last executing test programs: 31.218486788s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1f}, @IFLA_MACSEC_INC_SCI={0x5}]}}}]}, 0x44}}, 0x0) 31.153578957s ago: executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}], 0x18}, 0x0) 31.093335699s ago: executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r0, &(0x7f0000008240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x10, 0x110, 0xc}], 0x10}}], 0x1, 0x0) 31.073645168s ago: executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 31.034029929s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000014000000050018000100001808001100e300000008000a000000000008001600f24d000018000180140002006e657464657673696d300000000000000800100000000000080009"], 0x5c}}, 0x0) 31.009641777s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffffffffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x0) 30.975226795s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5b}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 30.943405086s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f09efeffe809005300fff5dd00000010000100080c10216900000000000000", 0x58}], 0x1) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500004c000000000006907800000000ffffffff00004e22a00ed1d1926cb08c7364d9ff0b712dec4b9ae05587f1da85171c57cbf24e2679f492bae84955c48b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12e6fb1c4cc784283dc5abd7fff427b70613123fd7cb00000000b722307a875c2271e9"], 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89eb, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 30.922498661s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000800)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)='2', 0x1}], 0x1}, 0x0) 30.892127785s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x8) 30.866275927s ago: executing program 1: r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex, 0xffffffffffffffff, 0x34, 0x0, 0x0, @prog_id, r1}, 0x20) 30.812229869s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 30.794715532s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25101e0, r2}) 30.755086886s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 30.692839652s ago: executing program 3: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.686962259s ago: executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r0, &(0x7f0000008240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[{0x10, 0x110, 0xc}], 0x10}}], 0x1, 0x0) 30.639642853s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x82, &(0x7f00000000c0), 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90082}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c000180080001"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @broadcast}], 0x10) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r7, &(0x7f0000000000)='\"', 0x1) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007f1000000000000062000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x3fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000001811000000000000000000662151fa612ff22537d2905c2535e76eae0edefac87d", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x269, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='rpcgss_createauth\x00', r11}, 0x10) sendmmsg$inet6(r0, &(0x7f0000008780)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)='{', 0x1}], 0x1}}], 0x1, 0x0) 30.603788795s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000180100000000000029000000370000006720000000000000010300000007100000000002025500be0a0000000000007fab2b9a76775dd8d682176b5c963539b9e2ee3a8294053915d155ebde241212e5c6c8efc0b7a2ef5b235b77cc5a85e59ff4aa25dd0fd94d0659c7e4ba30bca95458a091e91eec432440c3926d3bac79743391065a5e80718ac7c1bc32b968c4162749f87b443f354ecea6be6b0e9a3c9bfc7ab7c3b519a8a46baf046ad8c210047ea1dcf74622a037a9d25df65d09e90d40388f2c3c8973aba3ecd28c15e2d824b2c88b1ab13d6cdd665de331071800000000043c0004ff000000000000000800000000000000072000000002060504000100000000000000ff07000000000000050000000000000014"], 0x158}, 0x0) 30.585346201s ago: executing program 0: getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000640)=""/135, &(0x7f00000002c0)=0x87) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x0) socketpair(0x10, 0x2, 0x0, &(0x7f0000005f40)) 30.501251899s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@bloom_filter={0x1e, 0x0, 0xb, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000080)=""/144}, 0x20) 30.495784947s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000014000000050018000100001808001100e300000008000a000000000008001600f24d000018000180140002006e657464657673696d300000000000000800100000000000080009"], 0x5c}}, 0x0) 30.413873609s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f09efeffe809005300fff5dd00000010000100080c10216900000000000000", 0x58}], 0x1) recvfrom$packet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500004c000000000006907800000000ffffffff00004e22a00ed1d1926cb08c7364d9ff0b712dec4b9ae05587f1da85171c57cbf24e2679f492bae84955c48b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12e6fb1c4cc784283dc5abd7fff427b70613123fd7cb00000000b722307a875c2271e9"], 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89eb, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 30.330204784s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 30.198903282s ago: executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket(0x2, 0x3, 0x100000001) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0xfffffecc) r7 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) bind$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) splice(r3, 0x0, r5, 0x0, 0x8001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) 30.012725051s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25101e0, r2}) 662.178609ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 617.882682ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 470.656007ms ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) 178.602165ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000000c0)=0x2, &(0x7f0000000300), 0x2}, 0x20) 0s ago: executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) kernel console output (not intermixed with test programs): a:aa:aa:3e) already exists on: batadv_slave_0 [ 63.225134][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.235519][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.246616][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.256759][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.267440][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.279509][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.298485][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.309968][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.321642][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.332592][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.344028][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.368801][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.379680][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.392307][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.403824][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.414898][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.426054][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.438324][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.462105][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.471274][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.480735][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.489842][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.515838][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.517792][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.524166][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.535200][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.552610][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.561456][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.600794][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.608882][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.661615][ T5124] veth0_macvtap: entered promiscuous mode [ 63.691665][ T2820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.701443][ T5124] veth1_macvtap: entered promiscuous mode [ 63.713268][ T2820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.778512][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.815577][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.828097][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.839319][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.849627][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.861391][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.871613][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.893553][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.916809][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.925869][ T29] audit: type=1804 audit(1718021497.326:2): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1211364345/syzkaller.RwtLW7/1/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 64.019116][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.054787][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.089863][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.102252][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.112604][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.125454][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.138017][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.150936][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.192451][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.262937][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.271365][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.286741][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.296656][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.305909][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.315801][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.445936][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.482127][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.546655][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.568876][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.576728][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.591073][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.738110][ T2820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.774104][ T2820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.834161][ T29] audit: type=1804 audit(1718021498.236:3): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1211364345/syzkaller.RwtLW7/6/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 64.953734][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.994943][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.189727][ T53] Bluetooth: hci4: command tx timeout [ 65.189767][ T5126] Bluetooth: hci0: command tx timeout [ 65.195257][ T5114] Bluetooth: hci3: command tx timeout [ 65.200823][ T5126] Bluetooth: hci2: command tx timeout [ 65.271164][ T5126] Bluetooth: hci1: command tx timeout [ 65.623189][ T5251] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 65.720649][ T5251] hsr0: entered promiscuous mode [ 65.743381][ T5254] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.801686][ T5251] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 65.802669][ T29] audit: type=1804 audit(1718021499.196:4): pid=5255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir15052788/syzkaller.R6g7VW/3/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 65.898801][ T5251] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 65.950842][ T5251] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 66.046524][ T5251] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 66.129630][ T5251] syz-executor.1 (5251) used greatest stack depth: 18768 bytes left [ 66.261989][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.276302][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.289829][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.298440][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.306528][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.316192][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.510406][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.545054][ T29] audit: type=1804 audit(1718021499.946:5): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4127130110/syzkaller.WKXLWD/8/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 66.632483][ T5285] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.784816][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.887566][ T5294] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 66.907380][ T5294] hsr0: entered promiscuous mode [ 66.930431][ T5294] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 66.980824][ T5294] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 67.060595][ T5294] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 67.118877][ T5294] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 67.196411][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.218871][ T29] audit: type=1804 audit(1718021500.606:6): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4127130110/syzkaller.WKXLWD/12/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 