last executing test programs: 1m10.654295494s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000440)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x11, &(0x7f0000000040)={r1}, 0x8) 1m10.52672379s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002900)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}}}, 0x24}}, 0x0) 1m10.193234971s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000}, 0x10) 1m10.031351911s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6f}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x90) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @random="d8c2af91442f", @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @link_local}}}}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e000b04000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x8}, {0x87, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}]}}]}, 0x2c4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4014) syz_emit_ethernet(0x3b6, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001995319c00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 51.33723594s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6f}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x90) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @random="d8c2af91442f", @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @link_local}}}}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e000b04000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x8}, {0x87, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}]}}]}, 0x2c4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4014) syz_emit_ethernet(0x3b6, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001995319c00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 49.604688829s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) 49.448413727s ago: executing program 1: ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0xe9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x30) sendfile(r2, r1, 0x0, 0x100000001) 48.285444916s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_IFALIAS={0x14, 0x28, 'veth1\x00'}]}, 0x50}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x607, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01000100f300000000002500000008000200", @ANYRES32=r5], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a2dbba", 0x8, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x4e23, 0x8}}}}}}, 0x0) 47.889395386s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r4, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 47.806255985s ago: executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 36.509969796s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6f}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x90) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @random="d8c2af91442f", @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @multicast, "", @link_local}}}}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e000b04000000000000000010000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x8}, {0x87, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}]}}]}, 0x2c4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4014) syz_emit_ethernet(0x3b6, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001995319c00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 36.021802191s ago: executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.607898403s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) 35.418243032s ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0x4, 0x4, @random="68a7686b38b2"}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}]}}}]}, 0x5c}}, 0x0) 35.235319995s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xb}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 35.161732887s ago: executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'pimreg0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendfile(r0, r1, 0x0, 0x8000002b) 34.694680989s ago: executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 34.129598484s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 33.037455342s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x42d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4000002}]}}}]}, 0x3c}}, 0x0) 32.681890797s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @remote}, 0xe, {}, 'bond0\x00'}) 32.54536304s ago: executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @empty}}, 0x24) 32.395945042s ago: executing program 3: bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0xe21, 0x8}}}}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x1}, 0x10) write(r2, &(0x7f0000000100)="240000001a00030000000000001503000a00000000000000000000000400000000000000", 0x24) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0xd, 0x4000000}}], 0x18, 0x4c00}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000015f3fb36000000bf7a9b74ae0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) unshare(0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000005400)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff], 0x0, 0x0, 0x0}, &(0x7f0000005480)=0x78) 30.729236958s ago: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) 30.662539915s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 30.613027143s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x7, &(0x7f0000000100)=[{0x7, 0x2, 0x3, 0xff}, {0x5, 0x3f, 0x0, 0x5cd}, {0x1, 0xff, 0x9, 0x1}, {0x2, 0x4, 0x5, 0x2}, {0x7b, 0x7, 0x0, 0xfffffffe}, {0xff00, 0x0, 0xff}, {0x0, 0x0, 0x0, 0xfffffdfd}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x81, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000), 0x400000) 30.349911794s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000480), 0x810a7c, r0}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 30.206270566s ago: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x6800, 0xf, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x77, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 30.023622501s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 157.120756ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x9}, {0xc}}}]}]}, 0x60}}, 0x0) 0s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {0x39}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): t [ 208.773274][T11829] veth0_vlan: entered promiscuous mode [ 208.822483][T11829] veth1_vlan: entered promiscuous mode [ 208.959648][T11829] veth0_macvtap: entered promiscuous mode [ 209.009843][T11829] veth1_macvtap: entered promiscuous mode [ 209.102082][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.139371][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.169619][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.199934][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.224010][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.248977][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.297386][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.332929][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.380237][T11829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.410928][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.430722][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.441873][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.468210][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.499792][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.520447][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.545237][T11829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.561729][T11829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.591225][T11829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.677098][T11829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.717290][T11829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.741078][T11829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.759916][T11829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.999455][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.022498][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.090292][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.105967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.264265][T12027] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 210.674239][ T5110] Bluetooth: hci1: command tx timeout [ 210.778209][T12060] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 211.488724][T12106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.983178][T12131] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 212.481557][T12151] dccp_invalid_packet: P.Data Offset(4) too small [ 212.502086][ T29] audit: type=1800 audit(1717335477.398:37): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 212.584607][ T29] audit: type=1800 audit(1717335477.428:38): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 