last executing test programs: 33.825005459s ago: executing program 1 (id=2163): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 33.726459763s ago: executing program 1 (id=2166): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r7, 0x2, 0x2}, 0x10) 33.565101211s ago: executing program 1 (id=2169): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r2, r1, 0x5}, 0x10) r3 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r3}, 0x20) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)) recvfrom(r3, &(0x7f0000000240)=""/13, 0xd, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x3, 0x0) sendmmsg$unix(r4, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 32.433017229s ago: executing program 1 (id=2187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80030000}, {0x85, 0x0, 0x0, 0x8}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) 16.669043234s ago: executing program 1 (id=2187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80030000}, {0x85, 0x0, 0x0, 0x8}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) 9.201950722s ago: executing program 1 (id=2187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80030000}, {0x85, 0x0, 0x0, 0x8}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) 2.70994478s ago: executing program 0 (id=2523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE(0x22, &(0x7f0000000080)=@bloom_filter, 0xa1) sendfile(r1, r0, 0x0, 0xf03afffe) 2.30303038s ago: executing program 3 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@deltaction={0x28, 0x31, 0x4, 0x0, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x20000000}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2.203031736s ago: executing program 3 (id=2534): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.198992583s ago: executing program 4 (id=2535): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 1.996603728s ago: executing program 3 (id=2538): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socket(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1, 0x8}, 0x7, 0x0, 0x0, 0x2, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000780), 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x17) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000500)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) 1.993309548s ago: executing program 4 (id=2539): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.769669803s ago: executing program 0 (id=2541): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f00000052c0)=@id, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000100)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r5, 0x300, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000409000000000004ac92acf061db16f5479d4e7524f7519b000000009100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="b2", 0x1, 0x8005, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/113, 0x71, 0x0, 0x0}, &(0x7f0000000280)=0x40) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "7c4433d7e48ee607cd7d03463d6d454c"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000010000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000300102b0000"], 0x3c}}, 0x0) 1.027494954s ago: executing program 3 (id=2546): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x6c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400aeff0f608e222b69", @ANYRES32], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b20, &(0x7f0000000040)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0a0001"], 0x48}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 871.366919ms ago: executing program 2 (id=2548): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 783.375229ms ago: executing program 0 (id=2549): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c) 677.99654ms ago: executing program 2 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x2}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 593.709699ms ago: executing program 0 (id=2551): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x8, 0x0, 0x0) 540.898144ms ago: executing program 4 (id=2552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x5, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}, @IFLA_GSO_MAX_SIZE]}, 0x48}}, 0x0) 511.720772ms ago: executing program 0 (id=2553): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 449.374645ms ago: executing program 3 (id=2554): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 430.525456ms ago: executing program 2 (id=2555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007", @ANYRES16=r6], 0xd) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = gettid() r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r9, &(0x7f0000000740)='ns/cgroup\x00') r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r13, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r11, 0x416, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r11, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x38}}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x138, 0x40, 0x4, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x144, 0x0, 0x0, @uid=0xee00}, @nested={0x114, 0x0, 0x0, 0x1, [@typed={0x4, 0xcf}, @generic, @generic="8e4c97537b886fd6da1409bdb1e20b9b883a67c98dff28208164683052bc435b164a983731e30abbae9cfd9bd89b67ceea829c8c1721505a4838e7ff257f9897ef9046f8a70fb7dc1d9f944ddf94210a4c304d9b67781b8463a2e2b196159d6e61e082f9abb4e988e3fa9cefc0deb0e61e66c593c794fb7e636f0897ea39611840047980affe1e71bb2721fa716430a52e1fe60d39543aefb79777eef12260ed16212293a1301a3db104e733341a5d6118fcf10f98ce6571a0a5215e07cf69e7543e2e091fd30f61ecd28e1706dd", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="61c3ae6321a5579d4c331e7b4722fad5fe627efd4594", @typed={0x8, 0x72, 0x0, 0x0, @str=':-7\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x12e, 0x0, 0x0, @pid}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000040) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) r15 = getgid() sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="a16966167a8e3ae2b2e0290d69e7dbc642532832c986967f33e57a6d289d4d474de82c368559c8ea7b827bc64623cfef7cd50000140ed00c0d00868152f7173971102bfe8caef64bcd3defe47f8c2436d179c756a28561f3ebcd5343bd0c34312812ea7e87cf4cd53d8f11f6f6c561a74abb93ab081f18f93a7db3005fb31402db1f8722908503", 0x87}, {&(0x7f0000000280)="a9ad9f5c1f729fdc8067448c19bd9e0c988da81dd01d209ba0fe85b941e7dd776784f26dabbbb346cb643ff57da7ddbd03479165383c3d14b67ce73b83ca419c401827498a47b16390218272a4c1926fa575053ac4cf4fb2bff32ec9bd32ded9a4b798fd07a077b0e4fc9c6cbbae7ab5c9f07c7ed6d0da6f3454b578e86f4919047f2683c351bc96556aae1afac23eca47d6692cf1d7ecaca3930dd4c8845c5440d8b75e5f4dd76d0fe12b7b", 0xac}, {&(0x7f0000000340)="4ab9ad0884c2273eae4ad406788bfce10b791137c392695fa9bddf3615b32a4fdd3b4fd1cbeb2ce3e8ecd6afb8a44f3abe8f71ff3b584c48e89b2b6b6e91e18cbc7c02d881f47173dcc9cdcb839d09baf7cf5d556b94f8b812aabffacb986725bf3d6508f32a45b07b422c45c72b40134a5e87bf00e11f81fc4315f00760d7943f4c40417c7e97ec63dfd14ba73fa1f2ff33c283d8039cc1439864d9790781cd78fa71da09e53abf6ad1fa2275c3be2b7480803adb6c34d0b7c7bfbf781be6bc55b1d1927ccb93a3e4c0", 0xca}, {&(0x7f0000000440)="66ae3e8d8121edf6e21b195640011cefea45814cb467b7bda97dfa2b7e2fd989d844079d852ca34a7aaeb843e0765d68c30b311bb42e0c283cfd8bb4a2b6f7c5e29292d6f09166910e039e2e948c605aea799f8166fb959a4b33d3c6c0376e70f8660a78eaa536ac912d7f0c1ab55d4637d834b42cb80f4c82a635741f218433580d630783c225a770704674dcdedc9b8faa0a417822556ca40608e311376df01666a515a3bdf12c2afcbf78d1e5b1a7bb160e668e1b94f3310a316b7bcbe53cdc9e67a6364306a223c852800fe7f164a07a1ea500937697dadebb486528e9dc60f02d762699cefa7c85173fd115873c3361cac302289d0af8", 0xf9}, {&(0x7f00000005c0)="b54c790160f95e24d9a43f3d377ed96f49005f34a1446c41d5138625322030cfd3273d9fb92ce1c264dcb041045ae08b4d00a17d4a6bb3ac128b67681ac96077370e401b9ba2e4d6d24c2c13c9b3ae6fb03f22b3735c475cc76c103c61e973d2834a0548c93392a3018c7e59ec07ca29", 0x70}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r14, r15}}}], 0x60, 0x2c000}, 0x4000085) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffc, 0xa}}, 0xf0}}, 0x0) 375.963328ms ago: executing program 0 (id=2556): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socket(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x1, 0x8}, 0x7, 0x0, 0x0, 0x2, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}}}}]}, 0x78}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000780), 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x17) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000500)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c000180140003000009000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000002400068014000400200100000000800600010000000000e76f8017d3edf14bd8b25cb67f82db603f55a985ad408c69ec69776b1b5dbb321d019f5c64ff837470f36d4dac4dd2361d98a4e5110a58cf04a004425796d5e0787f4478c1c3444cad8b84084fb6e1f246e125f76690485c5f0020"], 0xb8}}, 0x0) 293.921873ms ago: executing program 4 (id=2557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@deltaction={0x28, 0x31, 0x4, 0x0, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x20000000}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 288.384748ms ago: executing program 2 (id=2558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) 194.289125ms ago: executing program 2 (id=2559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000040)) 139.82214ms ago: executing program 4 (id=2560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000250001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) 80.962073ms ago: executing program 2 (id=2561): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0xfffffffd, 0x80000801}, 0x8) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) 9.50501ms ago: executing program 4 (id=2562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=2563): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x20, 0x4) listen(r0, 0x1) listen(r0, 0x0) kernel console output (not intermixed with test programs): terface: batadv_slave_1 [ 67.043584][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.069808][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.093996][ T5096] team0: Port device team_slave_1 added [ 67.109236][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.122098][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.140956][ T5101] Bluetooth: hci1: command tx timeout [ 67.140971][ T5106] Bluetooth: hci2: command tx timeout [ 67.142624][ T5094] team0: Port device team_slave_0 added [ 67.215200][ T5101] Bluetooth: hci3: command tx timeout [ 67.216156][ T5106] Bluetooth: hci4: command tx timeout [ 67.222368][ T5094] team0: Port device team_slave_1 added [ 67.249049][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.256105][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.282173][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.297865][ T5099] team0: Port device team_slave_0 added [ 67.329595][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.337219][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.363557][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.381520][ T5099] team0: Port device team_slave_1 added [ 67.391619][ T5093] hsr_slave_0: entered promiscuous mode [ 67.400461][ T5093] hsr_slave_1: entered promiscuous mode [ 67.407273][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.415146][ T5093] Cannot create hsr debugfs directory [ 67.468585][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.475858][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.502001][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.513961][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.521512][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.548276][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.601340][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.608653][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.634833][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.662016][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.669789][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.695918][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.816354][ T5094] hsr_slave_0: entered promiscuous mode [ 67.823554][ T5094] hsr_slave_1: entered promiscuous mode [ 67.834090][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.842242][ T5094] Cannot create hsr debugfs directory [ 67.865381][ T5096] hsr_slave_0: entered promiscuous mode [ 67.872174][ T5096] hsr_slave_1: entered promiscuous mode [ 67.879323][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.887243][ T5096] Cannot create hsr debugfs directory [ 67.996515][ T5099] hsr_slave_0: entered promiscuous mode [ 68.002998][ T5099] hsr_slave_1: entered promiscuous mode [ 68.010104][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.018140][ T5099] Cannot create hsr debugfs directory [ 68.212595][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.260250][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.297534][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.329850][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.412718][ T5093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.431880][ T5093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.441823][ T5093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.455937][ T5093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.570746][ T5094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.599084][ T5094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.609408][ T5094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.626318][ T5094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.734210][ T5096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.754140][ T5096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.767974][ T5096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.787588][ T5096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.887765][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.925945][ T5099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.938665][ T5099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.952149][ T5099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.962708][ T5099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.985499][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.032329][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.064986][ T5106] Bluetooth: hci0: command tx timeout [ 69.100012][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.107384][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.126215][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.178978][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.186353][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.196756][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.204015][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.215182][ T5106] Bluetooth: hci1: command tx timeout [ 69.220687][ T5106] Bluetooth: hci2: command tx timeout [ 69.281143][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.288357][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.295478][ T5106] Bluetooth: hci4: command tx timeout [ 69.297082][ T5101] Bluetooth: hci3: command tx timeout [ 69.393602][ T5090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.404799][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.447141][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.480741][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.544405][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.578084][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.611253][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.618527][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.660777][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.687528][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.694743][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.731496][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.742210][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.749483][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.801262][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.809553][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.837295][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.862039][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.880683][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.887890][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.951942][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.971488][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.978791][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.154705][ T5090] veth0_vlan: entered promiscuous mode [ 70.194321][ T5093] veth0_vlan: entered promiscuous mode [ 70.234573][ T5090] veth1_vlan: entered promiscuous mode [ 70.291416][ T5093] veth1_vlan: entered promiscuous mode [ 70.376804][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.472577][ T5090] veth0_macvtap: entered promiscuous mode [ 70.483156][ T5093] veth0_macvtap: entered promiscuous mode [ 70.507933][ T5090] veth1_macvtap: entered promiscuous mode [ 70.557683][ T5096] veth0_vlan: entered promiscuous mode [ 70.580982][ T5093] veth1_macvtap: entered promiscuous mode [ 70.611395][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.632530][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.644136][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.659566][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.673184][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.686507][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.695999][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.704691][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.714103][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.726911][ T5096] veth1_vlan: entered promiscuous mode [ 70.747702][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.765986][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.779235][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.792520][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.807233][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.889000][ T5093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.904639][ T5093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.914402][ T5093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.924287][ T5093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.042592][ T5096] veth0_macvtap: entered promiscuous mode [ 71.067833][ T5096] veth1_macvtap: entered promiscuous mode [ 71.107325][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.135069][ T5101] Bluetooth: hci0: command tx timeout [ 71.138628][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.141418][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.162133][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.172863][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.185052][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.197301][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.249659][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.261846][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.272285][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.283166][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.295931][ T5101] Bluetooth: hci2: command tx timeout [ 71.301600][ T5101] Bluetooth: hci1: command tx timeout [ 71.307943][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.329995][ T5094] veth0_vlan: entered promiscuous mode [ 71.361812][ T5096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.371758][ T5096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.375472][ T5101] Bluetooth: hci4: command tx timeout [ 71.384853][ T5106] Bluetooth: hci3: command tx timeout [ 71.386955][ T5096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.400405][ T5096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.424668][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.436181][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.439674][ T5094] veth1_vlan: entered promiscuous mode [ 71.566464][ T3926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.574409][ T3926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.591754][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.595202][ T5099] veth0_vlan: entered promiscuous mode [ 71.606448][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.686743][ T5099] veth1_vlan: entered promiscuous mode [ 71.733594][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.752430][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.851716][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.878708][ T5094] veth0_macvtap: entered promiscuous mode [ 71.896682][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.910784][ T5094] veth1_macvtap: entered promiscuous mode [ 71.989423][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 72.013296][ T5177] Zero length message leads to an empty skb [ 72.038920][ T5099] veth0_macvtap: entered promiscuous mode [ 72.062126][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.103463][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.127242][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.154679][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.186199][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.198797][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.212872][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.273189][ T5099] veth1_macvtap: entered promiscuous mode [ 72.309849][ T5182] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8'. [ 72.360994][ T5182] 0ªX¹¦À: renamed from caif0 [ 72.389900][ T5182] 0ªX¹¦À: entered allmulticast mode [ 72.403658][ T5182] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 72.456681][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.473806][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.484099][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.501055][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.514962][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.528087][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.541209][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.600722][ T5094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.631459][ T5094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.656563][ T5094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.672390][ T5094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.738936][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.780027][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.800898][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.824659][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.841752][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.852417][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.862584][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.874621][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.893746][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.915580][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.927949][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.946921][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.960383][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.976612][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.997117][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.008657][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.020343][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.033016][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.060723][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'. [ 73.108933][ T5099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.129876][ T5099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.179564][ T5099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.208217][ T5099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.219571][ T5106] Bluetooth: hci0: command tx timeout [ 73.307548][ T5216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.327915][ T5214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.378870][ T5106] Bluetooth: hci1: command tx timeout [ 73.379069][ T5101] Bluetooth: hci2: command tx timeout [ 73.455667][ T5101] Bluetooth: hci3: command tx timeout [ 73.455680][ T5106] Bluetooth: hci4: command tx timeout [ 73.469420][ T5220] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 73.527242][ T5213] netlink: 100 bytes leftover after parsing attributes in process `syz.1.21'. [ 73.593019][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.603907][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.621460][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.636200][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.700098][ T3926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.709189][ T3926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.850171][ T3926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.882063][ T3926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.051044][ T3926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.100323][ T3926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.177212][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 74.299431][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.373999][ T5236] GUP no longer grows the stack in syz.1.29 (5236): 20004000-2000a000 (20002000) [ 74.401480][ T5236] CPU: 1 PID: 5236 Comm: syz.1.29 Not tainted 6.10.0-rc4-syzkaller-00891-gbf2468f9afba #0 [ 74.411468][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.421570][ T5236] Call Trace: [ 74.424880][ T5236] [ 74.427828][ T5236] dump_stack_lvl+0x241/0x360 [ 74.432731][ T5236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.437999][ T5236] ? __pfx__printk+0x10/0x10 [ 74.442617][ T5236] ? find_vma+0xf9/0x170 [ 74.446941][ T5236] __get_user_pages+0x10e3/0x1590 [ 74.452025][ T5236] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 74.457681][ T5236] ? __pfx___get_user_pages+0x10/0x10 [ 74.463087][ T5236] ? __lock_acquire+0x1346/0x1fd0 [ 74.468165][ T5236] __gup_longterm_locked+0x1ff6/0x2a80 [ 74.473663][ T5236] ? __pfx___gup_longterm_locked+0x10/0x10 [ 74.479511][ T5236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.485518][ T5236] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 74.491566][ T5236] gup_fast_fallback+0x2732/0x2b40 [ 74.496733][ T5236] ? __pfx_gup_fast_fallback+0x10/0x10 [ 74.502206][ T5236] ? __pfx_validate_chain+0x10/0x10 [ 74.507436][ T5236] ? unwind_get_return_address+0x91/0xc0 [ 74.513117][ T5236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.519245][ T5236] ? arch_stack_walk+0x16d/0x1b0 [ 74.524240][ T5236] ? __lock_acquire+0x1346/0x1fd0 [ 74.529289][ T5236] ? is_valid_gup_args+0x124/0x200 [ 74.534427][ T5236] pin_user_pages_fast+0xcc/0x160 [ 74.539472][ T5236] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 74.545126][ T5236] iov_iter_extract_pages+0x3db/0x720 [ 74.550570][ T5236] bio_iov_iter_get_pages+0x541/0x1930 [ 74.556081][ T5236] ? bio_associate_blkg+0x6c/0x230 [ 74.561311][ T5236] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 74.567397][ T5236] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 74.573392][ T5236] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 74.579310][ T5236] ? bio_alloc_bioset+0x6d7/0x1130 [ 74.584445][ T5236] iomap_dio_bio_iter+0xc8e/0x1670 [ 74.589638][ T5236] __iomap_dio_rw+0x1295/0x2370 [ 74.594507][ T5236] ? do_syscall_64+0xf3/0x230 [ 74.599224][ T5236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.605342][ T5236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.611342][ T5236] ? __pfx___iomap_dio_rw+0x10/0x10 [ 74.616594][ T5236] ? jbd2_journal_stop+0x902/0xd80 [ 74.621773][ T5236] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 74.627248][ T5236] ? __pfx_ext4_orphan_add+0x10/0x10 [ 74.632559][ T5236] iomap_dio_rw+0x46/0xa0 [ 74.636916][ T5236] ext4_file_write_iter+0x15e5/0x1a10 [ 74.642346][ T5236] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 74.648101][ T5236] vfs_write+0xa72/0xc90 [ 74.652393][ T5236] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 74.658143][ T5236] ? __pfx_vfs_write+0x10/0x10 [ 74.662930][ T5236] ? do_futex+0x33b/0x560 [ 74.667549][ T5236] ksys_write+0x1a0/0x2c0 [ 74.671902][ T5236] ? __pfx_ksys_write+0x10/0x10 [ 74.676777][ T5236] ? do_syscall_64+0x100/0x230 [ 74.681567][ T5236] ? do_syscall_64+0xb6/0x230 [ 74.686271][ T5236] do_syscall_64+0xf3/0x230 [ 74.690823][ T5236] ? clear_bhb_loop+0x35/0x90 [ 74.695546][ T5236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.701652][ T5236] RIP: 0033:0x7ff930175d39 [ 74.706086][ T5236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.725713][ T5236] RSP: 002b:00007ff930f2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.734153][ T5236] RAX: ffffffffffffffda RBX: 00007ff930303fa0 RCX: 00007ff930175d39 [ 74.742140][ T5236] RDX: 000000000000f000 RSI: 0000000020000200 RDI: 0000000000000005 [ 74.750124][ T5236] RBP: 00007ff9301f6766 R08: 0000000000000000 R09: 0000000000000000 [ 74.758104][ T5236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.766106][ T5236] R13: 000000000000000b R14: 00007ff930303fa0 R15: 00007fff3e02a7a8 [ 74.774102][ T5236] [ 74.795513][ T5241] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.962018][ T5244] netlink: 'syz.0.31': attribute type 1 has an invalid length. [ 74.992743][ T5244] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.31'. [ 75.175295][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 75.202642][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 75.513516][ T5262] Illegal XDP return value 4294967274 on prog (id 14) dev N/A, expect packet loss! [ 75.608075][ T5268] syz_tun: entered promiscuous mode [ 75.685839][ T5268] syz_tun: left promiscuous mode [ 75.744053][ T5275] netlink: 184 bytes leftover after parsing attributes in process `syz.4.44'. [ 76.242685][ T5296] warning: `syz.4.