76.928784][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.128162][ T5764] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 77.549347][ T5791] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.698380][ T5799] bridge0: port 3(team0) entered blocking state [ 77.742490][ T5799] bridge0: port 3(team0) entered disabled state [ 77.784517][ T5799] team0: entered allmulticast mode [ 77.789692][ T5799] team_slave_0: entered allmulticast mode [ 77.828310][ T5799] team_slave_1: entered allmulticast mode [ 77.856352][ T5799] team0: entered promiscuous mode [ 77.872451][ T5799] team_slave_0: entered promiscuous mode [ 77.882800][ T5799] team_slave_1: entered promiscuous mode [ 77.906081][ T5799] bridge0: port 3(team0) entered blocking state [ 77.912500][ T5799] bridge0: port 3(team0) entered forwarding state [ 78.184869][ T5814] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 78.234841][ T5814] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.321776][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.325444][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.483869][ T53] Bluetooth: hci1: command tx timeout [ 78.593150][ T5823] tipc: Enabling of bearer rejected, failed to enable media [ 78.618922][ T5831] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 79.037009][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.083872][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.120509][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.159961][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.441335][ T5862] bridge0: port 3(team0) entered blocking state [ 79.483911][ T5862] bridge0: port 3(team0) entered disabled state [ 79.490434][ T5862] team0: entered allmulticast mode [ 79.533827][ T5862] team_slave_0: entered allmulticast mode [ 79.539624][ T5862] team_slave_1: entered allmulticast mode [ 79.616743][ T5862] team0: entered promiscuous mode [ 79.621833][ T5862] team_slave_0: entered promiscuous mode [ 79.695675][ T5862] team_slave_1: entered promiscuous mode [ 79.706163][ T5862] bridge0: port 3(team0) entered blocking state [ 79.712630][ T5862] bridge0: port 3(team0) entered forwarding state [ 79.853260][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.948829][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.037782][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.044973][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.076046][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.083913][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.409808][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.434732][ T5894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.480363][ T5894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.565571][ T53] Bluetooth: hci1: command tx timeout [ 80.578592][ T5894] bond0: entered promiscuous mode [ 80.585152][ T5894] bond_slave_0: entered promiscuous mode [ 80.592031][ T5894] bond_slave_1: entered promiscuous mode [ 80.616140][ T5619] veth0_vlan: entered promiscuous mode [ 80.635531][ T5619] veth1_vlan: entered promiscuous mode [ 80.649004][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.739316][ T5619] veth0_macvtap: entered promiscuous mode [ 80.778118][ T5619] veth1_macvtap: entered promiscuous mode [ 80.849396][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.873190][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.892535][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.940798][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.964092][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.989295][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.008144][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.020973][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.045669][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.106987][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.139848][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.163807][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.233156][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.268491][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.307741][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.353086][ T5619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.383827][ T5619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.410757][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.437881][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.465940][ T5619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.497355][ T5619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.521022][ T5619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.532172][ T5619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.816583][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.879763][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.016769][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.038976][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.586075][ T6000] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 82.942526][ T6018] lo speed is unknown, defaulting to 1000 [ 82.981014][ T6018] lo speed is unknown, defaulting to 1000 [ 83.156475][ T6018] lo speed is unknown, defaulting to 1000 [ 83.284268][ T6033] Unsupported ieee802154 address type: 0 [ 83.952699][ T25] lo speed is unknown, defaulting to 1000 [ 83.960555][ T6018] infiniband syz0: set active [ 83.970750][ T6018] infiniband syz0: added lo [ 84.003440][ T6018] syz0: rxe_create_cq: returned err = -12 [ 84.022965][ T6018] infiniband syz0: Couldn't create ib_mad CQ [ 84.061330][ T6018] infiniband syz0: Couldn't open port 1 [ 84.074514][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.144682][ T6018] RDS/IB: syz0: added [ 84.163657][ T6018] smc: adding ib device syz0 with port count 1 [ 84.184839][ T6018] smc: ib device syz0 port 1 has pnetid [ 84.204209][ T25] lo speed is unknown, defaulting to 1000 [ 84.224549][ T6018] lo speed is unknown, defaulting to 1000 [ 84.465758][ T6071] Unsupported ieee802154 address type: 0 [ 84.752474][ T6018] lo speed is unknown, defaulting to 1000 [ 84.941486][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.237509][ T6018] lo speed is unknown, defaulting to 1000 [ 85.686691][ T6018] lo speed is unknown, defaulting