last executing test programs: 39.604725681s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 39.469228983s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x2c2, &(0x7f0000001e40)=""/4092}, 0x90) 39.393713132s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) 39.275106159s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000000000002000000e000000100000000000400000200010000000000000000fd00000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) unshare(0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x3000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) 37.760967838s ago: executing program 4: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000340)=@raw=[@alu={0x7, 0x0, 0xb, 0x7, 0x7, 0x4, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1ff}, @ldst={0x2, 0x0, 0x0, 0x6, 0x2, 0xc, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029000000000000"], 0x18}}], 0x1, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="6487a2bed3d6", @val={@void}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x33, 0x0, @private}}}}}, 0x0) unshare(0x24020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000000000000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, 0xffffffffffffffff}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @broadcast}, &(0x7f0000000300)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r0, 0x20, &(0x7f0000000780)={&(0x7f00000006c0)=""/162, 0xa2, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x35, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf84}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10001}]}, &(0x7f0000000240)='GPL\x00', 0x200, 0x32, &(0x7f0000000280)=""/50, 0x41100, 0x40, '\x00', r6, 0x13, r7, 0x8, &(0x7f00000003c0)={0x6}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xd, 0x20}, 0x10, r8, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[r0, r0, r0], &(0x7f0000000940)=[{0x4, 0x5, 0x2, 0x8}, {0x5, 0x5, 0x3}, {0x1, 0x1, 0x1, 0xe}, {0x2, 0x2, 0x10, 0x4}], 0x10, 0x7}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000004040)}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000000a40)=@caif=@dbg, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1, &(0x7f0000000b80)=""/4096, 0x1000}, 0x101}, {{&(0x7f0000001b80)=@can, 0x80, &(0x7f00000041c0)=[{0x0}, {&(0x7f0000001cc0)=""/109, 0x6d}, {&(0x7f0000001dc0)=""/90, 0x5a}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/190, 0xbe}, {&(0x7f00000040c0)=""/219, 0xdb}], 0x6, &(0x7f0000000100)=""/61, 0x3d}}], 0x2, 0x10000, &(0x7f0000004000)={0x77359400}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x1a, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 37.308415928s ago: executing program 4: socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x14, 0xf8, 0x30}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e22}}]}, 0x4c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 36.903198525s ago: executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) 36.734162922s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x40, 0x1, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xb, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x40}}, 0x0) 19.21225485s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000000000002000000e000000100000000000400000200010000000000000000fd00000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) unshare(0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x3000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) 17.541914191s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x40, 0x1, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xb, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x40}}, 0x0) 3.7093516s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a0000000000000000000000030006000000000002000000e000000100000000000400000200010000000000000000fd00000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) unshare(0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x3000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x28}}, 0x0) 1.851086805s ago: executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f140100000000000000000008000100000000000b00450075766572627300000800030001"], 0x3c}}, 0x0) 1.848833265s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xc, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x12012, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68010000150a010200000000000000eb040000050900010073797a31000000003f000800a41a986cb371c153d80adb580c5392c34e7548feea25bdd186f13f2be27889a15a38c4695f5dedb5d9ac6fb558892a59526dc03558949e32b7d33000f50008005328a591a78e477ec1f2e3bb33b0eae18f3350372c4cd9a63f31029000b1b0466db832b29bf9557bee70c6d2579d34aecc4913cde15af51a17aacb290346f7fb2e8cb4524802a2df83e2f36ad6b0dfb405bd9efc04b40375f825f0523e0a722a692c7b4ca28e3252fdb2da29030402464a48b3b111c13b01c34d95b06d5e2a58055db87bbb1094fa8cac4f873fcaae853a8a0f0b0a6b3c3af10d5f7dbcfeb5750b9b5ef2de844e729c9b3772641e7d90ec24e807fbd6dcc81194bf20045841844b4b636c6be0000ba7cfe36f93d7daf1b4c22c9cff5c8ff56f89f0933ed5636219d4ec3f45c65cadfc2db1be1e027739dd00000008000340000000010800034000000009"], 0x168}, 0x1, 0x0, 0x0, 0x194}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001240)={0x60, r5, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}], @NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x54, r5, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5bf3a2c354"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "58dd896ccc2ab787cc787af0c7"}]}, 0x54}}, 0x80) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0) 1.848215822s ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x82, 0x0, 0x1) 1.835428876s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0xf, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getpid() socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2400a800, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 1.791242213s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.640290643s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.624850141s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) write$cgroup_subtree(r1, 0x0, 0x7ffffffff000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = socket(0xa, 0x3, 0x1) getsockopt(r3, 0xff, 0x0, 0x0, &(0x7f0000000040)) 1.595634921s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x40, 0x1, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xb, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x40}}, 0x0) 1.248672517s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 668.872243ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 623.342692ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x30d}, 0x14}}, 0x0) 622.535457ms ago: executing program 0: unshare(0x20000400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) 468.475354ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x0, 0x80, 0x5}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x40}}, 0x0) 459.413682ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140), 0x8) 442.442689ms ago: executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x2880008, r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f00000004c0)=""/262, 0x106}], 0x3, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x5}) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xeffe}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000000040)) write$cgroup_int(r8, &(0x7f0000000200), 0x66000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x68}}, 0x0) 320.103711ms ago: executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f140100000000000000000008000100000000000b00450075766572627300000800030001"], 0x3c}}, 0x0) 277.828339ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x2}, 0x8) 275.737775ms ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x11eac000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x2000) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000040)) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0x22, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000280)={'vxcan1\x00'}) socketpair(0xf, 0x2, 0xfffffd70, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000440)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000400)=r10, 0x4) 0s ago: executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFMTU(r0, 0x8994, &(0x7f0000000040)={'bridge_slave_0\x00'}) socket$inet(0x2b, 0x801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) kernel console output (not intermixed with test programs): cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4036537600/syzkaller.aV9IkX/112/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 107.975640][ T29] audit: type=1804 audit(1719028876.241:6): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/105/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 108.087887][ T6591] __nla_validate_parse: 11 callbacks suppressed [ 108.087909][ T6591] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.112511][ T6591] openvswitch: netlink: Multiple metadata blocks provided [ 108.671903][ T6627] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.707458][ T29] audit: type=1804 audit(1719028876.981:7): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/106/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 108.872278][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.237668][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.567513][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.987938][ T6686] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.015809][ T6686] openvswitch: netlink: Multiple metadata blocks provided [ 110.488818][ T6719] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.511699][ T6719] openvswitch: netlink: Multiple metadata blocks provided [ 110.558642][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.147092][ T6751] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.163601][ T6751] openvswitch: netlink: Multiple metadata blocks provided [ 111.285083][ T6760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.451567][ T29] audit: type=1804 audit(1719028879.721:8): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1821971935/syzkaller.etVv91/128/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 111.933398][ T6796] openvswitch: netlink: Multiple metadata blocks provided [ 112.323493][ T6815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.948999][ T29] audit: type=1804 audit(1719028881.211:9): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/119/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 113.104639][ T6853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.452272][ T6872] __nla_validate_parse: 10 callbacks suppressed [ 113.452292][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.519440][ T6877] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.551282][ T6872] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.794617][ T6891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.879481][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.233299][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.285286][ T6917] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.342530][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.425872][ T29] audit: type=1804 audit(1719028882.681:10): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/125/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 114.669969][ T6931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.729472][ T6934] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 115.127747][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.179298][ T6954] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.270999][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.392910][ T6963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.894434][ T29] audit: type=1804 audit(1719028884.161:11): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1750397978/syzkaller.S2lJfy/144/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 116.832865][ T7035] syz-executor.3[7035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.833026][ T7035] syz-executor.3[7035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.347902][ T29] audit: type=1804 audit(1719028885.621:12): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4036537600/syzkaller.aV9IkX/161/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 118.019272][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.227274][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.269078][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.280543][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.292624][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.303606][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.322810][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.331157][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.389480][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.493221][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.797351][ T51] bridge_slave_1: left allmulticast mode [ 118.825877][ T51] bridge_slave_1: left promiscuous mode [ 118.833095][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.859373][ T51] bridge_slave_0: left allmulticast mode [ 118.867783][ T51] bridge_slave_0: left promiscuous mode [ 118.875705][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.500226][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.517228][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.528363][ T51] bond0 (unregistering): Released all slaves [ 119.543830][ T51] bond1 (unregistering): Released all slaves [ 119.561352][ T7097] chnl_net:caif_netlink_parms(): no params data found [ 119.730949][ T51] tipc: Left network mode [ 