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.747499][ T5360] veth0_macvtap: left promiscuous mode [ 78.086811][ T5376] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 78.542926][ T5393] __nla_validate_parse: 2 callbacks suppressed [ 78.542960][ T5393] netlink: 830 bytes leftover after parsing attributes in process `syz.0.100'. [ 78.594293][ T5390] netlink: 184 bytes leftover after parsing attributes in process `syz.3.98'. [ 78.676114][ T5393] netlink: 'syz.0.100': attribute type 3 has an invalid length. [ 78.726846][ T5393] batadv_slave_1: entered promiscuous mode [ 78.805238][ T5368] syz.4.87 (5368) used greatest stack depth: 18032 bytes left [ 78.986413][ T5391] batadv_slave_1: left promiscuous mode [ 79.207961][ T5419] netlink: 64 bytes leftover after parsing attributes in process `syz.4.105'. [ 79.472073][ T5432] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96 [ 80.334051][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 80.694915][ T29] audit: type=1804 audit(1719281154.525:2): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.137" name="/root/syzkaller.9rWjVk/18/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 81.209245][ T5509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.151'. [ 81.717936][ T5526] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.825841][ T5526] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.170318][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 82.348257][ T5554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.385449][ T29] audit: type=1804 audit(1719281156.215:3): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.165" name="/root/syzkaller.DUm3B4/39/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 82.806471][ T5572] syz.0.173 uses obsolete (PF_INET,SOCK_PACKET) [ 82.873066][ T5571] netlink: 'syz.4.175': attribute type 5 has an invalid length. [ 83.088255][ T5583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.178'. [ 83.435855][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.476826][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.637031][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.645470][ T5595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.664275][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.671578][ T5595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.488308][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 86.367248][ T5704] netlink: 'syz.4.236': attribute type 6 has an invalid length. [ 86.426126][ T5706] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.237'. [ 86.467991][ T5706] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 87.113867][ T5745] netlink: 'syz.4.252': attribute type 6 has an invalid length. [ 87.591327][ T5769] netlink: 'syz.3.264': attribute type 8 has an invalid length. [ 87.622035][ T5769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.264'. [ 88.196964][ T5797] netlink: 'syz.3.272': attribute type 29 has an invalid length. [ 88.241399][ T5797] netlink: 'syz.3.272': attribute type 29 has an invalid length. [ 88.263831][ T5791] netlink: 'syz.3.272': attribute type 29 has an invalid length. [ 88.280237][ T5799] netlink: 'syz.2.276': attribute type 8 has an invalid length. [ 88.303729][ T5799] netlink: 156 bytes leftover after parsing attributes in process `syz.2.276'. [ 88.980201][ T58] cfg80211: failed to load regulatory.db [ 89.126123][ T5838] netlink: 'syz.3.291': attribute type 29 has an invalid length. [ 89.134361][ T5838] netlink: 'syz.3.291': attribute type 29 has an invalid length. [ 89.180718][ T5831] netlink: 'syz.3.291': attribute type 29 has an invalid length. [ 89.214008][ T5842] xt_hashlimit: max too large, truncated to 1048576 [ 89.347271][ T5844] tipc: Failed to remove unknown binding: 66,1,1/0:4097870750/4097870752 [ 89.409863][ T5844] tipc: Failed to remove unknown binding: 66,1,1/0:4097870750/4097870752 [ 89.445016][ T5844] tipc: Failed to remove unknown binding: 66,1,1/0:4097870750/4097870752 [ 89.512572][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 89.586221][ T5852] team_slave_0: entered promiscuous mode [ 89.592359][ T5852] team_slave_1: entered promiscuous mode [ 89.630773][ T5852] macvtap1: entered promiscuous mode [ 89.645254][ T5852] team0: entered promiscuous mode [ 89.675712][ T5852] macvtap1: entered allmulticast mode [ 89.696252][ T5852] team0: entered allmulticast mode [ 89.712238][ T5852] team_slave_0: entered allmulticast mode [ 89.735376][ T5852] team_slave_1: entered allmulticast mode [ 89.765721][ T5852] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 90.159190][ T5870] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 90.289123][ T5870] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.323977][ T5880] xt_hashlimit: max too large, truncated to 1048576 [ 90.499193][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'. [ 91.149352][ T29] audit: type=1804 audit(1719281164.985:4): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.321" name="/root/syzkaller.iPxbdm/73/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 91.498610][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'. [ 91.625604][ T5933] netlink: 'syz.2.329': attribute type 9 has an invalid length. [ 91.652334][ T5933] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.329'. [ 92.283856][ T5962] netlink: 'syz.2.342': attribute type 9 has an invalid length. [ 92.303362][ T5962] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.342'. [ 92.520801][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 92.956927][ T5993] syz.3.351[5993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.957192][ T5993] syz.3.351[5993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.049791][ T5998] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 93.097171][ T5998] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 93.144246][ T5998] bond1: (slave vcan1): making interface the new active one [ 93.188248][ T5998] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 94.667674][ T6028] syz.2.369[6028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.670390][ T6028] syz.2.369[6028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.057808][ T6038] netlink: 76 bytes leftover after parsing attributes in process `syz.4.374'. [ 95.141283][ T6038] nbd: couldn't find device at index 29 [ 95.787303][ T6070] netlink: 76 bytes leftover after parsing attributes in process `syz.2.389'. [ 95.804602][ T6070] nbd: couldn't find device at index 29 [ 96.000427][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'. [ 96.061815][ T6083] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.390'. [ 96.084392][ T6083] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 97.236535][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 97.258110][ T6067] team_slave_0: entered promiscuous mode [ 97.263915][ T6067] team_slave_1: entered promiscuous mode [ 97.272422][ T6067] macvtap1: entered promiscuous mode [ 97.278095][ T6067] team0: entered promiscuous mode [ 97.283868][ T6067] macvtap1: entered allmulticast mode [ 97.291059][ T6067] team0: entered allmulticast mode [ 97.298390][ T6067] team_slave_0: entered allmulticast mode [ 97.304185][ T6067] team_slave_1: entered allmulticast mode [ 97.314439][ T6067] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 97.334487][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 97.349125][ T6075] netlink: 100 bytes leftover after parsing attributes in process `syz.2.390'. [ 97.391161][ T6104] netlink: 76 bytes leftover after parsing attributes in process `syz.4.400'. [ 97.429770][ T6104] nbd: couldn't find device at index 29 [ 97.548193][ T6082] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 97.598569][ T6082] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.169824][ T6128] veth0_vlan: entered allmulticast mode [ 98.715256][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 98.896897][ T6149] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 99.035908][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 99.416067][ T6170] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 99.477431][ T6173] validate_nla: 1 callbacks suppressed [ 99.477454][ T6173] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 99.499308][ T6173] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 100.045489][ T6199] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 100.064997][ T6199] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 100.113885][ T6204] __nla_validate_parse: 6 callbacks suppressed [ 100.113908][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 100.216925][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.442'. [ 100.256849][ T6210] netlink: 'syz.1.445': attribute type 5 has an invalid length. [ 100.521988][ T6215] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 100.586638][ T6223] netlink: 52 bytes leftover after parsing attributes in process `syz.1.450'. [ 101.028350][ T6241] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 101.092145][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 101.098809][ T6241] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 101.558788][ T6266] netlink: 52 bytes leftover after parsing attributes in process `syz.2.465'. [ 101.818302][ T6276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.163095][ T6289] netlink: 'syz.1.476': attribute type 7 has an invalid length. [ 102.457040][ T6301] ip6gretap0: entered promiscuous mode [ 102.472588][ T6301] ip6gretap0: left promiscuous mode [ 102.511270][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.570520][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.673060][ T6314] macvlan2: entered allmulticast mode [ 102.692260][ T6314] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 102.724991][ T6314] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 102.747095][ T6306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.771671][ T6314] team0: Port device macvlan2 added [ 102.843409][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 102.890510][ T6320] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 102.918429][ T6326] netlink: 'syz.3.489': attribute type 3 has an invalid length. [ 102.949154][ T6326] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.489'. [ 103.110547][ T6333] netlink: 'syz.3.493': attribute type 7 has an invalid length. [ 103.141039][ T6335] veth0_vlan: entered allmulticast mode [ 103.336484][ T29] audit: type=1804 audit(1719281177.165:5): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.495" name="/root/syzkaller.DDk0lI/88/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 103.839165][ T6365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.020517][ T6373] Cannot find add_set index 0 as target [ 104.261084][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 104.485327][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.519'. [ 104.506189][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.519'. [ 104.523905][ T6398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.717151][ T6409] ip6gretap0: entered promiscuous mode [ 104.731124][ T6409] ip6gretap0: left promiscuous mode [ 104.833710][ T6415] Cannot find add_set index 0 as target [ 104.835416][ T6414] C: renamed from lo (while UP) [ 104.861019][ T6414] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 105.208946][ T6430] __nla_validate_parse: 1 callbacks suppressed [ 105.208968][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.530'. [ 105.365633][ T6436] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 105.416718][ T6438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.555576][ T29] audit: type=1804 audit(1719281179.385:6): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.534" name="/root/syzkaller.iPxbdm/121/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 105.583258][ T6443] Cannot find add_set index 0 as target [ 105.741231][ T6453] netlink: 'syz.4.540': attribute type 3 has an invalid length. [ 105.782456][ T6453] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.540'. [ 105.916409][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 106.218156][ T6475] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 106.375460][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.552'. [ 106.396569][ T6482] Cannot find add_set index 0 as target [ 106.416375][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.552'. [ 106.560867][ T6493] netlink: 'syz.0.555': attribute type 7 has an invalid length. [ 106.773722][ T6500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 111.899563][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 112.541958][ T6549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.560321][ T6549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.635512][ T29] audit: type=1804 audit(1719281186.465:7): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.578" name="/root/syzkaller.DUm3B4/115/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 112.655791][ T6549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.104533][ T6575] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.113910][ T6575] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.123358][ T6575] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.132608][ T6575] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.157581][ T6575] vxlan0: entered promiscuous mode [ 113.179668][ T6575] vxlan0: entered allmulticast mode [ 113.530511][ T29] audit: type=1804 audit(1719281187.365:8): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.594" name="/root/syzkaller.9rWjVk/115/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 113.742697][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.595'. [ 114.120596][ T6613] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.129866][ T6613] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.138939][ T6613] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.147996][ T6613] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.195179][ T6613] vxlan0: entered promiscuous mode [ 114.203278][ T6613] vxlan0: entered allmulticast mode [ 114.413302][ T6631] C: renamed from lo (while UP) [ 114.440810][ T6631] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 114.469876][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.478892][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.616696][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 115.122643][ T6657] IPVS: Error connecting to the multicast addr [ 116.256308][ T6704] IPVS: Error connecting to the multicast addr [ 118.706039][ T6800] bridge_slave_1: left allmulticast mode [ 118.733910][ T6800] bridge_slave_1: left promiscuous mode [ 118.761145][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.927124][ T6800] bridge_slave_0: left allmulticast mode [ 118.949418][ T6800] bridge_slave_0: left promiscuous mode [ 118.977136][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.557552][ T29] audit: type=1800 audit(1719281194.385:9): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.694" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 