to 1000 [ 86.139495][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.198708][ T6018] lo speed is unknown, defaulting to 1000 [ 86.526762][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.734461][ T6167] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 86.875479][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.963496][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.335826][ T6196] x_tables: duplicate underflow at hook 2 [ 87.373399][ T6196] Bluetooth: MGMT ver 1.22 [ 87.408089][ T6196] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 87.715550][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.236361][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.308644][ T6243] veth0: entered promiscuous mode [ 88.331145][ T6243] macvtap1: entered promiscuous mode [ 88.341106][ T6243] macvtap1: entered allmulticast mode [ 88.357574][ T6243] veth0: entered allmulticast mode [ 88.391685][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.460680][ T6254] veth0: left allmulticast mode [ 88.485356][ T6254] veth0: left promiscuous mode [ 88.496036][ T6254] macvtap1: left promiscuous mode [ 88.502905][ T6254] macvtap1: left allmulticast mode [ 88.520237][ T6252] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.647980][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.696970][ T6259] Zero length message leads to an empty skb [ 89.194141][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.234040][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.264119][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.302688][ T6304] x_tables: duplicate underflow at hook 2 [ 89.370336][ T6304] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 90.134211][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.152593][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.620363][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.677451][ T6355] Bluetooth: MGMT ver 1.22 [ 90.816930][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.841592][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.152236][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.177365][ T6375] veth0: entered promiscuous mode [ 91.187147][ T6375] macvtap1: entered promiscuous mode [ 91.193228][ T6375] macvtap1: entered allmulticast mode [ 91.202718][ T6375] veth0: entered allmulticast mode [ 91.214024][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.226686][ T6380] veth0: left allmulticast mode [ 91.232021][ T6380] veth0: left promiscuous mode [ 91.240810][ T6380] macvtap1: left promiscuous mode [ 91.246552][ T6380] macvtap1: left allmulticast mode [ 91.544665][ T6391] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.592726][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.774967][ T6403] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 92.879152][ T6455] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 92.996409][ T6460] xt_ecn: cannot match TCP bits for non-tcp packets [ 93.572953][ T6475] veth0: entered promiscuous mode [ 93.602822][ T6475] macvtap2: entered promiscuous mode [ 93.623153][ T6475] macvtap2: entered allmulticast mode [ 93.637652][ T6475] veth0: entered allmulticast mode [ 93.694485][ T6483] veth0: left allmulticast mode [ 93.734179][ T6483] veth0: left promiscuous mode [ 93.762217][ T6483] macvtap2: left promiscuous mode [ 93.785266][ T6483] macvtap2: left allmulticast mode [ 94.432705][ T6521] __nla_validate_parse: 7 callbacks suppressed [ 94.432725][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.744859][ T6529] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 95.335274][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.518697][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.800449][ T6623] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 97.777372][ T6638] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.932480][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.972125][ T6648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.028682][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.340342][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.414222][ T6674] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 99.265614][ T6724] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.757918][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.016956][ T6771] Bluetooth: MGMT ver 1.22 [ 100.034010][ T6774] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 100.051587][ T6771] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 100.118503][ T6779] team0: left allmulticast mode [ 100.123490][ T6779] team_slave_0: left allmulticast mode [ 100.183894][ T6779] team_slave_1: left allmulticast mode [ 100.203937][ T6779] team0: left promiscuous mode [ 100.208769][ T6779] team_slave_0: left promiscuous mode [ 100.254186][ T6779] team_slave_1: left promiscuous mode [ 100.277624][ T6779] bridge0: port 3(team0) entered disabled state [ 100.889860][ T6829] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 101.390416][ T6854] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 102.654462][ T29] audit: type=1804 audit(1718226897.143:4): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir739792829/syzkaller.kMHI3h/146/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 102.698809][ T6930] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 102.763860][ T6930] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.130080][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.155144][ T6951] IPv6: Can't replace route, no match found [ 103.872503][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.004750][ T6993] IPv6: Can't replace route, no match found [ 104.535749][ T7009] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.334697][ T7052] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 105.352698][ T7052] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.611832][ T7065] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.088248][ T7097] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.380865][ T7113] team0: Device vlan2 is up. Set it down before adding it as a team port [ 106.899682][ T7142] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 106.917827][ T29] audit: type=1804 