120.167169][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.174668][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.188448][ T7097] bridge_slave_0: entered allmulticast mode [ 120.198976][ T7097] bridge_slave_0: entered promiscuous mode [ 120.296391][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.323655][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.334721][ T7097] bridge_slave_1: entered allmulticast mode [ 120.351984][ T7097] bridge_slave_1: entered promiscuous mode [ 120.389296][ T53] Bluetooth: hci2: command tx timeout [ 120.404087][ T51] hsr_slave_0: left promiscuous mode [ 120.417591][ T51] hsr_slave_1: left promiscuous mode [ 120.426229][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.433883][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.448232][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.464080][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.500172][ T51] veth1_macvtap: left promiscuous mode [ 120.507247][ T51] veth0_macvtap: left promiscuous mode [ 120.512984][ T51] veth1_vlan: left promiscuous mode [ 120.519741][ T51] veth0_vlan: left promiscuous mode [ 121.169150][ T51] team0 (unregistering): Port device team_slave_1 removed [ 121.206364][ T51] team0 (unregistering): Port device team_slave_0 removed [ 121.619975][ T7097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.726928][ T7097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.888372][ T7097] team0: Port device team_slave_0 added [ 121.924679][ T7097] team0: Port device team_slave_1 added [ 122.043786][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.073425][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.144267][ T7097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.196210][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.203307][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.257164][ T7097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.426971][ T7097] hsr_slave_0: entered promiscuous mode [ 122.455685][ T53] Bluetooth: hci2: command tx timeout [ 122.470612][ T7097] hsr_slave_1: entered promiscuous mode [ 122.487103][ T7097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.515799][ T7097] Cannot create hsr debugfs directory [ 123.358401][ T7097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.415491][ T7097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.431482][ T7097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.470799][ T7097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.639889][ T7310] fscrypt (sda1, inode 1948): Unsupported encryption modes (contents 0, filenames 0) [ 123.794322][ T7097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.842764][ T7097] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.878075][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.885393][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.937130][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.944306][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.279702][ T7341] fscrypt (sda1, inode 1952): Unsupported encryption modes (contents 0, filenames 0) [ 124.533731][ T7097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.544818][ T53] Bluetooth: hci2: command tx timeout [ 124.610674][ T7097] veth0_vlan: entered promiscuous mode [ 124.625846][ T7097] veth1_vlan: entered promiscuous mode [ 124.720238][ T7097] veth0_macvtap: entered promiscuous mode [ 124.768144][ T7097] veth1_macvtap: entered promiscuous mode [ 124.847223][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.884158][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.898661][ T7375] fscrypt (sda1, inode 1960): Unsupported encryption modes (contents 0, filenames 0) [ 124.909165][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.935590][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.965243][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.991424][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.012817][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.035332][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.060209][ T7097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.126779][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.156080][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.166956][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.193518][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.221054][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.255687][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.275620][ T7097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.293137][ T7097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.322664][ T7097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.343491][ T7097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.383306][ T7097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.402877][ T7097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.428419][ T7097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.515711][ T7403] fscrypt (sda1, inode 1956): Unsupported encryption modes (contents 0, filenames 0) [ 125.637930][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.676061][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.771225][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.802536][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.080162][ T7433] syz-executor.2[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.080313][ T7433] syz-executor.2[7433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.141110][ T7436] fscrypt (sda1, inode 1959): Unsupported encryption modes (contents 0, filenames 0) [ 126.616160][ T53] Bluetooth: hci2: command tx timeout [ 127.005488][ T7481] __nla_validate_parse: 1 callbacks suppressed [ 127.029266][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.049791][ T7481] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 127.076805][ T7481] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 127.117237][ T7481] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.126538][ T7481] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.135302][ T7481] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.144101][ T7481] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.163139][ T7481] vxlan0: entered promiscuous mode [ 127.646285][ T7503] syz-executor.2[7503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.646436][ T7503] syz-executor.2[7503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.425470][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.491710][ T7550] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 128.512589][ T7550] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 128.561732][ T7550] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.570787][ T7550] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.580029][ T7550] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.588957][ T7550] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.631984][ T7550] vxlan0: entered promiscuous mode [ 128.697567][ T7557] pimreg7: entered allmulticast mode [ 128.748533][ T7557] pimreg: entered allmulticast mode [ 129.916433][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.947019][ T7624] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 129.955263][ T7624] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 130.040048][ T7627] pimreg7: entered allmulticast mode [ 130.100654][ T7627] pimreg: entered allmulticast mode [ 131.338058][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.370347][ T7692] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 131.393719][ T7692] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 133.032068][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.045803][ T7769] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 133.054113][ T7769] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 133.074448][ T7769] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.083336][ T7769] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.092228][ T7769] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.107910][ T7769] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.119901][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126361][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.137239][ T7769] vxlan0: entered promiscuous mode [ 134.040958][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.806767][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.828208][ T7838] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 134.844782][ T7838] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 134.851015][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.523706][ T7867] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.536892][ T7867] netlink: del zone limit has 8 unknown bytes [ 135.652461][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.723915][ T7879] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 136.083341][ T7900] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.095866][ T7900] netlink: del zone limit has 8 unknown bytes [ 136.317570][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.328134][ T7912] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 136.339670][ T7912] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 136.398209][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.918787][ T7938] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.931661][ T7938] netlink: del zone limit has 8 unknown bytes [ 137.449532][ T7964] netlink: del zone limit has 8 unknown bytes [ 137.460494][ T7959] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 137.750249][ T7981] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 137.767433][ T7981] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 137.804061][ T7981] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.813968][ T7981] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.825006][ T7981] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.834131][ T7981] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.843163][ T7981] vxlan0: entered promiscuous mode [ 138.163044][ T7998] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.197440][ T7997] __nla_validate_parse: 3 callbacks suppressed [ 138.197462][ T7997] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.224629][ T7997] netlink: del zone limit has 8 unknown bytes [ 138.791602][ T8028] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 139.486412][ T8063] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.123631][ T8100] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 140.804790][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.816058][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.826743][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.837988][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.848775][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.857185][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.423854][ T8131] chnl_net:caif_netlink_parms(): no params data found [ 141.469681][ T8165] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 141.760702][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.768155][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.775649][ T8131] bridge_slave_0: entered allmulticast mode [ 141.783197][ T8131] bridge_slave_0: entered promiscuous mode [ 141.793747][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.801457][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.810533][ T8131] bridge_slave_1: entered allmulticast mode [ 141.818138][ T8131] bridge_slave_1: entered promiscuous mode [ 141.901832][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.932892][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.043432][ T8131] team0: Port device team_slave_0 added [ 142.077492][ T8131] team0: Port device team_slave_1 added [ 142.136739][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.221731][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.230237][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.259289][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.362476][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.380125][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.409638][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.446331][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.456942][ T8208] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 142.641327][ T8131] hsr_slave_0: entered promiscuous mode [ 142.649470][ T8131] hsr_slave_1: entered promiscuous mode [ 142.663019][ T8131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.675184][ T8131] Cannot create hsr debugfs directory [ 142.908258][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.935817][ T53] Bluetooth: hci2: command tx timeout [ 143.079533][ T8131] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.155118][ T8237] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 143.259149][ T8131] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.416709][ T8131] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.589379][ T8131] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.809297][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.931808][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.963872][ T8274] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 144.049087][ T8131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.099670][ T8131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.130672][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.150392][ T8283] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 144.173700][ T8131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.189384][ T8131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.201195][ T29] audit: type=1804 