67.428032][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.646846][ T5328] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.064250][ T5333] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 68.125171][ T5333] hsr0: entered promiscuous mode [ 68.174486][ T5333] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.290803][ T5333] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 68.363862][ T5333] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 68.389020][ T5126] Bluetooth: hci0: command tx timeout [ 68.408905][ T5333] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 68.659816][ T5357] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.685673][ T11] bridge_slave_1: left allmulticast mode [ 68.706929][ T11] bridge_slave_1: left promiscuous mode [ 68.729419][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.747839][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.756573][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.765867][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.776475][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.789933][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.798170][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.812513][ T11] bridge_slave_0: left allmulticast mode [ 68.818205][ T11] bridge_slave_0: left promiscuous mode [ 68.826475][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.286405][ T5376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.394924][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.410427][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.421841][ T11] bond0 (unregistering): Released all slaves [ 69.452936][ T5373] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 69.464638][ T5373] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.495721][ T5373] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 69.513234][ T5373] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 69.528795][ T5373] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 69.648116][ T5267] chnl_net:caif_netlink_parms(): no params data found [ 69.895771][ T5392] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.014593][ T5397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.100219][ T5403] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.450195][ T5418] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 70.470461][ T5126] Bluetooth: hci0: command tx timeout [ 70.479633][ T5418] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 70.495905][ T5418] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 70.506656][ T5418] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 70.519555][ T5418] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 70.541999][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.580158][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.589517][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.589775][ T5267] bridge_slave_0: entered allmulticast mode [ 70.593898][ T5267] bridge_slave_0: entered promiscuous mode [ 70.763095][ T11] hsr_slave_0: left promiscuous mode [ 70.795104][ T11] hsr_slave_1: left promiscuous mode [ 70.828545][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.852466][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.869441][ T5126] Bluetooth: hci4: command tx timeout [ 70.885263][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.904821][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.962469][ T11] veth1_macvtap: left promiscuous mode [ 70.984990][ T11] veth0_macvtap: left promiscuous mode [ 71.004367][ T11] veth1_vlan: left promiscuous mode [ 71.013436][ T11] veth0_vlan: left promiscuous mode [ 71.465172][ T11] team0 (unregistering): Port device team_slave_1 removed [ 71.501514][ T11] team0 (unregistering): Port device team_slave_0 removed [ 71.801152][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.808416][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.818452][ T5267] bridge_slave_1: entered allmulticast mode [ 71.838496][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.848759][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.851224][ T5267] bridge_slave_1: entered promiscuous mode [ 72.111445][ T5267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.193204][ T5267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.420688][ T5267] team0: Port device team_slave_0 added [ 72.483979][ T5456] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.539436][ T5267] team0: Port device team_slave_1 added [ 72.549951][ T5126] Bluetooth: hci0: command tx timeout [ 72.859879][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.866935][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.926150][ T5267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.946055][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 72.953809][ T5126] Bluetooth: hci4: command tx timeout [ 73.064154][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.113647][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.145601][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.210322][ T5267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.359244][ T5488] net_ratelimit: 2 callbacks suppressed [ 73.359263][ T5488] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 73.381175][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.497707][ T5505] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.523479][ T5267] hsr_slave_0: entered promiscuous mode [ 73.543351][ T5267] hsr_slave_1: entered promiscuous mode [ 73.564800][ T5267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.578760][ T5267] Cannot create hsr debugfs directory [ 73.600918][ T5507] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.621478][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.780361][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.059604][ T29] audit: type=1804 audit(1718021507.456:7): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4127130110/syzkaller.WKXLWD/34/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 74.277093][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.308294][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.353767][ T5359] bridge_slave_0: entered allmulticast mode [ 74.390415][ T5359] bridge_slave_0: entered promiscuous mode [ 74.557478][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.587907][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.618325][ T5359] bridge_slave_1: entered allmulticast mode [ 74.628969][ T5126] Bluetooth: hci0: command tx timeout [ 74.646309][ T5359] bridge_slave_1: entered promiscuous mode [ 74.916471][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.951041][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.032159][ T5126] Bluetooth: hci4: command tx timeout [ 75.157863][ T11] bridge_slave_1: left allmulticast mode [ 75.173507][ T11] bridge_slave_1: left promiscuous mode [ 75.183630][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.227554][ T11] bridge_slave_0: left allmulticast mode [ 75.248229][ T11] bridge_slave_0: left promiscuous mode [ 75.265488][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.335856][ T5578] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 75.336463][ T5580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.287438][ T29] audit: type=1804 audit(1718021509.686:8): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir15052788/syzkaller.R6g7VW/35/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 76.387421][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.400050][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.414856][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.424404][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.433608][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.434155][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.450603][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.461613][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.472530][ T11] bond0 (unregistering): Released all slaves [ 76.824753][ T5359] team0: Port device team_slave_0 added [ 76.852753][ T5359] team0: Port device team_slave_1 added [ 77.109669][ T53] Bluetooth: hci4: command tx timeout [ 77.170088][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.186342][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.219457][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.437829][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.466241][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.501678][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.657263][ T5607] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 77.791607][ T5359] hsr_slave_0: entered promiscuous mode [ 77.807681][ T5359] hsr_slave_1: entered promiscuous mode [ 77.838993][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.846611][ T5359] Cannot create hsr debugfs directory [ 77.929041][ T11] hsr_slave_0: left promiscuous mode [ 77.954135][ T11] hsr_slave_1: left promiscuous mode [ 77.986504][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.001321][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.009607][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.017179][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.041224][ T11] veth1_macvtap: left promiscuous mode [ 78.046957][ T11] veth0_macvtap: left promiscuous mode [ 78.053053][ T11] veth1_vlan: left promiscuous mode [ 78.064333][ T11] veth0_vlan: left promiscuous mode [ 78.561825][ T53] Bluetooth: hci1: command tx timeout [ 78.662504][ T11] team0 (unregistering): Port device team_slave_1 removed [ 78.695624][ T11] team0 (unregistering): Port device team_slave_0 removed [ 79.011849][ T5628] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 79.021796][ T5637] macsec0: entered allmulticast mode [ 79.027206][ T5637] veth1_macvtap: entered allmulticast mode [ 79.128587][ T5639] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.222297][ T5641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 79.280176][ T5267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.305344][ T5267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.322601][ T5267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.355629][ T5267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.807555][ T5584] chnl_net:caif_netlink_parms(): no params data found [ 80.183027][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.326971][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.446177][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.458967][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.480812][ T5584] bridge_slave_0: entered allmulticast mode [ 80.499778][ T5584] bridge_slave_0: entered promiscuous mode [ 80.630469][ T53] Bluetooth: hci1: command tx timeout [ 80.640918][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.643007][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.669424][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.676600][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.706782][ T5584] bridge_slave_1: entered allmulticast mode [ 80.718577][ T5584] bridge_slave_1: entered promiscuous mode [ 80.805585][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.857458][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.947696][ T5710] syzkaller0: entered promiscuous mode [ 80.953657][ T5710] syzkaller0: entered allmulticast mode [ 80.967157][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.017658][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.037018][ T5584] team0: Port device team_slave_0 added [ 81.052682][ T5584] team0: Port device team_slave_1 added [ 81.145028][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.152280][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.179116][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.077258][ T786] cfg80211: failed to load regulatory.db [ 82.237941][ T5359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.249679][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.257271][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.284861][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.352463][ T5359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.373335][ T5723] sctp: [Deprecated]: syz-executor.3 (pid 5723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.373335][ T5723] Use struct sctp_sack_info instead [ 82.394866][ T5359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.400825][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.557037][ T5359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.596638][ T5267] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.627817][ T5584] hsr_slave_0: entered promiscuous mode [ 82.635809][ T5584] hsr_slave_1: entered promiscuous mode [ 82.642840][ T5584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.651079][ T5584] Cannot create hsr debugfs directory [ 82.656747][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.708956][ T53] Bluetooth: hci1: command tx timeout [ 82.779578][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.786779][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.804400][ T11] bridge_slave_1: left allmulticast mode [ 82.812145][ T11] bridge_slave_1: left promiscuous mode [ 82.818352][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.835077][ T11] bridge_slave_0: left allmulticast mode [ 82.840909][ T11] bridge_slave_0: left promiscuous mode [ 82.846649][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.235742][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.246824][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.258591][ T11] bond0 (unregistering): Released all slaves [ 83.296470][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.303695][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.745192][ T5748] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 83.819524][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.859563][ T11] hsr_slave_0: left promiscuous mode [ 83.875875][ T11] hsr_slave_1: left promiscuous mode [ 83.896403][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.918824][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.936883][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.956843][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.013570][ T11] veth1_macvtap: left promiscuous mode [ 84.026754][ T11] veth0_macvtap: left promiscuous mode [ 84.034007][ T11] veth1_vlan: left promiscuous mode [ 84.045720][ T11] veth0_vlan: left promiscuous mode [ 84.106957][ T29] audit: type=1804 audit(1718021517.506:9): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir15052788/syzkaller.R6g7VW/71/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 84.233484][ T29] audit: type=1804 audit(1718021517.636:10): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir15052788/syzkaller.R6g7VW/71/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 84.588340][ T29] audit: type=1804 audit(1718021517.986:11): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1211364345/syzkaller.RwtLW7/81/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 84.789055][ T53] Bluetooth: hci1: command tx timeout [ 84.861033][ T11] team0 (unregistering): Port device team_slave_1 removed [ 84.894392][ T11] team0 (unregistering): Port device team_slave_0 removed [ 85.435554][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.540621][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.590774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.597981][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.685256][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.692552][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.905394][ T5267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.124489][ T5788] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 86.181585][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.227664][ T5788] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 86.258259][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.326598][ T5584] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.366789][ T5584] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.452520][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.475980][ T5584] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.515840][ T5584] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.646833][ T5359] veth0_vlan: entered promiscuous mode [ 86.757323][ T5359] veth1_vlan: entered promiscuous mode [ 86.809217][ T5267] veth0_vlan: entered promiscuous mode [ 86.874957][ T5267] veth1_vlan: entered promiscuous mode [ 87.000424][ T5359] veth0_macvtap: entered promiscuous mode [ 87.059855][ T5359] veth1_macvtap: entered promiscuous mode [ 87.096515][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.147836][ T5267] veth0_macvtap: entered promiscuous mode [ 87.188295][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.205835][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.233507][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.247298][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.264929][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.301415][ T5267] veth1_macvtap: entered promiscuous mode [ 87.330499][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.364211][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.390549][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.418712][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.440478][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.482498][ T5359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.501665][ T5359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.539671][ T5359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.548427][ T5359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.654258][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.721944][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.744423][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.765538][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.778196][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.796895][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.816230][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.843409][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.927926][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.935140][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.966996][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.974202][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.012811][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.050304][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.067354][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.078962][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.089890][ T5267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.104856][ T5267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.130670][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.155120][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.171707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.205979][ T5267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.221252][ T5267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.230455][ T5267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.241522][ T5267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363870][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.386089][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.418557][ T5584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.736106][ T5883] syzkaller0: entered promiscuous mode [ 88.746894][ T5883] syzkaller0: entered allmulticast mode [ 88.760676][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.801516][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.087414][ T5905] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 90.401751][ T2467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.424645][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.435233][ T2467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.662251][ T5584] veth0_vlan: entered promiscuous mode [ 90.753730][ T5584] veth1_vlan: entered promiscuous mode [ 90.866678][ T5584] veth0_macvtap: entered promiscuous mode [ 90.915623][ T5584] veth1_macvtap: entered promiscuous mode [ 90.926309][ T29] audit: type=1804 audit(1718021524.326:12): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2286830276/syzkaller.Rlnwv6/8/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 90.974218][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.995877][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.008026][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.019020][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.032011][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.042807][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.053007][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.065887][ T29] audit: type=1804 audit(1718021524.466:13): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2286830276/syzkaller.Rlnwv6/8/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 91.092667][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.120562][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.140695][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.151588][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.164074][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.176170][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.186229][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.279200][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.295706][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.317442][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.367027][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.406232][ T5949] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.437167][ T5949] caif0: entered allmulticast mode [ 91.446851][ T5584] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477319][ T5584] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489909][ T5584] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.521379][ T5584] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.902745][ T2467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.949447][ T2467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.058592][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.104263][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.184823][ T5969] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 92.299929][ T5975] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 92.498123][ T29] audit: type=1804 audit(1718021525.896:14): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2286830276/syzkaller.Rlnwv6/13/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 92.634935][ T29] audit: type=1804 audit(1718021525.956:15): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2286830276/syzkaller.Rlnwv6/13/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 93.060155][ T6002] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 93.100193][ T6002] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 93.139053][ T6002] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 93.373757][ T6018] xt_recent: hitcount (8388608) is larger than allowed maximum (255) [ 93.406778][ T6020] xt_TCPMSS: Only works on TCP SYN packets [ 93.512571][ T6025] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 93.612666][ T6031] vlan2: entered allmulticast mode [ 94.067870][ T6043] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.178953][ T6050] team_slave_0: entered promiscuous mode [ 94.184903][ T6050] team_slave_1: entered promiscuous mode [ 94.220619][ T6050] vlan2: entered promiscuous mode [ 94.240036][ T6050] team0: entered promiscuous mode [ 94.362907][ T6050] team0: left promiscuous mode [ 94.369311][ T6050] team_slave_0: left promiscuous mode [ 94.374786][ T6050] team_slave_1: left promiscuous mode [ 94.676863][ T6072] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 94.712601][ T6072] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 94.766695][ T6072] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 94.777567][ T6074] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 94.811166][ T6074] bond0: (slave bond_slave_0): Releasing backup interface [ 95.070013][ T6079] syzkaller0: entered promiscuous mode [ 95.093447][ T6079] syzkaller0: entered allmulticast mode [ 95.295968][ T6101] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.311761][ T6101] caif0: entered allmulticast mode [ 95.454029][ T6114] xt_TCPMSS: Only works on TCP SYN packets [ 96.993651][ T6124] vlan2: entered allmulticast mode [ 97.101987][ T6144] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.140698][ T6144] caif0: entered allmulticast mode [ 98.112959][ T6189] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 98.162831][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.266476][ T6191] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.350972][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.408212][ T6207] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 98.465392][ T6207] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.604465][ T6214] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 98.613940][ T6214] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 98.645323][ T6214] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.739001][ T6215] team_slave_0: entered promiscuous mode [ 98.744810][ T6215] team_slave_1: entered promiscuous mode [ 98.766330][ T6215] vlan2: entered promiscuous mode [ 98.781848][ T6215] team0: entered promiscuous mode [ 98.832442][ T6215] team0: left promiscuous mode [ 98.856506][ T6215] team_slave_0: left promiscuous mode [ 98.862180][ T6215] team_slave_1: left promiscuous mode [ 99.004422][ T6235] xt_TCPMSS: Only works on TCP SYN packets [ 99.180411][ T6235] vlan2: entered allmulticast mode [ 99.308166][ T6247] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 99.339554][ T6247] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.507683][ T6255] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 99.522401][ T6255] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 99.533899][ T6255] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.876759][ T6276] xt_TCPMSS: Only works on TCP SYN packets [ 100.016467][ T6282] vlan0: entered promiscuous mode [ 100.031999][ T6282] vlan0: entered allmulticast mode [ 100.089508][ T6282] veth0_vlan: entered allmulticast mode [ 100.152912][ T6282] team0: Port device vlan0 added [ 100.168218][ T6283] vlan2: entered allmulticast mode [ 100.188964][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.198359][ T6289] tipc: Started in network mode [ 100.224403][ T6289] tipc: Node identity cgroup.pn, cluster identity 8 [ 100.384980][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.725149][ T6315] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 100.845421][ T6321] veth0_vlan: left allmulticast mode [ 101.607378][ T6348] tipc: Cannot configure node identity twice [ 102.184655][ T6377] IPVS: Scheduler module ip_vs_sip not found [ 102.353925][ T6393] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 102.367905][ T6394] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 102.483404][ T6397] __nla_validate_parse: 2 callbacks suppressed [ 102.483424][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.879524][ T6412] xt_TCPMSS: Only works on TCP SYN packets [ 102.943243][ T6416] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 103.010742][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.094013][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.103156][ T6420] vlan2: entered allmulticast mode [ 103.166348][ T6422] can: request_module (can-proto-0) failed. [ 103.539698][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.747699][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.767948][ T6456] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.778383][ T6456] vlan0: entered allmulticast mode [ 103.785399][ T6456] veth0_vlan: entered allmulticast mode [ 103.916558][ T6462] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 104.006752][ T6465] tipc: Started in network mode [ 104.021525][ T6465] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 104.035548][ T6465] tipc: Enabled bearer , priority 10 [ 104.064004][ T6465] Zero length message leads to an empty skb [ 104.165748][ T6430] dccp_close: ABORT with 32 bytes unread [ 104.453727][ T6488] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 104.836481][ T6509] xt_TCPMSS: Only works on TCP SYN packets [ 104.908276][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.951759][ T6515] vlan2: entered allmulticast mode [ 104.978299][ T6514] tipc: Resetting bearer [ 104.985852][ T6514] vlan0: entered promiscuous mode [ 104.994779][ T6514] vlan0: entered allmulticast mode [ 105.023089][ T6514] veth0_vlan: entered allmulticast mode [ 105.066291][ T6514] team0: Port device vlan0 added [ 105.085130][ T6520] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.116128][ T6520] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.135481][ T5238] tipc: Node number set to 10005162 [ 105.150392][ T6520] vlan0: entered allmulticast mode [ 105.177178][ T6520] veth0_vlan: entered allmulticast mode [ 105.406932][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.547338][ T6537] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 105.572936][ T6537] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 106.075805][ T6562] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.261952][ T6571] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 106.705212][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.714039][ T6590] xt_TCPMSS: Only works on TCP SYN packets [ 106.724163][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.934769][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.999701][ T6595] vlan2: entered allmulticast mode [ 107.057174][ T6601] can: request_module (can-proto-0) failed. [ 107.102489][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.227258][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.526749][ T6616] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 107.549115][ T6616] __nla_validate_parse: 7 callbacks suppressed [ 107.549135][ T6616] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.628733][ T6616] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 107.649033][ T6616] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.659791][ T65] bridge_slave_1: left allmulticast mode [ 107.688891][ T65] bridge_slave_1: left promiscuous mode [ 107.694673][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.726755][ T5126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.741192][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.758042][ T5126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.770921][ T5126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.780410][ T65] bridge_slave_0: left allmulticast mode [ 107.790435][ T5126] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.797825][ T5126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.804507][ T65] bridge_slave_0: left promiscuous mode [ 107.862975][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.426002][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.455781][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.475670][ T65] bond0 (unregistering): Released all slaves [ 108.494476][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.585787][ T6637] bridge1: entered promiscuous mode [ 108.599910][ T6637] bridge1: entered allmulticast mode [ 108.684137][ T65] tipc: Disabling bearer [ 108.691639][ T65] tipc: Left network mode [ 108.897091][ T6662] TCP: Unexpected MD5 Hash found for [fe80::bb].0->[ff02::1].20002 [] [ 108.901679][ T6665] xt_TCPMSS: Only works on TCP SYN packets [ 109.223479][ T6677] vlan2: entered allmulticast mode [ 109.386193][ T65] hsr_slave_0: left promiscuous mode [ 109.424156][ T65] hsr_slave_1: left promiscuous mode [ 109.449653][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.458991][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.479649][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.497369][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.527430][ T65] veth1_macvtap: left promiscuous mode [ 109.558946][ T65] veth0_macvtap: left promiscuous mode [ 109.570621][ T65] veth1_vlan: left promiscuous mode [ 109.583274][ T65] veth0_vlan: left allmulticast mode [ 109.612582][ T65] veth0_vlan: left promiscuous mode [ 109.909309][ T53] Bluetooth: hci4: command tx timeout [ 110.006693][ T65] team0 (unregistering): Port device vlan0 removed [ 110.237391][ T65] team0 (unregistering): Port device team_slave_1 removed [ 110.272008][ T65] team0 (unregistering): Port device team_slave_0 removed [ 110.624385][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.647801][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.691103][ T6692] ipvlan2: entered promiscuous mode [ 110.692391][ T6714] TCP: Unexpected MD5 Hash found for [fe80::bb].0->[ff02::1].20002 [] [ 110.697635][ T6692] ipvlan2: entered allmulticast mode [ 110.718034][ T6692] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 111.188140][ T6736] bond0: entered allmulticast mode [ 111.199964][ T6736] bond_slave_1: entered allmulticast mode [ 111.245363][ T6743] netlink: 59 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.299938][ T6743] netlink: 59 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.413744][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 111.495840][ T6749] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 111.588479][ T6749] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 111.603349][ T6749] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 111.742865][ T6763] atomic_op ffff88801e60c998 conn xmit_atomic 0000000000000000 [ 111.805696][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.829780][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.854034][ T6621] bridge_slave_0: entered allmulticast mode [ 111.876571][ T6621] bridge_slave_0: entered promiscuous mode [ 111.902266][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.916224][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.923943][ T6621] bridge_slave_1: entered allmulticast mode [ 111.959523][ T6621] bridge_slave_1: entered promiscuous mode [ 111.988956][ T53] Bluetooth: hci4: command tx timeout [ 112.142516][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.199231][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.374609][ T6793] bond0: entered allmulticast mode [ 112.390455][ T6793] bond_slave_0: entered allmulticast mode [ 112.399048][ T6793] bond_slave_1: entered allmulticast mode [ 112.429646][ T6621] team0: Port device team_slave_0 added [ 112.481319][ T6621] team0: Port device team_slave_1 added [ 112.629706][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.636701][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.714089][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.744677][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.760128][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.794279][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.868817][ T6621] hsr_slave_0: entered promiscuous mode [ 112.877156][ T6621] hsr_slave_1: entered promiscuous mode [ 112.908832][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.916707][ T6621] Cannot create hsr debugfs directory [ 113.245351][ T6825] tipc: Trying to set illegal importance in message [ 113.256007][ T6826] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.303080][ T6826] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.329794][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.455570][ T29] audit: type=1800 audit(1718021546.856:16): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 113.891661][ T6854] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 114.076467][ T53] Bluetooth: hci4: command tx timeout [ 114.165976][ T6866] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 114.215148][ T6621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.253374][ T6621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.283363][ T6621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.352819][ T6621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.364770][ T29] audit: type=1800 audit(1718021547.756:17): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 114.699866][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.814213][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.149618][ T53] Bluetooth: hci4: command tx timeout [ 116.662119][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.683270][ T6949] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 116.750312][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.757490][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.820515][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.828456][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.918302][ T6621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.940535][ T6956] Bluetooth: MGMT ver 1.22 [ 116.955534][ T6621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.083376][ T6967] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 117.211883][ T6967] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.964153][ T7013] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 118.119409][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.228987][ T53] Bluetooth: hci4: command tx timeout [ 118.300355][ T7027] delete_channel: no stack [ 118.347558][ T6621] veth0_vlan: entered promiscuous mode [ 118.416177][ T6621] veth1_vlan: entered promiscuous mode [ 118.572643][ T6621] veth0_macvtap: entered promiscuous mode [ 118.630590][ T6621] veth1_macvtap: entered promiscuous mode [ 118.731728][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.771593][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.808860][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.827072][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.842044][ T7059] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 118.844092][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.860205][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.870442][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.881039][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.899904][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.987416][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.004040][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.042481][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.081767][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.103762][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.116104][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.135337][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.153941][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.170801][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.219069][ T6621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.244609][ T6621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.261256][ T6621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.283488][ T6621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.369429][ T7072] delete_channel: no stack [ 119.602679][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.655417][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.765882][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.831259][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.279184][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.674316][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.783242][ T7151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.952699][ T7159] delete_channel: no stack [ 121.371940][ T7187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.564105][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.170008][ T7226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.470547][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.022190][ T7278] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 123.033967][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.117266][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.000120][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.576193][ T7332] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.707985][ T7349] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 124.716557][ T7349] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 124.827340][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.915270][ T7361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.394489][ T7387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.712258][ T7406] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 125.739641][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.770927][ T7403] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.366901][ T7428] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 126.387233][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.439062][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.768064][ T7442] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.804716][ T7442] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.828742][ T7442] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.859854][ T7442] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 126.904902][ T7442] geneve2: entered promiscuous mode [ 126.930672][ T7442] geneve2: entered allmulticast mode [ 126.994294][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.203877][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.230111][ T7462] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 127.243002][ T7459] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.247384][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.324505][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.739461][ T7482] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.397363][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.408542][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.419645][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.431764][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.441596][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.457663][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.544724][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.762955][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.943516][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.054409][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.369761][ T51] bridge_slave_1: left allmulticast mode [ 129.375472][ T51] bridge_slave_1: left promiscuous mode [ 129.384683][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.401302][ T7557] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 129.414115][ T51] bridge_slave_0: left allmulticast mode [ 129.418262][ T7557] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 129.453847][ T51] bridge_slave_0: left promiscuous mode [ 129.484990][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.114158][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.123806][ T51] bond_slave_1: left allmulticast mode [ 130.141330][ T51] bond0 (unregistering): Released all slaves [ 130.164579][ T7507] chnl_net:caif_netlink_parms(): no params data found [ 130.185382][ T7567] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 130.260416][ T51] tipc: Left network mode [ 130.551378][ T53] Bluetooth: hci3: command tx timeout [ 130.720769][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.737678][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.758269][ T7507] bridge_slave_0: entered allmulticast mode [ 130.772518][ T7507] bridge_slave_0: entered promiscuous mode [ 130.878513][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.893710][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.914942][ T7507] bridge_slave_1: entered allmulticast mode [ 130.931458][ T7507] bridge_slave_1: entered promiscuous mode [ 131.125611][ T51] hsr_slave_0: left promiscuous mode [ 131.188573][ T51] hsr_slave_1: left promiscuous mode [ 131.200946][ T7631] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 131.228540][ T786] IPVS: starting estimator thread 0... [ 131.239642][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.259250][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.276060][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.286272][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.347733][ T7634] IPVS: using max 20 ests per chain, 48000 per kthread [ 131.374008][ T51] veth1_macvtap: left promiscuous mode [ 131.392598][ T51] veth0_macvtap: left promiscuous mode [ 131.406287][ T51] veth1_vlan: left promiscuous mode [ 131.427253][ T51] veth0_vlan: left promiscuous mode [ 132.257610][ T51] team0 (unregistering): Port device team_slave_1 removed [ 132.296550][ T51] team0 (unregistering): Port device team_slave_0 removed [ 132.630645][ T53] Bluetooth: hci3: command tx timeout [ 132.719671][ T7663] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 132.727883][ T7663] __nla_validate_parse: 5 callbacks suppressed [ 132.727897][ T7663] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.813859][ T7663] erspan0: refused to change device tx_queue_len [ 132.843378][ T7663] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 132.884066][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.916785][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.046622][ T7507] team0: Port device team_slave_0 added [ 133.100854][ T7507] team0: Port device team_slave_1 added [ 133.241045][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.275426][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.283869][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.307994][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.324787][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.350348][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.368730][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.403188][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.656514][ T7507] hsr_slave_0: entered promiscuous mode [ 133.713107][ T7507] hsr_slave_1: entered promiscuous mode [ 133.739193][ T7507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.769759][ T7507] Cannot create hsr debugfs directory [ 134.130297][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.165730][ T7727] bridge0: entered promiscuous mode [ 134.186890][ T7727] team0: entered promiscuous mode [ 134.198957][ T7727] team_slave_0: entered promiscuous mode [ 134.226143][ T7727] team_slave_1: entered promiscuous mode [ 134.709055][ T53] Bluetooth: hci3: command tx timeout [ 135.123801][ T7770] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 135.149958][ T7770] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.185784][ T7770] erspan0: refused to change device tx_queue_len [ 135.192694][ T7770] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 135.228528][ T7769] bridge0: entered promiscuous mode [ 135.236844][ T7769] team0: entered promiscuous mode [ 135.265707][ T7769] team_slave_0: entered promiscuous mode [ 135.280102][ T7769] team_slave_1: entered promiscuous mode [ 135.294722][ T7769] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 135.304344][ T7769] Cannot create hsr debugfs directory [ 135.539015][ T7507] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 135.603980][ T7507] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 135.627015][ T7507] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 135.653264][ T7507] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.923380][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.013136][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.049672][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.056904][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.108331][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.115632][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.316292][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.372417][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.609254][ T7835] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 136.790210][ T53] Bluetooth: hci3: command tx timeout [ 136.804221][ T7849] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.887265][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.251559][ T7507] veth0_vlan: entered promiscuous mode [ 137.305945][ T7507] veth1_vlan: entered promiscuous mode [ 137.562150][ T7507] veth0_macvtap: entered promiscuous mode [ 137.604514][ T7507] veth1_macvtap: entered promiscuous mode [ 137.666656][ T7887] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.692205][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.728717][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.738684][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.783353][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.814093][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.842220][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.853328][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.874447][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.888348][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.958831][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.028773][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.050661][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.076982][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.113484][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.153239][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.189572][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.215535][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.243085][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.291929][ T7507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.349714][ T7507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.358467][ T7507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.431740][ T7507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.511198][ T7925] xt_l2tp: invalid flags combination: c [ 138.828429][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.869007][ T53] Bluetooth: hci3: command tx timeout [ 139.017882][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.256273][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.266487][ T7952] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.287877][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.399437][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.432894][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.445948][ T7956] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 139.457147][ T7956] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.468071][ T7956] erspan0: refused to change device tx_queue_len [ 139.484850][ T7956] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 139.612522][ T7963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.713532][ T7971] xt_l2tp: invalid flags combination: c [ 140.021832][ T7978] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 140.219040][ T7978] team0: Device veth1_vlan failed to register rx_handler [ 140.429071][ T7996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 140.502839][ T8000] Cannot find set identified by id 0 to match [ 140.811315][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.949188][ T53] Bluetooth: hci3: command tx timeout [ 141.095619][ T8033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.170190][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.442861][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.680274][ T8106] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.989037][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.029332][ T53] Bluetooth: hci3: command tx timeout [ 143.073450][ T8124] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 143.190021][ T8131] Bluetooth: MGMT ver 1.22 [ 145.393834][ T8147] dccp_invalid_packet: P.Data Offset(116) too large [ 145.487330][ T8153] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.532047][ T8153] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 145.576390][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.617300][ T8162] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.652468][ T8157] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 145.700617][ T8164] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 146.192554][ T8174] team0 (unregistering): Port device team_slave_0 removed [ 146.220674][ T8174] team0 (unregistering): Port device team_slave_1 removed [ 147.375930][ T8216] team0 (unregistering): Port device team_slave_0 removed [ 147.500794][ T8216] team0 (unregistering): Port device team_slave_1 removed [ 147.798128][ T8246] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 148.098743][ T8258] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.119949][ T8259] dccp_invalid_packet: P.Data Offset(116) too large [ 148.563008][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.674256][ T8281] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 148.807908][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 148.934649][ T8299] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 149.008823][ T8302] IPv6: addrconf: prefix option has invalid lifetime [ 149.333154][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.358256][ T8328] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 149.528682][ T8338] IPv6: addrconf: prefix option has invalid lifetime [ 149.746620][ T8351] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.759622][ T8345] syzkaller0: entered promiscuous mode [ 149.772030][ T8351] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 149.774365][ T8345] syzkaller0: entered allmulticast mode [ 149.784573][ T8351] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.973690][ T8359] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 150.446468][ T8372] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.242926][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.252896][ T8384] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 151.282893][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.036083][ T8402] IPv6: addrconf: prefix option has invalid lifetime [ 152.758167][ T8435] nft_compat: unsupported protocol 0 [ 153.848341][ T8510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.045809][ T8519] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 154.061685][ T8520] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.079879][ T8520] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 154.116668][ T8523] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.358327][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.379308][ T8537] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.391742][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.401723][ T8537] vlan0: entered allmulticast mode [ 154.416079][ T8537] veth0_vlan: entered allmulticast mode [ 154.647577][ T8553] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 154.822591][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.082116][ T8579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 155.237480][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.353850][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.885181][ T8616] syzkaller0: entered promiscuous mode [ 155.912317][ T8616] syzkaller0: entered allmulticast mode [ 155.918671][ T8635] syz-executor.2[8635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.918827][ T8635] syz-executor.2[8635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.044650][ T8636] tipc: Started in network mode [ 156.069895][ T8636] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 156.088573][ T8636] tipc: Enabling of bearer rejected, failed to enable media [ 157.963350][ T8646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.012711][ T8671] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.101247][ T8695] syz-executor.2[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.101400][ T8695] syz-executor.2[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.151159][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.199153][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.206459][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.520747][ T8725] tipc: Started in network mode [ 158.526513][ T8725] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 158.535511][ T8725] tipc: Enabling of bearer rejected, failed to enable media [ 158.577687][ T8723] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.398371][ T8759] syz-executor.1[8759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.398534][ T8759] syz-executor.1[8759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.483153][ T8762] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.646578][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.659220][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.667421][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.676850][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.689617][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.696977][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.044998][ T29] audit: type=1804 audit(1718021593.446:18): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1211364345/syzkaller.RwtLW7/355/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 160.165591][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 160.182825][ T8798] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 160.242891][ T8798] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 160.262023][ T8798] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.502609][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.511347][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.519257][ T8768] bridge_slave_0: entered allmulticast mode [ 160.530036][ T8768] bridge_slave_0: entered promiscuous mode [ 160.543917][ T8809] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.569600][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.586644][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.591179][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.611204][ T8768] bridge_slave_1: entered allmulticast mode [ 160.639759][ T8768] bridge_slave_1: entered promiscuous mode [ 160.760667][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.766969][ T8826] openvswitch: netlink: Message has 4 unknown bytes. [ 160.782998][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.875358][ T8768] team0: Port device team_slave_0 added [ 160.893909][ T8768] team0: Port device team_slave_1 added [ 160.970994][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.992348][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.020745][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.072965][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.080776][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.107547][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.280089][ T8768] hsr_slave_0: entered promiscuous mode [ 161.295246][ T8768] hsr_slave_1: entered promiscuous mode [ 161.311568][ T8768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.326517][ T8768] Cannot create hsr debugfs directory [ 161.725207][ T8768] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.749887][ T5126] Bluetooth: hci0: command tx timeout [ 161.870545][ T8768] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.934805][ T8859] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 162.111502][ T8768] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.362554][ T8768] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.397609][ T8877] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 162.628318][ T8768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.664837][ T8768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.688469][ T8768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.716217][ T8768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.766642][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.959853][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.003523][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.038489][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.045753][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.076950][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.084219][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.177237][ T8768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.349673][ T8916] bond0: entered promiscuous mode [ 163.361662][ T8916] bond_slave_0: entered promiscuous mode [ 163.375482][ T8916] bond_slave_1: entered promiscuous mode [ 163.558867][ T29] audit: type=1804 audit(1718021596.956:19): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3194072158/syzkaller.EiccZH/94/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 163.584540][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.829907][ T5126] Bluetooth: hci0: command tx timeout [ 164.105702][ T8768] veth0_vlan: entered promiscuous mode [ 164.138114][ T8768] veth1_vlan: entered promiscuous mode [ 164.175704][ T8945] syz-executor.0[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.175854][ T8945] syz-executor.0[8945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.376029][ T8768] veth0_macvtap: entered promiscuous mode [ 164.489453][ T8954] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 164.550793][ T8768] veth1_macvtap: entered promiscuous mode [ 164.590992][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.601749][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.611958][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.623671][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.642916][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.661021][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.709729][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.720832][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.732991][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.750794][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.765451][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.782943][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.818700][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.828571][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.888772][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.915259][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.947596][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.969841][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.992900][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.015333][ T8768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.038915][ T8768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.062083][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.081528][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.179100][ T8768] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.187855][ T8768] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.224514][ T8768] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.259198][ T8768] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.789981][ T2467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.797848][ T2467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.887044][ T2467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.893134][ T9014] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 165.908116][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.924655][ T5126] Bluetooth: hci0: command tx timeout [ 165.928729][ T2467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.980803][ T9014] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 165.990495][ T9014] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.989931][ T5126] Bluetooth: hci0: command tx timeout [ 168.436047][ T9181] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 168.506278][ T9181] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 168.536756][ T9181] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.939270][ T9209] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 169.150060][ T9218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.634005][ T9245] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 171.643181][ T9255] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 171.807746][ T9285] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 171.837753][ T9285] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.864061][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.883259][ T9285] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.193969][ T29] audit: type=1804 audit(1718021605.596:20): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3194072158/syzkaller.EiccZH/134/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 172.440942][ T9322] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 172.457049][ T9322] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.477980][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.479369][ T9326] cannot load conntrack support for proto=3 [ 172.495379][ T9322] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.506850][ T9324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.807702][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.831745][ T9343] vlan2: entered promiscuous mode [ 172.837016][ T9343] veth1: entered promiscuous mode [ 172.866028][ T9343] veth1: left promiscuous mode [ 172.997552][ T9351] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 173.474086][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.492334][ T9382] vlan2: entered promiscuous mode [ 173.498191][ T9382] veth1: entered promiscuous mode [ 173.508383][ T9382] veth1: left promiscuous mode [ 174.268360][ T9423] cannot load conntrack support for proto=3 [ 174.769389][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.812624][ T9456] vlan3: entered promiscuous mode [ 174.828255][ T9456] veth1: entered promiscuous mode [ 174.855491][ T9456] veth1: left promiscuous mode [ 174.968031][ T9465] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.044339][ T9470] tap0: tun_chr_ioctl cmd 1074025673 [ 175.578550][ T9508] : renamed from ipvlan1 [ 175.874763][ T9518] syzkaller0: entered promiscuous mode [ 175.899171][ T9518] syzkaller0: entered allmulticast mode [ 177.195358][ T9563] __nla_validate_parse: 5 callbacks suppressed [ 177.195449][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.891892][ T9531] tap0: tun_chr_ioctl cmd 1074025673 [ 177.907378][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.923277][ T9551] vlan3: entered promiscuous mode [ 177.928346][ T9551] veth1: entered promiscuous mode [ 177.937185][ T9551] veth1: left promiscuous mode [ 178.464288][ T9594] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 178.483684][ T9594] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.021272][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.504634][ T9620] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 180.993141][ T9646] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 181.002376][ T9646] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.122299][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.428945][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 181.722963][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.214609][ T9703] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 182.231504][ T9703] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.378777][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.480082][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.947807][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.128716][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.306404][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.033224][ T9806] vlan2: entered promiscuous mode [ 186.046475][ T9806] bond0: (slave vlan2): Opening slave failed [ 187.988556][ T9883] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 190.140437][ T9865] vlan3: entered promiscuous mode [ 190.146160][ T9865] bond0: entered promiscuous mode [ 190.152406][ T9865] bond_slave_0: entered promiscuous mode [ 190.158176][ T9865] bond_slave_1: entered promiscuous mode [ 190.185701][ T9865] bond0: left promiscuous mode [ 190.199987][ T9865] bond_slave_0: left promiscuous mode [ 190.212896][ T9865] bond_slave_1: left promiscuous mode [ 190.686671][ T9923] : renamed from ipvlan1 [ 190.826619][ T9933] IPv6: sit1: Disabled Multicast RS [ 192.592266][T10023] bridge0: port 3(macvlan0) entered blocking state [ 192.613852][T10023] bridge0: port 3(macvlan0) entered disabled state [ 192.637224][T10023] macvlan0: entered allmulticast mode [ 192.660030][T10023] veth1_vlan: entered allmulticast mode [ 192.698472][T10023] macvlan0: entered promiscuous mode [ 193.276644][T10054] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 193.417772][T10061] bridge0: port 3(macvlan0) entered blocking state [ 193.435243][T10061] bridge0: port 3(macvlan0) entered disabled state [ 193.470158][T10061] macvlan0: entered allmulticast mode [ 193.475600][T10061] veth1_vlan: entered allmulticast mode [ 193.524232][T10061] macvlan0: entered promiscuous mode [ 193.546932][T10061] bridge0: port 3(macvlan0) entered blocking state [ 193.554913][T10061] bridge0: port 3(macvlan0) entered forwarding state [ 193.587675][T10063] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 193.829359][T10073] x_tables: ip_tables: udp match: only valid for protocol 17 [ 193.888366][T10077] Bluetooth: MGMT ver 1.22 [ 194.025346][T10083] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 194.534141][T10106] x_tables: ip_tables: udp match: only valid for protocol 17 [ 194.721416][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727765][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.829573][T10114] tap0: tun_chr_ioctl cmd 1074025677 [ 194.855514][T10114] tap0: linktype set to 769 [ 194.869207][T10118] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 195.649801][T10148] vlan2: entered promiscuous mode [ 195.672670][T10148] bond0: entered promiscuous mode [ 195.677756][T10148] bond_slave_0: entered promiscuous mode [ 195.719191][T10148] bond_slave_1: entered promiscuous mode [ 195.772967][T10148] bond0: left promiscuous mode [ 195.777847][T10148] bond_slave_0: left promiscuous mode [ 195.794635][T10148] bond_slave_1: left promiscuous mode [ 195.889908][T10152] IPv6: sit1: Disabled Multicast RS [ 196.136809][T10168] veth0_vlan: left promiscuous mode [ 196.499330][T10179] x_tables: ip_tables: udp match: only valid for protocol 17 [ 196.706929][T10191] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 196.813963][T10194] vlan2: entered promiscuous mode [ 196.832398][T10194] bond0: entered promiscuous mode [ 196.844304][T10194] bond_slave_0: entered promiscuous mode [ 196.861830][T10194] bond_slave_1: entered promiscuous mode [ 196.888296][T10194] bond0: left promiscuous mode [ 196.893673][T10194] bond_slave_0: left promiscuous mode [ 196.900037][T10194] bond_slave_1: left promiscuous mode [ 197.367741][T10218] x_tables: ip_tables: udp match: only valid for protocol 17 [ 197.450427][T10221] bridge0: port 3(macvlan0) entered blocking state [ 197.469978][T10221] bridge0: port 3(macvlan0) entered disabled state [ 197.478965][T10221] macvlan0: entered allmulticast mode [ 197.493037][T10221] veth1_vlan: entered allmulticast mode [ 197.504859][T10221] macvlan0: entered promiscuous mode [ 197.524226][T10221] bridge0: port 3(macvlan0) entered blocking state [ 197.530958][T10221] bridge0: port 3(macvlan0) entered forwarding state [ 197.757827][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.789628][T10236] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 197.807652][T10236] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 197.863681][T10236] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.873796][T10236] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.883444][T10236] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.892251][T10236] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.935886][T10236] vxlan0: entered promiscuous mode [ 197.986217][T10247] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 198.037457][T10247] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 198.778406][T10285] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 198.916531][T10286] team0: Port device team_slave_0 removed [ 198.939404][T10286] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 198.974180][T10290] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 199.015422][T10290] team0: Device veth1_macvtap failed to register rx_handler [ 200.637587][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.663305][T10360] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 200.701916][T10360] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 200.754733][T10360] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.763871][T10360] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.772671][T10360] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.781547][T10360] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.841167][T10360] vxlan0: entered promiscuous mode [ 201.227614][T10377] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.238661][T10377] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.259240][T10377] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.401602][T10384] veth0_vlan: left promiscuous mode [ 201.654718][T10388] team_slave_0: left promiscuous mode [ 201.731056][T10388] team0: Port device team_slave_0 removed [ 201.760555][T10388] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 201.908766][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 201.924176][T10409] tap0: tun_chr_ioctl cmd 1074025677 [ 201.937662][T10409] tap0: linktype set to 769 [ 202.127165][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.177645][T10419] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 202.235870][T10419] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 202.264716][T10428] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 202.270717][T10420] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 202.300069][T10427] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 202.380175][T10427] team0: Device veth1_macvtap failed to register rx_handler [ 202.636468][T10448] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 202.808196][T10457] tap0: tun_chr_ioctl cmd 1074025677 [ 202.814607][T10457] tap0: linktype set to 769 [ 203.090108][T10472] No such timeout policy "syz1" [ 205.197962][T10479] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 205.601630][T10496] team0: Port device team_slave_0 removed [ 205.607121][T10508] No such timeout policy "syz1" [ 205.607860][T10496] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 205.985668][T10531] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.361695][T10545] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 206.500744][T10562] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.881623][T10589] No such timeout policy "syz1" [ 206.931766][T10597] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.015029][T10604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.073127][T10604] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 208.455469][ T5167] IPVS: starting estimator thread 0... [ 208.578799][T10673] IPVS: using max 21 ests per chain, 50400 per kthread [ 209.121517][T10706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.241865][T10697] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 210.193703][T10756] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.208775][T10756] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.001772][T10790] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.011944][T10790] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.206996][T10797] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483648 (only 8 groups) [ 211.587512][T10818] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.601070][T10818] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.682194][T10821] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.718415][T10821] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 211.728000][T10821] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.080761][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.088941][T10840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.492654][T10856] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.508777][T10856] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 212.527946][T10856] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.694780][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.748239][T10867] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 213.052257][T10879] syz-executor.2 (10879) used greatest stack depth: 18288 bytes left [ 213.188214][T10889] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 213.244449][T10889] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.666600][T10928] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.705790][T10928] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 213.739008][T10928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.765259][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.810047][T10934] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 214.310849][T10961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.410331][T10966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.449302][T10966] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 214.470799][T10966] bond1: (slave gre1): Error -95 calling set_mac_address [ 214.793047][T10984] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 214.990954][T11010] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 215.295077][T11018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.416831][T11024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.431263][T11024] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 215.463642][T11024] bond1: (slave gre1): Error -95 calling set_mac_address [ 215.985195][T11072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.046459][T11072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.053986][T11072] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 216.073776][T11072] bond1: (slave gre1): Error -95 calling set_mac_address [ 216.602629][T11113] __nla_validate_parse: 8 callbacks suppressed [ 216.602649][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.748958][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.832152][T11122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.901789][T11130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.916130][T11130] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 216.932270][T11130] bond2: (slave gre1): Error -95 calling set_mac_address [ 217.340969][T11158] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 217.363043][T11158] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.492459][T11166] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 217.553117][T11166] bond3: entered promiscuous mode [ 217.575462][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.680415][T11170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.776808][T11174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.800839][T11174] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 