audit(1718226901.403:5): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2895235549/syzkaller.F7IQym/155/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 106.969448][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.250216][ T7156] dccp_invalid_packet: P.Data Offset(4) too small [ 107.314144][ T29] audit: type=1800 audit(1718226901.793:6): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 107.342958][ T29] audit: type=1800 audit(1718226901.823:7): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 107.670863][ T7174] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 108.120439][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.122265][ T7202] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 108.145709][ T7202] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 108.262493][ T7208] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 108.394479][ T7215] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 108.645629][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.663363][ T7229] xt_ecn: cannot match TCP bits for non-tcp packets [ 108.985054][ T7245] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.025945][ T7245] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.464211][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.636832][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.656468][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.666359][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.692826][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.710667][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.724146][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.832866][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.854726][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.870018][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.884282][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.899509][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.908801][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.922856][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.067930][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.148915][ T7261] lo speed is unknown, defaulting to 1000 [ 110.226315][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.247293][ T7280] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.405427][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.512218][ T7267] lo speed is unknown, defaulting to 1000 [ 110.998024][ T12] bridge_slave_1: left allmulticast mode [ 111.005468][ T12] bridge_slave_1: left promiscuous mode [ 111.011298][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.021845][ T12] bridge_slave_0: left allmulticast mode [ 111.029359][ T12] bridge_slave_0: left promiscuous mode [ 111.036190][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.440535][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.458578][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.470003][ T12] bond0 (unregistering): Released all slaves [ 111.627742][ T7314] __nla_validate_parse: 1 callbacks suppressed [ 111.627760][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.724988][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.835328][ T53] Bluetooth: hci0: command tx timeout [ 111.906506][ T7261] chnl_net:caif_netlink_parms(): no params data found [ 111.997228][ T53] Bluetooth: hci4: command tx timeout [ 112.702625][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.725506][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.739515][ T7261] bridge_slave_0: entered allmulticast mode [ 112.749164][ T7261] bridge_slave_0: entered promiscuous mode [ 112.848125][ T7375] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.875680][ T12] hsr_slave_0: left promiscuous mode [ 112.904111][ T12] hsr_slave_1: left promiscuous mode [ 112.935192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.942731][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.979954][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.988934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.051742][ T12] veth1_macvtap: left promiscuous mode [ 113.064136][ T12] veth0_macvtap: left promiscuous mode [ 113.070190][ T12] veth1_vlan: left promiscuous mode [ 113.084515][ T12] veth0_vlan: left promiscuous mode [ 113.525020][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.722861][ T12] team0 (unregistering): Port device team_slave_1 removed [ 113.762571][ T12] team0 (unregistering): Port device team_slave_0 removed [ 113.916240][ T53] Bluetooth: hci0: command tx timeout [ 114.078108][ T53] Bluetooth: hci4: command tx timeout [ 114.170613][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.179687][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.195407][ T7261] bridge_slave_1: entered allmulticast mode [ 114.205261][ T7261] bridge_slave_1: entered promiscuous mode [ 114.231632][ T7390] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 114.240907][ T7390] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.258762][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.267932][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.276741][ T7390] bridge0: entered promiscuous mode [ 114.452581][ T7267] chnl_net:caif_netlink_parms(): no params data found [ 114.512615][ T7411] vlan2: entered promiscuous mode [ 114.519859][ T7411] vlan2: entered allmulticast mode [ 114.546569][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.578690][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.767363][ T7261] team0: Port device team_slave_0 added [ 114.796889][ T7261] team0: Port device team_slave_1 added [ 114.985923][ T7438] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 115.010162][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.033262][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.040987][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.057002][ T7438] bridge0: entered promiscuous mode [ 115.083363][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.110462][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.160569][ T7261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.205594][ T7261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.212856][ T7261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.253909][ T7261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.308492][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.330798][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.352971][ T7267] bridge_slave_0: entered allmulticast mode [ 115.372464][ T7267] bridge_slave_0: entered promiscuous mode [ 115.414242][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.440669][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.455488][ T7267] bridge_slave_1: entered allmulticast mode [ 115.462925][ T7267] bridge_slave_1: entered promiscuous mode [ 115.547092][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.656270][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.781820][ T7261] hsr_slave_0: entered promiscuous mode [ 115.805632][ T7261] hsr_slave_1: entered promiscuous mode [ 115.820158][ T7261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.864148][ T7261] Cannot create hsr debugfs directory [ 115.995366][ T53] Bluetooth: hci0: command tx timeout [ 116.051712][ T7494] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 116.061136][ T7494] netlink: 128636 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.145347][ T7496] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 116.155718][ T53] Bluetooth: hci4: command tx timeout [ 116.238770][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.267262][ T7267] team0: Port device team_slave_0 added [ 116.288344][ T7267] team0: Port device team_slave_1 added [ 116.363295][ T7496] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.431051][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.682131][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.703306][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.711430][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.742053][ T7267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.761354][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.842124][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.885584][ T7267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.894056][ T7267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.922327][ T7267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.237359][ T7267] hsr_slave_0: entered promiscuous mode [ 117.274663][ T7267] hsr_slave_1: entered promiscuous mode [ 117.305228][ T7267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.312838][ T7267] Cannot create hsr debugfs directory [ 117.931550][ T12] team0: left allmulticast mode [ 117.948465][ T12] team_slave_0: left allmulticast mode [ 117.976974][ T12] team_slave_1: left allmulticast mode [ 117.997935][ T12] team0: left promiscuous mode [ 118.003251][ T12] team_slave_0: left promiscuous mode [ 118.010411][ T12] team_slave_1: left promiscuous mode [ 118.020730][ T12] bridge0: port 3(team0) entered disabled state [ 118.049980][ T12] bridge_slave_1: left allmulticast mode [ 118.073638][ T12] bridge_slave_1: left promiscuous mode [ 118.079730][ T53] Bluetooth: hci0: command tx timeout [ 118.091486][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.093513][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.116130][ T12] bridge_slave_0: left allmulticast mode [ 118.128640][ T12] bridge_slave_0: left promiscuous mode [ 118.138073][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.235110][ T53] Bluetooth: hci4: command tx timeout [ 118.501937][ T7586] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.563361][ T7588] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 118.651831][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.661056][ T12] bond_slave_0: left promiscuous mode [ 118.671340][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.685911][ T12] bond_slave_1: left promiscuous mode [ 118.700422][ T12] bond0 (unregistering): Released all slaves [ 118.773137][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.826714][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.854056][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.880626][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.575825][ T7261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.982705][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.014289][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.027999][ T7261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.049181][ T7261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.096295][ T7261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.180504][ T12] hsr_slave_0: left promiscuous mode [ 120.230789][ T12] hsr_slave_1: left promiscuous mode [ 120.249198][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.259522][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.268301][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.278251][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.305708][ T12] veth1_macvtap: left promiscuous mode [ 120.311459][ T12] veth0_macvtap: left promiscuous mode [ 120.328159][ T12] veth1_vlan: left promiscuous mode [ 120.333565][ T12] veth0_vlan: left promiscuous mode [ 120.440066][ T12] infiniband syz0: set down [ 120.741066][ T12] team0 (unregistering): Port device team_slave_1 removed [ 120.775123][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.211856][ T35] smc: removing ib device syz0 [ 121.345361][ T8] lo speed is unknown, defaulting to 1000 [ 121.768408][ T7672] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.791368][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.909796][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.005863][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.047656][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.054863][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.093305][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.100528][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.434403][ T7688] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.458600][ T7688] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.592361][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.654648][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.763388][ T29] audit: type=1804 audit(1718226917.223:8): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3262856400/syzkaller.egU0Pd/162/cgroup.controllers" dev="sda1" ino=1932 res=1 errno=0 [ 122.987448][ T7267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.036174][ T7267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.078624][ T7267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.121764][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.176718][ T7267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.236822][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.251575][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.260813][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.275492][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.284966][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.293372][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.633509][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.358650][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.434233][ T5118] Bluetooth: hci2: command tx timeout [ 125.570689][ T7267] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.612207][ T7261] veth0_vlan: entered promiscuous mode [ 125.642387][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 125.700619][ T7261] veth1_vlan: entered promiscuous mode [ 125.732481][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.739713][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.779898][ T7776] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 125.824855][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.832058][ T5215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.037026][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.046916][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.079345][ T7261] veth0_macvtap: entered promiscuous mode [ 126.089300][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.118779][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.139453][ T7706] bridge_slave_0: entered allmulticast mode [ 126.165799][ T7706] bridge_slave_0: entered promiscuous mode [ 126.193559][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.213916][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.223667][ T7798] xt_bpf: check failed: parse error [ 126.230255][ T7706] bridge_slave_1: entered allmulticast mode [ 126.252495][ T7706] bridge_slave_1: entered promiscuous mode [ 126.318585][ T7801] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 126.370281][ T7261] veth1_macvtap: entered promiscuous mode [ 126.406299][ T7706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.461624][ T7706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.551380][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.580410][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.593848][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.623755][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.637445][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.657009][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.670562][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.758771][ T7706] team0: Port device team_slave_0 added [ 126.805226][ T7706] team0: Port device team_slave_1 added [ 126.814083][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.865682][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.907111][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.943745][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.953608][ T7261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.990484][ T7261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.015657][ T7261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.113047][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.139671][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.166676][ T7706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.216020][ T7261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.236024][ T7261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.250931][ T7261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.270382][ T7261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.291021][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.320994][ T7706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.334118][ T7706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.364643][ T7706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.514005][ T5118] Bluetooth: hci2: command tx timeout [ 127.597685][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.729659][ T7706] hsr_slave_0: entered promiscuous mode [ 127.742494][ T7706] hsr_slave_1: entered promiscuous mode [ 127.773017][ T7706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.783536][ T7706] Cannot create hsr debugfs directory [ 127.842157][ T2882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.885940][ T2882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.971296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.993720][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.116493][ T7880] macsec1: entered promiscuous mode [ 128.153937][ T7880] vlan0: entered promiscuous mode [ 128.181468][ T7880] vlan0: left promiscuous mode [ 128.274744][ T7887] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 128.529471][ T7706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.565409][ T7267] veth0_vlan: entered promiscuous mode [ 128.592563][ T7267] veth1_vlan: entered promiscuous mode [ 128.666630][ T7706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.707184][ T7267] veth0_macvtap: entered promiscuous mode [ 128.736716][ T7267] veth1_macvtap: entered promiscuous mode [ 128.777791][ T7706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.827090][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.839123][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.849913][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.867663][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.880591][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.892446][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.910127][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.921041][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.936964][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.953193][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.965252][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.975888][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.986889][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.998266][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.009202][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.019570][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.031933][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.044400][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.076536][ T7706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.100256][ T7267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.109215][ T7267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.118241][ T7267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.128574][ T7267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.253119][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.274106][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.308726][ T7706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.319956][ T7706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.330487][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.333148][ T7706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.346744][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.358219][ T7706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.523105][ T7706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.552346][ T7706] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.567678][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.574855][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.594105][ T5118] Bluetooth: hci2: command tx timeout [ 129.596163][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.606635][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.652192][ T7706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.792104][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.837602][ T7706] veth0_vlan: entered promiscuous mode [ 129.856645][ T7706] veth1_vlan: entered promiscuous mode [ 129.891875][ T7706] veth0_macvtap: entered promiscuous mode [ 129.904929][ T7706] veth1_macvtap: entered promiscuous mode [ 129.977473][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.001943][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.013565][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.024520][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.045906][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.067355][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.081756][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.093926][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.108572][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.143027][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.158828][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.181386][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.210315][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.247844][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.271000][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.291887][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.324734][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.346055][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.359900][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.370636][ T7706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.381688][ T7706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.399908][ T7706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.449419][ T7706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.468414][ T7706] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.479060][ T7706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.487956][ T7706] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.805985][ T7958] xt_HMARK: proto mask must be zero with L3 mode [ 130.850674][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.895427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.009297][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.020867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.443652][ T7991] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 131.688246][ T5118] Bluetooth: hci2: command tx timeout [ 131.775152][ T8010] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.975969][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.009112][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.068678][ T8017] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 132.168351][ T8017] team0: Port device dummy0 added [ 132.900901][ T8077] tipc: Started in network mode [ 132.930866][ T8077] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 132.944702][ T8077] tipc: Enabled bearer , priority 10 [ 133.202944][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251907][ T8100] pimreg: entered allmulticast mode [ 133.292820][ T8105] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 133.456789][ T8115] tipc: Started in network mode [ 133.467244][ T8115] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 133.476625][ T8115] tipc: Enabled bearer , priority 10 [ 133.732620][ T8132] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 133.899161][ T8141] tipc: Enabling of bearer rejected, already enabled [ 134.068417][ T8152] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.071368][ T5164] tipc: Node number set to 10005162 [ 134.238921][ T8161] sctp: [Deprecated]: syz-executor.3 (pid 8161) Use of int in max_burst socket option deprecated. [ 134.238921][ T8161] Use struct sctp_assoc_value instead [ 134.283831][ T8167] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 134.495219][ T8176] tipc: Enabling of bearer rejected, already enabled [ 134.599945][ T8] tipc: Node number set to 10005162 [ 134.856170][ T8190] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 135.375101][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.421068][ T8225] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 135.436479][ T8227] SET target dimension over the limit! [ 135.481212][ T8225] team0: Port device dummy0 added [ 135.501660][ T8227] macvtap0: entered promiscuous mode [ 135.516501][ T8227] macvtap0: entered allmulticast mode [ 135.528239][ T8227] veth0_macvtap: entered allmulticast mode [ 135.538000][ T8229] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 135.737298][ T8240] hsr_slave_0: left promiscuous mode [ 135.779326][ T8240] hsr_slave_1: left promiscuous