audit(1719028912.451:13): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/261/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 144.501283][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.569679][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.597750][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.604971][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.650018][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.657343][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.821403][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.983488][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.999582][ T8314] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 145.016173][ T53] Bluetooth: hci2: command tx timeout [ 145.173546][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.317107][ T8131] veth0_vlan: entered promiscuous mode [ 145.351462][ T8131] veth1_vlan: entered promiscuous mode [ 145.374348][ T29] audit: type=1804 audit(1719028913.641:14): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4036537600/syzkaller.aV9IkX/264/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 145.440020][ T8131] veth0_macvtap: entered promiscuous mode [ 145.466683][ T8131] veth1_macvtap: entered promiscuous mode [ 145.498392][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.518368][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.535592][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.554270][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.565938][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.576965][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.587104][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.599600][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.615349][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.626965][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.643612][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.653012][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.679181][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.688647][ T8336] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 145.723813][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.738003][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.749554][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.766240][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.783249][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.807958][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.825181][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.838137][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.849115][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.859810][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.875278][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.890233][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.924374][ T8343] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 145.962073][ T8131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.971411][ T8131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.987730][ T8131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.998946][ T8131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.223068][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.245029][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.298288][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.324657][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.359603][ T29] audit: type=1804 audit(1719028914.631:15): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/279/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 146.730549][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.763887][ T8385] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.913613][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.936130][ T8392] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 146.948091][ T8395] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 146.965675][ T8395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 147.096355][ T53] Bluetooth: hci2: command tx timeout [ 147.602835][ T8424] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 147.616340][ T8424] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 148.153192][ T8451] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 148.166983][ T8451] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 148.315035][ T8457] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 148.494647][ T29] audit: type=1804 audit(1719028916.761:16): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/292/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 149.176840][ T53] Bluetooth: hci2: command tx timeout [ 149.332961][ T29] audit: type=1804 audit(1719028917.601:17): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/276/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 149.370649][ T8507] __nla_validate_parse: 7 callbacks suppressed [ 149.370669][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.923268][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.053715][ T8548] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 150.110800][ T8548] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.135418][ T8548] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 150.434378][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.524138][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.000714][ T8602] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 151.125095][ T8593] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 151.212612][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.954581][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 152.086066][ T8653] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.116570][ T8653] geneve0: entered promiscuous mode [ 152.131527][ T8653] geneve0: entered allmulticast mode [ 152.481210][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.833580][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.351216][ T29] audit: type=1804 audit(1719028921.611:18): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4036537600/syzkaller.aV9IkX/297/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 153.465287][ T29] audit: type=1804 audit(1719028921.731:19): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4036537600/syzkaller.aV9IkX/297/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 153.911717][ T8743] Κό: entered promiscuous mode [ 154.141088][ T8762] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 154.260456][ T29] audit: type=1804 audit(1719028922.531:20): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/320/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 154.326765][ T8752] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 154.360155][ T29] audit: type=1804 audit(1719028922.631:21): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/320/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 154.390500][ T8764] __nla_validate_parse: 2 callbacks suppressed [ 154.390518][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.761651][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.822740][ T8790] geneve0: entered promiscuous mode [ 154.841184][ T8790] geneve0: entered allmulticast mode [ 155.123171][ T8813] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 155.151833][ T29] audit: type=1804 audit(1719028923.421:22): pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/305/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 155.198776][ T29] audit: type=1804 audit(1719028923.451:23): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/305/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 155.308944][ T8809] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 155.459374][ T29] audit: type=1804 audit(1719028923.731:24): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2118962588/syzkaller.JJ6ia4/42/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 155.544915][ T8824] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 155.799652][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.961736][ T29] audit: type=1804 audit(1719028924.231:25): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/324/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 156.051029][ T29] audit: type=1804 audit(1719028924.261:26): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/324/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 156.231343][ T8860] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 156.805968][ T29] audit: type=1804 audit(1719028925.081:27): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/313/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 156.966469][ T29] audit: type=1804 audit(1719028925.231:28): pid=8887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1682045037/syzkaller.CbrHsJ/313/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 157.048459][ T8900] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 157.390869][ T29] audit: type=1804 audit(1719028925.661:29): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4036537600/syzkaller.aV9IkX/308/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 157.708906][ T8927] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 157.833302][ T8919] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 158.994072][ T8982] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.108974][ T8984] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.165768][ T8987] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.676034][ T9020] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.937032][ T9034] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 160.099540][ T9024] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 160.453464][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.565350][ T9060] team1: Mode changed to "activebackup" [ 160.660431][ T9070] Unsupported ieee802154 address type: 0 [ 161.355984][ T9092] ΙΆΖ£0GC¦: entered promiscuous mode [ 161.610977][ T9113] Unsupported ieee802154 address type: 0 [ 163.659187][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.732180][ T9219] team1: Mode changed to "activebackup" [ 163.869169][ T9226] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 163.956527][ T9230] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 164.057586][ T9235] ΙΆΖ£0GC¦: entered promiscuous mode [ 164.462490][ T9256] Unsupported ieee802154 address type: 0 [ 164.698162][ T9266] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 164.795578][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.825419][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.853800][ T9269] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 165.430212][ T9301] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 165.497952][ T9301] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 165.599880][ T9310] Unsupported ieee802154 address type: 0 [ 166.449467][ T9342] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 4099 [ 166.946933][ T9365] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 166.979463][ T9365] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.406901][ T9380] af_packet: tpacket_rcv: packet too big, clamped from 4099 to 3952. macoff=96 [ 167.934310][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.803037][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.159148][ T2398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.186881][ T2398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.188340][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.214361][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.226741][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.239632][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.252845][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.263351][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.354081][ T2398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.366895][ T2398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.520040][ T2398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.547817][ T2398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.658132][ T2398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.674968][ T2398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.727440][ T9519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.943843][ T2398] bridge_slave_1: left allmulticast mode [ 170.955928][ T2398] bridge_slave_1: left promiscuous mode [ 170.966003][ T2398] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.985428][ T2398] bridge_slave_0: left allmulticast mode [ 170.995152][ T2398] bridge_slave_0: left promiscuous mode [ 171.001019][ T2398] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.599844][ T2398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.611970][ T2398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.623095][ T2398] bond0 (unregistering): Released all slaves [ 171.635480][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.656573][ T9533] IPVS: Error joining to the multicast group [ 171.663483][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.686165][ T9540] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 171.718899][ T9540] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 171.727833][ T9540] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 171.736566][ T9540] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 171.745198][ T9540] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 171.777772][ T9540] vxlan0: entered promiscuous mode [ 171.792474][ T2398] ΙΆΖ£0GC¦: left promiscuous mode [ 171.916395][ T9550] Bluetooth: MGMT ver 1.22 [ 171.951501][ T2398] tipc: Left network mode [ 171.951605][ T9550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.969865][ T9550] batadv_slave_1: entered promiscuous mode [ 171.991107][ T9550] batadv_slave_1: entered allmulticast mode [ 172.297218][ T53] Bluetooth: hci0: command tx timeout [ 172.343106][ T9495] chnl_net:caif_netlink_parms(): no params data found [ 172.479664][ T2398] hsr_slave_0: left promiscuous mode [ 172.507850][ T2398] hsr_slave_1: left promiscuous mode [ 172.526219][ T2398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.533778][ T2398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.548375][ T2398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.556254][ T2398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.582181][ T2398] veth1_macvtap: left promiscuous mode [ 172.588050][ T2398] veth0_macvtap: left promiscuous mode [ 172.593702][ T2398] veth1_vlan: left promiscuous mode [ 172.599197][ T2398] veth0_vlan: left promiscuous mode [ 172.784469][ T2398] pim6reg (unregistering): left allmulticast mode [ 173.143410][ T2398] team0 (unregistering): Port device team_slave_1 removed [ 173.184403][ T2398] team0 (unregistering): Port device team_slave_0 removed [ 173.383489][ T2398] vxcan1 (unregistering): left allmulticast mode [ 173.548882][ T9576] bond0: option use_carrier: invalid value (3) [ 173.779844][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.797762][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.815756][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.823189][ T9495] bridge_slave_0: entered allmulticast mode [ 173.845456][ T9495] bridge_slave_0: entered promiscuous mode [ 173.859404][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.872662][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.885803][ T9495] bridge_slave_1: entered allmulticast mode [ 173.902826][ T9495] bridge_slave_1: entered promiscuous mode [ 173.910205][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.921044][ T9595] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 173.935805][ T9595] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 173.945253][ T9595] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 173.954149][ T9595] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 173.963637][ T9595] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 173.978539][ T9595] vxlan1: entered promiscuous mode [ 174.096375][ T9495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.123642][ T9495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.146067][ T9603] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 174.232985][ T9495] team0: Port device team_slave_0 added [ 174.253669][ T9495] team0: Port device team_slave_1 added [ 174.387309][ T53] Bluetooth: hci0: command tx timeout [ 174.399734][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.439069][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.495603][ T9495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.510788][ T9495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.519375][ T9495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.561257][ T9495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.756268][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.773243][ T9619] batadv_slave_1: entered promiscuous mode [ 174.780207][ T9619] batadv_slave_1: entered allmulticast mode [ 174.811502][ T9495] hsr_slave_0: entered promiscuous mode [ 174.824740][ T9495] hsr_slave_1: entered promiscuous mode [ 174.840127][ T9495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.859247][ T9495] Cannot create hsr debugfs directory [ 175.019769][ T9634] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 175.308269][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.749004][ T9495] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.800116][ T9495] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.840086][ T9495] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.882627][ T9495] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.965178][ T9673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.979076][ T9673] batadv_slave_1: entered promiscuous mode [ 175.984953][ T9673] batadv_slave_1: entered allmulticast mode [ 176.133543][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.241265][ T9495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.309633][ T9495] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.341742][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.348952][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.401197][ T5198] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.408398][ T5198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.466098][ T53] Bluetooth: hci0: command tx timeout [ 176.539149][ T9495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.888614][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.901360][ T9722] v: renamed from veth1_macvtap (while UP) [ 177.007010][ T9495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.138507][ T9495] veth0_vlan: entered promiscuous mode [ 177.168125][ T9495] veth1_vlan: entered promiscuous mode [ 177.314505][ T9495] veth0_macvtap: entered promiscuous mode [ 177.367059][ T9495] veth1_macvtap: entered promiscuous mode [ 177.369965][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.433164][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.456430][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.468047][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.489673][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.510951][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.521646][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.532733][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.546631][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.557484][ T9746] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.567151][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.579912][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.592208][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.622650][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.637072][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.649859][ T9495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.663117][ T9495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.675108][ T9495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.697951][ T9495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.711628][ T9495] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.720651][ T9495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.730130][ T9495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.891412][ T2398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.916623][ T2398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.006622][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.024167][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.037033][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.075799][ T9758] v: renamed from veth1_macvtap (while UP) [ 178.194630][ T9763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.405303][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.450353][ T9763] IPVS: Error joining to the multicast group [ 178.471890][ T9775] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 178.536363][ T53] Bluetooth: hci0: command tx timeout [ 178.899365][ T29] audit: type=1804 audit(1719028947.171:30): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/397/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 179.018115][ T9809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.270358][ T9817] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 179.832091][ T9858] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.227890][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.267026][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.288265][ T9889] v: renamed from veth1_macvtap (while UP) [ 180.441897][ T9894] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.937292][ T9921] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 181.205784][ T9923] macsec0: entered promiscuous mode [ 181.211264][ T9923] macsec0: entered allmulticast mode [ 181.697771][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.095044][ T9994] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.140502][ T9995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.164595][ T9995] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 182.561633][T10021] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 182.593641][T10021] netlink: 9324 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.616162][T10021] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 182.639073][T10021] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.658390][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.829134][T10034] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.907201][ T29] audit: type=1804 audit(1719028951.181:31): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2118962588/syzkaller.JJ6ia4/152/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 183.153489][T10043] Bluetooth: hci3: invalid len left 7, exp >= 81 [ 183.292400][T10053] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.363333][T10053] syz-executor.2 (10053) used greatest stack depth: 18008 bytes left [ 183.456738][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.640969][ T29] audit: type=1804 audit(1719028951.911:32): pid=10065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/426/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 183.957977][ T2412] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.969267][T10090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.025236][T10071] veth1_macvtap: left promiscuous mode [ 184.036370][T10071] macsec0: entered promiscuous mode [ 184.062107][T10071] macsec0: entered allmulticast mode [ 184.574983][ T61] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 184.585894][T10129] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.142370][T10155] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.172879][T10155] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.244459][ T51] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.276100][T10161] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 185.800217][T10196] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 185.977360][T10202] bond0: entered promiscuous mode [ 186.005612][T10202] bond_slave_0: entered promiscuous mode [ 186.023477][T10202] bond_slave_1: entered promiscuous mode [ 186.045142][T10202] dummy0: entered promiscuous mode [ 186.164646][T10216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.315315][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.412547][T10216] IPVS: Error joining to the multicast group [ 186.635201][T10237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 186.655398][T10237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 187.000011][T10261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.163399][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.234211][T10261] IPVS: Error joining to the multicast group [ 187.573807][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.679182][T10298] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 187.707700][T10298] netlink: 9324 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.730719][T10298] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 187.741348][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.751368][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.064272][T10314] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.136365][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.212639][T10319] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.231941][T10319] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.257200][T10315] veth1_macvtap: left promiscuous mode [ 188.273125][T10315] macsec0: entered promiscuous mode [ 188.281139][T10315] macsec0: entered allmulticast mode [ 188.936845][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.944875][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.158814][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.669870][ T29] audit: type=1804 audit(1719028957.941:33): pid=10398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2118962588/syzkaller.JJ6ia4/189/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 189.789103][T10404] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 189.803076][T10404] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 189.811574][T10404] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 189.820207][T10404] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 189.837258][T10404] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 189.866464][T10404] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.936346][T10399] dccp_close: ABORT with 4096 bytes unread [ 189.984680][T10413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.147677][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.228219][T10432] delete_channel: no stack [ 191.760008][T10420] IPVS: Error joining to the multicast group [ 192.104800][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 192.576469][T10486] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 192.766155][ T783] IPVS: starting estimator thread 0... [ 192.856026][T10496] IPVS: using max 18 ests per chain, 43200 per kthread [ 192.898891][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.017336][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.150358][ T5198] IPVS: starting estimator thread 0... [ 193.203630][T10516] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.225627][T10516] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.256313][T10521] IPVS: using max 18 ests per chain, 43200 