212.702035][T12157] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 212.753886][ T5110] Bluetooth: hci1: command tx timeout [ 212.981027][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.222528][T12171] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 213.343450][T12177] dccp_invalid_packet: P.Data Offset(4) too small [ 213.386228][ T29] audit: type=1800 audit(1717335478.288:39): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 213.468312][ T29] audit: type=1800 audit(1717335478.288:40): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 213.520359][ T29] audit: type=1800 audit(1717335478.308:41): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 213.576904][ T29] audit: type=1800 audit(1717335478.308:42): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 213.835006][T12197] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 213.997073][T12203] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 214.020952][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.429671][T12219] dccp_invalid_packet: P.Data Offset(4) too small [ 214.486013][ T29] audit: type=1800 audit(1717335479.388:43): pid=12219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 214.502853][T12223] dccp_invalid_packet: P.Data Offset(4) too small [ 214.534654][ T29] audit: type=1800 audit(1717335479.438:44): pid=12219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 214.612879][ T29] audit: type=1800 audit(1717335479.508:45): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 214.692207][ T29] audit: type=1800 audit(1717335479.548:46): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 214.742001][T12230] dccp_invalid_packet: P.Data Offset(4) too small [ 214.745686][T12232] dccp_invalid_packet: P.Data Offset(4) too small [ 214.981377][T12246] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 215.018661][T12251] dccp_invalid_packet: P.Data Offset(4) too small [ 215.029034][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.346783][T12264] dccp_invalid_packet: P.Data Offset(4) too small [ 215.919067][T12282] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 216.321823][T12303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.529437][T12317] dccp_invalid_packet: P.Data Offset(4) too small [ 216.742399][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.791260][T12333] Cannot find add_set index 0 as target [ 216.825529][T12332] SET target dimension over the limit! [ 217.128278][T12344] Cannot find add_set index 0 as target [ 217.560101][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.641266][T12368] Cannot find add_set index 0 as target [ 217.645886][T12370] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.932500][T12383] SET target dimension over the limit! [ 218.346092][T12411] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.632105][T12427] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.656710][T12428] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.874738][T12432] SET target dimension over the limit! [ 219.247121][T12446] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 219.395163][T12452] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 219.746255][T12472] Cannot find add_set index 0 as target [ 219.974676][T12489] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 220.165704][T12493] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.230326][T12495] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 220.591864][T12505] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 220.720635][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.730167][ T5125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.742484][ T5125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.761897][ T5125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.772064][ T5125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.783516][ T5125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.919958][T12520] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.939548][T12523] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.991119][T12523] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 221.136299][T12532] netlink: 86 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.270190][T12542] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 221.465095][T12509] chnl_net:caif_netlink_parms(): no params data found [ 221.600896][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.609790][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.618168][T12509] bridge_slave_0: entered allmulticast mode [ 221.626876][T12509] bridge_slave_0: entered promiscuous mode [ 221.640671][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.649003][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.657466][T12509] bridge_slave_1: entered allmulticast mode [ 221.669029][T12509] bridge_slave_1: entered promiscuous mode [ 221.719980][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.742408][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.782089][T12509] team0: Port device team_slave_0 added [ 221.795982][T12509] team0: Port device team_slave_1 added [ 221.835847][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.843000][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.876284][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.890426][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.906716][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.962493][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.977415][T12561] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.097989][T12509] hsr_slave_0: entered promiscuous mode [ 222.144771][T12509] hsr_slave_1: entered promiscuous mode [ 222.157319][T12509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.166051][T12509] Cannot create hsr debugfs directory [ 222.570365][T12509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.718950][T12509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.845022][ T5125] Bluetooth: hci2: command tx timeout [ 222.872633][T12509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.919554][T12595] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 222.968653][T12605] tipc: Enabling of bearer rejected, failed to enable media [ 223.032727][T12509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.307287][T12509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.347549][T12509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.372465][T12509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.402927][T12509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.429004][T12622] netlink: 86 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.690067][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.760374][T12635] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 223.781380][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.816154][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.823291][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.845083][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.852259][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.875743][T12644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.913067][T12644] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 223.927684][T12644] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 223.948895][T12644] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.304484][T12509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.352499][T12509] veth0_vlan: entered promiscuous mode [ 224.368880][T12509] veth1_vlan: entered promiscuous mode [ 224.487145][T12509] veth0_macvtap: entered promiscuous mode [ 224.512104][T12509] veth1_macvtap: entered promiscuous mode [ 224.593025][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.611130][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.638471][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.677004][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.695870][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.745832][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.766799][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.803863][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.835874][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.868167][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.880311][T12509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.900429][T12687] ip6gretap0: entered promiscuous mode [ 224.914839][ T5125] Bluetooth: hci2: command tx timeout [ 224.942282][T12687] ip6gretap0: left promiscuous mode [ 