120.662110][ T29] audit: type=1804 audit(1719281194.395:10): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.694" name="/root/syzkaller.DDk0lI/122/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 121.616403][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 121.640008][ T6916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.714'. [ 122.082101][ T6939] netlink: 'syz.0.725': attribute type 3 has an invalid length. [ 122.098540][ T6939] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.725'. [ 122.402326][ T6955] netlink: 224 bytes leftover after parsing attributes in process `syz.2.732'. [ 122.544639][ T6962] syz.3.735[6962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.548641][ T6962] syz.3.735[6962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.830092][ T6973] trusted_key: syz.4.740 sent an empty control message without MSG_MORE. [ 122.946324][ T6980] netlink: 830 bytes leftover after parsing attributes in process `syz.2.743'. [ 123.253848][ T6991] ip6gretap0: entered promiscuous mode [ 123.310736][ T6991] batadv_slave_0: entered promiscuous mode [ 123.345191][ T6998] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 123.445810][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 123.454672][ T7002] netlink: 'syz.4.754': attribute type 2 has an invalid length. [ 123.595311][ T7010] (unnamed net_device) (uninitialized): option lacp_active: invalid value (252) [ 123.845960][ T7015] netlink: 830 bytes leftover after parsing attributes in process `syz.2.760'. [ 123.985514][ T7020] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 124.023279][ T7021] vlan1: entered promiscuous mode [ 124.071284][ T7023] netlink: 224 bytes leftover after parsing attributes in process `syz.2.764'. [ 124.206580][ T7021] vlan1 (unregistering): left promiscuous mode [ 124.225409][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.235514][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.252867][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.270716][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.279736][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.287997][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.741112][ T1059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.840282][ T7052] netlink: 830 bytes leftover after parsing attributes in process `syz.3.773'. [ 124.870999][ T7049] netlink: 'syz.4.771': attribute type 3 has an invalid length. [ 124.896942][ T7049] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.771'. [ 124.986045][ T1059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.361737][ T1059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.550998][ T1059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.593715][ T7079] netlink: 'syz.4.783': attribute type 21 has an invalid length. [ 125.635307][ T7030] chnl_net:caif_netlink_parms(): no params data found [ 125.812798][ T7091] netlink: 'syz.3.789': attribute type 6 has an invalid length. [ 126.004520][ T7102] netlink: 'syz.2.794': attribute type 29 has an invalid length. [ 126.025813][ T7102] netlink: 'syz.2.794': attribute type 29 has an invalid length. [ 126.065719][ T7102] netlink: 'syz.2.794': attribute type 29 has an invalid length. [ 126.237929][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.275509][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.299966][ T7030] bridge_slave_0: entered allmulticast mode [ 126.320158][ T7030] bridge_slave_0: entered promiscuous mode [ 126.329563][ T7110] bridge0: port 3(gretap0) entered blocking state [ 126.337351][ T5101] Bluetooth: hci1: command tx timeout [ 126.345351][ T7110] bridge0: port 3(gretap0) entered disabled state [ 126.353996][ T7110] gretap0: entered allmulticast mode [ 126.368964][ T7110] gretap0: entered promiscuous mode [ 126.376350][ T7110] bridge0: port 3(gretap0) entered blocking state [ 126.383008][ T7110] bridge0: port 3(gretap0) entered forwarding state [ 126.442852][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.459851][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.484641][ T7030] bridge_slave_1: entered allmulticast mode [ 126.542841][ T7030] bridge_slave_1: entered promiscuous mode [ 126.800845][ T7131] __nla_validate_parse: 3 callbacks suppressed [ 126.800870][ T7131] netlink: 276 bytes leftover after parsing attributes in process `syz.3.806'. [ 126.986250][ T1059] ip6gretap0 (unregistering): left promiscuous mode [ 127.324461][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.343851][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.357796][ T1059] bond0 (unregistering): Released all slaves [ 127.386453][ T1059] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 127.398256][ T1059] bond1 (unregistering): Released all slaves [ 127.419943][ T1059] bond2 (unregistering): Released all slaves [ 127.463209][ T7137] netlink: 17 bytes leftover after parsing attributes in process `syz.3.808'. [ 127.485557][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.538314][ T7137] netlink: 17 bytes leftover after parsing attributes in process `syz.3.808'. [ 127.820226][ T7030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.855875][ T7030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.281739][ T7030] team0: Port device team_slave_0 added [ 128.327780][ T7030] team0: Port device team_slave_1 added [ 128.415960][ T5101] Bluetooth: hci1: command tx timeout [ 128.672603][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.711423][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.755852][ T7030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.776621][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.783774][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.819939][ T7030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.876961][ T1059] batadv_slave_0: left promiscuous mode [ 128.914050][ T1059] hsr_slave_0: left promiscuous mode [ 128.929794][ T1059] hsr_slave_1: left promiscuous mode [ 128.937979][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.952048][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.963922][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.973122][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.012468][ T1059] veth1_macvtap: left promiscuous mode [ 129.020545][ T1059] veth1_vlan: left promiscuous mode [ 129.033750][ T1059] veth0_vlan: left promiscuous mode [ 129.858669][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 129.903517][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 130.454610][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.480823][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.494970][ T5101] Bluetooth: hci1: command tx timeout [ 130.525022][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.541970][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.553846][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.565109][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.579732][ T7214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.591979][ T7214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.750796][ T7030] hsr_slave_0: entered promiscuous mode [ 130.790416][ T7030] hsr_slave_1: entered promiscuous mode [ 130.881239][ T7030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.903806][ T7030] Cannot create hsr debugfs directory [ 130.934785][ T7229] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 131.703451][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 131.750724][ T7259] netlink: 31 bytes leftover after parsing attributes in process `syz.3.846'. [ 131.785156][ T7259] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 131.809685][ T7259] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 131.828412][ T7259] netlink: 31 bytes leftover after parsing attributes in process `syz.3.846'. [ 132.575322][ T5101] Bluetooth: hci1: command tx timeout [ 132.632861][ T7030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.728084][ T7030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.768880][ T7030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.813916][ T7030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.176213][ T7030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.278394][ T7030] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.332578][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.339893][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.412374][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.420829][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.493995][ T7328] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 133.745581][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.872'. [ 133.930019][ T7346] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 134.061950][ T7030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.084999][ T7030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.189511][ T29] audit: type=1800 audit(1719281208.015:11): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.877" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 134.280811][ T29] audit: type=1804 audit(1719281208.025:12): pid=7351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.877" name="/root/syzkaller.Wlmf79/176/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 134.610412][ T7375] Bluetooth: MGMT ver 1.22 [ 134.811794][ T7030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.860444][ T7389] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 134.945091][ T29] audit: type=1804 audit(1719281208.775:13): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.888" name="/root/syzkaller.DUm3B4/198/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 135.041402][ T7030] veth0_vlan: entered promiscuous mode [ 135.063084][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.075056][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.130080][ T7030] veth1_vlan: entered promiscuous mode [ 135.273928][ T7030] veth0_macvtap: entered promiscuous mode [ 135.310485][ T7030] veth1_macvtap: entered promiscuous mode [ 135.415501][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.456662][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.498404][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.539818][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.559115][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.570833][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.587269][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.627707][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.663234][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.751549][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.802012][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.829993][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.844063][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.860606][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.910557][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.928781][ T7030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.942443][ T7030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.974474][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.018593][ T7030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.040060][ T7030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.051790][ T7030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.093209][ T7030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.375803][ T3926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.421895][ T3926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.440425][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 136.477170][ T7456] netlink: 'syz.2.910': attribute type 4 has an invalid length. [ 136.547327][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.582685][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.184138][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 138.597131][ T7549] sctp: [Deprecated]: syz.3.945 (pid 7549) Use of int in maxseg socket option. [ 138.597131][ T7549] Use struct sctp_assoc_value instead [ 139.541750][ T7590] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 139.597067][ T7590] netlink: 512 bytes leftover after parsing attributes in process `syz.2.962'. [ 141.450814][ T7594] netlink: 'syz.2.962': attribute type 4 has an invalid length. [ 141.467997][ T7611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.513139][ T7619] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 141.897019][ T7638] hsr0: entered promiscuous mode [ 143.092074][ T7697] ebt_limit: overflow, try lower: 0/0 [ 143.231767][ T7701] netlink: 'syz.1.1006': attribute type 9 has an invalid length. [ 143.296827][ T7703] tipc: Started in network mode [ 143.301795][ T7703] tipc: Node identity fe80000000000000000000000000001f, cluster identity 4711 [ 143.318986][ T7703] tipc: Enabled bearer , priority 10 [ 143.897810][ T7730] ebt_limit: overflow, try lower: 0/0 [ 144.130488][ T7737] netlink: 'syz.3.1020': attribute type 9 has an invalid length. [ 144.442673][ T58] tipc: Node number set to 4269801503 [ 144.564166][ T7765] ebt_limit: overflow, try lower: 0/0 [ 144.748331][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 145.837490][ T7812] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 145.888894][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 145.933150][ T7816] netlink: 'syz.4.1048': attribute type 30 has an invalid length. [ 146.990854][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1063'. [ 147.456383][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1068'. [ 147.491129][ T7866] netlink: 'syz.2.1068': attribute type 30 has an invalid length. [ 150.758667][ T8013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1129'. [ 150.878758][ T8026] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1134'. [ 151.918248][ T8070] syzkaller0: entered promiscuous mode [ 151.924553][ T8070] syzkaller0: entered allmulticast mode [ 152.590547][ T29] audit: type=1804 audit(1719281226.425:14): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1160" name="/root/syzkaller.DUm3B4/253/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 152.633095][ T8110] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1164'. [ 154.399708][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 154.767066][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 155.116080][ T8162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1183'. [ 155.371143][ T29] audit: type=1804 audit(1719281229.205:15): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1181" name="/root/syzkaller.D9FicX/57/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 155.617757][ T5171] IPVS: starting estimator thread 0... [ 155.705296][ T8181] IPVS: using max 20 ests per chain, 48000 per kthread [ 155.966884][ T8197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1197'. [ 156.005476][ T8197] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1197'. [ 