per kthread [ 193.603782][T10545] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.178715][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.187971][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.197794][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.206450][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.214313][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.222007][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.292633][T10565] macvtap1: entered allmulticast mode [ 194.305569][T10565] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 194.323981][T10565] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 194.385834][T10568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.392835][T10568] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.399921][T10568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.406436][T10568] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.412973][T10568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.419460][T10568] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.426120][T10568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.432611][T10568] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.439168][T10568] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.466476][T10571] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.542688][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549168][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780726][T10583] tipc: Enabling of bearer rejected, failed to enable media [ 194.906515][T10560] chnl_net:caif_netlink_parms(): no params data found [ 195.004949][T10589] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 195.031552][T10589] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 195.142501][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.162384][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.191794][T10560] bridge_slave_0: entered allmulticast mode [ 195.207138][T10560] bridge_slave_0: entered promiscuous mode [ 195.234550][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.264074][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.285130][T10560] bridge_slave_1: entered allmulticast mode [ 195.308407][T10560] bridge_slave_1: entered promiscuous mode [ 195.448727][T10613] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 195.463769][T10613] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.477130][T10560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.556845][T10560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.300641][ T5133] Bluetooth: hci1: command tx timeout [ 196.455758][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.615785][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 197.096431][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.613905][T10560] team0: Port device team_slave_0 added [ 197.627773][T10560] team0: Port device team_slave_1 added [ 197.734064][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.735743][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.818968][T10560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.844773][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.896842][ T783] IPVS: starting estimator thread 0... [ 197.909393][T10560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.948127][T10560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.963394][T10560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.996350][T10560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.012916][T10647] net_ratelimit: 48 callbacks suppressed [ 198.012929][T10647] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 198.036855][T10644] IPVS: using max 20 ests per chain, 48000 per kthread [ 198.375894][ T53] Bluetooth: hci1: command tx timeout [ 198.490536][T10560] hsr_slave_0: entered promiscuous mode [ 198.503290][T10560] hsr_slave_1: entered promiscuous mode [ 198.516979][T10560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.534863][T10560] Cannot create hsr debugfs directory [ 198.793887][T10674] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 198.878014][T10675] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 198.896454][T10675] macvtap1: entered allmulticast mode [ 198.902413][T10675] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 198.966287][T10675] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 198.974944][T10675] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 198.988127][T10684] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.082337][T10684] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 199.213779][T10560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.226172][T10560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 199.236642][T10560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.378337][T10560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.396171][T10560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 199.420270][T10560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.548273][T10560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.572618][T10560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 199.586002][T10560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.731673][T10560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.755633][T10560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 199.782237][T10560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.164427][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 200.305343][T10738] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 200.428606][T10560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 200.462287][ T53] Bluetooth: hci1: command tx timeout [ 200.483542][T10560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.524046][T10560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.547099][T10560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.717810][T10747] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 200.858426][T10560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.910756][T10560] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.938162][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.945381][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.010021][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.017174][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.316941][T10560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.795839][T10763] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 202.020491][T10560] veth0_vlan: entered promiscuous mode [ 202.062777][T10560] veth1_vlan: entered promiscuous mode [ 202.206328][T10560] veth0_macvtap: entered promiscuous mode [ 202.243160][T10560] veth1_macvtap: entered promiscuous mode [ 202.313574][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.370965][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.394300][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.404914][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.417060][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.475769][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.502019][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.537267][ T53] Bluetooth: hci1: command tx timeout [ 202.566551][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.576808][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.587330][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.597427][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.607941][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.619831][T10560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.668296][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.690100][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.708643][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.727799][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.745867][T10560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.766736][T10560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.788856][T10560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.821341][T10560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.843553][T10560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.857355][T10560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.904656][T10560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.918828][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.078347][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.106891][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.183486][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.191778][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.750070][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.817748][T10798] ip6gretap0: entered promiscuous mode [ 203.823881][T10798] macvtap1: entered promiscuous mode [ 203.852310][T10798] macvtap1: entered allmulticast mode [ 203.865621][T10798] ip6gretap0: entered allmulticast mode [ 203.883129][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.913030][T10807] ip6gretap0: left allmulticast mode [ 203.927919][T10807] ip6gretap0: left promiscuous mode [ 203.943536][T10807] macvtap1: left promiscuous mode [ 203.954207][T10807] macvtap1: left allmulticast mode [ 203.999763][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.539845][T10842] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 204.578611][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.006525][T10855] IPVS: length: 215 != 24 [ 205.706931][T10890] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 205.788163][T10891] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 206.236806][T10909] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 206.245025][T10909] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.312508][T10909] team0: Port device virt_wifi0 added [ 206.437216][T10919] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.590649][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.624273][T10919] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 206.690395][T10933] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 206.741369][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.363204][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.388976][T10965] atomic_op ffff888061e08198 conn xmit_atomic 0000000000000000 [ 207.704765][T10975] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 207.733361][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.924559][T10990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.059907][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.202767][T11003] IPv6: addrconf: prefix option has invalid lifetime [ 209.946991][T11023] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 209.968462][T11023] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.993903][T11023] team0: Port device virt_wifi0 added [ 210.195226][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 210.222848][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.419797][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 210.494429][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.688270][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 210.699981][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.715996][T11052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.849958][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 210.873829][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.083273][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.145737][T11063] ip6gretap0: entered promiscuous mode [ 211.166023][T11063] macvtap1: entered promiscuous mode [ 211.171498][T11063] macvtap1: entered allmulticast mode [ 211.177138][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 211.225090][T11063] ip6gretap0: entered allmulticast mode [ 211.266324][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.280956][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.295866][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.304392][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.312503][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.323243][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.354047][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.365163][T11066] ip6gretap0: left allmulticast mode [ 211.372631][T11066] ip6gretap0: left promiscuous mode [ 211.378157][T11066] macvtap1: left promiscuous mode [ 211.383216][T11066] macvtap1: left allmulticast mode [ 211.421665][ T51] bridge_slave_1: left allmulticast mode [ 211.440408][ T51] bridge_slave_1: left promiscuous mode [ 211.459490][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.502781][ T51] bridge_slave_0: left allmulticast mode [ 211.525590][ T51] bridge_slave_0: left promiscuous mode [ 211.531372][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.570410][T11079] IPv6: addrconf: prefix option has invalid lifetime [ 212.018350][T11090] Bluetooth: hci3: too big key_count value 7943 [ 212.131590][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.145818][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.155686][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.164113][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.171928][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.189082][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.292246][ T51] bond0 (unregistering): left promiscuous mode [ 212.298800][ T51] bond_slave_0: left promiscuous mode [ 212.304443][ T51] bond_slave_1: left promiscuous mode [ 212.313827][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.325856][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.341250][ T51] bond0 (unregistering): Released all slaves [ 212.462236][ T51] Κό: left