224.987368][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.034373][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.067006][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.098572][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.114007][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.124813][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.136094][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.147582][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.158546][T12509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.180693][T12509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.195646][T12509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.206118][T12697] bridge0: port 3(team0) entered blocking state [ 225.212783][T12697] bridge0: port 3(team0) entered disabled state [ 225.236008][T12697] team0: entered allmulticast mode [ 225.246170][T12697] team_slave_0: entered allmulticast mode [ 225.251929][T12697] team_slave_1: entered allmulticast mode [ 225.272580][T12697] team0: entered promiscuous mode [ 225.282170][T12697] team_slave_0: entered promiscuous mode [ 225.292652][T12697] team_slave_1: entered promiscuous mode [ 225.309580][T12697] bridge0: port 3(team0) entered blocking state [ 225.315996][T12697] bridge0: port 3(team0) entered forwarding state [ 225.333580][T12700] bridge0: port 2(team0) entered blocking state [ 225.343143][T12700] bridge0: port 2(team0) entered disabled state [ 225.361367][T12700] team0: entered allmulticast mode [ 225.373855][T12700] team_slave_0: entered allmulticast mode [ 225.379613][T12700] team_slave_1: entered allmulticast mode [ 225.391526][T12700] team0: entered promiscuous mode [ 225.397808][T12700] team_slave_0: entered promiscuous mode [ 225.406003][T12700] team_slave_1: entered promiscuous mode [ 225.421918][T12509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.436659][T12509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.446875][T12509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.456682][T12509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.688042][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.716549][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.784719][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.801585][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.603931][T12759] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 226.625347][T12759] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.689698][T12767] ipt_ECN: cannot use operation on non-tcp rule [ 226.929021][T12781] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 226.993858][ T5125] Bluetooth: hci2: command tx timeout [ 227.071013][T12787] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 227.255583][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.311512][T12795] netlink: 'syz-executor.1': attribute type 142 has an invalid length. [ 227.493634][T12813] ipt_ECN: cannot use operation on non-tcp rule [ 228.013993][T12850] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 228.071884][T12854] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.285228][T12863] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 228.413078][T12870] ipt_ECN: cannot use operation on non-tcp rule [ 228.636159][T12881] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 228.682327][T12888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 228.689643][T12888] IPv6: NLM_F_CREATE should be set when creating new route [ 229.084687][ T5125] Bluetooth: hci2: command tx timeout [ 229.104592][T12909] netlink: 'syz-executor.4': attribute type 142 has an invalid length. [ 230.662387][T12981] netlink: 'syz-executor.4': attribute type 49 has an invalid length. [ 232.540791][T13065] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.227153][T13099] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.016480][T13132] tc_dump_action: action bad kind [ 234.137659][T13138] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 234.309416][T13149] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 235.054928][T13174] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 235.057923][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.071938][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.081457][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.092871][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.104953][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.115191][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.214620][T13178] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 235.254879][T13180] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 235.430293][T13189] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 235.470733][T13189] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 235.588205][T13175] chnl_net:caif_netlink_parms(): no params data found [ 235.742063][T13202] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 235.769198][T13206] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 235.905892][T13175] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.913104][T13175] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.936565][T13175] bridge_slave_0: entered allmulticast mode [ 235.958136][T13175] bridge_slave_0: entered promiscuous mode [ 235.976437][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.984487][T13175] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.991842][T13175] bridge_slave_1: entered allmulticast mode [ 236.004503][T13175] bridge_slave_1: entered promiscuous mode [ 236.062318][T13175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.078760][T13175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.186744][T13175] team0: Port device team_slave_0 added [ 236.196926][T13175] team0: Port device team_slave_1 added [ 236.267086][T13227] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 236.282541][T13227] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.297389][T13227] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 236.308929][T13227] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 236.317969][T13227] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.318045][T13230] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 236.330207][T13175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.347044][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.390043][T13175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.418647][T13175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.426185][T13175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.463639][T13175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.595297][T13175] hsr_slave_0: entered promiscuous mode [ 236.610931][T13175] hsr_slave_1: entered promiscuous mode [ 236.627986][T13175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.628734][T13240] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 236.651194][T13175] Cannot create hsr debugfs directory [ 236.717767][T13239] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 236.743445][T13239] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 237.021472][T13259] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 237.044187][T13259] netlink: 9384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.079592][T13175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.140562][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.165863][ T5125] Bluetooth: hci2: command tx timeout [ 237.172206][T13261] gretap0: entered promiscuous mode [ 237.179497][T13261] macvtap1: entered promiscuous mode [ 237.187849][T13261] macvtap1: entered allmulticast mode [ 237.193488][T13261] gretap0: entered allmulticast mode [ 237.261014][T13175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.333111][T13175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.401505][T13175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.529602][T13175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.542929][T13175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.552649][T13175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.564983][T13175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.646782][T13175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.668209][T13175] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.690651][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.697751][ T5294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.708795][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.715981][ T5294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.880508][T13175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.928346][T13175] veth0_vlan: entered promiscuous mode [ 237.941397][T13175] veth1_vlan: entered promiscuous mode [ 237.977130][T13175] veth0_macvtap: entered promiscuous mode [ 237.988764][T13175] veth1_macvtap: entered promiscuous mode [ 