last executing test programs: 32.800918476s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 32.710678411s ago: executing program 0: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x12, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) 31.747486927s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x5, 0x0, &(0x7f0000000000)) 31.667529983s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0xfffffffffffffffc, &(0x7f0000000080)=0x4c) 31.584315583s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x6f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) socket$netlink(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000140)='f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x15}, 0x80) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000380)=0x20) 31.569206145s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}}, [@migrate={0x9c, 0x11, [{@in6=@mcast2, @in6=@remote, @in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@local, @in6=@private1, @in=@private, @in=@private}]}]}, 0xec}}, 0x0) 31.490352605s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xe6, &(0x7f0000000000), &(0x7f0000000240)=0x4) 31.166729586s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/56, 0x38}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003440)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x5, 0x0, 0x0, 0x0, @binary='L'}]}, 0x24}}, 0x0) 31.039957484s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0xa}, 0x90) 30.997361392s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001a001f001007f4f9002304000a04f511080004000201000208001e8005000000", 0x24) 30.960476122s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.91073166s ago: executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x76, &(0x7f0000000180)={r3}, &(0x7f00000001c0)=0x8) 30.905616094s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e17aa31076b876c1d0ec0037ea60864160af36504001a0004001d00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 30.824819944s ago: executing program 1: syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600a84e60014040000000000000000000000fffffffffffffe8000000000000000000000000000aa"], 0x0) 30.802707005s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9b110000}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x0) 30.767837933s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x300) 30.730609032s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0xfffffffffffffffc, &(0x7f0000000080)=0x4c) 30.662862555s ago: executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.659676908s ago: executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000440)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000180)) 30.585124831s ago: executing program 4: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 30.545517524s ago: executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1d}, {0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) vmsplice(r3, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffffffffffed8, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_EGRESS_BLOCK]}, 0x58}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000001180016801400018010000600000100000000000000040000140014"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003"], 0xec}}, 0x0) 30.523280455s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) 30.445375855s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c0001"], 0x38}}, 0x0) 30.401311935s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='ext4_da_reserve_space\x00'}, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bind$inet6(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x34, r3, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="100000f88fd73f7720ac87509087005e1000"/27], 0x10}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14399029d798a60000001900010000000000000000001d020014"], 0x14}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) write$binfmt_script(r5, &(0x7f0000000240), 0xfecc) write$cgroup_type(r4, &(0x7f0000000000), 0x182200) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3f6, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x80) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180011000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 30.009461332s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}}, 0x0) 632.354999ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 519.064575ms ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x3}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}}, 0x0) 429.605373ms ago: executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000340)="06316e31d54efd95", 0x8}], 0x2}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) 361.242765ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0xfffffffffffffffc, &(0x7f0000000080)=0x4c) 0s ago: executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x20000000}, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x27, &(0x7f0000000340)=""/222}, 0x21) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. 2024/06/07 15:42:22 fuzzer started 2024/06/07 15:42:22 dialing manager at 10.128.0.169:30018 [ 55.202268][ T5088] cgroup: Unknown subsys name 'net' [ 55.392608][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/07 15:42:23 starting 5 executor processes [ 56.400503][ T5099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.201971][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.210625][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.230450][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.241387][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.251220][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.260850][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.268308][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.275755][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.276208][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.285296][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.292750][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.305205][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.305708][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.314729][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.320392][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.333814][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.342899][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.343503][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.352145][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.357933][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.364058][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.371472][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.378559][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.394028][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.396155][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.401824][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.408567][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.424672][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.431905][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.439400][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.883558][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 58.100634][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 58.112231][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 58.122529][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.129797][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.137149][ T5113] bridge_slave_0: entered allmulticast mode [ 58.145236][ T5113] bridge_slave_0: entered promiscuous mode [ 58.156521][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.163731][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.171009][ T5113] bridge_slave_1: entered allmulticast mode [ 58.178350][ T5113] bridge_slave_1: entered promiscuous mode [ 58.195273][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 58.327314][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.339502][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.424559][ T5113] team0: Port device team_slave_0 added [ 58.491259][ T5113] team0: Port device team_slave_1 added [ 58.506955][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 58.516576][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.524576][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.532204][ T5108] bridge_slave_0: entered allmulticast mode [ 58.539112][ T5108] bridge_slave_0: entered promiscuous mode [ 58.546270][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.553484][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.563101][ T5107] bridge_slave_0: entered allmulticast mode [ 58.570295][ T5107] bridge_slave_0: entered promiscuous mode [ 58.578235][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.585534][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.592855][ T5107] bridge_slave_1: entered allmulticast mode [ 58.600178][ T5107] bridge_slave_1: entered promiscuous mode [ 58.616935][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.624140][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.631607][ T5114] bridge_slave_0: entered allmulticast mode [ 58.638344][ T5114] bridge_slave_0: entered promiscuous mode [ 58.646520][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.653776][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.661047][ T5114] bridge_slave_1: entered allmulticast mode [ 58.667769][ T5114] bridge_slave_1: entered promiscuous mode [ 58.681427][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.688571][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.695994][ T5108] bridge_slave_1: entered allmulticast mode [ 58.702829][ T5108] bridge_slave_1: entered promiscuous mode [ 58.771014][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.805133][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.815343][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.825146][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.852033][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.877288][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.902337][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.915765][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.933182][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.940281][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.966283][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.997814][ T5114] team0: Port device team_slave_0 added [ 59.006082][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.038259][ T5114] team0: Port device team_slave_1 added [ 59.074911][ T5107] team0: Port device team_slave_0 added [ 59.114127][ T5107] team0: Port device team_slave_1 added [ 59.150135][ T5108] team0: Port device team_slave_0 added [ 59.187558][ T5113] hsr_slave_0: entered promiscuous mode [ 59.194764][ T5113] hsr_slave_1: entered promiscuous mode [ 59.211909][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.219235][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.226376][ T5118] bridge_slave_0: entered allmulticast mode [ 59.234007][ T5118] bridge_slave_0: entered promiscuous mode [ 59.242236][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.249551][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.275548][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.288407][ T5108] team0: Port device team_slave_1 added [ 59.304838][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.313880][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.340375][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.352684][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.360904][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.368079][ T5118] bridge_slave_1: entered allmulticast mode [ 59.375349][ T5118] bridge_slave_1: entered promiscuous mode [ 59.392766][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.400031][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.426129][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.445315][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.452360][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.479218][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.483649][ T53] Bluetooth: hci3: command tx timeout [ 59.522020][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.529082][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.555269][ T53] Bluetooth: hci2: command tx timeout [ 59.555724][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.561272][ T5123] Bluetooth: hci0: command tx timeout [ 59.571801][ T5111] Bluetooth: hci1: command tx timeout [ 59.577218][ T4489] Bluetooth: hci4: command tx timeout [ 59.591896][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.599149][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.625460][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.655299][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.669258][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.736824][ T5118] team0: Port device team_slave_0 added [ 59.761099][ T5107] hsr_slave_0: entered promiscuous mode [ 59.767537][ T5107] hsr_slave_1: entered promiscuous mode [ 59.777060][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.785224][ T5107] Cannot create hsr debugfs directory [ 59.814578][ T5118] team0: Port device team_slave_1 added [ 59.886816][ T5114] hsr_slave_0: entered promiscuous mode [ 59.893701][ T5114] hsr_slave_1: entered promiscuous mode [ 59.900833][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.908418][ T5114] Cannot create hsr debugfs directory [ 59.954007][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.961920][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.988228][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.001567][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.008522][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.035132][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.050019][ T5108] hsr_slave_0: entered promiscuous mode [ 60.056757][ T5108] hsr_slave_1: entered promiscuous mode [ 60.062915][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.070753][ T5108] Cannot create hsr debugfs directory [ 60.245651][ T5118] hsr_slave_0: entered promiscuous mode [ 60.252639][ T5118] hsr_slave_1: entered promiscuous mode [ 60.262717][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.270492][ T5118] Cannot create hsr debugfs directory [ 60.454380][ T5113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.479937][ T5113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.525221][ T5113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.544728][ T5113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.595285][ T5107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.615475][ T5107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.625776][ T5107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.651725][ T5107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.714081][ T5114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.745565][ T5114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.758971][ T5114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.800265][ T5114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.812432][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.826479][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.836192][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.880871][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.917236][ T5118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.941368][ T5118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.966059][ T5118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.001522][ T5118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.018226][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.104234][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.134808][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.142179][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.213348][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.222614][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.229814][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.297039][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.350376][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.363529][ T5113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.380404][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.396111][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.403240][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.430957][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.466253][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.488105][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.495423][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.510958][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.518123][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.535275][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.542484][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.551149][ T4489] Bluetooth: hci3: command tx timeout [ 61.597909][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.605118][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.619089][ T4489] Bluetooth: hci4: command tx timeout [ 61.619160][ T5123] Bluetooth: hci0: command tx timeout [ 61.624505][ T4489] Bluetooth: hci2: command tx timeout [ 61.630343][ T5123] Bluetooth: hci1: command tx timeout [ 61.690167][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.697321][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.777751][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.816618][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.898227][ T5108] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.983289][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.060216][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.067389][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.078556][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.085791][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.137961][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.213841][ T5113] veth0_vlan: entered promiscuous mode [ 62.281214][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.314364][ T5113] veth1_vlan: entered promiscuous mode [ 62.348361][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.437241][ T5113] veth0_macvtap: entered promiscuous mode [ 62.470197][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.496079][ T5113] veth1_macvtap: entered promiscuous mode [ 62.567796][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.606204][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.624942][ T5113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.634237][ T5113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.645550][ T5113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.654789][ T5113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.687847][ T5114] veth0_vlan: entered promiscuous mode [ 62.744624][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.759626][ T5114] veth1_vlan: entered promiscuous mode [ 62.778335][ T5108] veth0_vlan: entered promiscuous mode [ 62.826717][ T5108] veth1_vlan: entered promiscuous mode [ 62.840439][ T5107] veth0_vlan: entered promiscuous mode [ 62.882341][ T5107] veth1_vlan: entered promiscuous mode [ 62.981756][ T5118] veth0_vlan: entered promiscuous mode [ 62.990376][ T5107] veth0_macvtap: entered promiscuous mode [ 63.005433][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.030754][ T5114] veth0_macvtap: entered promiscuous mode [ 63.040635][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.072129][ T5118] veth1_vlan: entered promiscuous mode [ 63.086976][ T5114] veth1_macvtap: entered promiscuous mode [ 63.106810][ T5107] veth1_macvtap: entered promiscuous mode [ 63.137970][ T5108] veth0_macvtap: entered promiscuous mode [ 63.160309][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.168162][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.172676][ T5108] veth1_macvtap: entered promiscuous mode [ 63.193696][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.204601][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.216493][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.250665][ T5118] veth0_macvtap: entered promiscuous mode [ 63.264390][ T5118] veth1_macvtap: entered promiscuous mode [ 63.273628][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.285166][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.298050][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.316046][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.328073][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.339579][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.350097][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.361069][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.382893][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.394003][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.404203][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.414843][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.425050][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.435580][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.447538][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.459434][ T5114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.468378][ T5114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.477374][ T5114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.486427][ T5114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.506573][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.525829][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.536398][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.559941][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.577552][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.603313][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.614823][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.625296][ T4489] Bluetooth: hci3: command tx timeout [ 63.633485][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.661989][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.677086][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.693434][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.699864][ T4489] Bluetooth: hci2: command tx timeout [ 63.708843][ T53] Bluetooth: hci1: command tx timeout [ 63.708970][ T5111] Bluetooth: hci4: command tx timeout [ 63.723205][ T5123] Bluetooth: hci0: command tx timeout [ 63.731886][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.745448][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.754644][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.764505][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.773260][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.814371][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.827908][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.838409][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.850695][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.863398][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.874030][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.884326][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.894917][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.906031][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.914814][ T5196] bridge0: entered promiscuous mode [ 63.920881][ T5196] bridge0: entered allmulticast mode [ 63.937483][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.951590][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.962150][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.974066][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.005881][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.034954][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.060594][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.075425][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.102232][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.119657][ T5107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.128379][ T5107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.138427][ T5107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.147168][ T5107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.178465][ T5118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.193911][ T5118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.202716][ T5118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.211583][ T5118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.413600][ T4158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.442579][ T4158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.513042][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.536025][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.569674][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.577537][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.617403][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.640861][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.729889][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.745762][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.776880][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.795204][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.808870][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.825353][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.943623][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.962620][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.693843][ T5240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.710810][ T5123] Bluetooth: hci3: command tx timeout [ 65.742204][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.750139][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.778922][ T5123] Bluetooth: hci2: command tx timeout [ 65.784409][ T5111] Bluetooth: hci1: command tx timeout [ 65.790714][ T5123] Bluetooth: hci0: command tx timeout [ 65.793188][ T4489] Bluetooth: hci4: command tx timeout [ 65.872179][ T5247] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.899067][ T5247] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.118128][ T5255] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 66.831712][ T5276] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 69.037612][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.081005][ T5347] syz_tun: entered promiscuous mode [ 69.090928][ T5347] macsec1: entered promiscuous mode [ 70.350005][ T5379] Zero length message leads to an empty skb [ 70.402540][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.774882][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.110447][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 71.409193][ T5411] Bluetooth: MGMT ver 1.22 [ 71.485433][ T5417] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 71.541744][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.603192][ T29] audit: type=1804 audit(1717774958.967:2): pid=5423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1708371588/syzkaller.iLD8ac/12/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 71.859674][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.866389][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.885444][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f720000: rx timeout, send abort [ 71.908236][ T5430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.419308][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805f720000: abort rx timeout. Force session deactivation [ 72.511902][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 72.618880][ T5450] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 73.226413][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.268508][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802608b400: rx timeout, send abort [ 73.776925][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802608b400: abort rx timeout. Force session deactivation [ 74.120719][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 74.877334][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c88bc00: rx timeout, send abort [ 75.041813][ T5542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.385753][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c88bc00: abort rx timeout. Force session deactivation [ 75.389219][ T5565] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.640982][ T5574] ip6tnl1: entered promiscuous mode [ 75.656318][ T5574] ip6tnl1: entered allmulticast mode [ 75.792595][ T5586] Bluetooth: MGMT ver 1.22 [ 76.909697][ T785] cfg80211: failed to load regulatory.db [ 77.179139][ T5655] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.600801][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.742453][ T5682] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 77.758879][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.788216][ T5680] syzkaller1: entered promiscuous mode [ 77.809841][ T5680] syzkaller1: entered allmulticast mode [ 77.873014][ T5687] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.476782][ T5721] sock: sock_timestamping_bind_phc: sock not bind to device [ 78.488146][ T5719] No such timeout policy "syz0" [ 78.590467][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.599565][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.023373][ T5751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.066724][ T5751] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.075021][ T5755] net_ratelimit: 2 callbacks suppressed [ 79.075043][ T5755] netlink: zone id is out of range [ 79.090174][ T5757] No such timeout policy "syz0" [ 79.094179][ T5755] netlink: zone id is out of range [ 79.102291][ T5755] netlink: zone id is out of range [ 79.113134][ T5755] netlink: zone id is out of range [ 79.119108][ T5755] netlink: zone id is out of range [ 79.130369][ T5755] netlink: zone id is out of range [ 79.135835][ T5755] netlink: zone id is out of range [ 79.164927][ T5755] netlink: zone id is out of range [ 79.187239][ T5755] netlink: zone id is out of range [ 79.193876][ T5755] netlink: zone id is out of range [ 79.499053][ T5776] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 79.520817][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.546034][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.582422][ T5783] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.689470][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.857587][ T5801] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 80.062426][ T5811] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 80.099466][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 80.412370][ T5832] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 81.019706][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.031694][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.043822][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.056216][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.065418][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.073249][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.155372][ T5862] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 81.277180][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.373813][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.437097][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.503193][ T5877] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.581142][ T5878] bond1: entered promiscuous mode [ 81.628542][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.658441][ T5883] ip6gretap1: entered promiscuous mode [ 81.665471][ T5883] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 81.754035][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.787762][ T5878] bond1: entered allmulticast mode [ 81.793417][ T5878] ip6gretap1: entered allmulticast mode [ 81.800885][ T5878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.052287][ T11] bridge_slave_1: left allmulticast mode [ 82.058179][ T11] bridge_slave_1: left promiscuous mode [ 82.078328][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.091155][ T11] bridge_slave_0: left allmulticast mode [ 82.096845][ T11] bridge_slave_0: left promiscuous mode [ 82.119653][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.244874][ T29] audit: type=1804 audit(1717774969.607:3): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972313730383337313538382F73797A6B616C6C65722E694C443861632F36332F2321200A