promiscuous mode [ 212.644669][ T51] ΙΆΖ£0GC¦: left promiscuous mode [ 212.666934][T11103] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.928549][T11117] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 212.943281][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.156821][T11121] Bluetooth: hci3: too big key_count value 7943 [ 213.354225][T11071] chnl_net:caif_netlink_parms(): no params data found [ 213.421211][ T5133] Bluetooth: hci1: command tx timeout [ 213.736103][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.761621][ T51] dummy0: left promiscuous mode [ 213.810148][ T51] hsr_slave_0: left promiscuous mode [ 213.866065][ T51] hsr_slave_1: left promiscuous mode [ 213.915884][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.923365][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.952117][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.027015][ T51] veth0_macvtap: left promiscuous mode [ 214.044582][ T51] veth1_vlan: left promiscuous mode [ 214.053674][ T51] veth0_vlan: left promiscuous mode [ 214.142682][T11148] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.297555][ T5133] Bluetooth: hci2: command tx timeout [ 214.674569][ T51] team0 (unregistering): Port device team_slave_1 removed [ 214.724927][ T51] team0 (unregistering): Port device team_slave_0 removed [ 215.026298][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 215.216152][T11091] chnl_net:caif_netlink_parms(): no params data found [ 215.496831][ T5133] Bluetooth: hci1: command tx timeout [ 216.376004][ T5133] Bluetooth: hci2: command tx timeout [ 216.782950][T11071] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.796196][T11071] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.805760][T11071] bridge_slave_0: entered allmulticast mode [ 216.814122][T11071] bridge_slave_0: entered promiscuous mode [ 216.863690][T11071] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.873389][T11164] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 216.882175][T11071] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.896004][T11071] bridge_slave_1: entered allmulticast mode [ 216.907798][T11071] bridge_slave_1: entered promiscuous mode [ 216.981034][T11166] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 217.092195][T11071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.200446][T11071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.221392][T11091] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.248019][T11091] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.266118][T11091] bridge_slave_0: entered allmulticast mode [ 217.287915][T11091] bridge_slave_0: entered promiscuous mode [ 217.292952][T11183] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.309085][T11091] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.316691][T11091] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.323923][T11091] bridge_slave_1: entered allmulticast mode [ 217.331723][T11091] bridge_slave_1: entered promiscuous mode [ 217.365935][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.449637][T11071] team0: Port device team_slave_0 added [ 217.474503][T11071] team0: Port device team_slave_1 added [ 217.532651][T11091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.547523][T11091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.576238][ T5133] Bluetooth: hci1: command tx timeout [ 217.610511][T11191] syz-executor.1[11191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.610912][T11191] syz-executor.1[11191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.716376][T11071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.753471][T11071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.791518][T11071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.822576][T11071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.835416][T11071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.874797][T11071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.916573][T11091] team0: Port device team_slave_0 added [ 217.948819][T11091] team0: Port device team_slave_1 added [ 218.053745][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.119832][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.129615][T11211] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 218.243119][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.342011][T11071] hsr_slave_0: entered promiscuous mode [ 218.351262][T11218] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 218.368331][T11071] hsr_slave_1: entered promiscuous mode [ 218.381458][T11218] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 218.389698][T11071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.403738][T11218] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 218.413112][T11071] Cannot create hsr debugfs directory [ 218.422992][T11091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.430496][T11218] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 218.445623][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.471781][ T5133] Bluetooth: hci2: command tx timeout [ 218.479460][T11218] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 218.487651][T11218] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.507710][T11091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.531845][T11091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.549325][T11091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.564088][T11212] dccp_close: ABORT with 4096 bytes unread [ 218.585345][T11091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.663607][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.692244][T11226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.699958][T11226] IPv6: NLM_F_CREATE should be set when creating new route [ 218.847737][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.891494][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.908451][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.929955][T11236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.950732][T11236] geneve2: entered promiscuous mode [ 218.962185][T11236] geneve2: entered allmulticast mode [ 219.166631][T11091] hsr_slave_0: entered promiscuous mode [ 219.174006][T11091] hsr_slave_1: entered promiscuous mode [ 219.191443][T11091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.204156][T11091] Cannot create hsr debugfs directory [ 219.227725][T11248] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 219.433465][T11258] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 219.622350][ T51] bridge_slave_1: left allmulticast mode [ 219.645702][ T51] bridge_slave_1: left promiscuous mode [ 219.651562][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.659344][ T53] Bluetooth: hci1: command tx timeout [ 219.693662][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.709830][ T51] bridge_slave_0: left allmulticast mode [ 219.725741][ T51] bridge_slave_0: left promiscuous mode [ 219.733915][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.220529][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.234698][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.248368][ T51] bond0 (unregistering): Released all slaves [ 220.454700][T11277] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.536224][ T53] Bluetooth: hci2: command tx timeout [ 220.660890][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.676052][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.785832][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 220.792038][ T5133] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 221.018712][ T51] hsr_slave_0: left promiscuous mode [ 221.035944][ T51] hsr_slave_1: left promiscuous mode [ 221.046458][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.053893][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.076319][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.083761][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.113021][T11303] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 221.120714][ T51] veth1_macvtap: left promiscuous mode [ 221.121575][T11303] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 221.135071][T11303] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 221.137320][ T51] veth0_macvtap: left promiscuous mode [ 221.144594][T11303] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 221.155927][ T51] veth1_vlan: left promiscuous mode [ 221.157002][T11303] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.162048][ T51] veth0_vlan: left promiscuous mode [ 221.791570][T11295] dccp_close: ABORT with 4096 bytes unread [ 221.866465][ T51] team0 (unregistering): Port device team_slave_1 removed [ 221.906981][ T51] team0 (unregistering): Port device team_slave_0 removed [ 222.310787][T11304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.318161][T11304] IPv6: NLM_F_CREATE should be set when creating new route [ 222.366699][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.587921][T11071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.601807][T11071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.628411][T11071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.698977][T11071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.855948][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 222.865600][ T5133] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 223.222454][T11071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.284765][T11352] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.389662][T11091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.403148][T11091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.432798][T11071] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.453144][T11091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.478234][T11091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.574281][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.613907][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.621149][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.647455][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.654674][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.734816][T11367] ipt_REJECT: TCP_RESET invalid for non-tcp [ 223.988997][T11091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.051898][T11091] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.102310][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.121010][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.128223][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.181295][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.188542][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.292299][T11091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.337896][T11091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.370501][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 224.417553][T11071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.568670][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.590910][T11071] veth0_vlan: entered promiscuous mode [ 224.651233][T11071] veth1_vlan: entered promiscuous mode [ 224.763625][T11071] veth0_macvtap: entered promiscuous mode [ 224.801838][T11071] veth1_macvtap: entered promiscuous mode [ 224.879306][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.899659][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.914009][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.931450][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.941860][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.954450][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.964549][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.975552][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.986053][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.996733][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.008659][T11071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.051911][T11091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.097875][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.145377][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.168136][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.195760][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.215758][T11071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.230703][T11071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.243141][T11071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.262037][T11071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.275894][T11071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.285114][T11071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.303586][T11071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.387482][T11422] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 225.411402][T11413] syzkaller0: entered promiscuous mode [ 225.424994][T11413] syzkaller0: entered allmulticast mode [ 227.371554][T11091] veth0_vlan: entered promiscuous mode [ 227.381294][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.400949][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.433832][T11091] veth1_vlan: entered promiscuous mode [ 227.509529][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.526788][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.581994][T11091] veth0_macvtap: entered promiscuous mode [ 227.608282][T11091] veth1_macvtap: entered promiscuous mode [ 