156.032465][ T8204] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1197'. [ 156.056379][ T8198] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1192'. [ 156.078708][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 156.121238][ T8197] ipt_REJECT: TCP_RESET invalid for non-tcp [ 156.243413][ T8201] Êü: entered promiscuous mode [ 156.505682][ T8224] netlink: 'syz.3.1208': attribute type 10 has an invalid length. [ 156.513864][ T8224] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1208'. [ 156.572182][ T8227] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 156.587888][ T8227] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 156.600492][ T8227] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.1210'. [ 156.613856][ T8227] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 156.889038][ T8234] Cannot find set identified by id 632 to match [ 157.076465][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 157.211552][ T8262] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 157.245558][ T8262] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 157.253361][ T8262] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1224'. [ 157.282258][ T8262] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 157.655329][ T8294] syz_tun: entered promiscuous mode [ 157.679387][ T8294] syz_tun: left promiscuous mode [ 157.753976][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 158.202952][ T8326] syzkaller0: entered promiscuous mode [ 158.214399][ T8326] syzkaller0: entered allmulticast mode [ 160.816765][ T8400] ip6tnl0: Master is either lo or non-ether device [ 161.056797][ T8418] netlink: 'syz.1.1293': attribute type 3 has an invalid length. [ 161.226007][ T8416] syzkaller0: entered promiscuous mode [ 161.244439][ T8416] syzkaller0: entered allmulticast mode [ 163.264202][ T8443] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.499299][ T8463] __nla_validate_parse: 1 callbacks suppressed [ 163.499319][ T8463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1314'. [ 163.653029][ T8474] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.751095][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 163.771337][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 163.792454][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 163.923893][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 163.940858][ T8479] syzkaller0: entered promiscuous mode [ 163.949913][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 163.965210][ T8479] syzkaller0: entered allmulticast mode [ 163.974978][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 164.203725][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 164.228061][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 164.243912][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 166.309307][ T8505] netlink: 'syz.3.1331': attribute type 7 has an invalid length. [ 166.556627][ T8509] netlink: 'syz.1.1334': attribute type 2 has an invalid length. [ 166.714510][ T8524] pimreg12: entered allmulticast mode [ 166.749115][ T8523] pimreg12: left allmulticast mode [ 167.159833][ T8549] netlink: 'syz.1.1346': attribute type 7 has an invalid length. [ 171.853893][ T29] audit: type=1804 audit(1719281245.685:16): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1348" name="/root/syzkaller.D9FicX/102/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 172.140419][ T8583] __nla_validate_parse: 10 callbacks suppressed [ 172.140444][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 172.180078][ T29] audit: type=1804 audit(1719281246.005:17): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1359" name="/root/syzkaller.D9FicX/103/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 172.309353][ T8595] netlink: 'syz.0.1368': attribute type 3 has an invalid length. [ 172.455270][ T8604] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 172.791036][ T8627] netlink: 'syz.1.1382': attribute type 1 has an invalid length. [ 173.694193][ T8691] delete_channel: no stack [ 173.707496][ T8686] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 173.850650][ T8703] Bluetooth: MGMT ver 1.22 [ 173.977903][ T8711] netlink: 'syz.0.1420': attribute type 2 has an invalid length. [ 174.158891][ T29] audit: type=1804 audit(1719281247.995:18): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1419" name="/root/syzkaller.DUm3B4/294/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 174.384567][ T8736] netlink: 'syz.4.1432': attribute type 4 has an invalid length. [ 174.401048][ T8736] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1432'. [ 174.420199][ T8737] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 174.769510][ T8755] netlink: 'syz.1.1439': attribute type 8 has an invalid length. [ 174.884144][ T8759] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1442'. [ 174.923761][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 175.049899][ T8771] netlink: 'syz.4.1447': attribute type 11 has an invalid length. [ 175.060580][ T8772] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1448'. [ 175.070363][ T8771] netlink: 'syz.4.1447': attribute type 11 has an invalid length. [ 175.125255][ T8767] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 175.321413][ T8777] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 175.594486][ T8793] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1457'. [ 175.784713][ T8769] sock: sock_timestamping_bind_phc: sock not bind to device [ 176.129495][ T8811] ip6tnl2: entered allmulticast mode [ 176.450191][ T8832] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1475'. [ 176.581123][ T8839] ip6tnl1: entered allmulticast mode [ 176.639594][ T8846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'. [ 176.818650][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.216751][ T8877] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1495'. [ 177.243509][ T8872] pimreg: entered allmulticast mode [ 177.260518][ T8872] netlink: 'syz.0.1493': attribute type 11 has an invalid length. [ 177.330963][ T8872] pimreg: left allmulticast mode [ 177.586628][ T8891] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1501'. [ 179.112411][ T8978] netlink: 'syz.1.1536': attribute type 4 has an invalid length. [ 180.515146][ T9061] SET target dimension over the limit! [ 181.421379][ T9113] netlink: 'syz.4.1591': attribute type 14 has an invalid length. [ 181.568027][ T9115] pimreg: entered allmulticast mode [ 181.586889][ T9115] netlink: 'syz.4.1592': attribute type 11 has an invalid length. [ 181.673818][ T9115] pimreg: left allmulticast mode [ 181.999702][ T9140] netlink: 'syz.1.1602': attribute type 14 has an invalid length. [ 182.445513][ T29] audit: type=1804 audit(1719281256.275:19): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1616" name="/root/syzkaller.Wlmf79/338/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 182.725717][ T9186] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1621'. [ 183.006824][ T9202] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 183.015069][ T9202] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1628'. [ 183.032711][ T9202] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.082197][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 183.115597][ T9208] tipc: Started in network mode [ 183.125203][ T9208] tipc: Node identity ac1414aa, cluster identity 4711 [ 183.133519][ T9208] tipc: Enabled bearer , priority 10 [ 183.174739][ T9212] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1632'. [ 183.175535][ T9208] netlink: 'syz.1.1630': attribute type 3 has an invalid length. [ 183.233124][ T9212] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 183.259642][ T9210] pimreg: entered allmulticast mode [ 183.330054][ T9210] netlink: 'syz.0.1631': attribute type 11 has an invalid length. [ 183.409854][ T9215] pimreg: left allmulticast mode [ 183.581083][ T9238] netlink: 'syz.1.1643': attribute type 10 has an invalid length. [ 183.594325][ T9238] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1643'. [ 183.616749][ T9238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.754656][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 184.205624][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1663'. [ 184.245986][ T45] tipc: Node number set to 2886997162 [ 185.066307][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.078618][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.090557][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.099675][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.114223][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.122002][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.472684][ T966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.493394][ T966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.590369][ T9350] delete_channel: no stack [ 185.634664][ T966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.645916][ T966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.671758][ T9352] tipc: Started in network mode [ 185.687200][ T9352] tipc: Node identity ac1414aa, cluster identity 4711 [ 185.710556][ T9352] tipc: Enabled bearer , priority 10 [ 185.762259][ T966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.784892][ T966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.788955][ T9357] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 185.819956][ T9357] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.1694'. [ 185.822408][ T9352] netlink: 'syz.3.1693': attribute type 3 has an invalid length. [ 185.834491][ T9357] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 185.852204][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1694'. [ 185.926871][ T966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.953830][ T966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.993406][ T9321] chnl_net:caif_netlink_parms(): no params data found [ 186.035864][ T9366] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1698'. [ 186.070837][ T9366] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 186.367439][ T9385] delete_channel: no stack [ 186.483086][ T9321] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.515878][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.523233][ T9321] bridge_slave_0: entered allmulticast mode [ 186.546022][ T9321] bridge_slave_0: entered promiscuous mode [ 186.563085][ T9321] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.574560][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.589803][ T9321] bridge_slave_1: entered allmulticast mode [ 186.603295][ T9321] bridge_slave_1: entered promiscuous mode [ 186.757488][ T9321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.807773][ T9321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.825087][ T5142] tipc: Node number set to 2886997162 [ 186.881691][ T9411] netlink: 'syz.0.1711': attribute type 1 has an invalid length. [ 186.903430][ T966] bridge_slave_1: left allmulticast mode [ 186.915357][ T966] bridge_slave_1: left promiscuous mode [ 186.925457][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.947918][ T966] bridge_slave_0: left allmulticast mode [ 186.962319][ T966] bridge_slave_0: left promiscuous mode [ 186.970178][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.215264][ T4493] Bluetooth: hci4: command tx timeout [ 187.779969][ T9423] netlink: 'syz.2.1717': attribute type 2 has an invalid length. [ 187.792861][ T9423] __nla_validate_parse: 1 callbacks suppressed [ 187.792885][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 188.340312][ T4493] Bluetooth: hci2: command 0x0406 tx timeout [ 188.348547][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 188.349192][ T5092] Bluetooth: hci3: command 0x0406 tx timeout [ 188.425482][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.437960][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.448985][ T966] bond0 (unregistering): Released all slaves [ 188.473994][ T9321] team0: Port device team_slave_0 added [ 188.480812][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1715'. [ 188.537232][ T9321] team0: Port device team_slave_1 added [ 188.586720][ T966] Êü: left promiscuous mode [ 188.659782][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.674385][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.701599][ T9321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.729153][ T9321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.745830][ T9321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.790146][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1729'. [ 188.807550][ T9321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.982138][ T9321] hsr_slave_0: entered promiscuous mode [ 188.994282][ T9321] hsr_slave_1: entered promiscuous mode [ 189.008815][ T9321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.022259][ T9321] Cannot create hsr debugfs directory [ 189.211715][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.233340][ T966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.261079][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.275093][ T966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.303845][ T5101] Bluetooth: hci4: command tx timeout [ 189.351519][ T966] team0: left allmulticast mode [ 189.381688][ T966] team_slave_0: left allmulticast mode [ 189.409784][ T966] team_slave_1: left allmulticast mode [ 189.436530][ T966] team0: left promiscuous mode [ 189.452337][ T966] team_slave_0: left promiscuous mode [ 189.458303][ T966] team_slave_1: left promiscuous mode [ 189.480543][ T966] veth1_macvtap: left promiscuous mode [ 189.492015][ T966] veth0_macvtap: left promiscuous mode [ 189.503557][ T966] veth1_vlan: left promiscuous mode [ 189.511982][ T966] veth0_vlan: left promiscuous mode [ 189.567938][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 190.640516][ T966] team0 (unregistering): Port device team_slave_1 removed [ 190.716603][ T966] team0 (unregistering): Port device team_slave_0 removed [ 191.383585][ T5101] Bluetooth: hci4: command tx timeout [ 191.458721][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 191.541239][ T9551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1774'. [ 191.755272][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 191.796916][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 192.440702][ T9321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.449315][ T9590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1789'. [ 192.467388][ T9321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.493586][ T9321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.519927][ T9321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.719287][ T9321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.773459][ T9321] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.798952][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.806285][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.861554][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.868840][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.362168][ T9321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.455554][ T5101] Bluetooth: hci4: command tx timeout [ 193.929420][ T9321] veth0_vlan: entered promiscuous mode [ 193.969789][ T9634] sctp: [Deprecated]: syz.1.1806 (pid 9634) Use of int in max_burst socket option. [ 193.969789][ T9634] Use struct sctp_assoc_value instead [ 193.972808][ T9321] veth1_vlan: entered promiscuous mode [ 194.133202][ T9321] veth0_macvtap: entered promiscuous mode [ 194.151477][ T9321] veth1_macvtap: entered promiscuous mode [ 194.199575][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.226973][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.243448][ T9651] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 194.254648][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.272278][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.300657][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.312018][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.322777][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.337417][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.361501][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.377955][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.389940][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.405273][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.417196][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.427434][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.439662][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.454714][ T9321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.477937][ T9321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.503948][ T9321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.530581][ T9321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.548725][ T9321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.572450][ T9321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.582597][ T9321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.759019][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.772100][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.837009][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.852170][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.050324][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 195.197810][ T9693] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1827'. [ 195.317881][ T9696] tipc: Started in network mode [ 195.330968][ T9696] tipc: Node identity 9ca6, cluster identity 3 [ 195.350296][ T9696] tipc: Node number set to 40102 [ 195.465809][ T9706] syzkaller0: entered promiscuous mode [ 195.471345][ T9706] syzkaller0: entered allmulticast mode [ 195.555907][ T9710] sctp: [Deprecated]: syz.0.1834 (pid 9710) Use of int in maxseg socket option. [ 195.555907][ T9710] Use struct sctp_assoc_value instead [ 195.819393][ T9686] sock: sock_timestamping_bind_phc: sock not bind to device [ 196.483554][ T29] audit: type=1804 audit(1719281270.315:20): pid=9737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1844" name="/root/syzkaller.Wlmf79/390/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 196.508952][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.509062][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.283665][ T9743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1846'. [ 198.513523][ T9744] team0 (unregistering): Port device team_slave_0 removed [ 198.535491][ T9744] team0 (unregistering): Port device team_slave_1 removed [ 198.554593][ T9744] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 198.566086][ T9744] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 198.598667][ T9744] team0 (unregistering): Port device macvlan2 removed [ 198.804450][ T9774] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 199.026810][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 199.805513][ T9829] syzkaller0: entered promiscuous mode [ 199.812621][ T9829] syzkaller0: entered allmulticast mode [ 199.890497][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'. [ 200.067051][ T9852] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 200.241558][ T9840] could not set up IPv6 listen sock [ 200.539012][ T9870] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1891'. [ 200.860773][ T9880] sock: sock_timestamping_bind_phc: sock not bind to device [ 200.921704][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1898'. [ 201.459134][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 201.525424][ T9917] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.537982][ T9917] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.835435][ T9957] netlink: 'syz.0.1928': attribute type 30 has an invalid length. [ 203.950458][ T9966] netlink: 'syz.4.1932': attribute type 10 has an invalid length. [ 203.964695][ T9966] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1932'. [ 204.327479][ T9991] netlink: 'syz.0.1942': attribute type 30 has an invalid length. [ 204.387292][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'. [ 204.511048][T10004] sctp: [Deprecated]: syz.2.1949 (pid 10004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.511048][T10004] Use struct sctp_sack_info instead [ 204.512258][ T9992] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 204.959188][T10033] sctp: [Deprecated]: syz.3.1962 (pid 10033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.959188][T10033] Use struct sctp_sack_info instead [ 205.019234][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 205.366983][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 205.640678][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 205.689414][T10078] sctp: [Deprecated]: syz.3.1976 (pid 10078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.689414][T10078] Use struct sctp_sack_info instead [ 206.097979][T10086] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.560246][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 206.798223][T10120] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1992'. [ 206.886568][T10120] netlink: 'syz.4.1992': attribute type 17 has an invalid length. [ 206.902555][T10120] lo: entered promiscuous mode [ 206.937373][T10118] lo: left promiscuous mode [ 207.262917][T10131] netlink: 'syz.1.1996': attribute type 10 has an invalid length. [ 207.298616][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1996'. [ 207.824355][T10148] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 208.333660][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'. [ 208.487709][T10177] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2010'. [ 208.801869][T10198] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 208.805256][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 208.896566][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 209.294509][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2029'. [ 209.482102][T10234] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2029'. [ 209.542590][T10233] netlink: 'syz.1.2035': attribute type 13 has an invalid length. [ 209.555555][T10233] netlink: 'syz.1.2035': attribute type 11 has an invalid length. [ 209.580997][T10233] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.590953][T10233] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.600327][T10233] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.609607][T10233] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.647217][T10233] vxlan0: entered promiscuous mode [ 210.319844][T10276] netem: unknown loss type 0 [ 210.346244][T10276] netem: change failed [ 210.698360][T10307] __nla_validate_parse: 3 callbacks suppressed [ 210.698384][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 210.744231][T10307] netlink: 'syz.0.2062': attribute type 13 has an invalid length. [ 210.755913][T10307] netlink: 'syz.0.2062': attribute type 11 has an invalid length. [ 210.772068][T10307] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.781621][T10307] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.790941][T10307] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.800318][T10307] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.816919][T10313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2066'. [ 210.827125][T10307] vxlan0: entered promiscuous mode [ 211.419832][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2075'. [ 211.594192][T10346] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 211.598412][T10344] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2075'. [ 211.951201][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2086'. [ 211.978820][T10361] syzkaller1: entered promiscuous mode [ 211.984633][T10361] syzkaller1: entered allmulticast mode [ 212.590276][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 212.816271][T10407] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2096'. [ 212.879182][T10411] netlink: 210620 bytes leftover after parsing attributes in process `syz.0.2103'. [ 212.911677][T10410] syzkaller1: entered promiscuous mode [ 212.928819][T10410] syzkaller1: entered allmulticast mode [ 213.243643][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 213.254006][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 213.581710][T10447] syzkaller1: entered promiscuous mode [ 213.605815][T10447] syzkaller1: entered allmulticast mode [ 214.186941][T10492] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.2142'. [ 215.287307][T10546] veth0_vlan: left promiscuous mode [ 215.310385][T10546] veth0_vlan: entered promiscuous mode [ 216.138992][T10575] __nla_validate_parse: 2 callbacks suppressed [ 216.139025][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2178'. [ 216.187505][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 216.409177][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2184'. [ 216.663981][T10580] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2184'. [ 216.754666][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.788604][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.031862][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.053533][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.275801][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.304133][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.333768][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.360322][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.370839][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.385832][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.396119][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.406325][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.589430][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.625573][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.666028][T10622] netlink: 'syz.0.2197': attribute type 4 has an invalid length. [ 217.744453][ T29] audit: type=1804 audit(1719281291.575:21): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2205" name="/root/syzkaller.DUm3B4/463/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 217.770017][T10637] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2205'. [ 218.047650][ T35] bridge_slave_1: left allmulticast mode [ 218.051169][T10657] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.2214'. [ 218.053350][ T35] bridge_slave_1: left promiscuous mode [ 218.078730][T10652] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2212'. [ 218.095523][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.110245][T10652] netlink: 'syz.2.2212': attribute type 1 has an invalid length. [ 218.132613][ T35] bridge_slave_0: left allmulticast mode [ 218.154920][ T35] bridge_slave_0: left promiscuous mode [ 218.160849][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.976775][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.994475][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.020177][ T35] bond0 (unregistering): Released all slaves [ 219.047704][ T35] bond1 (unregistering): Released all slaves [ 219.094098][T10680] syzkaller0: entered promiscuous mode [ 219.102320][T10680] syzkaller0: entered allmulticast mode [ 219.191602][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 219.226668][ T35] tipc: Disabling bearer [ 219.259450][ T35] tipc: Left network mode [ 219.344092][T10619] chnl_net:caif_netlink_parms(): no params data found [ 219.456445][ T5101] Bluetooth: hci1: command tx timeout [ 219.661352][T10717] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2236'. [ 219.684967][T10717] netlink: 'syz.0.2236': attribute type 1 has an invalid length. [ 219.723322][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2238'. [ 219.977138][ T5098] IPVS: starting estimator thread 0... [ 219.980847][T10735] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 220.067797][T10619] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.080129][T10619] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.090751][T10619] bridge_slave_0: entered allmulticast mode [ 220.097662][T10739] IPVS: using max 22 ests per chain, 52800 per kthread [ 220.120983][T10619] bridge_slave_0: entered promiscuous mode [ 220.156641][ T35] hsr_slave_0: left promiscuous mode [ 220.163741][ T35] hsr_slave_1: left promiscuous mode [ 220.170455][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.178836][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.190693][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.199159][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.229907][ T35] veth1_macvtap: left promiscuous mode [ 220.236238][ T35] veth0_macvtap: left promiscuous mode [ 220.242773][ T35] veth1_vlan: left promiscuous mode [ 220.249977][ T35] veth0_vlan: left promiscuous mode [ 220.870549][ T35] team0 (unregistering): Port device team_slave_1 removed [ 220.920311][ T35] team0 (unregistering): Port device team_slave_0 removed [ 221.451115][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2245'. [ 221.460866][T10748] batadv_slave_1: entered allmulticast mode [ 221.493657][T10748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.503408][T10748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.519830][T10748] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 221.544895][ T5101] Bluetooth: hci1: command tx timeout [ 221.550988][T10619] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.565173][T10619] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.573067][T10619] bridge_slave_1: entered allmulticast mode [ 221.581706][T10619] bridge_slave_1: entered promiscuous mode [ 221.711491][T10619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.763194][T10619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.000815][T10619] team0: Port device team_slave_0 added [ 222.022694][T10778] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2258'. [ 222.024400][T10619] team0: Port device team_slave_1 added [ 222.056486][T10780] netlink: 