dev="sda1" ino=1941 res=1 errno=0 [ 82.907220][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.923473][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.937186][ T11] bond0 (unregistering): Released all slaves [ 82.948285][ T5915] __nla_validate_parse: 5 callbacks suppressed [ 82.948310][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.980983][ T5915] bond2: entered promiscuous mode [ 82.986785][ T5917] sit0: entered promiscuous mode [ 83.021242][ T5917] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 83.045253][ T5917] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.089970][ T5922] ip6gretap2: entered promiscuous mode [ 83.096118][ T5922] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 83.106945][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.139314][ T53] Bluetooth: hci1: command tx timeout [ 83.149862][ T5924] bond2: entered allmulticast mode [ 83.155119][ T5924] ip6gretap2: entered allmulticast mode [ 83.166472][ T5924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.174961][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.185446][ T5935] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.211195][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 83.867502][ T11] hsr_slave_0: left promiscuous mode [ 83.896489][ T11] hsr_slave_1: left promiscuous mode [ 83.907716][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.916458][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.928565][ T5969] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 83.938597][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.946427][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.980525][ T11] veth1_macvtap: left promiscuous mode [ 83.990989][ T11] veth0_macvtap: left promiscuous mode [ 84.011543][ T11] veth1_vlan: left promiscuous mode [ 84.022055][ T11] veth0_vlan: left promiscuous mode [ 84.259572][ T12] wlan1: Trigger new scan to find an IBSS to join [ 84.544327][ T11] team0 (unregistering): Port device team_slave_1 removed [ 84.609065][ T11] team0 (unregistering): Port device team_slave_0 removed [ 84.915542][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.924133][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.933004][ T5851] bridge_slave_0: entered allmulticast mode [ 84.943754][ T5851] bridge_slave_0: entered promiscuous mode [ 84.967661][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.988287][ T5971] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.005621][ T5981] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 85.041428][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.069846][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.077209][ T5851] bridge_slave_1: entered allmulticast mode [ 85.116536][ T5851] bridge_slave_1: entered promiscuous mode [ 85.224982][ T53] Bluetooth: hci1: command tx timeout [ 85.297628][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.330966][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.495084][ T5851] team0: Port device team_slave_0 added [ 85.516962][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.534290][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.564009][ T6008] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.592560][ T5851] team0: Port device team_slave_1 added [ 85.619526][ T6006] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 85.699576][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.706580][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.751495][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.766919][ T6012] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 85.786369][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.793732][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.831215][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.925731][ T5851] hsr_slave_0: entered promiscuous mode [ 85.934451][ T5851] hsr_slave_1: entered promiscuous mode [ 85.940654][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.948213][ T5851] Cannot create hsr debugfs directory [ 86.520848][ T6030] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 86.551036][ T6027] bond_slave_0: entered promiscuous mode [ 86.556983][ T6027] bond_slave_1: entered promiscuous mode [ 86.591218][ T6027] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.621695][ T6027] bond_slave_0: left promiscuous mode [ 86.627320][ T6027] bond_slave_1: left promiscuous mode [ 86.695356][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.709227][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.725196][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.737883][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.892005][ T6049] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 86.919035][ T6049] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 87.060326][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.124874][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.159059][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.166242][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.206228][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.213461][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.247347][ T2862] wlan1: Trigger new scan to find an IBSS to join [ 87.299400][ T4489] Bluetooth: hci1: command tx timeout [ 87.322802][ T6068] bond_slave_0: entered promiscuous mode [ 87.328634][ T6068] bond_slave_1: entered promiscuous mode [ 87.347687][ T6068] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.369903][ T6068] bond_slave_0: left promiscuous mode [ 87.375467][ T6068] bond_slave_1: left promiscuous mode [ 87.498169][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.530623][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.736094][ T6086] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 87.787158][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.830529][ T6086] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 87.873624][ T6095] tipc: Enabling of bearer rejected, failed to enable media [ 88.028210][ T5851] veth0_vlan: entered promiscuous mode [ 88.069505][ T5851] veth1_vlan: entered promiscuous mode [ 88.147117][ T6107] __nla_validate_parse: 5 callbacks suppressed [ 88.147137][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.206966][ T5851] veth0_macvtap: entered promiscuous mode [ 88.255117][ T5851] veth1_macvtap: entered promiscuous mode [ 88.301282][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.325978][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.345199][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.367103][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.390636][ T6122] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 88.398982][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.399108][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.399121][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.399135][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.402400][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.512957][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.523569][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.579447][ T6128] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 88.587718][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.607477][ T6128] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.617470][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.638129][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.668725][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.710437][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.727835][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.756316][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.783888][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.809302][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.822197][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.848678][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.889543][ T6131] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 88.951392][ T6131] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 89.114469][ T6154] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 89.198497][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.237171][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.287533][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.308198][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.323639][ T6164] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 89.361519][ T6164] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.379448][ T4489] Bluetooth: hci1: command 0x0419 tx timeout [ 89.875498][ T6193] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 89.924839][ T6198] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 89.948888][ T6193] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 89.966322][ T6198] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.264279][ T11] wlan1: Trigger new scan to find an IBSS to join [ 90.432798][ T6225] bond_slave_0: entered promiscuous mode [ 90.438531][ T6225] bond_slave_1: entered promiscuous mode [ 90.486395][ T6225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.549635][ T6225] bond_slave_0: left promiscuous mode [ 90.555160][ T6225] bond_slave_1: left promiscuous mode [ 90.942896][ T6254] tipc: Started in network mode [ 90.954754][ T6254] tipc: Node identity fe800000000000000000000000000032, cluster identity 4711 [ 90.966108][ T6254] tipc: Enabled bearer , priority 10 [ 91.160084][ T6260] net_ratelimit: 298 callbacks suppressed [ 91.160106][ T6260] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.230814][ T12] wlan1: Creating new IBSS network, BSSID c6:ee:64:b1:4a:0d [ 91.287109][ T6272] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 91.316539][ T6272] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.320090][ T6277] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 91.459773][ T53] Bluetooth: hci1: command 0x0419 tx timeout [ 91.507663][ T6288] tipc: Started in network mode [ 91.513777][ T6288] tipc: Node identity fe800000000000000000000000000032, cluster identity 4711 [ 91.527827][ T6288] tipc: Enabled bearer , priority 10 [ 91.826631][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.876768][ T6295] sch_fq: defrate 2 ignored. [ 92.065745][ T6309] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.080447][ T785] tipc: Node number set to 4269801522 [ 92.170279][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.427192][ T6334] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.610506][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.639348][ T5120] tipc: Node number set to 4269801522 [ 93.544830][ T4489] Bluetooth: hci1: command 0x0419 tx timeout [ 94.184528][ T6420] validate_nla: 3 callbacks suppressed [ 94.184549][ T6420] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 94.205550][ T6415] __nla_validate_parse: 