227.744155][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.754887][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.770789][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.787604][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.804522][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.842279][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.865570][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.904309][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.919691][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.949188][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.985630][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.034790][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.065538][T11091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.085008][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.126562][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.156085][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.186357][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.201784][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.225268][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.245556][T11091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.264850][T11091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.279390][T11091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.319592][T11091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.342368][T11091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.359982][T11091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.379011][T11091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.812121][ T2412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.954286][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.984061][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.069431][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.089209][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.553367][ T2412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.776218][ T2412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.790687][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.800849][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.810078][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.823243][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.840067][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.852079][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.019875][ T2412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.426207][ T2412] bridge_slave_1: left allmulticast mode [ 230.443475][ T2412] bridge_slave_1: left promiscuous mode [ 230.485710][ T2412] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.566725][ T2412] bridge_slave_0: left allmulticast mode [ 230.572435][ T2412] bridge_slave_0: left promiscuous mode [ 230.603927][ T2412] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.115112][ T5133] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.132685][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.143963][ T5133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.161889][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.174029][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.182617][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.372630][ T2412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.384506][ T2412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.399954][ T2412] bond0 (unregistering): Released all slaves [ 231.430711][T11542] tipc: Invalid UDP bearer configuration [ 231.430763][T11542] tipc: Enabling of bearer rejected, failed to enable media [ 231.581733][T11557] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.791932][T11571] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 231.895894][ T53] Bluetooth: hci1: command tx timeout [ 232.006501][T11577] validate_nla: 1 callbacks suppressed [ 232.006520][T11577] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 232.121062][T11515] chnl_net:caif_netlink_parms(): no params data found [ 232.192182][ T2412] hsr_slave_0: left promiscuous mode [ 232.199060][ T2412] hsr_slave_1: left promiscuous mode [ 232.205366][ T2412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.213109][ T2412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.237168][ T2412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.244937][ T2412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.271518][ T2412] veth1_macvtap: left promiscuous mode [ 232.278403][ T2412] veth0_macvtap: left promiscuous mode [ 232.284010][ T2412] veth1_vlan: left promiscuous mode [ 232.289582][ T2412] veth0_vlan: left promiscuous mode [ 232.896311][ T2412] team0 (unregistering): Port device team_slave_1 removed [ 232.934129][ T2412] team0 (unregistering): Port device team_slave_0 removed [ 233.259304][ T53] Bluetooth: hci2: command tx timeout [ 233.362411][T11584] tipc: Invalid UDP bearer configuration [ 233.362453][T11584] tipc: Enabling of bearer rejected, failed to enable media [ 233.697681][T11612] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.811955][T11551] chnl_net:caif_netlink_parms(): no params data found [ 233.846772][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.870343][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.888890][T11515] bridge_slave_0: entered allmulticast mode [ 233.911522][T11515] bridge_slave_0: entered promiscuous mode [ 233.959688][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.973952][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.981210][ T53] Bluetooth: hci1: command tx timeout [ 234.003335][T11515] bridge_slave_1: entered allmulticast mode [ 234.018538][T11515] bridge_slave_1: entered promiscuous mode [ 234.183537][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.211017][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.307548][T11636] tipc: Invalid UDP bearer configuration [ 234.307609][T11636] tipc: Enabling of bearer rejected, failed to enable media [ 234.372870][T11515] team0: Port device team_slave_0 added [ 234.385395][T11551] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.395325][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.402701][T11551] bridge_slave_0: entered allmulticast mode [ 234.410977][T11551] bridge_slave_0: entered promiscuous mode [ 234.424657][T11515] team0: Port device team_slave_1 added [ 234.464381][T11551] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.478221][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.486038][T11551] bridge_slave_1: entered allmulticast mode [ 234.493510][T11551] bridge_slave_1: entered promiscuous mode [ 234.569897][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.588957][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.648189][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.727464][T11551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.746209][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.753180][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.795231][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.880176][ T2412] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.922401][T11551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.030235][ T2412] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.197054][T11551] team0: Port device team_slave_0 added [ 235.222128][T11515] hsr_slave_0: entered promiscuous mode [ 235.253127][T11515] hsr_slave_1: entered promiscuous mode [ 235.276059][T11515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.304323][T11515] Cannot create hsr debugfs directory [ 235.328401][ T2412] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.339439][ T53] Bluetooth: hci2: command tx timeout [ 235.357174][T11551] team0: Port device team_slave_1 added [ 235.466127][ T2412] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.534337][T11551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.542838][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.569392][T11551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.618153][T11551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.625420][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.652079][T11551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.796809][T11551] hsr_slave_0: entered promiscuous mode [ 235.815042][T11551] hsr_slave_1: entered promiscuous mode [ 235.824031][T11551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.835629][T11551] Cannot create hsr debugfs directory [ 236.056355][ T5133] Bluetooth: hci1: command tx timeout [ 236.087615][ T2412] bridge_slave_1: left allmulticast mode [ 236.093397][ T2412] bridge_slave_1: left promiscuous mode [ 236.133192][ T2412] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.156676][ T2412] bridge_slave_0: left allmulticast mode [ 236.165911][ T2412] bridge_slave_0: left promiscuous mode [ 236.178620][ T2412] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.611923][ T2412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.624537][ T2412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.637404][ T2412] bond0 (unregistering): Released all slaves [ 236.986516][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.023096][T11712] IPv6: sit1: Disabled Multicast RS [ 237.037424][T11712] sit1: entered allmulticast mode [ 237.166983][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.177939][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.308170][ T2412] hsr_slave_0: left promiscuous mode [ 237.325745][ T2412] hsr_slave_1: left promiscuous mode [ 237.334673][ T2412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.344208][ T2412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.379708][ T2412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.388818][ T2412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.424008][ T2412] veth1_macvtap: left promiscuous mode [ 237.430214][ T5133] Bluetooth: hci2: command tx timeout [ 237.456114][ T2412] veth0_macvtap: left promiscuous mode [ 237.483651][ T2412] veth1_vlan: left promiscuous mode [ 237.497798][ T2412] veth0_vlan: left promiscuous mode [ 237.578524][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 238.145884][ T53] Bluetooth: hci1: command tx timeout [ 238.179345][ T2412] team0 (unregistering): Port device team_slave_1 removed [ 238.257525][ T2412] team0 (unregistering): Port device team_slave_0 removed [ 238.685134][T11740] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.694973][T11740] netem: invalid attributes len -24 [ 238.702239][T11740] netem: change failed [ 238.713217][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.770664][T11745] IPv6: sit1: Disabled Multicast RS [ 238.797755][T11745] sit1: entered allmulticast mode [ 238.820653][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.944680][T11515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.003278][T11515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.041085][T11515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.074776][T11515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.496413][ T53] Bluetooth: hci2: command tx timeout [ 239.551389][T11515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.648892][T11515] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.692340][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.699570][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.737883][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.745094][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.785183][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.873626][T11551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.975714][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.011968][T11784] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 240.033394][T11784] bond1: (slave vcan1): Error -95 calling set_mac_address [ 240.495713][T11551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.663185][T11551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.686360][T11551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.945451][T11799] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 241.030259][T11551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.084924][T11551] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.117480][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.124667][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.161412][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.186706][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.193941][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.275298][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.379431][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.444796][T11515] veth0_vlan: entered promiscuous mode [ 241.481915][T11515] veth1_vlan: entered promiscuous mode [ 241.696300][ T29] audit: type=1804 audit(1719029009.961:34): pid=11819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/596/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 241.747047][T11515] veth0_macvtap: entered promiscuous mode [ 241.773164][ T29] audit: type=1804 audit(1719029010.031:35): pid=11819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/596/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 241.801406][T11515] veth1_macvtap: entered promiscuous mode [ 241.810716][ T29] audit: type=1804 audit(1719029010.081:36): pid=11819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/596/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 