238.005300][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.016441][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.026894][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.038194][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.050685][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.061170][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.072413][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.082922][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.092743][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.103700][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.114023][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.125196][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.137572][T13175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.157752][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.171760][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.182360][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.193282][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.206046][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.217430][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.238538][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.255177][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.266168][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.287245][T13269] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.303587][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.324052][T13175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.342154][T13175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.355526][T13275] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 238.368209][T13175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.397668][T13175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.416545][T13175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.444679][T13175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.464579][T13175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.602790][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.614658][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.665916][ T2426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.680911][ T2426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.078310][T13311] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 239.216932][T13318] netlink: 212408 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.243867][ T5125] Bluetooth: hci2: command tx timeout [ 239.253594][T13322] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 239.860648][T13347] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 240.547257][T13409] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 240.851749][T13426] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 241.313721][ T5125] Bluetooth: hci2: command tx timeout [ 241.947974][ T2426] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.018984][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.030638][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.042351][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.050496][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.059916][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 242.067359][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.207566][ T2426] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.230459][T13489] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.259895][T13489] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 242.341796][ T2426] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.399163][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.496731][ T2426] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.566918][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.048612][ T2426] bridge_slave_1: left allmulticast mode [ 243.072018][ T2426] bridge_slave_1: left promiscuous mode [ 243.080625][ T2426] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.092352][ T2426] bridge_slave_0: left allmulticast mode [ 243.098861][ T2426] bridge_slave_0: left promiscuous mode [ 243.106678][ T2426] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.398136][ T5110] Bluetooth: hci2: command tx timeout [ 243.503001][ T2426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.517580][ T2426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.529339][ T2426] bond0 (unregistering): Released all slaves [ 243.556658][T13533] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.577108][T13533] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 243.613889][T13536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.683028][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.857977][T13540] hsr_slave_0 (unregistering): left promiscuous mode [ 244.040285][T13475] chnl_net:caif_netlink_parms(): no params data found [ 244.114603][ T5110] Bluetooth: hci1: command tx timeout [ 244.181023][T13568] dccp_invalid_packet: P.Data Offset(0) too small [ 244.265739][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.791631][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.823735][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.842633][T13475] bridge_slave_0: entered allmulticast mode [ 244.883113][T13475] bridge_slave_0: entered promiscuous mode [ 245.085676][ T2426] hsr_slave_0: left promiscuous mode [ 245.105186][ T2426] hsr_slave_1: left promiscuous mode [ 245.136267][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.165578][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.177006][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.194462][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.273031][ T2426] veth1_macvtap: left promiscuous mode [ 245.300360][ T2426] veth0_macvtap: left promiscuous mode [ 245.306387][ T2426] veth1_vlan: left promiscuous mode [ 245.312422][ T2426] veth0_vlan: left promiscuous mode [ 246.193878][ T5125] Bluetooth: hci1: command tx timeout [ 246.318720][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 246.395551][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 247.223038][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.230662][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.239143][T13475] bridge_slave_1: entered allmulticast mode [ 247.247611][T13475] bridge_slave_1: entered promiscuous mode [ 247.341329][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.389128][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.446482][T13681] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.475257][T13681] bond0: option lp_interval: invalid value (0) [ 247.483055][T13683] Cannot find set identified by id 0 to match [ 247.495826][T13681] bond0: option lp_interval: allowed values 1 - 2147483647 [ 247.541384][T13475] team0: Port device team_slave_0 added [ 247.551895][T13475] team0: Port device team_slave_1 added [ 247.627536][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.656074][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.684689][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.713536][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.716341][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.760230][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.811356][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.917432][T13702] validate_nla: 1 callbacks suppressed [ 247.917450][T13702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 247.932361][T13702] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.992947][T13702] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 248.051302][T13475] hsr_slave_0: entered promiscuous mode [ 248.086523][T13475] hsr_slave_1: entered promiscuous mode [ 248.100576][T13708] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.121344][T13708] bond0: option lp_interval: invalid value (0) [ 248.132091][T13708] bond0: option lp_interval: allowed values 1 - 2147483647 [ 248.274025][ T5125] Bluetooth: hci1: command 0x040f tx timeout [ 248.360512][T13723] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 248.927723][T13475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.961673][T13475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.042429][T13475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.078466][T13475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.271092][T13752] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 249.413159][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.456138][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.477351][T13475] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.529156][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.536356][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.602632][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.609849][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.630085][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.737631][T13475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.238615][T13475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.353735][ T5110] Bluetooth: hci1: command 0x040f tx timeout [ 