last executing test programs: 31.335452032s ago: executing program 4: unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x101, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) 31.135073766s ago: executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x30}}], 0x2, 0x0) 31.123086719s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x76, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x18) 30.99317664s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x18, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x900}}, [@ringbuf_output], {{0x7, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) 30.967997636s ago: executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14}, 0x14}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00000021c0)=[{}], 0x1, 0x5d6d, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000000c}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x12f45}], 0x7}}], 0x44, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000ac141400000000000000000000000000ac1e000100000000000000000000000000000000000000000a0060000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000c6fa000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036f3cd4100000000000000000000000000000000000000000000000000000000000000000000000000000000808c00000000000000ff00000000000000"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000000008000000"], 0xb8}}, 0x0) 30.946360037s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x4, 0x1, 'H.245\x00'}}]}, 0x74}}, 0x0) 30.803052539s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 30.789186605s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009e54b9e4a35a48870000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000980), &(0x7f00000009c0)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05060000db3c000000001f000000080001"], 0x1c}}, 0x0) 30.783496746s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x3}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) 30.658714673s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0800266ec81600000a00180000000000000000011c005a8018000180140003"], 0x4c}}, 0x0) 30.644646959s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.632486054s ago: executing program 1: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x29, 0x0, 0xff00) 30.620126287s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x76, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x18) 30.524584885s ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @fwd={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x20) 30.512697636s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 30.47325125s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x76, &(0x7f0000000040)={r1}, &(0x7f0000000080)=0x18) 30.412565816s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x4, 0x1, 'H.245\x00'}}]}, 0x74}}, 0x0) 30.392566017s ago: executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b03d25a80648c2594f90124fc60100c03402e000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 30.319588684s ago: executing program 1: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xa, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) 30.280935808s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x3}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) 30.232888415s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 30.146259478s ago: executing program 3: unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r1, 0x101, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) 30.121984175s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009e54b9e4a35a48870000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000980), &(0x7f00000009c0)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05060000db3c000000001f000000080001"], 0x1c}}, 0x0) 30.121727569s ago: executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.01630044s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0800266ec81600000a00180000000000000000011c005a8018000180140003"], 0x4c}}, 0x0) 621.529078ms ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14}, 0x14}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f00000021c0)=[{}], 0x1, 0x5d6d, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000000c}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x12f45}], 0x7}}], 0x44, 0x0) epoll_wait(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x100) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000ac141400000000000000000000000000ac1e000100000000000000000000000000000000000000000a0060000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000c6fa000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000036f3cd4100000000000000000000000000000000000000000000000000000000000000000000000000000000808c00000000000000ff00000000000000"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000000008000000"], 0xb8}}, 0x0) 341.868079ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r1, 0x5, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) 132.336374ms ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @fwd={0x2, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x20) 97.95099ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 0s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x4, 0x1, 'H.245\x00'}}]}, 0x74}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. 2024/06/04 02:02:57 fuzzer started 2024/06/04 02:02:58 dialing manager at 10.128.0.169:30018 [ 58.150219][ T5090] cgroup: Unknown subsys name 'net' [ 58.354925][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/06/04 02:02:59 starting 5 executor processes [ 59.470610][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.348888][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.373521][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.382699][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.384762][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.397589][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.405962][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.409245][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.415676][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.421155][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.437723][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.438756][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.446517][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.452214][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.460380][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.474371][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.479078][ T5130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.485156][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.493397][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.500629][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.507407][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.514399][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.520329][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.535215][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.535315][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.550423][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.551854][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.558829][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.564791][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.572344][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.585897][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.098886][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 