'syz.2.2259': attribute type 3 has an invalid length. [ 222.141438][T10619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.158163][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.219307][T10619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.265737][T10619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.276817][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.303719][T10619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.348167][T10778] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 222.444770][T10619] hsr_slave_0: entered promiscuous mode [ 222.471822][T10619] hsr_slave_1: entered promiscuous mode [ 222.480014][T10619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.492004][T10619] Cannot create hsr debugfs directory [ 222.508589][T10789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2261'. [ 222.520011][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 222.607424][T10798] tipc: Enabling of bearer rejected, failed to enable media [ 222.662976][T10795] netlink: 'syz.4.2264': attribute type 5 has an invalid length. [ 222.721361][T10795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.762118][T10809] netlink: 'syz.3.2271': attribute type 3 has an invalid length. [ 222.969596][T10817] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2275'. [ 223.330389][T10826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2277'. [ 223.342763][T10817] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 223.460742][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 223.537806][T10840] netlink: 'syz.0.2283': attribute type 3 has an invalid length. [ 223.591216][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 223.615232][ T5101] Bluetooth: hci1: command tx timeout [ 223.722877][T10848] raw_sendmsg: syz.0.2286 forgot to set AF_INET. Fix it! [ 223.793696][T10846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2285'. [ 223.856554][T10619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.889845][T10619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.907072][T10619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.923110][T10619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.020059][T10857] netlink: 'syz.4.2288': attribute type 4 has an invalid length. [ 224.129695][T10619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.168853][T10619] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.196784][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.204015][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.234742][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.241982][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.319248][T10619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.341180][T10619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.592050][T10868] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2292'. [ 224.770394][T10619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.956771][T10619] veth0_vlan: entered promiscuous mode [ 224.968299][T10893] netlink: 'syz.4.2302': attribute type 10 has an invalid length. [ 225.007872][T10619] veth1_vlan: entered promiscuous mode [ 225.086705][T10619] veth0_macvtap: entered promiscuous mode [ 225.097461][T10619] veth1_macvtap: entered promiscuous mode [ 225.143257][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.148100][T10902] netlink: 'syz.2.2306': attribute type 3 has an invalid length. [ 225.160921][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.172553][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.193000][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.203091][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.214149][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.231908][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.243955][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.270744][T10619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.286482][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.300082][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.324850][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.335591][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.345599][T10619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.375448][T10619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.397312][T10619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.413490][T10619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.423504][T10619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.432470][T10619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.442397][T10619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.620762][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.620779][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.708161][ T5101] Bluetooth: hci1: command tx timeout [ 225.730317][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.739037][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.904275][T10928] netlink: 'syz.4.2316': attribute type 1 has an invalid length. [ 226.039562][T10933] netlink: 'syz.4.2319': attribute type 3 has an invalid length. [ 226.502416][T10964] netlink: 'syz.0.2331': attribute type 6 has an invalid length. [ 226.511039][T10964] __nla_validate_parse: 3 callbacks suppressed [ 226.511086][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2331'. [ 228.548299][ T2434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.767762][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.777952][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.788503][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.800329][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.810845][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.818561][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.962124][T10966] chnl_net:caif_netlink_parms(): no params data found [ 229.031883][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.039906][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.047581][T10966] bridge_slave_0: entered allmulticast mode [ 229.054533][T10966] bridge_slave_0: entered promiscuous mode [ 229.064256][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.071680][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.079190][T10966] bridge_slave_1: entered allmulticast mode [ 229.087327][T10966] bridge_slave_1: entered promiscuous mode [ 229.117988][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.130089][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.168648][T10966] team0: Port device team_slave_0 added [ 229.180846][T10966] team0: Port device team_slave_1 added [ 229.211006][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.218920][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.245210][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.258482][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.266059][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.292433][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.339041][T10966] hsr_slave_0: entered promiscuous mode [ 229.349788][T10966] hsr_slave_1: entered promiscuous mode [ 229.356189][T10966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.363758][T10966] Cannot create hsr debugfs directory [ 230.193764][ T2434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.288403][ T2434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.346089][ T2434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.457334][ T2434] bridge_slave_1: left allmulticast mode [ 230.463014][ T2434] bridge_slave_1: left promiscuous mode [ 230.471554][ T2434] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.481590][ T2434] bridge_slave_0: left allmulticast mode [ 230.489534][ T2434] bridge_slave_0: left promiscuous mode [ 230.496163][ T2434] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.896731][ T5101] Bluetooth: hci1: command tx timeout [ 230.930873][ T2434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.947176][ T2434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.959658][ T2434] bond0 (unregistering): Released all slaves [ 231.243643][ T2434] hsr_slave_0: left promiscuous mode [ 231.250518][ T2434] hsr_slave_1: left promiscuous mode [ 231.261988][ T2434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.269600][ T2434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.279641][ T2434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.287243][ T2434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.311005][ T2434] veth1_macvtap: left promiscuous mode [ 231.316781][ T2434] veth0_macvtap: left promiscuous mode [ 231.322406][ T2434] veth1_vlan: left promiscuous mode [ 231.327956][ T2434] veth0_vlan: left promiscuous mode [ 231.863176][ T2434] team0 (unregistering): Port device team_slave_1 removed [ 231.912060][ T2434] team0 (unregistering): Port device team_slave_0 removed [ 232.977503][ T5101] Bluetooth: hci1: command tx timeout [ 233.117059][T10966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 233.201646][T10966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 233.277966][T10966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 233.320117][T10966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 233.361340][T11024] SET target dimension over the limit! [ 233.667666][T10966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.738670][T10966] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.799366][T11035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2355'. [ 233.800709][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.815637][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.893836][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.901154][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.513710][T10966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.550522][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2364'. [ 234.642063][T10966] veth0_vlan: entered promiscuous mode [ 234.693846][T10966] veth1_vlan: entered promiscuous mode [ 234.761211][T10966] veth0_macvtap: entered promiscuous mode [ 234.783722][T10966] veth1_macvtap: entered promiscuous mode [ 234.848288][T11082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2370'. [ 234.874666][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.896599][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.907674][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.922243][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.933277][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.958550][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.974383][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.001788][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.030980][T10966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.055331][ T5101] Bluetooth: hci1: command tx timeout [ 235.083780][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.097259][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.155150][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.173619][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.184989][T10966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.196256][T10966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.207580][T11098] x_tables: duplicate underflow at hook 3 [ 235.208856][T10966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.232623][T11094] macvlan0: entered promiscuous mode [ 235.254215][T11094] macvlan0: left promiscuous mode [ 235.298860][T11096] geneve2: entered promiscuous mode [ 235.315689][T11096] geneve2: entered allmulticast mode [ 235.436559][T10966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.463111][T10966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.489539][T10966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.509225][T10966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.646423][T11112] netlink: 'syz.2.2377': attribute type 3 has an invalid length. [ 235.708339][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2379'. [ 235.792037][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.820219][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.910077][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.923084][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.145873][ T53] Bluetooth: hci1: command tx timeout [ 237.266796][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2402'. [ 237.440093][T11176] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 237.559109][T11180] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2409'. [ 237.571645][T11184] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 237.589378][T11184] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 237.898376][T11203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2420'. [ 237.957539][T11205] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 237.985962][T11207] tipc: Started in network mode [ 237.991251][T11207] tipc: Node identity 0300000003, cluster identity 4711 [ 238.004128][T11207] tipc: Enabling of bearer rejected, failed to enable media [ 238.014022][T11209] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 238.035048][T11209] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 238.228891][T11224] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 238.647325][T11243] tipc: Enabling of bearer rejected, failed to enable media [ 239.224984][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 239.523420][T11270] tipc: Enabling of bearer rejected, failed to enable media [ 239.755947][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.871595][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.038603][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.189314][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.415867][ T5101] Bluetooth: hci4: command 0x0405 tx timeout [ 240.521705][T11303] netlink: 'syz.4.2461': attribute type 8 has an invalid length. [ 240.551768][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.628649][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.639549][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.647556][ T11] bridge_slave_1: left allmulticast mode [ 240.672632][ T11] bridge_slave_1: left promiscuous mode [ 240.679558][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.690179][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 240.696770][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.720043][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.745898][ T11] bridge_slave_0: left allmulticast mode [ 240.756428][ T11] bridge_slave_0: left promiscuous mode [ 240.779070][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.566925][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.582880][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.604513][ T11] bond0 (unregistering): Released all slaves [ 241.633941][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'. [ 241.670946][T11323] gtp0: entered promiscuous mode [ 241.676940][T11323] gtp0: entered allmulticast