mode [ 136.190683][ T8270] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.865403][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.874620][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.883863][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.887150][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.899686][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.899721][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.916583][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.924846][ T5114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 166.935978][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.943189][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.955250][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.967809][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.144242][ T4491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.160910][ T4491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.177868][ T4491] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.196720][ T4491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.240316][ T4491] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.247752][ T4491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.554070][ T4491] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 167.563002][ T4491] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 167.571813][ T4491] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 167.581230][ T4491] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 167.591059][ T4491] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 167.599232][ T4491] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 167.981080][ T5114] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 167.997869][ T5114] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 168.011987][ T5114] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 168.021085][ T5114] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 168.030039][ T5114] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 168.042385][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 169.036219][ T5114] Bluetooth: hci5: command tx timeout [ 169.036244][ T4491] Bluetooth: hci6: command tx timeout [ 169.274097][ T5114] Bluetooth: hci7: command tx timeout [ 169.674127][ T5114] Bluetooth: hci8: command tx timeout [ 170.074262][ T5114] Bluetooth: hci9: command tx timeout [ 171.114254][ T5114] Bluetooth: hci6: command tx timeout [ 171.114417][ T4491] Bluetooth: hci5: command tx timeout [ 171.354413][ T4491] Bluetooth: hci7: command tx timeout [ 171.753882][ T4491] Bluetooth: hci8: command tx timeout [ 172.154232][ T4491] Bluetooth: hci9: command tx timeout [ 173.194026][ T5114] Bluetooth: hci6: command tx timeout [ 173.200684][ T4491] Bluetooth: hci5: command tx timeout [ 173.441514][ T4491] Bluetooth: hci7: command tx timeout [ 173.833890][ T4491] Bluetooth: hci8: command tx timeout [ 174.234200][ T4491] Bluetooth: hci9: command tx timeout [ 175.280665][ T4491] Bluetooth: hci5: command tx timeout [ 175.280696][ T5114] Bluetooth: hci6: command tx timeout [ 175.522733][ T5114] Bluetooth: hci7: command tx timeout [ 175.924111][ T5114] Bluetooth: hci8: command tx timeout [ 176.324108][ T5114] Bluetooth: hci9: command tx timeout [ 181.353923][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 194.646332][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.713897][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 231.980768][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 231.991533][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 232.000094][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 232.009161][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 232.011146][ T8374] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 232.017649][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 232.026902][ T8374] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 232.031985][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 232.040499][ T8374] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 232.053491][ T8374] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 232.067078][ T8374] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 232.075582][ T8374] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 232.110569][ T8374] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 232.123626][ T8374] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 232.134530][ T8374] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 232.155235][ T8374] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 232.169941][ T8374] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 232.177549][ T8374] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 232.558024][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 232.565539][ T8374] Bluetooth: hci0: command 0x0406 tx timeout [ 232.574742][ T5117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 232.585934][ T5117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 232.594891][ T5117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 232.603491][ T5117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 232.611695][ T5117] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 232.623810][ T5117] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 233.101026][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 233.120245][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 233.130822][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 233.145616][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 233.153485][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 233.162253][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 234.154197][ T53] Bluetooth: hci10: command tx timeout [ 234.162200][ T5117] Bluetooth: hci11: command tx timeout [ 234.233943][ T5117] Bluetooth: hci12: command tx timeout [ 234.714075][ T5117] Bluetooth: hci13: command tx timeout [ 235.194160][ T5117] Bluetooth: hci14: command tx timeout [ 236.245117][ T5117] Bluetooth: hci11: command tx timeout [ 236.250662][ T5117] Bluetooth: hci10: command tx timeout [ 236.313822][ T53] Bluetooth: hci12: command tx timeout [ 236.793810][ T53] Bluetooth: hci13: command tx timeout [ 237.273856][ T53] Bluetooth: hci14: command