61.162574][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 61.224354][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 61.400269][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.408184][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.416083][ T5112] bridge_slave_0: entered allmulticast mode [ 61.423383][ T5112] bridge_slave_0: entered promiscuous mode [ 61.432718][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.439889][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.447488][ T5112] bridge_slave_1: entered allmulticast mode [ 61.455423][ T5112] bridge_slave_1: entered promiscuous mode [ 61.471075][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 61.488591][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 61.538904][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.546313][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.553694][ T5118] bridge_slave_0: entered allmulticast mode [ 61.560406][ T5118] bridge_slave_0: entered promiscuous mode [ 61.576788][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.584117][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.594564][ T5111] bridge_slave_0: entered allmulticast mode [ 61.601923][ T5111] bridge_slave_0: entered promiscuous mode [ 61.633576][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.640734][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.648857][ T5118] bridge_slave_1: entered allmulticast mode [ 61.656214][ T5118] bridge_slave_1: entered promiscuous mode [ 61.665895][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.680067][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.689759][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.697102][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.704585][ T5111] bridge_slave_1: entered allmulticast mode [ 61.711554][ T5111] bridge_slave_1: entered promiscuous mode [ 61.837574][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.851073][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.863771][ T5112] team0: Port device team_slave_0 added [ 61.873368][ T5112] team0: Port device team_slave_1 added [ 61.882595][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.892023][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.899151][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.907298][ T5120] bridge_slave_0: entered allmulticast mode [ 61.914297][ T5120] bridge_slave_0: entered promiscuous mode [ 61.924718][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.932046][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.939258][ T5120] bridge_slave_1: entered allmulticast mode [ 61.946539][ T5120] bridge_slave_1: entered promiscuous mode [ 61.964538][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.971852][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.979043][ T5113] bridge_slave_0: entered allmulticast mode [ 61.986654][ T5113] bridge_slave_0: entered promiscuous mode [ 62.029541][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.058515][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.065965][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.073696][ T5113] bridge_slave_1: entered allmulticast mode [ 62.080495][ T5113] bridge_slave_1: entered promiscuous mode [ 62.104887][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.112252][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.138273][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.187484][ T5118] team0: Port device team_slave_0 added [ 62.196295][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.203616][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.230110][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.249925][ T5111] team0: Port device team_slave_0 added [ 62.258404][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.271516][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.291130][ T5118] team0: Port device team_slave_1 added [ 62.324088][ T5111] team0: Port device team_slave_1 added [ 62.358320][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.371894][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.378872][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.405449][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.449720][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.459658][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.466986][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.493916][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.520507][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.527707][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.554580][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.565501][ T5127] Bluetooth: hci1: command tx timeout [ 62.574617][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.581717][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.608216][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.625933][ T5120] team0: Port device team_slave_0 added [ 62.641486][ T5127] Bluetooth: hci0: command tx timeout [ 62.652874][ T5122] Bluetooth: hci3: command tx timeout [ 62.652933][ T53] Bluetooth: hci2: command tx timeout [ 62.663704][ T5127] Bluetooth: hci4: command tx timeout [ 62.675988][ T5112] hsr_slave_0: entered promiscuous mode [ 62.682733][ T5112] hsr_slave_1: entered promiscuous mode [ 62.697248][ T5120] team0: Port device team_slave_1 added [ 62.738366][ T5118] hsr_slave_0: entered promiscuous mode [ 62.744740][ T5118] hsr_slave_1: entered promiscuous mode [ 62.750951][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.759004][ T5118] Cannot create hsr debugfs directory [ 62.783320][ T5113] team0: Port device team_slave_0 added [ 62.818882][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.825929][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.852503][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.865332][ T5113] team0: Port device team_slave_1 added [ 62.914580][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.921860][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.947877][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.988968][ T5111] hsr_slave_0: entered promiscuous mode [ 62.995380][ T5111] hsr_slave_1: entered promiscuous mode [ 63.002833][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.010418][ T5111] Cannot create hsr debugfs directory [ 63.033944][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.041013][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.068391][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.115546][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.122758][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.148912][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.245297][ T5120] hsr_slave_0: entered