250.406257][T13475] veth0_vlan: entered promiscuous mode [ 250.466341][T13475] veth1_vlan: entered promiscuous mode [ 250.676621][T13475] veth0_macvtap: entered promiscuous mode [ 250.714956][T13475] veth1_macvtap: entered promiscuous mode [ 250.726228][T13821] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 250.759179][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.789363][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.808352][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.821396][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.849150][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.861154][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.872664][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.885850][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.903975][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.927963][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.954646][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.966243][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.980574][T13475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.998163][T13821] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 251.035928][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.089464][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.100576][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.112843][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.124694][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.136263][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.147898][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.162541][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.194358][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.214411][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.242971][T13475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.298128][T13475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.346197][T13475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.396653][T13826] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 251.416163][T13475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.426820][T13475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.459997][T13475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.471423][T13475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.760737][ T5165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.786315][ T5165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.825988][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.847256][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.069840][T13870] macvlan2: entered promiscuous mode [ 252.093195][T13870] vlan1: entered promiscuous mode [ 252.141830][T13870] team0: Port device macvlan2 added [ 252.433828][ T5110] Bluetooth: hci1: command 0x040f tx timeout [ 252.660288][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.668083][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.681677][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.917469][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.937572][T13915] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.959626][T13915] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 252.977431][T13915] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 252.986879][T13915] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.022274][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.329712][T13937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.450363][T13943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.557663][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.626739][T13952] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 253.656681][T13952] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 254.791120][T14013] __nla_validate_parse: 6 callbacks suppressed [ 254.791140][T14013] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.892723][T14021] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.171867][T14031] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 255.235237][T14036] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 255.237495][T14031] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.959949][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.112315][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.126475][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.134810][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.155437][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.168696][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.176165][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.515469][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.540095][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.602371][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.640477][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.730832][T14079] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.151492][T14090] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.183772][T14090] openvswitch: netlink: Key type 29 is not supported [ 257.212215][T14056] chnl_net:caif_netlink_parms(): no params data found [ 257.434673][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 257.434690][ T29] audit: type=1800 audit(1717335522.338:59): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 257.534181][ T29] audit: type=1804 audit(1717335522.368:60): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir361373245/syzkaller.wCADRg/763/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 257.563613][T14056] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.581334][T14056] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.592571][T14056] bridge_slave_0: entered allmulticast mode [ 257.603261][T14056] bridge_slave_0: entered promiscuous mode [ 257.616780][ T29] audit: type=1804 audit(1717335522.408:61): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir361373245/syzkaller.wCADRg/763/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 257.671870][T14056] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.680868][T14056] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.688412][T14056] bridge_slave_1: entered allmulticast mode [ 257.699243][T14056] bridge_slave_1: entered promiscuous mode [ 257.905299][T14056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.942215][T14056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.950738][T14120] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.962160][T14120] openvswitch: netlink: Key type 29 is not supported [ 258.092391][T14056] team0: Port device team_slave_0 added [ 258.110755][T14056] team0: Port device team_slave_1 added [ 258.186632][T14056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.204537][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.247959][T14056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.272380][T14056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.283628][ T5125] Bluetooth: hci3: command tx timeout [ 258.290612][T14056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.337058][T14056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.457179][T14056] hsr_slave_0: entered promiscuous mode [ 258.468904][T14056] hsr_slave_1: entered promiscuous mode [ 258.481739][T14056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.495804][T14056] Cannot create hsr debugfs directory [ 258.829337][T14056] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.918697][T14056] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.004777][T14056] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.064917][T14056] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.322876][T14056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.349745][T14056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.370045][T14056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.392381][T14056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.588750][T14056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.638620][T14056] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.666351][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.673566][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.708277][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.715457][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.805954][T14178] __nla_validate_parse: 9 callbacks suppressed [ 259.805973][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.839833][T14178] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.271957][T14056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.354205][ T5125] Bluetooth: hci3: command tx timeout [ 260.465027][T14056] veth0_vlan: entered promiscuous mode [ 260.499690][T14056] veth1_vlan: entered promiscuous mode [ 260.598727][T14056] veth0_macvtap: entered