tx timeout [ 238.313997][ T5117] Bluetooth: hci11: command tx timeout [ 238.320650][ T53] Bluetooth: hci10: command tx timeout [ 238.394142][ T53] Bluetooth: hci12: command tx timeout [ 238.876803][ T53] Bluetooth: hci13: command tx timeout [ 239.353946][ T53] Bluetooth: hci14: command tx timeout [ 240.393987][ T53] Bluetooth: hci10: command tx timeout [ 240.399519][ T53] Bluetooth: hci11: command tx timeout [ 240.474036][ T53] Bluetooth: hci12: command tx timeout [ 240.953889][ T53] Bluetooth: hci13: command tx timeout [ 241.433938][ T53] Bluetooth: hci14: command tx timeout [ 247.913860][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 256.079333][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.993998][ T8390] Bluetooth: hci8: command 0x0406 tx timeout [ 294.005031][ T8375] Bluetooth: hci6: command 0x0406 tx timeout [ 294.013326][ T8390] Bluetooth: hci5: command 0x0406 tx timeout [ 294.015657][ T4491] Bluetooth: hci9: command 0x0406 tx timeout [ 294.019481][ T8375] Bluetooth: hci7: command 0x0406 tx timeout [ 297.060284][ T8374] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 297.073646][ T5117] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 297.081942][ T5117] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 297.090714][ T5117] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 297.103273][ T5117] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 297.104012][ T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 297.120262][ T8391] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 297.122273][ T53] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 297.135736][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 297.144348][ T53] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 297.154844][ T53] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 297.164048][ T53] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 297.196346][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 297.217032][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 297.239250][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 297.247684][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 297.265006][ T53] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 297.274438][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 297.644162][ T5117] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 297.653481][ T5117] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 297.661612][ T5117] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 297.670513][ T5117] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 297.679697][ T5117] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 297.687223][ T5117] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 298.162023][ T5117] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 298.177094][ T5117] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 298.185191][ T5117] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 298.194685][ T5117] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 298.202569][ T5117] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 298.210897][ T5117] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 298.953869][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 298.961544][ T30] Not tainted 6.10.0-rc2-syzkaller-00742-g91579c93a9b2 #0 [ 298.987950][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/12 21:18:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 298.999250][ T30] task:kworker/u8:1 state:D stack:21480 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 299.029962][ T30] Workqueue: netns cleanup_net [ 299.038655][ T30] Call Trace: [ 299.041986][ T30] [ 299.045560][ T30] __schedule+0x17e8/0x4a20 [ 299.050164][ T30] ? __pfx___schedule+0x10/0x10 [ 299.067409][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.072537][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 299.085535][ T30] ? kthread_data+0x52/0xd0 [ 299.090109][ T30] ? schedule+0x90/0x320 [ 299.099497][ T30] ? wq_worker_sleeping+0x66/0x240 [ 299.105093][ T30] ? schedule+0x90/0x320 [ 299.109366][ T30] schedule+0x14b/0x320 [ 299.124051][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.129568][ T30] __mutex_lock+0x6a4/0xd70 [ 299.141350][ T30] ? __mutex_lock+0x527/0xd70 [ 299.146407][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 299.151514][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.157272][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 299.162669][ T30] ? cleanup_net+0x427/0xcc0 [ 299.179552][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 299.193080][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 299.199777][ T30] cleanup_net+0x615/0xcc0 [ 299.209955][ T53] Bluetooth: hci16: command tx timeout [ 299.217963][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 299.222957][ T30] ? process_scheduled_works+0x945/0x1830 [ 299.229415][ T30] process_scheduled_works+0xa2c/0x1830 [ 299.235377][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.241399][ T30] ? assign_work+0x364/0x3d0 [ 299.246526][ T30] worker_thread+0x86d/0xd70 [ 299.251157][ T30] ? __kthread_parkme+0x169/0x1d0 [ 299.256688][ T30] ? __pfx_worker_thread+0x10/0x10 [ 299.261831][ T30] kthread+0x2f0/0x390 [ 299.266031][ T30] ? __pfx_worker_thread+0x10/0x10 [ 299.271157][ T30] ? __pfx_kthread+0x10/0x10 [ 299.276484][ T30] ret_from_fork+0x4b/0x80 [ 299.280973][ T30] ? __pfx_kthread+0x10/0x10 [ 299.285987][ T53] Bluetooth: hci15: command tx timeout [ 299.322783][ T30] ret_from_fork_asm+0x1a/0x30 [ 299.332159][ T30] [ 299.342477][ T30] INFO: task syz-executor.2:8290 blocked for more than 143 seconds. [ 299.363921][ T53] Bluetooth: hci17: command tx timeout [ 299.364145][ T30] Not tainted 6.10.0-rc2-syzkaller-00742-g91579c93a9b2 #0 [ 299.400209][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.419591][ T30] task:syz-executor.2 state:D stack:26800 pid:8290 tgid:8288 ppid:7261 flags:0x00000006 [ 299.451459][ T30] Call Trace: [ 299.463950][ T30] [ 299.466927][ T30] __schedule+0x17e8/0x4a20 [ 299.471472][ T30] ? __pfx___schedule+0x10/0x10 [ 299.493963][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.499043][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 299.517803][ T30] ? schedule+0x90/0x320 [ 299.523189][ T30] schedule+0x14b/0x320 [ 29