241.871596][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.911298][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.929933][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.943707][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.954963][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.966650][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.977230][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.989693][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.000104][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.010641][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.022849][T11515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.066415][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.087961][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.108423][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.127939][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.138363][T11515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.149870][T11515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.162949][T11515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.222625][T11515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.247338][T11515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.265560][T11515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.285296][T11515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.366221][T11551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.515204][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.533953][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.618482][T11847] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.628061][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.655950][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.015192][T11864] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.044370][ T29] audit: type=1804 audit(1719029011.311:37): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1613015942/syzkaller.54RwXs/236/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 [ 243.111898][T11869] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 243.168637][T11551] veth0_vlan: entered promiscuous mode [ 243.214497][T11551] veth1_vlan: entered promiscuous mode [ 243.311755][T11551] veth0_macvtap: entered promiscuous mode [ 243.346976][T11551] veth1_macvtap: entered promiscuous mode [ 243.379893][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.437718][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.466050][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.491267][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.524330][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.555684][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.583160][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.605616][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.621277][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.631876][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.663447][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.695023][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.707467][T11551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.756987][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.784279][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.813182][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.824452][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.834360][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.852552][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.876782][T11551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.897350][T11899] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.900729][T11551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.922138][T11551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.953000][T11551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.972443][T11551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.995514][T11551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.015294][T11551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.106605][ T29] audit: type=1804 audit(1719029012.381:38): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/608/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 244.143977][ T29] audit: type=1804 audit(1719029012.411:39): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/608/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 244.200477][ T29] audit: type=1804 audit(1719029012.471:40): pid=11905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir476899433/syzkaller.2oppEq/608/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 244.201795][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.552401][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.595613][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.692129][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.710609][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.923592][T11927] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.018650][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.028571][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.045602][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.054278][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.062891][ T5133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.073834][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.120715][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.326886][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.487666][ T29] audit: type=1804 audit(1719029013.761:41): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1750397978/syzkaller.S2lJfy/638/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 245.524240][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.016102][T11980] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 246.089534][ T35] bridge_slave_1: left allmulticast mode [ 246.095240][ T35] bridge_slave_1: left promiscuous mode [ 246.110962][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.143939][ T35] bridge_slave_0: left allmulticast mode [ 246.161014][ T35] bridge_slave_0: left promiscuous mode [ 246.178714][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.911646][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.920789][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.935085][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.937627][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.961952][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.972683][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.974228][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.989515][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.012490][ T35] bond0 (unregistering): Released all slaves [ 247.025994][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.154088][T11929] chnl_net:caif_netlink_parms(): no params data found [ 247.186283][ T5133] Bluetooth: hci1: command tx timeout [ 247.375214][T12007] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 247.547579][ T29] audit: type=1804 audit(1719029015.801:42): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1613015942/syzkaller.54RwXs/251/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 247.582581][ T29] audit: type=1804 audit(1719029015.821:43): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1613015942/syzkaller.54RwXs/251/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 247.629831][ T29] audit: type=1804 audit(1719029015.891:44): pid=12012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1613015942/syzkaller.54RwXs/251/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 247.761426][ T990] ------------[ cut here ]------------ [ 247.767560][ T990] WARNING: CPU: 0 PID: 990 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 247.778142][ T990] Modules linked in: [ 247.782081][ T990] CPU: 0 PID: 990 Comm: kworker/u8:5 Not tainted 6.10.0-rc4-syzkaller-00158-g31392048f55f #0 [ 247.792733][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.803364][ T990] Workqueue: cfg80211 cfg80211_event_work 2024/06/22 04:03:36 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 247.809199][ T990] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 247.816423][ T990] Code: a3 00 89 c3 31 ff 89 c6 e8 f3 44 b4 f6 85 db 74 29 e8 6a 70 9a f6 84 c0 74 27 e8 a1 40 b4 f6 e9 84 00 00 00 e8 97 40 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 81 40 b4 f6 eb [ 247.836635][ T990] RSP: 0018:ffffc900046979e0 EFLAGS: 00010293 [ 247.842756][ T990] RAX: ffffffff8ae1e4f9 RBX: 0000000000000000 RCX: ffff888022075a00 [ 247.850835][ T990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.858932][ T990] RBP: ffffc90004697b00 R08: ffffffff8ae1e0c9 R09: 1ffffffff25f4ebd [ 247.867318][ T990] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: ffff88806252e098 [ 247.875323][ T990] R13: dffffc0000000000 R14: ffff88806252e018 R15: ffff88802b142000 [ 247.883379][ T990] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 247.893225][ T990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.900279][ T990] CR2: 000055559075a938 CR3: 0000000015140000 CR4: 00000000003506f0 [ 247.908565][ T990] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.916660][ T990] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.924662][ T990] Call Trace: [ 247.928032][ T990] [ 247.930983][ T990] ? __warn+0x163/0x4e0 [ 247.935179][ T990] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 247.941269][ T990] ? report_bug+0x2b3/0x500 [ 247.945925][ T990] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 247.951958][ T990] ? handle_bug+0x3e/0x70 [ 247.956399][ T990] ? exc_invalid_op+0x1a/0x50 [ 247.961121][ T990] ? asm_exc_invalid_op+0x1a/0x20 [ 247.966272][ T990] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 247.972290][ T990] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 247.978393][ T990] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 247.984454][ T990] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 247.990715][ T990] ? lockdep_hardirqs_on+0x99/0x150 [ 247.996628][ T990] cfg80211_process_wdev_events+0x356/0x510 [ 248.002574][ T990] cfg80211_process_rdev_events+0xac/0x110 [ 248.009138][ T990] ? process_scheduled_works+0x945/0x1830 [ 248.014902][ T990] cfg80211_event_work+0x2f/0x40 [ 248.019922][ T990] process_scheduled_works+0xa2c/0x1830 [ 248.025572][ T990] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.031768][ T990] ? assign_work+0x364/0x3d0 [ 248.036512][ T990] worker_thread+0x86d/0xd70 [ 248.041140][ T990] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.047143][ T990] ? __kthread_parkme+0x169/0x1d0 [ 248.052227][ T990] ? __pfx_worker_thread+0x10/0x10 [ 248.058042][ T990] kthread+0x2f0/0x390 [ 248.062141][ T990] ? __pfx_worker_thread+0x10/0x10 [ 248.067521][ T990] ? __pfx_kthread+0x10/0x10 [ 248.072148][ T990] ret_from_fork+0x4b/0x80 [ 248.076672][ T990] ? __pfx_kthread+0x10/0x10 [ 248.081298][ T990] ret_from_fork_asm+0x1a/0x30 [ 248.086180][ T990] [ 248.089228][ T990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.096529][ T990] CPU: 0 PID: 990 Comm: kworker/u8:5 Not tainted 6.10.0-rc4-syzkaller-00158-g31392048f55f #0 [ 248.106693][ T990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 248.116758][ T990] Workqueue: cfg80211 cfg80211_event_work [ 248.122517][ T990] Call Trace: [ 248.125798][ T990] [ 248.128727][ T990] dump_stack_lvl+0x241/0x360 [ 248.133414][ T990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.138639][ T990] ? __pfx__printk+0x10/0x10 [ 248.143258][ T990] ? vscnprintf+0x5d/0x90 [ 248.147596][ T990] panic+0x349/0x860 [ 248.151502][ T990] ? __warn+0x172/0x4e0 [ 248.155674][ T990] ? __pfx_panic+0x10/0x10 [ 248.160129][ T990] ? ret_from_fork_asm+0x1a/0x30 [ 248.165089][ T990] __warn+0x346/0x4e0 [ 248.169083][ T990] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 248.175076][ T990] report_bug+0x2b3/0x500 [ 248.179419][ T990] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 248.185443][ T990] handle_bug+0x3e/0x70 [ 248.189632][ T990] exc_invalid_op+0x1a/0x50 [ 248.194159][ T990] asm_exc_invalid_op+0x1a/0x20 [ 248.199048][ T990] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 248.205649][ T990] Code: a3 00 89 c3 31 ff 89 c6 e8 f3 44 b4 f6 85 db 74 29 e8 6a 70 9a f6 84 c0 74 27 e8 a1 40 b4 f6 e9 84 00 00 00 e8 97 40 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 81 40 b4 f6 eb [ 248.225270][ T990] RSP: 0018:ffffc900046979e0 EFLAGS: 00010293 [ 248.231347][ T990] RAX: ffffffff8ae1e4f9 RBX: 0000000000000000 RCX: ffff888022075a00 [ 248.239339][ T990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.247314][ T990] RBP: ffffc90004697b00 R08: ffffffff8ae1e0c9 R09: 1ffffffff25f4ebd [ 248.255294][ T990] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: ffff88806252e098 [ 248.263274][ T990] R13: dffffc0000000000 R14: ffff88806252e018 R15: ffff88802b142000 [ 248.271257][ T990] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 248.277249][ T990] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 248.283258][ T990] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 248.289425][ T990] ? lockdep_hardirqs_on+0x99/0x150 [ 248.294642][ T990] cfg80211_process_wdev_events+0x356/0x510 [ 248.300585][ T990] cfg80211_process_rdev_events+0xac/0x110 [ 248.306399][ T990] ? process_scheduled_works+0x945/0x1830 [ 248.312138][ T990] cfg80211_event_work+0x2f/0x40 [ 248.317102][ T990] process_scheduled_works+0xa2c/0x1830 [ 248.322685][ T990] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.328705][ T990] ? assign_work+0x364/0x3d0 [ 248.333314][ T990] worker_thread+0x86d/0xd70 [ 248.337922][ T990] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.343841][ T990] ? __kthread_parkme+0x169/0x1d0 [ 248.348878][ T990] ? __pfx_worker_thread+0x10/0x10 [ 248.353994][ T990] kthread+0x2f0/0x390 [ 248.358071][ T990] ? __pfx_worker_thread+0x10/0x10 [ 248.363188][ T990] ? __pfx_kthread+0x10/0x10 [ 248.367785][ T990] ret_from_fork+0x4b/0x80 [ 248.372210][ T990] ? __pfx_kthread+0x10/0x10 [ 248.376806][ T990] ret_from_fork_asm+0x1a/0x30 [ 248.381592][ T990] [ 248.384905][ T990] Kernel Offset: disabled [ 248.389315][ T990] Rebooting in 86400 seconds..