1 callbacks suppressed [ 94.205570][ T6415] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.485193][ T6436] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 94.494214][ T6436] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 94.752041][ T6449] unsupported nlmsg_type 40 [ 94.996639][ T6462] sctp: [Deprecated]: syz-executor.1 (pid 6462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.996639][ T6462] Use struct sctp_sack_info instead [ 95.147687][ T6468] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.623354][ T53] Bluetooth: hci1: command 0x0419 tx timeout [ 95.679573][ T6494] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.721159][ T6494] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 95.806525][ T6502] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 95.962939][ T6512] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 95.972888][ T6512] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 96.373656][ T6530] sctp: [Deprecated]: syz-executor.0 (pid 6530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.373656][ T6530] Use struct sctp_sack_info instead [ 96.932771][ T6568] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 97.083161][ T6575] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.112356][ T6580] dccp_invalid_packet: P.Data Offset(172) too large [ 97.119257][ T29] audit: type=1800 audit(1717774984.477:4): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=87 dev="sda1" ino=1942 res=0 errno=0 [ 97.207921][ T29] audit: type=1800 audit(1717774984.517:5): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=87 dev="sda1" ino=1942 res=0 errno=0 [ 97.539873][ T6608] dccp_invalid_packet: P.Data Offset(172) too large [ 97.611976][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.917664][ T6637] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 97.942610][ T6640] dccp_invalid_packet: P.Data Offset(172) too large [ 98.087994][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.307816][ T29] audit: type=1800 audit(1717774985.667:6): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=87 dev="sda1" ino=1965 res=0 errno=0 [ 98.336964][ T29] audit: type=1800 audit(1717774985.697:7): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=87 dev="sda1" ino=1965 res=0 errno=0 [ 98.424402][ T6665] dccp_invalid_packet: P.Data Offset(172) too large [ 98.581462][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.799833][ T6686] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 98.800934][ T6688] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.090434][ T6708] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.099999][ T6708] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.109119][ T6708] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.117844][ T6708] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.153373][ T6708] vxlan0: entered promiscuous mode [ 99.173439][ T6708] vxlan0: entered allmulticast mode [ 99.479497][ T6725] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.520579][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.541325][ T6731] tc_dump_action: action bad kind [ 99.675928][ T6736] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.684842][ T6736] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.694196][ T6736] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.703849][ T6736] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.725824][ T6736] vxlan0: entered promiscuous mode [ 99.734414][ T6736] vxlan0: entered allmulticast mode [ 99.907510][ T6755] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 100.035361][ T6762] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.289715][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.339343][ T6772] vlan2: entered promiscuous mode [ 100.357213][ T6772] batadv0: entered promiscuous mode [ 100.374346][ T6772] batadv0: left promiscuous mode [ 100.420927][ T6778] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.429903][ T6778] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.438678][ T6778] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.447400][ T6778] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.456597][ T6778] vxlan0: entered promiscuous mode [ 100.491840][ T6787] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 100.493050][ T6778] vxlan0: entered allmulticast mode [ 100.828194][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.847930][ T6805] tc_dump_action: action bad kind [ 101.009912][ T6815] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 101.022508][ T6819] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 101.190310][ T6830] Bluetooth: MGMT ver 1.22 [ 101.499326][ T6850] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 101.511022][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.555079][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.564712][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.648279][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.695946][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.962630][ T6872] macsec2: entered promiscuous mode [ 101.999053][ T6872] macvlan1: entered promiscuous mode [ 102.019118][ T6872] macsec2: entered allmulticast mode [ 102.040439][ T6872] macvlan1: entered allmulticast mode [ 102.052662][ T6872] veth1_vlan: entered allmulticast mode [ 102.086937][ T6872] macvlan1: left allmulticast mode [ 102.099957][ T6872] veth1_vlan: left allmulticast mode [ 102.121498][ T6872] macvlan1: left promiscuous mode [ 102.383634][ T6889] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 102.536004][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.568253][ T6889] bond0: (slave team0): Enslaving as an active interface with an up link [ 102.588380][ T6894] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 102.615453][ T6894] bond0: (slave team0): Releasing backup interface [ 102.680115][ T6894] bridge0: port 3(team0) entered blocking state [ 102.693421][ T6894] bridge0: port 3(team0) entered disabled state [ 102.707790][ T6894] team0: entered allmulticast mode [ 102.720708][ T6894] team_slave_0: entered allmulticast mode [ 102.734450][ T6894] team_slave_1: entered allmulticast mode [ 102.754346][ T6894] team0: entered promiscuous mode [ 102.776531][ T6894] team_slave_0: entered promiscuous mode [ 102.803078][ T6894] team_slave_1: entered promiscuous mode [ 102.816261][ T6921] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 102.966409][ T6929] macsec2: entered promiscuous mode [ 102.977477][ T6929] macvlan1: entered promiscuous mode [ 102.983888][ T6929] macsec2: entered allmulticast mode [ 103.000806][ T6929] macvlan1: entered allmulticast mode [ 103.025949][ T6929] veth1_vlan: entered allmulticast mode [ 103.033643][ T6931] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 103.053338][ T6929] macvlan1: left allmulticast mode [ 103.086606][ T6929] veth1_vlan: left allmulticast mode [ 103.098931][ T6931] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 103.107294][ T6929] macvlan1: left promiscuous mode [ 103.405405][ T6956] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 103.719989][ T6956] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.765097][ T6956] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.800992][ T6963] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 103.826934][ T6963] bond0: (slave team0): Releasing backup interface [ 103.863870][ T6963] bridge0: port 3(team0) entered blocking state [ 103.889659][ T6963] bridge0: port 3(team0) entered disabled state [ 103.905244][ T6963] team0: entered allmulticast mode [ 103.912975][ T6963] team_slave_0: entered allmulticast mode [ 103.934643][ T6963] team_slave_1: entered allmulticast mode [ 103.945858][ T6963] team0: entered promiscuous mode [ 103.956103][ T6963] team_slave_0: entered promiscuous mode [ 103.975510][ T6963] team_slave_1: entered promiscuous mode [ 103.995187][ T6981] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 104.035841][ T6981] batman_adv: batadv0: Adding interface: team0 [ 104.059028][ T6981] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.100231][ T6981] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 104.662853][ T7027] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 104.708814][ T7029] __nla_validate_parse: 9 callbacks suppressed [ 104.708843][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.736699][ T7029] nbd: socks must be embedded in a SOCK_ITEM attr [ 104.919886][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.940243][ T7027] bond0: (slave team0): Enslaving as an active interface with an up link [ 104.964870][ T7032] bond0: (slave team0): Releasing backup interface [ 105.001624][ T7032] bridge0: port 3(team0) entered blocking state [ 105.008192][ T7032] bridge0: port 3(team0) entered disabled state [ 105.015864][ T7032] team0: entered allmulticast mode [ 105.021179][ T7032] team_slave_0: entered allmulticast mode [ 105.027098][ T7032] team_slave_1: entered allmulticast mode [ 105.042964][ T7032] team0: entered promiscuous mode [ 105.051509][ T7032] team_slave_0: entered promiscuous mode [ 105.062504][ T7032] team_slave_1: entered promiscuous mode [ 105.090890][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e485000: rx timeout, send abort [ 105.113366][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c22c800: rx timeout, send abort [ 105.204697][ T7056] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.223524][ T7056] ip6gre0: entered promiscuous mode [ 105.244166][ T7056] ip6gre0: entered allmulticast mode [ 105.259224][ T7056] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 105.415542][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.551007][ T29] audit: type=1804 audit(1717774992.917:8): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2293561617/syzkaller.q9mxRC/84/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 105.593790][ T7077] team0: left allmulticast mode [ 105.599315][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802e485000: abort rx timeout. Force session deactivation [ 105.622820][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c22c800: abort rx timeout. Force session deactivation [ 105.644622][ T7077] team_slave_0: left allmulticast mode [ 105.658716][ T7077] team_slave_1: left allmulticast mode [ 105.664929][ T7077] team0: left promiscuous mode [ 105.670359][ T7077] team_slave_0: left promiscuous mode [ 105.676270][ T7077] team_slave_1: left promiscuous mode [ 105.708192][ T7077] bridge0: port 3(team0) entered disabled state [ 105.752926][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.771078][ T7077] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.849454][ T7078] bond0: (slave team0): Releasing backup interface [ 105.884935][ T7078] bridge0: port 3(team0) entered blocking state [ 105.891817][ T7078] bridge0: port 3(team0) entered disabled state [ 105.907912][ T7078] team0: entered allmulticast mode [ 105.917726][ T7078] team_slave_0: entered allmulticast mode [ 105.925024][ T7078] team_slave_1: entered allmulticast mode [ 105.942112][ T7078] team0: entered promiscuous mode [ 105.956257][ T7078] team_slave_0: entered promiscuous mode [ 105.962403][ T7078] team_slave_1: entered promiscuous mode [ 106.066809][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.088839][ T29] audit: type=1804 audit(1717774993.447:9): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1708371588/syzkaller.iLD8ac/166/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 106.312856][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.340108][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.351843][ T7104] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.907306][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.962505][ T29] audit: type=1804 audit(1717774994.327:10): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3318595357/syzkaller.fjbspf/191/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 107.068253][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.086010][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.104229][ T7129] nbd: socks must be embedded in a SOCK_ITEM attr [ 107.422270][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.535550][ T7155] validate_nla: 4 callbacks suppressed [ 107.537870][ T7155] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 108.585557][ T7196] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 108.670789][ T7196] batman_adv: batadv0: Adding interface: team0 [ 108.694084][ T7196] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.730398][ T7196] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 109.184226][ T7226] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 109.215772][ T7226] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.225030][ T7226] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.233897][ T7226] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.242690][ T7226] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.271129][ T7226] vxlan0: entered promiscuous mode [ 109.802883][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029a0a400: rx timeout, send abort [ 109.824845][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029a08c00: rx timeout, send abort [ 110.037715][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880614cb800: rx timeout, send abort [ 110.311244][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029a0a400: abort rx timeout. Force session deactivation [ 110.333213][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029a08c00: abort rx timeout. Force session deactivation [ 110.454337][ T7243] __nla_validate_parse: 3 callbacks suppressed [ 110.454358][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.546117][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880614cb800: abort rx timeout. Force session deactivation [ 111.189043][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.201786][ T7258] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 111.233593][ T7258] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.242847][ T7258] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.252054][ T7258] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.261280][ T7258] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.272817][ T7258] vxlan0: entered promiscuous mode [ 111.325305][ T29] audit: type=1804 audit(1717774998.687:11): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1173042419/syzkaller.pN74pp/194/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 111.559031][ T7270] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 112.099504][ T7287] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.798564][ T7330] No such timeout policy "syz0" [ 113.245375][ T7360] No such timeout policy "syz0" [ 113.431930][ T7370] geneve1: entered promiscuous mode [ 113.437284][ T7370] geneve1: entered allmulticast mode [ 113.480765][ T7370] team0: Port device geneve1 added [ 113.570526][ T7375] dvmrp0: entered allmulticast mode [ 113.593358][ T7380] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.834139][ T7392] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 113.890396][ T7392] team0: Device veth1_macvtap failed to register rx_handler [ 113.915342][ T7400] No such timeout policy "syz0" [ 113.947130][ T7402] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 113.976486][ T7402] bond0: entered promiscuous mode [ 113.988745][ T7402] bond_slave_0: entered promiscuous mode [ 113.995145][ T7402] bond_slave_1: entered promiscuous mode [ 114.033188][ T7401] bond0: left promiscuous mode [ 114.038529][ T7401] bond_slave_0: left promiscuous mode [ 114.054267][ T7401] bond_slave_1: left promiscuous mode [ 114.147903][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a3a9000: rx timeout, send abort [ 114.156434][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b7ce400: rx timeout, send abort [ 114.165149][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802a3a9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.180645][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807b7ce400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 114.720900][ T7433] tc_dump_action: action bad kind [ 114.754620][ T7435] netlink: 340 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.371793][ T7461] netlink: 340 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.418955][ T7465] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 115.847984][ T7493] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 115.877982][ T7488] dvmrp0: entered allmulticast mode [ 115.975700][ T7502] tc_dump_action: action bad kind [ 116.030825][ T7504] pim6reg: entered allmulticast mode [ 116.066719][ T7504] pim6reg: left allmulticast mode [ 116.154512][ T7513] geneve1: entered promiscuous mode [ 116.168889][ T7513] geneve1: entered allmulticast mode [ 116.226267][ T7513] team0: Port device geneve1 added [ 116.989000][ T7547] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 117.018944][ T7547] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.052184][ T7548] pim6reg: entered allmulticast mode [ 117.082562][ T7548] pim6reg: left allmulticast mode [ 117.447967][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888011972000: rx timeout, send abort [ 117.457288][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888011972400: rx timeout, send abort [ 117.465939][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888011972000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.480439][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888011972400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.617950][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.640964][ T7569] Bluetooth: MGMT ver 1.22 [ 117.647949][ T7569] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 117.657380][ T7570] tc_dump_action: action bad kind [ 118.071646][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.118399][ T7583] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 118.514774][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.085333][ T7628] tc_dump_action: action bad kind [ 119.133638][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.258121][ T7633] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 119.501365][ T7642] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 119.521163][ T7642] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.092732][ T7667] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 120.109454][ T7667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.261487][ T7670] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 120.288943][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.299910][ T7670] bridge0: port 4(dummy0) entered blocking state [ 120.306439][ T7670] bridge0: port 4(dummy0) entered disabled state [ 120.334871][ T7670] dummy0: entered allmulticast mode [ 120.372215][ T7670] dummy0: entered promiscuous mode [ 120.378130][ T7670] bridge0: port 4(dummy0) entered blocking state [ 120.384678][ T7670] bridge0: port 4(dummy0) entered forwarding state [ 120.869820][ T7689] bond0: option use_carrier: invalid value (164) [ 121.166916][ T7709] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 121.196581][ T7709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.351807][ T7719] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.376442][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.977810][ T7746] bond0: option use_carrier: invalid value (164) [ 122.140413][ T7755] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 122.858136][ T7789] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 122.871742][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.602881][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.761333][ T7816] x_tables: unsorted entry at hook 1 [ 124.000774][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.022116][ T7824] mac80211_hwsim hwsim13 wlan1: default FDB implementation only supports local addresses [ 124.163527][ T5158] IPVS: starting estimator thread 0... [ 124.241018][ T7532] syz-executor.3 (7532) used greatest stack depth: 18000 bytes left [ 124.252410][ T7835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.279007][ T7834] IPVS: using max 19 ests per chain, 45600 per kthread [ 124.279458][ T7835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.434809][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.516345][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.538816][ T7849] mac80211_hwsim hwsim3 wlan1: default FDB implementation only supports local addresses [ 124.545765][ T7854] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 124.562883][ T7854] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 124.955198][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.046301][ T7888] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 125.077904][ T7888] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 125.247806][ T7902] sctp: [Deprecated]: syz-executor.1 (pid 7902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.247806][ T7902] Use struct sctp_sack_info instead [ 125.558532][ T7925] xt_TCPMSS: Only works on TCP SYN packets [ 125.597788][ T7924] xt_bpf: check failed: parse error [ 125.697434][ T7934] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 125.730519][ T7934] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 125.838463][ T7942] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.986708][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.176347][ T7965] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 126.219437][ T7965] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 126.680284][ T8005] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 126.754624][ T8005] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 126.769202][ T8005] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 