217.833040][T11174] bond2: (slave gre1): Error -95 calling set_mac_address [ 217.865345][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.884263][T11180] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.302110][T11215] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 218.351482][T11215] bond3: entered promiscuous mode [ 218.357229][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.372053][T11221] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.146857][T11271] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 219.186714][T11271] bond4: entered promiscuous mode [ 219.235444][T11271] bond4: (slave ip6gretap2): making interface the new active one [ 219.243495][T11271] ip6gretap2: entered promiscuous mode [ 219.251742][T11271] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 219.438177][T11291] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.938987][T11325] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.748702][ T5126] Bluetooth: hci4: command 0x0406 tx timeout [ 250.632789][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.650267][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.660889][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.679668][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.706138][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 250.719221][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.770385][ T5126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.804631][ T5126] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.838856][ T5126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.866783][ T5126] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.878626][ T5126] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 250.887568][ T5126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.969717][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.980529][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.998916][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 251.009398][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 251.018659][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 251.033913][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.258275][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 251.280848][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 251.298959][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 251.306920][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 251.326798][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 251.335007][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 251.393232][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 251.402419][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 251.411563][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 251.420213][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 251.429861][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 251.437231][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 252.788905][ T5126] Bluetooth: hci5: command tx timeout [ 252.949186][ T5126] Bluetooth: hci6: command tx timeout [ 253.108829][ T5126] Bluetooth: hci7: command tx timeout [ 253.438818][ T5126] Bluetooth: hci8: command tx timeout [ 253.509005][ T5126] Bluetooth: hci9: command tx timeout [ 254.869454][ T5126] Bluetooth: hci5: command tx timeout [ 255.028859][ T5126] Bluetooth: hci6: command tx timeout [ 255.188760][ T5126] Bluetooth: hci7: command tx timeout [ 255.508878][ T5126] Bluetooth: hci8: command tx timeout [ 255.590267][ T5126] Bluetooth: hci9: command tx timeout [ 256.153727][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.166958][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.948783][ T5126] Bluetooth: hci5: command tx timeout [ 257.108720][ T5126] Bluetooth: hci6: command tx timeout [ 257.269737][ T5126] Bluetooth: hci7: command tx timeout [ 257.590795][ T5126] Bluetooth: hci8: command tx timeout [ 257.669202][ T5126] Bluetooth: hci9: command tx timeout [ 259.028810][ T5126] Bluetooth: hci5: command tx timeout [ 259.188757][ T5126] Bluetooth: hci6: command tx timeout [ 259.349073][ T5126] Bluetooth: hci7: command tx timeout [ 259.668767][ T5126] Bluetooth: hci8: command tx timeout [ 259.754678][ T5126] Bluetooth: hci9: command tx timeout [ 263.364581][ T5126] Bluetooth: hci3: command 0x0406 tx timeout [ 283.833303][ T5126] Bluetooth: hci0: command 0x0405 tx timeout [ 315.689409][ T5126] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 315.699321][ T5126] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 315.707622][ T5126] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 315.727804][ T5126] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 315.738087][ T5126] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 315.745775][ T5126] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 315.844100][ T5114] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 315.853933][ T5114] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 315.862045][ T5114] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 315.872414][ T5114] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 315.887588][ T5114] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 315.895662][ T5114] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 315.940054][ T5116] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 315.949195][ T5116] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 315.957185][ T5116] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 315.966323][ T5116] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 315.974930][ T5116] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 315.982455][ T5116] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 316.265587][ T5116] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 316.275296][ T5116] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 316.284023][ T5116] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 316.292325][ T5116] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 316.301305][ T5116] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 316.317259][ T5116] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 316.505195][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 316.514241][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 316.522382][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 316.531987][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 316.540920][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 316.549386][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 317.594843][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.601393][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.828761][ T5114] Bluetooth: hci10: command tx timeout [ 317.988777][ T5114] Bluetooth: hci11: command tx timeout [ 318.068887][ T5114] Bluetooth: hci12: command tx timeout [ 318.391498][ T5114] Bluetooth: hci13: command tx timeout [ 318.639019][ T5114] Bluetooth: hci14: command tx timeout [ 319.908725][ T5114] Bluetooth: hci10: command tx timeout [ 320.068817][ T5114] Bluetooth: hci11: command tx timeout [ 320.149099][ T5114] Bluetooth: hci12: command tx timeout [ 320.468856][ T5114] Bluetooth: hci13: command tx timeout [ 320.708625][ T5114] Bluetooth: hci14: command tx timeout [ 321.988956][ T5114] Bluetooth: hci10: command tx timeout [ 322.148707][ T5114] Bluetooth: hci11: command tx timeout [ 322.230734][ T5114] Bluetooth: hci12: command tx timeout [ 322.556519][ T5114] Bluetooth: hci13: command tx timeout [ 322.788615][ T5114] Bluetooth: hci14: command tx timeout [ 324.068745][ T5114] Bluetooth: hci10: command tx timeout [ 324.229582][ T5114] Bluetooth: hci11: command tx timeout [ 324.308895][ T5114] Bluetooth: hci12: command tx timeout [ 324.636292][ T5114] Bluetooth: hci13: command tx timeout [ 324.868858][ T5114] Bluetooth: hci14: command tx timeout [ 376.001855][T11417] Bluetooth: hci5: command 0x0406 tx timeout [ 376.009703][T11417] Bluetooth: hci6: command 0x0406 tx timeout [ 376.010684][T11416] Bluetooth: hci9: command 0x0406 tx timeout [ 376.015720][T11417] Bluetooth: hci7: command 0x0406 tx timeout [ 376.022140][T11416] Bluetooth: hci8: command 0x0406 tx timeout [ 379.034795][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.041491][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.660200][T11418] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 380.679143][T11418] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 380.699442][T11418] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 380.718765][T11418] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 380.744673][ T53] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 380.754401][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 380.762167][ T5126] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 380.774811][ T5126] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 380.792672][ T5126] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 380.801026][ T5126] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 380.818276][ T5126] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 380.825908][ T5126] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 381.099570][T11418] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 381.128721][T11418] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 381.139082][T11418] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 381.168754][T11418] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 381.177556][T11418] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 381.186020][T11418] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 381.236279][ T5126] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 381.246296][ T5126] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 381.256078][ T5126] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 381.265969][ T5126] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 381.274141][ T5126] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 381.281721][ T5126] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 381.379488][T11418] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 381.391033][T11418] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 381.401068][T11418] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 381.410654][T11418] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 381.419624][T11418] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 381.427058][T11418] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 382.228836][ T30] INFO: task kworker/0:2:786 blocked for more than 143 seconds. [ 382.236515][ T30] Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 382.254640][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.265940][ T30] task:kworker/0:2 state:D stack:22392 pid:786 tgid:786 ppid:2 flags:0x00004000 2024/06/10 12:16:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 382.276683][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 382.286052][ T30] Call Trace: [ 382.307771][ T30] [ 382.318847][ T30] __schedule+0x17e8/0x4a20 [ 382.323418][ T30] ? __pfx___schedule+0x10/0x10 [ 382.328301][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 382.348564][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.353656][ T30] ? kick_pool+0x45c/0x620 [ 382.358090][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 382.371562][ T30] ? schedule+0x90/0x320 [ 382.375859][ T30] schedule+0x14b/0x320 [ 382.386686][ T30] schedule_preempt_disabled+0x13/0x30 [ 382.393263][ T30] __mutex_lock+0x6a4/0xd70 [ 382.397799][ T30] ? __mutex_lock+0x527/0xd70 [ 382.403055][ T30] ? reg_check_chans_work+0x91/0xea0 [ 382.408371][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 382.413897][ T30] reg_check_chans_work+0x91/0xea0 [ 382.419318][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 382.424364][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 382.430533][ T30] ? process_scheduled_works+0x945/0x1830 [ 382.436281][ T30] process_scheduled_works+0xa2c/0x1830 [ 382.442345][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.448356][ T30] ? assign_work+0x364/0x3d0 [ 382.453415][ T30] worker_thread+0x86d/0xd70 [ 382.458041][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 382.464453][ T30] ? __kthread_parkme+0x169/0x1d0 [ 382.478552][ T30] ? __pfx_worker_thread+0x10/0x10 [ 382.483719][ T30] kthread+0x2f0/0x390 [ 382.487803][ T30] ? __pfx_worker_thread+0x10/0x10 [ 382.518742][ T30] ? __pfx_kthread+0x10/0x10 [ 382.523394][ T30] ret_from_fork+0x4b/0x80 [ 382.527851][ T30] ? __pfx_kthread+0x10/0x10 [ 382.548715][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.553556][ T30] [ 382.556683][ T30] INFO: task syz-executor.1:11340 blocked for more than 143 seconds. [ 382.579059][ T30] Not tainted 6.10.0-rc2-syzkaller-00230-g5add2f728846 #0 [ 382.586729][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.610814][ T30] task:syz-executor.1 state:D stack:28464 pid:11340 tgid:11336 ppid:5584 flags:0x00000006 [ 382.638592][ T30] Call Trace: [ 382.641918][ T30] [ 382.644861][ T30] __schedule+0x17e8/0x4a20 [ 382.658589][ T30] ? __pfx___schedule+0x10/0x10 [ 382.663493][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.678565][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 382.684080][ T30] ? schedule+0x90/0x320 [ 382.6