mode [ 241.786464][T11328] openvswitch: netlink: Flow key attr not present in new flow. [ 242.241779][ T11] hsr_slave_0: left promiscuous mode [ 242.257144][ T11] hsr_slave_1: left promiscuous mode [ 242.271134][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.288602][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.301117][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.312256][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.332515][T11353] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 242.380876][ T11] veth1_macvtap: left promiscuous mode [ 242.391538][ T11] veth0_macvtap: left promiscuous mode [ 242.397541][ T11] veth1_vlan: left promiscuous mode [ 242.404556][ T11] veth0_vlan: left promiscuous mode [ 242.815492][ T5101] Bluetooth: hci1: command tx timeout [ 243.220648][ T11] team0 (unregistering): Port device team_slave_1 removed [ 243.292824][ T11] team0 (unregistering): Port device team_slave_0 removed [ 243.950682][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 243.980267][T11357] gtp0: entered promiscuous mode [ 243.995451][T11357] gtp0: entered allmulticast mode [ 244.003670][T11306] chnl_net:caif_netlink_parms(): no params data found [ 244.270192][T11373] macvlan0: entered promiscuous mode [ 244.307656][T11373] macvlan0: left promiscuous mode [ 244.520303][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.539280][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.576346][T11306] bridge_slave_0: entered allmulticast mode [ 244.588698][T11306] bridge_slave_0: entered promiscuous mode [ 244.642643][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.653643][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.676795][T11306] bridge_slave_1: entered allmulticast mode [ 244.684293][T11306] bridge_slave_1: entered promiscuous mode [ 244.895864][ T5101] Bluetooth: hci1: command tx timeout [ 244.920588][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.933583][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.072739][T11306] team0: Port device team_slave_0 added [ 245.108353][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 245.132259][T11306] team0: Port device team_slave_1 added [ 245.249102][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.259519][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.290646][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.312338][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.330061][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.420883][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.609234][T11306] hsr_slave_0: entered promiscuous mode [ 245.618703][T11306] hsr_slave_1: entered promiscuous mode [ 245.636471][T11306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.650709][T11306] Cannot create hsr debugfs directory [ 245.701454][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2511'. [ 245.724486][T11436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2511'. [ 245.886004][T11444] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2514'. [ 246.091448][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2521'. [ 246.116483][T11459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2521'. [ 246.212849][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 246.246162][T11466] ieee802154 phy0 wpan0: encryption failed: -90 [ 246.335823][T11470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 246.716620][T11485] netlink: 'syz.3.2534': attribute type 21 has an invalid length. [ 246.813603][T11306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.848191][T11490] __nla_validate_parse: 2 callbacks suppressed [ 246.848213][T11490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2537'. [ 246.868382][T11496] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.870736][T11490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2537'. [ 246.887853][T11306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.909320][T11306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.975005][ T5101] Bluetooth: hci1: command tx timeout [ 246.988429][T11306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.105828][T11496] tun0: tun_chr_ioctl cmd 2147767519 [ 247.126295][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2538'. [ 247.205001][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 247.214441][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 247.260635][T11495] could not set up IPv6 listen sock [ 247.434477][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.522322][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.549108][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.556357][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.581126][T11497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.632819][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.640114][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.037624][T11528] netlink: 'syz.2.2548': attribute type 21 has an invalid length. [ 248.139066][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.207462][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2550'. [ 248.235414][T11536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2550'. [ 248.329749][T11306] veth0_vlan: entered promiscuous mode [ 248.377484][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 248.439054][T11306] veth1_vlan: entered promiscuous mode [ 248.550966][T11306] veth0_macvtap: entered promiscuous mode [ 248.563044][T11549] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 248.599263][T11306] veth1_macvtap: entered promiscuous mode [ 248.661192][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.678328][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.695751][T11559] netlink: 'syz.4.2560': attribute type 1 has an invalid length. [ 248.711305][T11559] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2560'. [ 248.720032][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.755048][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.790920][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.823219][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.838401][T11564] ------------[ cut here ]------------ [ 248.844039][T11564] WARNING: CPU: 1 PID: 11564 at net/core/filter.c:6579 bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 248.844545][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.854184][T11564] Modules linked in: [ 248.854220][T11564] CPU: 1 PID: 11564 Comm: syz.4.2562 Not tainted 6.10.0-rc4-syzkaller-00891-gbf2468f9afba #0 [ 248.854243][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 248.854258][T11564] RIP: 0010:bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 248.854399][T11564] Code: bf 80 33 f8 eb 05 e8 b8 80 33 f8 48 c7 c0 f2 ff ff ff e9 d1 fc ff ff e8 a7 80 33 f8 48 63 c3 e9 c4 fc ff ff e8 9a 80 33 f8 90 <0f> 0b 90 4d 85 f6 0f 85 0e f9 ff ff e9 46 fa ff ff e8 83 80 33 f8 [ 248.854436][T11564] RSP: 0018:ffffc90002cef7a0 EFLAGS: 00010283 [ 248.854460][T11564] RAX: ffffffff8962a486 RBX: 0000000000000000 RCX: 0000000000040000 [ 248.854474][T11564] RDX: ffffc9000f2a0000 RSI: 0000000000000824 RDI: 0000000000000825 [ 248.854486][T11564] RBP: ffffc90002cef8d8 R08: ffffffff89629d8b R09: 1ffffffff1f5b52d [ 248.854501][T11564] R10: dffffc0000000000 R11: ffffffffa0001da8 R12: 0000000000000000 [ 248.854516][T11564] R13: ffff8880b953d060 R14: 0000000000000000 R15: dffffc0000000000 [ 248.854530][T11564] FS: 00007f5b3989e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 248.854548][T11564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.854563][T11564] CR2: 00007fe3912adfa8 CR3: 000000002c052000 CR4: 00000000003506f0 [ 248.854583][T11564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.854596][T11564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.854610][T11564] Call Trace: [ 248.854620][T11564] [ 248.854629][T11564] ? __warn+0x163/0x4e0 [ 248.873401][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.879460][T11564] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 248.879501][T11564] ? report_bug+0x2b3/0x500 [ 248.879536][T11564] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 248.879559][T11564] ? handle_bug+0x3e/0x70 [ 248.879580][T11564] ? exc_invalid_op+0x1a/0x50 [ 248.879600][T11564] ? asm_exc_invalid_op+0x1a/0x20 [ 248.879629][T11564] ? 0xffffffffa0001da8 [ 248.879653][T11564] ? bpf_lwt_seg6_adjust_srh+0x17b/0xb30 [ 248.879671][T11564] ? bpf_lwt_seg6_adjust_srh+0x876/0xb30 [ 248.907920][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.915860][T11564] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 248.915905][T11564] ? lockdep_hardirqs_on+0x99/0x150 [ 248.915951][T11564] ? __pfx_bpf_lwt_seg6_adjust_srh+0x10/0x10 [ 248.915984][T11564] bpf_prog_2088341bddeddc1d+0x40/0x42 [ 248.916005][T11564] bpf_test_run+0x7b8/0xa90 [ 248.916061][T11564] ? do_syscall_64+0xf3/0x230 [ 248.916089][T11564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.916120][T11564] ? bpf_test_run+0x370/0xa90 [ 248.916158][T11564] ? __pfx_bpf_test_run+0x10/0x10 [ 248.916189][T11564] ? eth_type_trans+0x3d1/0x7a0 [ 248.931553][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.938429][T11564] ? __pfx_eth_type_trans+0x10/0x10 [ 248.938470][T11564] ? convert___skb_to_skb+0x41/0x620 [ 248.938502][T11564] bpf_prog_test_run_skb+0xafa/0x13b0 [ 248.938526][T11564] ? __pfx_lock_release+0x10/0x10 [ 248.938563][T11564] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.938595][T11564] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.938621][T11564] bpf_prog_test_run+0x33a/0x3b0 [ 248.938680][T11564] __sys_bpf+0x48d/0x810 [ 248.938710][T11564] ? __pfx___sys_bpf+0x10/0x10 [ 248.938748][T11564] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.938772][T11564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.938794][T11564] ? do_syscall_64+0x100/0x230 [ 248.938824][T11564] __x64_sys_bpf+0x7c/0x90 [ 248.938850][T11564] do_syscall_64+0xf3/0x230 [ 248.938874][T11564] ? clear_bhb_loop+0x35/0x90 [ 248.938903][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.938929][T11564] RIP: 0033:0x7f5b38b75d39 [ 248.952150][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.954970][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.954995][T11564] RSP: 002b:00007f5b3989e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.955018][T11564] RAX: ffffffffffffffda RBX: 00007f5b38d03fa0 RCX: 00007f5b38b75d39 [ 248.955031][T11564] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 248.955043][T11564] RBP: 00007f5b38bf6766 R08: 0000000000000000 R09: 0000000000000000 [ 248.955056][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.969735][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.972010][T11564] R13: 000000000000000b R14: 00007f5b38d03fa0 R15: 00007fffecc7fb88 [ 249.021587][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.023178][T11564] [ 249.034180][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.038999][T11564] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.039014][T11564] CPU: 1 PID: 11564 Comm: syz.4.2562 Not tainted 6.10.0-rc4-syzkaller-00891-gbf2468f9afba #0 [ 249.039033][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 249.039050][T11564] Call Trace: [ 249.039061][T11564] [ 249.039071][T11564] dump_stack_lvl+0x241/0x360 [ 249.039104][T11564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.039138][T11564] ? __pfx__printk+0x10/0x10 [ 249.039166][T11564] ? vscnprintf+0x5d/0x90 [ 249.039200][T11564] panic+0x349/0x860 [ 249.039222][T11564] ? __warn+0x172/0x4e0 [ 249.039246][T11564] ? __pfx_panic+0x10/0x10 [ 249.039284][T11564] __warn+0x346/0x4e0 [ 249.039305][T11564] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 249.039330][T11564] report_bug+0x2b3/0x500 [ 249.039349][T11564] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 249.039374][T11564] handle_bug+0x3e/0x70 [ 249.039396][T11564] exc_invalid_op+0x1a/0x50 [ 249.039418][T11564] asm_exc_invalid_op+0x1a/0x20 [ 249.039442][T11564] RIP: 0010:bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 249.039464][T11564] Code: bf 80 33 f8 eb 05 e8 b8 80 33 f8 48 c7 c0 f2 ff ff ff e9 d1 fc ff ff e8 a7 80 33 f8 48 63 c3 e9 c4 fc ff ff e8 9a 80 33 f8 90 <0f> 0b 90 4d 85 f6 0f 85 0e f9 ff ff e9 46 fa ff ff e8 83 80 33 f8 [ 249.039478][T11564] RSP: 0018:ffffc90002cef7a0 EFLAGS: 00010283 [ 249.039496][T11564] RAX: ffffffff8962a486 RBX: 0000000000000000 RCX: 0000000000040000 [ 249.039509][T11564] RDX: ffffc9000f2a0000 RSI: 0000000000000824 RDI: 0000000000000825 [ 249.039521][T11564] RBP: ffffc90002cef8d8 R08: ffffffff89629d8b R09: 1ffffffff1f5b52d [ 249.039535][T11564] R10: dffffc0000000000 R11: ffffffffa0001da8 R12: 0000000000000000 [ 249.039547][T11564] R13: ffff8880b953d060 R14: 0000000000000000 R15: dffffc0000000000 [ 249.039566][T11564] ? 0xffffffffa0001da8 [ 249.039582][T11564] ? bpf_lwt_seg6_adjust_srh+0x17b/0xb30 [ 249.039600][T11564] ? bpf_lwt_seg6_adjust_srh+0x876/0xb30 [ 249.039664][T11564] ? lockdep_hardirqs_on+0x99/0x150 [ 249.039694][T11564] ? __pfx_bpf_lwt_seg6_adjust_srh+0x10/0x10 [ 249.039726][T11564] bpf_prog_2088341bddeddc1d+0x40/0x42 [ 249.039743][T11564] bpf_test_run+0x7b8/0xa90 [ 249.039768][T11564] ? do_syscall_64+0xf3/0x230 [ 249.039787][T11564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.039814][T11564] ? bpf_test_run+0x370/0xa90 [ 249.039849][T11564] ? __pfx_bpf_test_run+0x10/0x10 [ 249.039883][T11564] ? eth_type_trans+0x3d1/0x7a0 [ 249.039916][T11564] ? __pfx_eth_type_trans+0x10/0x10 [ 249.039939][T11564] ? convert___skb_to_skb+0x41/0x620 [ 249.039967][T11564] bpf_prog_test_run_skb+0xafa/0x13b0 [ 249.039993][T11564] ? __pfx_lock_release+0x10/0x10 [ 249.040029][T11564] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 249.040065][T11564] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 249.040092][T11564] bpf_prog_test_run+0x33a/0x3b0 [ 249.040115][T11564] __sys_bpf+0x48d/0x810 [ 249.040143][T11564] ? __pfx___sys_bpf+0x10/0x10 [ 249.040179][T11564] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.040200][T11564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.040220][T11564] ? do_syscall_64+0x100/0x230 [ 249.040245][T11564] __x64_sys_bpf+0x7c/0x90 [ 249.040270][T11564] do_syscall_64+0xf3/0x230 [ 249.040291][T11564] ? clear_bhb_loop+0x35/0x90 [ 249.040327][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.040349][T11564] RIP: 0033:0x7f5b38b75d39 [ 249.040365][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.040379][T11564] RSP: 002b:00007f5b3989e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.040397][T11564] RAX: ffffffffffffffda RBX: 00007f5b38d03fa0 RCX: 00007f5b38b75d39 [ 249.040410][T11564] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 249.040421][T11564] RBP: 00007f5b38bf6766 R08: 0000000000000000 R09: 0000000000000000 [ 249.040433][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.040444][T11564] R13: 000000000000000b R14: 00007f5b38d03fa0 R15: 00007fffecc7fb88 [ 249.040472][T11564] [ 249.043622][T11564] Kernel Offset: disabled