126.785455][ T8005] team0: Port device wlan1 added [ 127.896922][ T8077] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 127.902700][ T8074] xt_bpf: check failed: parse error [ 127.920055][ T8075] __nla_validate_parse: 2 callbacks suppressed [ 127.920074][ T8075] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.116435][ T8087] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.393002][ T8100] bond0: entered promiscuous mode [ 128.628226][ T8120] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.206445][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.374800][ T8166] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.724617][ T8187] dummy0: entered promiscuous mode [ 129.780570][ T8187] dummy0: left promiscuous mode [ 129.903638][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.682425][ T8280] validate_nla: 8 callbacks suppressed [ 131.682448][ T8280] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 132.977452][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.222485][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.224470][ T8317] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 133.231325][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.331312][ T8326] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 133.361350][ T8317] team0: Port device wlan1 added [ 133.602983][ T8327] bond0: left promiscuous mode [ 134.732255][ T8387] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 135.982839][ T8388] dummy0: entered promiscuous mode [ 136.011930][ T8388] dummy0: left promiscuous mode [ 136.078895][ T8406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.319342][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.389071][ T8425] macvlan2: entered allmulticast mode [ 136.395525][ T8425] batman_adv: batadv0: Adding interface: macvlan2 [ 136.461749][ T8425] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 136.721457][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.319234][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.328811][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.338425][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.346969][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.366795][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.378913][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.395492][ T8477] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 137.585952][ T8486] netlink: zone id is out of range [ 137.614359][ T8486] netlink: zone id is out of range [ 137.667450][ T8486] netlink: zone id is out of range [ 137.784896][ T8486] netlink: set zone limit has 4 unknown bytes [ 137.858024][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 138.173791][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.218908][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.226201][ T8471] bridge_slave_0: entered allmulticast mode [ 138.254899][ T8471] bridge_slave_0: entered promiscuous mode [ 138.275538][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.301701][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.338191][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.385390][ T8471] bridge_slave_1: entered allmulticast mode [ 138.406246][ T8471] bridge_slave_1: entered promiscuous mode [ 138.437834][ T8517] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 138.537144][ T8514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.578011][ T8514] bond0: (slave bond1): Enslaving as an active interface with an up link [ 138.651086][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.743551][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.781205][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.933731][ T8471] team0: Port device team_slave_0 added [ 138.972854][ T8471] team0: Port device team_slave_1 added [ 139.422348][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.459138][ T4489] Bluetooth: hci2: command tx timeout [ 139.459319][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.581485][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.639919][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.646926][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.752031][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.004226][ T8471] hsr_slave_0: entered promiscuous mode [ 140.048025][ T8471] hsr_slave_1: entered promiscuous mode [ 140.073571][ T8471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.088725][ T8471] Cannot create hsr debugfs directory [ 140.415687][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.447321][ T8617] xfrm1: entered promiscuous mode [ 140.462773][ T8617] xfrm1: entered allmulticast mode [ 140.520614][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.556971][ T8621] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.703828][ T8471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.718123][ T8471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.882420][ T8471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.905138][ T8471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.033861][ T8471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.054296][ T8471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.091674][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.124214][ T8650] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.235790][ T8471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.249982][ T8471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.488232][ T8471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.513375][ T8471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.548899][ T4489] Bluetooth: hci2: command tx timeout [ 141.555369][ T8471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.641297][ T8471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.941431][ T8687] nbd: must specify a size in bytes for the device [ 141.956976][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.015283][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.038446][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.045661][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.101536][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.108723][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.233360][ T8471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.339419][ T8713] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.682894][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.704253][ T8734] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.965514][ T8471] veth0_vlan: entered promiscuous mode [ 143.024019][ T8471] veth1_vlan: entered promiscuous mode [ 143.116958][ T8471] veth0_macvtap: entered promiscuous mode [ 143.175332][ T8471] veth1_macvtap: entered promiscuous mode [ 143.234805][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.260654][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.280084][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.300703][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.327242][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.361278][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.396026][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.417891][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.438855][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.456639][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.470836][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.496014][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.520115][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.536991][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.557773][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.570308][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.599891][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.618854][ T4489] Bluetooth: hci2: command tx timeout [ 143.635545][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.646352][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.656465][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.673252][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.691041][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.733982][ T8471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.752316][ T8471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.766268][ T8471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.779210][ T4132] tipc: Subscription rejected, illegal request [ 143.789523][ T8471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.995227][ T4132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.049224][ T4132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.077594][ T4158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.125528][ T4158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.455906][ T8825] nbd: must specify a size in bytes for the device [ 144.494194][ T2862] tipc: Subscription rejected, illegal request [ 145.699424][ T4489] Bluetooth: hci2: command tx timeout [ 148.863205][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.061980][ T8907] nbd: must specify a size in bytes for the device [ 149.256662][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.549099][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.961257][ T8953] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 149.966485][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.157112][ T8969] netlink: zone id is out of range [ 150.168547][ T8969] netlink: zone id is out of range [ 150.182277][ T8969] netlink: zone id is out of range [ 150.219273][ T8969] netlink: set zone limit has 4 unknown bytes [ 151.203893][ T8999] netlink: zone id is out of range [ 151.234959][ T8999] netlink: zone id is out of range [ 151.253821][ T8999] netlink: zone id is out of range [ 151.313382][ T8999] netlink: set zone limit has 4 unknown bytes [ 151.365172][ T9010] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 151.776903][ T9031] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 151.798297][ T9031] team0: left allmulticast mode [ 151.809042][ T9031] team_slave_0: left allmulticast mode [ 151.821547][ T9031] team_slave_1: left allmulticast mode [ 151.840954][ T9031] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 151.858069][ T9031] team0: left promiscuous mode [ 151.863933][ T9031] team_slave_0: left promiscuous mode [ 151.869885][ T9031] team_slave_1: left promiscuous mode [ 151.884373][ T9031] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 151.901825][ T9031] bridge0: port 3(team0) entered disabled state [ 151.933228][ T9031] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.976827][ T9031] bond0: (slave team0): Enslaving as an active interface with an up link [ 152.569098][ T9072] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 152.589419][ T9072] batman_adv: batadv0: Removing interface: team0 [ 