promiscuous mode [ 260.642809][T14056] veth1_macvtap: entered promiscuous mode [ 260.665032][T14223] tipc: Started in network mode [ 260.686120][T14223] tipc: Node identity ac1414aa, cluster identity 4711 [ 260.704780][T14223] tipc: New replicast peer: 0.0.0.0 [ 260.711594][T14223] tipc: Enabled bearer , priority 10 [ 260.791276][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.818039][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.846715][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.864485][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.877230][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.890439][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.902210][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.917942][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.928877][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.940028][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.950313][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.961410][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.971674][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.984748][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.998205][T14056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.010601][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.022098][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.067061][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.097131][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.127550][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.140553][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.152435][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.164292][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.176249][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.196957][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.207298][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.218471][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.229035][T14056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.240590][T14056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.252351][T14056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.314733][T14056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.353490][T14056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.362225][T14056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.403887][T14056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.669690][T13388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.698503][T13388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.759151][ T5124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.768603][ T5124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.825130][ T5124] tipc: Node number set to 2886997162 [ 262.131718][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.350647][T14298] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 262.381392][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.433759][ T5125] Bluetooth: hci3: command tx timeout [ 263.576919][T14379] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 263.609869][T14379] macvlan2: entered promiscuous mode [ 263.666837][T14379] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 264.513694][ T5125] Bluetooth: hci3: command tx timeout [ 264.532825][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.240113][ T2426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.442502][ T2426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.467732][T14488] tipc: Started in network mode [ 265.504765][T14488] tipc: Node identity ac1414aa, cluster identity 4711 [ 265.511803][T14488] tipc: New replicast peer: 0.0.0.0 [ 265.566669][T14488] tipc: Enabled bearer , priority 10 [ 265.620624][ T2426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.824839][ T2426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.116603][ T2426] bridge_slave_1: left allmulticast mode [ 266.122413][ T2426] bridge_slave_1: left promiscuous mode [ 266.148151][ T2426] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.236775][ T2426] bridge_slave_0: left allmulticast mode [ 266.254716][ T2426] bridge_slave_0: left promiscuous mode [ 266.269727][ T2426] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.398129][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.410943][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.419370][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.449342][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.461546][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.469209][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.685464][ T5161] tipc: Node number set to 2886997162 [ 266.935440][ T2426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.951417][ T2426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.964957][ T2426] bond0 (unregistering): Released all slaves [ 267.092768][ T2426] tipc: Disabling bearer [ 267.107534][ T2426] tipc: Left network mode [ 267.624558][ T2426] hsr_slave_1: left promiscuous mode [ 267.664438][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.671884][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.707331][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.725955][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.824934][ T2426] veth1_macvtap: left promiscuous mode [ 267.839039][ T2426] veth0_macvtap: left promiscuous mode [ 267.849537][ T2426] veth1_vlan: left promiscuous mode [ 267.855997][ T2426] veth0_vlan: left promiscuous mode [ 268.421588][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 268.477198][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 268.514232][ T5110] Bluetooth: hci2: command tx timeout [ 269.340336][T14522] chnl_net:caif_netlink_parms(): no params data found [ 269.509863][T14630] SET target dimension over the limit! [ 269.598860][T14522] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.615597][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.631332][T14522] bridge_slave_0: entered allmulticast mode [ 269.646662][T14522] bridge_slave_0: entered promiscuous mode [ 269.678040][T14522] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.703067][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.711467][T14522] bridge_slave_1: entered allmulticast mode [ 269.719850][T14522] bridge_slave_1: entered promiscuous mode [ 269.816443][T14522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.841026][T14522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.987881][T14522] team0: Port device team_slave_0 added [ 270.007896][T14522] team0: Port device team_slave_1 added [ 270.081410][T14522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.095696][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.126452][T14522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.145581][T14522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.164876][T14522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.259693][T14522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.274388][T14656] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 270.437926][T14522] hsr_slave_0: entered promiscuous mode [ 270.476422][T14522] hsr_slave_1: entered promiscuous mode [ 270.482953][T14522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.494018][T14522] Cannot create hsr debugfs directory [ 270.593596][ T5110] Bluetooth: hci2: command tx timeout [ 271.004486][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 271.159970][T14701] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.552571][T14522] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.580601][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.608852][T14522] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.641001][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.685383][T14522] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.729221][T14522] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.858571][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.061654][T14522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.126097][T14522] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.133919][T14732] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.238543][T14735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.256857][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.264050][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.286147][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.293429][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.497964][T13388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.673828][ T5110] Bluetooth: hci2: command tx timeout [ 272.748424][T13388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.821710][T14755] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 