promiscuous mode [ 63.252365][ T5120] hsr_slave_1: entered promiscuous mode [ 63.258514][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.266752][ T5120] Cannot create hsr debugfs directory [ 63.409124][ T5113] hsr_slave_0: entered promiscuous mode [ 63.416331][ T5113] hsr_slave_1: entered promiscuous mode [ 63.422836][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.430398][ T5113] Cannot create hsr debugfs directory [ 63.663871][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.686136][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.701061][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.714576][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.781841][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.802076][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.823140][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.847016][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.911854][ T5111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.925233][ T5111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.944087][ T5111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.955409][ T5111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.054665][ T5113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.064845][ T5113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.076753][ T5113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.103951][ T5113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.130509][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.228699][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.256731][ T5120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.269004][ T5120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.294971][ T5120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.308821][ T5120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.326660][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.334150][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.362179][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.386205][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.393404][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.449590][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.497646][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.531575][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.547932][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.555096][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.584825][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.592027][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.600741][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.608096][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.642493][ T5127] Bluetooth: hci1: command tx timeout [ 64.660575][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.667779][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.717469][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.726020][ T5127] Bluetooth: hci2: command tx timeout [ 64.728309][ T53] Bluetooth: hci4: command tx timeout [ 64.731818][ T5127] Bluetooth: hci3: command tx timeout [ 64.737406][ T53] Bluetooth: hci0: command tx timeout [ 64.760721][ T5118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.773372][ T5118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.848634][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.937668][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.944898][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.957098][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.964735][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.004879][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.164120][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.254201][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.266934][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.305458][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.312712][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.343559][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.350735][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.507171][ T5120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.518782][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.627419][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.646606][ T5118] veth0_vlan: entered promiscuous mode [ 65.688750][ T5118] veth1_vlan: entered promiscuous mode [ 65.707175][ T5112] veth0_vlan: entered promiscuous mode [ 65.719418][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.750470][ T5112] veth1_vlan: entered promiscuous mode [ 65.857484][ T5111] veth0_vlan: entered promiscuous mode [ 65.866726][ T5118] veth0_macvtap: entered promiscuous mode [ 65.881101][ T5118] veth1_macvtap: entered promiscuous mode [ 65.892758][ T5112] veth0_macvtap: entered promiscuous mode [ 65.905626][ T5112] veth1_macvtap: entered promiscuous mode [ 65.925252][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.980446][ T5111] veth1_vlan: entered promiscuous mode [ 66.004608][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.016371][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.027705][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.041805][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.058168][ T5113] veth0_vlan: entered promiscuous mode [ 66.068763][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.080095][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.090126][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.100022][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.109172][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.122469][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.134184][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.146813][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.175061][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.184365][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.194305][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.203562][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.220718][ T5113] veth1_vlan: entered promiscuous mode [ 66.271238][ T5111] veth0_macvtap: entered promiscuous mode [ 66.339046][ T5111] veth1_macvtap: entered promiscuous mode [ 66.382729][ T5120] veth0_vlan: entered promiscuous mode [ 66.395138][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.407481][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.417626][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.428473][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.440863][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.476567][ T5120] veth1_vlan: entered promiscuous mode [ 66.495453][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.506351][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.516911][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.527835][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.539030][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.550964][ T5111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.551001][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.560888][ T5111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.583405][ T5111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.593021][ T5111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.594118][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.647574][ T5113] veth0_macvtap: entered promiscuous mode [ 66.689435][ T2403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.706283][ T2403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.724642][ T53] Bluetooth: hci1: command tx timeout [ 66.733684][ T5113] veth1_macvtap: entered promiscuous mode [ 66.780275][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.793441][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.804279][ T53] Bluetooth: hci0: command tx timeout [ 66.804978][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.820859][ T5122] Bluetooth: hci4: command tx timeout [ 66.820903][ T5122] Bluetooth: hci2: command tx timeout [ 66.832771][ T53] Bluetooth: hci3: command tx timeout [ 66.835773][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.848264][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.859235][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.873109][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.901101][ T5120] veth0_macvtap: entered promiscuous mode [ 66.913762][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.924706][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.934732][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.945263][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955386][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.966682][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.977925][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.991621][ T2403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.999541][ T2403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.015200][ T5120] veth1_macvtap: entered promiscuous mode [ 67.033041][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.043049][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.052816][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066590][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.087810][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.099063][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.167805][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.180463][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.199022][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.213177][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.223483][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.235557][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.246265][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.257094][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.267204][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.278003][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.292471][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.305979][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.321536][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.336549][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.362302][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.377997][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.395253][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.408345][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.437519][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.450315][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.490304][ T5120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.505265][ T5120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.515834][ T5120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.543557][ T5120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.632350][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.669886][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.793649][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.816024][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.993935][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.035272][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.165111][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.183744][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.345157][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.379227][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.801610][ T53] Bluetooth: hci1: command tx timeout [ 68.881390][ T5122] Bluetooth: hci2: command tx timeout [ 68.882560][ T5127] Bluetooth: hci0: command tx timeout [ 68.886818][ T5115] Bluetooth: hci4: command tx timeout [ 68.897810][ T53] Bluetooth: hci3: command tx timeout [ 69.165761][ T5257] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 69.186874][ T5257] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.208082][ T5257] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 69.397083][ T5270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.719373][ T5284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.890132][ T5285] syz-executor.0 (5285) used greatest stack depth: 18264 bytes left [ 69.936412][ T5291] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 70.039491][ T5297] Bluetooth: MGMT ver 1.22 [ 70.160740][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.238249][ T5305] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 70.307399][ T5298] bridge_slave_1 (unregistering): left allmulticast mode [ 70.317985][ T5298] bridge_slave_1 (unregistering): left promiscuous mode [ 70.329717][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.475951][ T5314] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 70.553445][ T5319] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.680346][ T5321] net_ratelimit: 2 callbacks suppressed [ 70.680366][ T5321] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 70.951962][ T5338] syz-executor.4[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.952205][ T5338] syz-executor.4[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.261375][ T5358] tipc: Started in network mode [ 71.315736][ T5358] tipc: Node identity ac1414aa, cluster identity 4711 [ 71.341666][ T5358] tipc: Enabled bearer , priority 10 [ 71.355335][ T5360] tipc: Disabling bearer [ 71.497778][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.668167][ T5377] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 71.826462][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.847275][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.855771][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.081078][ T5381] bridge_slave_1 (unregistering): left allmulticast mode [ 72.110795][ T5381] bridge_slave_1 (unregistering): left promiscuous mode [ 72.139658][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.179862][ T5398] tipc: Started in network mode [ 72.191728][ T5398] tipc: Node identity ac1414aa, cluster identity 4711 [ 72.208822][ T5398] tipc: Enabled bearer , priority 10 [ 72.228613][ T5399] tipc: Disabling bearer [ 72.480045][ T5407] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.804001][ T5423] tipc: Started in network