152.623404][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.672656][ T9072] bond0: (slave team0): Enslaving as an active interface with an up link [ 152.886804][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.308558][ T9123] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 153.361248][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.627421][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.135654][ T9167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.835731][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.840760][ T9273] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 156.244750][ T9301] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 156.261232][ T9301] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 181.379076][ T5123] Bluetooth: hci4: command 0x0406 tx timeout [ 181.390633][ T5123] Bluetooth: hci3: command 0x0406 tx timeout [ 187.543109][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.556621][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.564814][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.572964][ T5123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.581883][ T5123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 187.590148][ T5123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.609651][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.634620][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.649845][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.658777][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.668745][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 187.676089][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.715705][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.725506][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.736883][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.769020][ T4489] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 187.779839][ T4489] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 187.787822][ T4489] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 187.795746][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.830251][ T4489] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 187.830684][ T5123] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 187.845355][ T4489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.868916][ T5123] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 187.879997][ T5111] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 187.939131][ T5123] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 187.949055][ T5123] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 187.957713][ T5123] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 187.966033][ T5123] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 187.979203][ T5123] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 187.986544][ T5123] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 189.699171][ T53] Bluetooth: hci6: command tx timeout [ 189.779160][ T53] Bluetooth: hci5: command tx timeout [ 189.938837][ T53] Bluetooth: hci8: command tx timeout [ 189.944868][ T53] Bluetooth: hci7: command tx timeout [ 190.027712][ T53] Bluetooth: hci9: command tx timeout [ 191.785699][ T53] Bluetooth: hci6: command tx timeout [ 191.858952][ T53] Bluetooth: hci5: command tx timeout [ 192.018760][ T53] Bluetooth: hci7: command tx timeout [ 192.018773][ T5123] Bluetooth: hci8: command tx timeout [ 192.099097][ T5123] Bluetooth: hci9: command tx timeout [ 193.859028][ T53] Bluetooth: hci6: command tx timeout [ 193.939196][ T53] Bluetooth: hci5: command tx timeout [ 194.098750][ T53] Bluetooth: hci8: command tx timeout [ 194.109033][ T53] Bluetooth: hci7: command tx timeout [ 194.178834][ T53] Bluetooth: hci9: command tx timeout [ 194.679522][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.685898][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.939425][ T53] Bluetooth: hci6: command tx timeout [ 196.018903][ T53] Bluetooth: hci5: command tx timeout [ 196.178797][ T5123] Bluetooth: hci8: command tx timeout [ 196.184267][ T53] Bluetooth: hci7: command tx timeout [ 196.258890][ T53] Bluetooth: hci9: command tx timeout [ 237.708946][ T5123] Bluetooth: hci1: command 0x0419 tx timeout [ 252.764929][ T5123] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 252.775078][ T5123] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 252.785553][ T5111] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 252.802849][ T5111] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 252.803289][ T4489] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 252.819265][ T5111] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 252.827989][ T5111] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 252.828889][ T4489] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 252.849884][ T4489] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 252.859228][ T5111] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 252.869779][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 252.879458][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 252.883435][ T5111] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 252.888308][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 252.903683][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 252.913040][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 252.922010][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 252.929720][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 252.957542][ T4489] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 252.967787][ T4489] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 252.975985][ T4489] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 252.985468][ T4489] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 253.020286][ T4489] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 253.027919][ T4489] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 253.065429][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 253.075989][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 253.084501][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 253.095417][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 253.103803][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 253.119564][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 254.898787][ T53] Bluetooth: hci10: command tx timeout [ 254.979176][ T4489] Bluetooth: hci11: command tx timeout [ 254.989352][ T53] Bluetooth: hci12: command tx timeout [ 255.059871][ T4489] Bluetooth: hci13: command tx timeout [ 255.218832][ T4489] Bluetooth: hci14: command tx timeout [ 256.102732][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.116883][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.978689][ T4489] Bluetooth: hci10: command tx timeout [ 257.059041][ T53] Bluetooth: hci12: command tx timeout [ 257.065387][ T4489] Bluetooth: hci11: command tx timeout [ 257.138980][ T4489] Bluetooth: hci13: command tx timeout [ 257.298766][ T4489] Bluetooth: hci14: command tx timeout [ 259.058670][ T4489] Bluetooth: hci10: command tx timeout [ 259.139034][ T4489] Bluetooth: hci11: command tx timeout [ 259.144669][ T4489] Bluetooth: hci12: command tx timeout [ 259.218792][ T4489] Bluetooth: hci13: command tx timeout [ 259.378822][ T4489] Bluetooth: hci14: command tx timeout [ 261.138694][ T4489] Bluetooth: hci10: command tx timeout [ 261.219918][ T4489] Bluetooth: hci12: command tx timeout [ 261.225474][ T4489] Bluetooth: hci11: command tx timeout [ 261.298961][ T5111] Bluetooth: hci13: command tx timeout [ 261.459668][ T5111] Bluetooth: hci14: command tx timeout [ 263.298746][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 300.903759][ T30] INFO: task syz-executor.0:9321 blocked for more than 143 seconds. [ 300.918460][ T30] Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 300.928668][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.937360][ T30] task:syz-executor.0 state:D stack:24672 pid:9321 tgid:9321 ppid:8471 flags:0x00004006 [ 300.956008][ T30] Call Trace: [ 300.959524][ T30] [ 300.962645][ T30] __schedule+0x17e8/0x4a20 [ 300.967218][ T30] ? __pfx___schedule+0x10/0x10 2024/06/07 15:46:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 301.009785][ T30] ? __pfx_lock_release+0x10/0x10 [ 301.014884][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 301.020493][ T30] ? schedule+0x90/0x320 [ 301.025043][ T30] schedule+0x14b/0x320 [ 301.029396][ T30] schedule_preempt_disabled+0x13/0x30 [ 301.034877][ T30] __mutex_lock+0x6a4/0xd70 [ 301.039489][ T30] ? __mutex_lock+0x527/0xd70 [ 301.044185][ T30] ? raw_release+0x1b8/0x8a0 [ 301.049000][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 301.054060][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.060059][ T30] raw_release+0x1b8/0x8a0 [ 301.064716][ T30] sock_close+0xbc/0x240 [ 301.089599][ T30] ? __pfx_sock_close+0x10/0x10 [ 301.094507][ T30] __fput+0x406/0x8b0 [ 301.118781][ T30] __x64_sys_close+0x7f/0x110 [ 301.123520][ T30] do_syscall_64+0xf3/0x230 [ 301.128043][ T30] ? clear_bhb_loop+0x35/0x90 [ 301.144067][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.153603][ T30] RIP: 0033:0x7f1aa547be5a [ 301.158051][ T30] RSP: 002b:00007fff461984c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 301.174736][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f1aa547be5a [ 301.186269][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 301.194578][ T30] RBP: 00007f1aa55b5980 R08: 00000000819d6dff R09: 7fffffffffffffff [ 301.205066][ T30] R10: 0000000000000002 R11: 0000000000000293 R12: 0000000000026727 [ 301.223058][ T30] R13: 00007f1aa55b412c R14: 0000000000000032 R15: 00007f1aa55b5980 [ 301.237899][ T30] [ 301.241224][ T30] INFO: task syz-executor.0:9324 blocked for more than 143 seconds. [ 301.256120][ T30] Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 301.265911][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.284030][ T30] task:syz-executor.0 state:D stack:21696 pid:9324 tgid:9321 ppid:8471 flags:0x00000006 [ 301.297812][ T30] Call Trace: [ 301.307006][ T30] [ 301.311542][ T30] __schedule+0x17e8/0x4a20 [ 301.316109][ T30] ? __pfx___schedule+0x10/0x10 [ 301.328231][ T30] ? __pfx_lock_release+0x10/0x10 [ 301.333506][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 301.346072][ T30] ? schedule+0x90/0x320 [ 301.354016][ T30] schedule+0x14b/0x320 [ 301.358218][ T30] schedule_preempt_disabled+0x13/0x30 [ 301.371639][ T30] __mutex_lock+0x6a4/0xd70 [ 301.376197][ T30] ? __mutex_lock+0x527/0xd70 [ 301.385828][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 301.396819][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 301.406474][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 301.413694][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 301.427502][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.433267][ T30] ? lockdep_