mode [ 72.809297][ T5423] tipc: Node identity ac1414aa, cluster identity 4711 [ 72.831853][ T5423] tipc: Enabled bearer , priority 10 [ 72.847336][ T5423] tipc: Disabling bearer [ 73.547444][ T5456] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 74.220677][ T5492] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.256446][ T5492] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 74.450970][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.653372][ T5507] Zero length message leads to an empty skb [ 76.661138][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.690138][ T5592] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 76.704513][ T5594] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 76.720449][ T5592] netlink: 'syz-executor.3': attribute type 18 has an invalid length. [ 76.737039][ T5594] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.768688][ T5592] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.777995][ T5592] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.786994][ T5592] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.795781][ T5592] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.873356][ T5592] vxlan0: entered promiscuous mode [ 77.121034][ T5607] veth0_vlan: entered allmulticast mode [ 77.242862][ T5609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.201573][ T5644] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xb [ 78.633215][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.674361][ T5665] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 78.711812][ T5665] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 78.753869][ T5665] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.764021][ T5665] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.774053][ T5665] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.783059][ T5665] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.826680][ T5665] vxlan0: entered promiscuous mode [ 78.921762][ T5674] veth0_vlan: entered allmulticast mode [ 79.486389][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.019992][ T5723] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.185778][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.496821][ T5743] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xb [ 80.829080][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.007010][ T5769] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 81.061667][ T5769] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 81.091426][ T29] audit: type=1804 audit(1717466601.224:2): pid=5771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2926714299/syzkaller.QAmN39/56/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 81.119321][ T5777] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 81.148831][ T5777] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 81.935754][ T5814] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 81.953694][ T5814] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 82.007390][ T5814] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 82.018504][ T5814] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 82.093701][ T45] cfg80211: failed to load regulatory.db [ 82.404187][ T5834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.513772][ T5841] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 82.546837][ T5841] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 82.622583][ T5843] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 82.674209][ T5843] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 83.144967][ T5876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.229923][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.543320][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.723942][ T5908] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 83.758662][ T5908] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 84.699995][ T5966] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.272973][ T6001] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 85.297002][ T6002] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.555128][ T6013] bridge0: port 2(macvlan1) entered blocking state [ 85.591768][ T6013] bridge0: port 2(macvlan1) entered disabled state [ 85.598622][ T6013] macvlan1: entered allmulticast mode [ 85.643697][ T6013] veth1_vlan: entered allmulticast mode [ 85.668737][ T6013] macvlan1: entered promiscuous mode [ 85.894988][ T29] audit: type=1107 audit(1717466606.034:3): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 85.948684][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.995499][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.058880][ T6037] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 86.101518][ T6041] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.230094][ T29] audit: type=1804 audit(1717466606.364:4): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2926714299/syzkaller.QAmN39/82/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.336491][ T6051] bridge0: port 3(macvlan1) entered blocking state [ 86.369652][ T6051] bridge0: port 3(macvlan1) entered disabled state [ 86.393750][ T6051] macvlan1: entered allmulticast mode [ 86.412809][ T6051] veth1_vlan: entered allmulticast mode [ 86.439865][ T6051] macvlan1: entered promiscuous mode [ 86.483794][ T6051] bridge0: port 3(macvlan1) entered blocking state [ 86.490477][ T6051] bridge0: port 3(macvlan1) entered forwarding state [ 86.542520][ T6062] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.587533][ T6064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.744028][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.764184][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.192087][ T6097] bridge0: port 2(macvlan1) entered blocking state [ 87.200123][ T6097] bridge0: port 2(macvlan1) entered disabled state [ 87.216751][ T6097] macvlan1: entered allmulticast mode [ 87.224827][ T6097] veth1_vlan: entered allmulticast mode [ 87.235372][ T6097] macvlan1: entered promiscuous mode [ 87.246314][ T6097] bridge0: port 2(macvlan1) entered blocking state [ 87.253069][ T6097] bridge0: port 2(macvlan1) entered forwarding state [ 87.275944][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.306467][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.040755][ T6130] veth0_vlan: entered allmulticast mode [ 88.210065][ T6139] openvswitch: netlink: Flow key attr not present in new flow. [ 88.354385][ T6144] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 88.402110][ T6144] batman_adv: batadv0: Adding interface: team0 [ 88.423668][ T6144] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.451463][ T6144] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 88.465716][ T6143] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 88.495872][ T6143] batman_adv: batadv0: Adding interface: team0 [ 88.509064][ T6143] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.544553][ T6143] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 88.559827][ T6146] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 88.614838][ T6146] batman_adv: batadv0: Adding interface: team0 [ 88.636984][ T6146] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.671157][ T6146] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 89.083912][ T6168] veth0_vlan: left promiscuous mode [ 89.094277][ T6168] veth0_vlan: entered promiscuous mode [ 89.536376][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802be95400: rx timeout, send abort [ 89.546187][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802be94c00: rx timeout, send abort [ 89.588997][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c49d000: rx timeout, send abort [ 89.597973][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c49e800: rx timeout, send abort [ 89.606454][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d7d7c00: rx timeout, send abort [ 89.628940][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880248fb000: rx timeout, send abort [ 90.039449][ T6182] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 90.047628][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802be95400: abort rx timeout. Force session deactivation [ 90.059237][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802be94c00: abort rx timeout. Force session deactivation [ 90.071426][ T6182] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 90.079540][ T6182] __nla_validate_parse: 5 callbacks suppressed [ 90.079550][ T6182] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.097452][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c49d000: abort rx timeout. Force session deactivation [ 90.107852][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c49e800: abort rx timeout. Force session deactivation [ 90.118867][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807d7d7c00: abort rx timeout. Force session deactivation [ 90.137302][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880248fb000: abort rx timeout. Force session deactivation [ 90.321102][ T6187] netem: change failed [ 91.165628][ T6206] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 91.257542][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.655723][ T6226] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 91.766808][ T6226] team0: Port device wlan1 added [ 91.837290][ T6231] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 91.935700][ T6236] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 92.117739][ T6243] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 92.363126][ T6258] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 92.376035][ T6258] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 92.387036][ T6258] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.439552][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.559841][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.041679][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888023f1f400: rx timeout, send abort [ 93.062340][ T6293] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.078071][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b64b400: rx timeout, send abort [ 93.307270][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807885dc00: rx timeout, send abort [ 93.358192][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807885f000: rx timeout, send abort [ 93.438513][ T6304] Bluetooth: MGMT ver 1.22 [ 93.550153][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888023f1f400: abort rx timeout. Force session deactivation [ 93.586595][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b64b400: abort rx timeout. Force session deactivation [ 93.816149][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807885dc00: abort rx timeout. Force session deactivation [ 93.866965][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807885f000: abort rx timeout. Force session deactivation [ 93.995765][ T6310] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 94.011462][ T6310] netlink: 3657 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.624234][ T6320] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.651626][ T6320] 0猉功D: renamed from gretap0 (while UP) [ 94.682949][ T6320] 0猉功D: entered allmulticast mode [ 94.689014][ T6320] A link change request failed with some changes committed already. Interface 10猉功D may have been left with an inconsistent configuration, please check. [ 94.730354][ T6323] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.989561][ T6334] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 95.013666][ T6333] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 95.106640][ T6333] netlink: 3657 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.567353][ T6357] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.717129][ T6365] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.743988][ T6365] 0猉功D: renamed from gretap0 (while UP) [ 95.770469][ T6365] 0猉功D: entered allmulticast mode [ 95.800138][ T6365] A link change request failed with some changes committed already. Interface 10猉功D may have been left with an inconsistent configuration, please check. [ 95.825759][ T6366] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 95.985450][ T6372] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.024598][ T6372] 1猉功D: renamed from 10猉功D (while UP) [ 96.057077][ T6372] A link change request failed with some changes committed already. Interface 11猉功D may have been left with an inconsistent configuration, please check. [ 96.851626][ T6398] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.872123][ T6398] 0猉功D: renamed from gretap0 (while UP) [ 96.900334][ T6398] 0猉功D: entered allmulticast mode [ 96.912677][ T6398] A link change request failed with some changes committed already. Interface 10猉功D may have been left with an inconsistent configuration, please check. [ 96.996226][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c2a7400: rx timeout, send abort [ 97.046524][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b05c800: rx timeout, send abort [ 97.204799][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.229683][ T6416] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 97.330000][ T6416] team0: Port device wlan1 added [ 97.488928][ T6422] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 97.505420][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c2a7400: abort rx timeout. Force session deactivation [ 97.554930][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b05c800: abort rx timeout. Force session deactivation [ 97.612098][ T6426] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 98.841463][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a4ddc00: rx timeout, send abort [ 98.853101][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029df9000: rx timeout, send abort [ 99.244440][ T29] audit: type=1804 audit(1717466619.344:5): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4088584292/syzkaller.8BWH42/134/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 99.296819][ T6456] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.315515][ T6456] 0猉功D: renamed from gretap0 (while UP) [ 99.337790][ T6456] 0猉功D: entered allmulticast mode [ 99.349861][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a4ddc00: abort rx timeout. Force session deactivation [ 99.354314][ T6456] A link change request failed with some changes committed already. Interface 10猉功D may have been left with an inconsistent configuration, please check. [ 99.376918][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888029df9000: abort rx timeout. Force session deactivation [ 99.538498][ T6463] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.569194][ T6463] 1猉功D: renamed from 10猉功D (while UP) [ 99.594492][ T6463] A link change request failed with some changes committed already. Interface 11猉功D may have been left with an inconsistent configuration, please check. [ 101.284933][ T6516] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.309808][ T6516] 0猉功D: renamed from 11猉功D (while UP) [ 101.327617][ T6516] A link change request failed with some changes committed already. Interface 10猉功D may have been left with an inconsistent configuration, please check. [ 101.931017][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.558931][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.662590][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.330883][ T6589] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 103.482100][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.330513][ T6634] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 104.770713][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.923802][ T6646] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.103281][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.643525][ T6669] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 106.238204][ T6678] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.460694][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.802829][ T6693] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 106.888893][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.202970][ T6713] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 109.983704][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.994053][ T6724] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 110.088166][ T6738] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.135964][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.179718][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.103253][ T6782] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 112.870898][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.882962][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.351836][ T6808] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 113.525034][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.654843][ T6822] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 114.075844][ T6837] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 114.555116][ T6858] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 114.588629][ T6858] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 115.092960][ T6880] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.827538][ T5163] IPVS: starting estimator thread 0... [ 116.931719][ T6955] IPVS: using max 22 ests per chain, 52800 per kthread [ 117.435260][ T6977] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.506089][ T7102] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 120.515075][ T7102] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.149638][ T7136] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 121.174324][ T7136] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.786688][ T7171] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 121.831454][ T7171] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.424928][ T7205] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 122.471490][ T7205] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.298127][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.304542][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.024097][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.034828][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.042563][ T5127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.070808][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.081499][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.089658][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.097475][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.106358][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.120022][ T5122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.127909][ T5127] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.135393][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.142643][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.250858][ T5127] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.262763][ T5127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.271864][ T5127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.287050][ T5127] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.308775][ T5127] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.317201][ T5127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.384632][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 153.406909][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 153.421861][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 153.429895][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 153.438522][ T5122] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 153.451336][ T5122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 153.524567][ T5122] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 153.534475][ T5122] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 153.547906][ T5122] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 153.556362][ T5122] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 153.571318][ T5122] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 153.578740][ T5122] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 155.201372][ T5122] Bluetooth: hci5: command tx timeout [ 155.207331][ T5122] Bluetooth: hci6: command tx timeout [ 155.361451][ T5122] Bluetooth: hci7: command tx timeout [ 155.531851][ T5122] Bluetooth: hci8: command tx timeout [ 155.601321][ T5122] Bluetooth: hci9: command tx timeout [ 157.291327][ T5122] Bluetooth: hci6: command tx timeout [ 157.291341][ T5127] Bluetooth: hci5: command tx timeout [ 157.441965][ T5127] Bluetooth: hci7: command tx timeout [ 157.601373][ T5127] Bluetooth: hci8: command tx timeout [ 157.681274][ T5127] Bluetooth: hci9: command tx timeout [ 159.361400][ T5122] Bluetooth: hci5: command tx timeout [ 159.367928][ T5127] Bluetooth: hci6: command tx timeout [ 159.521624][ T5127] Bluetooth: hci7: command tx timeout [ 159.681387][ T5127] Bluetooth: hci8: command tx timeout [ 159.775047][ T5127] Bluetooth: hci9: command tx timeout [ 161.443459][ T5127] Bluetooth: hci6: command tx timeout [ 161.449005][ T5127] Bluetooth: hci5: command tx timeout [ 161.601863][ T5127] Bluetooth: hci7: command tx timeout [ 161.761319][ T5127] Bluetooth: hci8: command tx timeout [ 161.841290][ T5127] Bluetooth: hci9: command tx timeout [ 186.570163][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 186.576777][ T5127] Bluetooth: hci1: command 0x0406 tx timeout [ 186.582919][ T5129] Bluetooth: hci0: command 0x0406 tx timeout [ 186.584646][ T5130] Bluetooth: hci3: command 0x0406 tx timeout [ 194.731666][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.738275][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.044536][ T5121] Bluetooth: hci4: command 0x0405 tx timeout [ 209.121633][ T4492] Bluetooth: hci4: command 0x0405 tx timeout [ 218.005701][ T5121] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 218.021461][ T5121] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 218.031445][ T5121] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 218.041642][ T5121] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 218.051857][ T5121] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 218.059444][ T5121] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 218.222094][ T5121] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 218.232662][ T5121] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 218.241374][ T5121] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 218.250252][ T5121] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 218.259010][ T5121] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 218.266624][ T5121] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 218.401284][ T5121] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 218.410307][ T5121] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 218.418942][ T5121] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 218.434572][ T5121] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 218.442093][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 218.444903][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 218.450728][ T5121] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 218.459029][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 218.473020][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 218.483984][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 218.494177][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 218.502576][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 218.544082][ T4492] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 218.553583][ T4492] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 218.562626][ T4492] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 218.571047][ T4492] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 218.586152][ T4492] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 218.594417][ T4492] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 220.161353][ T5121] Bluetooth: hci10: command tx timeout [ 220.321799][ T5121] Bluetooth: hci11: command tx timeout [ 220.566885][ T4492] Bluetooth: hci13: command tx timeout [ 220.575579][ T5121] Bluetooth: hci12: command tx timeout [ 220.641424][ T5121] Bluetooth: hci14: command tx timeout [ 222.241782][ T5121] Bluetooth: hci10: command tx timeout [ 222.401361][ T5121] Bluetooth: hci11: command tx timeout [ 222.641546][ T4492] Bluetooth: hci13: command tx timeout [ 222.648046][ T5121] Bluetooth: hci12: command tx timeout [ 222.721319][ T5121] Bluetooth: hci14: command tx timeout [ 224.321655][ T5121] Bluetooth: hci10: command tx timeout [ 224.481317][ T5121] Bluetooth: hci11: command tx timeout [ 224.723987][ T5121] Bluetooth: hci12: command tx timeout [ 224.730189][ T4492] Bluetooth: hci13: command tx timeout [ 224.801540][ T4492] Bluetooth: hci14: command tx timeout [ 226.407063][ T4492] Bluetooth: hci10: command tx timeout [ 226.561393][ T4492] Bluetooth: hci11: command tx timeout [ 226.801414][ T5121] Bluetooth: hci12: command tx timeout [ 226.806973][ T4492] Bluetooth: hci13: command tx timeout [ 226.881225][ T4492] Bluetooth: hci14: command tx timeout [ 256.165036][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.171550][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.733694][ T4492] Bluetooth: hci7: command 0x0406 tx timeout [ 278.733717][ T5129] Bluetooth: hci6: command 0x0406 tx timeout [ 278.739839][ T4492] Bluetooth: hci8: command 0x0406 tx timeout [ 278.745825][ T5115] Bluetooth: hci5: command 0x0406 tx timeout [ 278.752379][ T4492] Bluetooth: hci9: command 0x0406 tx timeout [ 283.041396][ T30] INFO: task syz-executor.0:7205 blocked for more than 143 seconds. [ 283.049439][ T30] Not tainted 6.10.0-rc1-syzkaller-00248-g83042ce9b7c3 #0 2024/06/04 02:06:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 283.092263][ T5121] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 283.101307][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.113839][ T30] task:syz-executor.0 state:D stack:25488 pid:7205 tgid:7204 ppid:5120 flags:0x00004006 [ 283.133518][ T5121] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 283.151404][ T5121] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 283.184162][ T5121] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 283.191703][ T30] Call Trace: [ 283.195007][ T30] [ 283.197961][ T30] __schedule+0x17e8/0x4a20 [ 283.204383][ T30] ? __pfx___schedule+0x10/0x10 [ 283.209298][ T30] ? __pfx_lock_release+0x10/0x10 [ 283.214929][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 283.220706][ T5121] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 283.228406][ T30] ? schedule+0x90/0x320 [ 283.235089][ T30] schedule+0x14b/0x320 [ 283.239301][ T30] schedule_preempt_disabled+0x13/0x30 [ 283.245248][ T5121] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 283.259151][ T30] __mutex_lock+0x6a4/0xd70 [ 283.264540][ T30] ? __mutex_lock+0x527/0xd70 [ 283.269425][ T30] ? nl802154_dump_wpan_phy+0x9f/0x9b0 [ 283.305777][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 283.310879][ T30] ? trace_contention_end+0x3c/0x120 [ 283.341142][ T30] ? __mutex_lock+0x2ef/0xd70 [ 283.345980][ T30] ? trace_kmalloc+0x1f/0xd0 [ 283.350595][ T30] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 283.430402][ T30] nl802154_dump_wpan_phy+0x9f/0x9b0 [ 283.435972][ T30] ? genl_dumpit+0xd6/0x1a0 [ 283.440508][ T30] ? __build_skb_around+0x245/0x3d0 [ 283.445917][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 283.450973][ T30] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 283.481151][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 283.486165][ T30] genl_dumpit+0x107/0x1a0 [ 283.490615][ T30] netlink_dump+0x6ff/0xe50 [ 283.501664][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 283.506759][ T30] ? __asan_memset+0x23/0x50 [ 283.521580][ T30] ? genl_start+0x4a8/0x6d0 [ 283.526143][ T30] __netlink_dump_start+0x59d/0x780 [ 283.541204][ T30] genl_rcv_msg+0x88c/0xec0 [ 283.545770][ T30] ? mark_lock+0x9a/0x350 [ 283.550132][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.572080][ T30] ? __pfx_genl_start+0x10/0x10 [ 283.576994][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 283.602370][ T30] ? __pfx_genl_done+0x10/0x10 [ 283.607212][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 283.631168][ T30] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 283.637497][ T30] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 283.651204][ T30] ? __pfx___might_resched+0x10/0x10 [ 283.656560][ T30] netlink_rcv_skb+0x1e3/0x430 [ 283.671509][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.676682][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.701327][