272.947917][T13388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.093755][T13388] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.202034][T14522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.427057][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.456993][T13388] bridge_slave_1: left allmulticast mode [ 273.484455][T13388] bridge_slave_1: left promiscuous mode [ 273.496274][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.535205][T13388] bridge_slave_0: left allmulticast mode [ 273.556833][T13388] bridge_slave_0: left promiscuous mode [ 273.585029][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.614998][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.626646][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.643519][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.665684][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.674556][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.684572][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.731398][T14774] cannot load conntrack support for proto=3 [ 273.977224][T14782] x_tables: duplicate underflow at hook 3 [ 274.351061][T13388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.365328][T13388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.377541][T13388] bond0 (unregistering): Released all slaves [ 274.429133][T14785] : renamed from bridge_slave_0 (while UP) [ 274.455658][T14790] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 274.564698][T13388] tipc: Disabling bearer [ 274.574939][T13388] tipc: Left network mode [ 274.617125][T14522] veth0_vlan: entered promiscuous mode [ 274.765281][ T5125] Bluetooth: hci2: command tx timeout [ 274.777824][T14522] veth1_vlan: entered promiscuous mode [ 275.102639][T13388] hsr_slave_0: left promiscuous mode [ 275.129406][T13388] hsr_slave_1: left promiscuous mode [ 275.152150][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.168405][T13388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.185670][T13388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.193816][T13388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.260682][T13388] veth1_macvtap: left promiscuous mode [ 275.271875][T13388] veth0_macvtap: left promiscuous mode [ 275.278921][T13388] veth1_vlan: left promiscuous mode [ 275.291410][T13388] veth0_vlan: left promiscuous mode [ 275.727670][ T5125] Bluetooth: hci3: command tx timeout [ 275.872282][T13388] team0 (unregistering): Port device team_slave_1 removed [ 275.911553][T13388] team0 (unregistering): Port device team_slave_0 removed [ 276.403737][T14522] veth0_macvtap: entered promiscuous mode [ 276.496904][T14522] veth1_macvtap: entered promiscuous mode [ 276.599932][T14769] chnl_net:caif_netlink_parms(): no params data found [ 276.658585][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.688670][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.714566][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.743366][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.764046][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.775536][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.785644][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.796370][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.806369][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.817313][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.827972][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.839232][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.856554][T14522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.962408][T14861] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.991849][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.997924][T14861] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.006027][T14860] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.022229][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.044051][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.081265][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.087183][T14867] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 277.099469][T14867] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.101782][T14860] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.109050][T14867] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.146775][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.172149][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.187422][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.224104][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.253043][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.266170][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.287849][T14522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.309603][T14522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.328955][T14522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.466024][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.497238][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.506758][T14769] bridge_slave_0: entered allmulticast mode [ 277.515396][T14769] bridge_slave_0: entered promiscuous mode [ 277.527297][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.537876][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.546343][T14769] bridge_slave_1: entered allmulticast mode [ 277.559758][T14769] bridge_slave_1: entered promiscuous mode [ 277.568562][T14522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.596210][T14522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.615561][T14522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.631164][T14522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.746245][T14769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.761053][T14891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.793970][ T5125] Bluetooth: hci3: command tx timeout [ 277.821284][T14891] bond1: entered promiscuous mode [ 277.835405][T14893] xt_CT: No such helper "netbios-ns" [ 277.845825][T14895] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 277.916518][T14895] bond1: (slave gre1): Error -95 calling set_mac_address [ 277.964819][T14769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.996339][T14900] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 278.007977][T14900] bond1: (slave vti0): Error -95 calling set_mac_address [ 278.181302][T14769] team0: Port device team_slave_0 added [ 278.240728][T14769] team0: Port device team_slave_1 added [ 278.342382][T14769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.360038][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.394307][T14769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.426848][T14919] syzkaller0: refused to change device tx_queue_len [ 278.442103][T14769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.451432][T14769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.488613][T14769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.556508][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.573257][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.829206][T14769] hsr_slave_0: entered promiscuous mode [ 278.849218][T14769] hsr_slave_1: entered promiscuous mode [ 278.886937][T14769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.895722][T14769] Cannot create hsr debugfs directory [ 279.137131][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.147259][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.175341][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.176876][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.211438][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.219939][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.230862][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.244173][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.488748][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.532585][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.681596][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.797470][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.878065][ T5110] Bluetooth: hci3: command tx timeout [ 279.902552][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.044928][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.230657][T14941] chnl_net:caif_netlink_parms(): no params data found [ 280.348129][ T12] team0: left allmulticast mode [ 280.353028][ T12] team_slave_0: left allmulticast mode [ 280.369565][ T12] team_slave_1: left allmulticast mode [ 280.378091][ T12] team0: left promiscuous mode [ 280.394493][ T12] team_slave_0: left promiscuous mode [ 280.412969][ T12] team_slave_1: left promiscuous mode [ 280.428121][ T12] bridge0: port 3(team0) entered disabled state [ 280.457174][T14986] syz-executor.1[14986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.457316][T14986] syz-executor.1[14986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.472291][ T12] bridge_slave_1: left allmulticast mode [ 280.509818][ T12] bridge_slave_1: left promiscuous mode [ 280.521439][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.555347][ T12] : left allmulticast mode [ 280.561064][ T12] : left promiscuous mode [ 280.567864][ T12] bridge0: port 1() entered disabled state [ 280.758855][ T29] audit: type=1804 audit(1717335545.658:62): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir361373245/syzkaller.wCADRg/857/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 280.952615][ T12] gretap0 (unregistering): left allmulticast mode [ 281.177389][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.245565][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.260023][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.271369][ T12] bond0 (unregistering): Released all slaves [ 281.289488][ T12] bond1 (unregistering): Released all slaves [ 281.320583][ T5110] Bluetooth: hci4: command tx timeout [ 281.438967][T14769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.488757][T14769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.613362][T15023] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 281.653533][T14769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.692473][T15023] veth1_macvtap: left promiscuous mode [ 281.717246][T15023] macsec0: entered allmulticast mode [ 281.757940][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.793052][T14941] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.801308][T14941] bridge_slave_0: entered allmulticast mode [ 281.831173][T14941] bridge_slave_0: entered promiscuous mode [ 281.840060][T14769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.866153][T15026] veth1_macvtap: entered promiscuous mode [ 281.890482][T15026] veth1_macvtap: entered allmulticast mode [ 281.932360][T14941] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.956323][ T5110] Bluetooth: hci3: command tx timeout [ 281.968038][T14941] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.976759][T14941] bridge_slave_1: entered allmulticast mode [ 281.984258][T14941] bridge_slave_1: entered promiscuous mode [ 282.262923][T14941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.293162][T14941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.310444][ T29] audit: type=1804 audit(1717335547.208:63): pid=15044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1719237974/syzkaller.fQAJ5N/115/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 282.511230][T14941] team0: Port device team_slave_0 added [ 282.536150][T14941] team0: Port device team_slave_1 added [ 282.718646][ T12] hsr_slave_0: left promiscuous mode [ 282.738020][ T12] hsr_slave_1: left promiscuous mode [ 282.746096][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.758017][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.770788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.784195][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.819680][ T12] veth1_macvtap: left promiscuous mode [ 282.830659][ T12] veth0_macvtap: left promiscuous mode [ 282.843779][ T12] veth1_vlan: left promiscuous mode [ 282.853464][ T12] veth0_vlan: left promiscuous mode [ 283.387159][ T12] team0 (unregistering): Port device team_slave_1 removed [ 283.394704][ T5110] Bluetooth: hci4: command tx timeout [ 283.439236][ T12] team0 (unregistering): Port device team_slave_0 removed [ 283.854170][T14941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.861160][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.891966][T14941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.974101][T14941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.981082][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.989170][T15069] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 284.031504][T15069] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.065784][T14941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.180354][T15073] batadv0: entered promiscuous mode [ 284.192728][T15073] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 284.201647][T15073] batadv0: left promiscuous mode [ 284.318189][T14941] hsr_slave_0: entered promiscuous mode [ 284.342736][T14941] hsr_slave_1: entered promiscuous mode [ 284.353075][T14941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.372715][T14941] Cannot create hsr debugfs directory [ 284.552752][T15088] Bluetooth: MGMT ver 1.22 [ 284.611710][T14769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.849037][T14769] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.872000][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.879191][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.917807][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.924990][ T5294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.120746][T15108] batadv0: entered promiscuous mode [ 285.141908][T15108] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.174802][T15108] batadv0: left promiscuous mode [ 285.473641][ T5110] Bluetooth: hci4: command tx timeout [ 285.594943][T14941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.635820][T14941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.676757][T14941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.749836][T14941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.836769][T14769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.932200][T15140] tipc: Started in network mode [ 285.952204][T15140] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 285.972550][T15140] tipc: Enabled bearer , priority 0 [ 286.189512][T14769] veth0_vlan: entered promiscuous mode [ 286.258101][T14941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.294962][T14769] veth1_vlan: entered promiscuous mode [ 286.332259][T14941] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.391761][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.398952][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.466264][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.473429][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.530377][T14769] veth0_macvtap: entered promiscuous mode [ 286.567464][T14769] veth1_macvtap: entered promiscuous mode [ 287.087416][ T25] tipc: Node number set to 11578026 [ 287.419239][ T2426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.431136][ T2426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.442265][ T2426] bond0 (unregistering): Released all slaves [ 287.558510][ T2426] bond2 (unregistering): Released all slaves [ 287.563649][ T5110] Bluetooth: hci4: command tx timeout [ 287.588683][T15174] batadv0: entered promiscuous mode [ 287.595882][T15174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.627505][T15174] batadv0: left promiscuous mode [ 287.700424][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.721625][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.741768][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.752878][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.774443][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.789566][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.804806][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.817228][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.827978][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.838740][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.850182][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.861933][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.875796][T14769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.944623][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.960780][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.971355][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.984106][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.996662][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.023899][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.035262][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.053816][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.073878][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.094174][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.113952][T14769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.140815][T14769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.163092][T14769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.228597][T14769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.258901][T14769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.269624][T14769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.279977][T14769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.721737][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.738236][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.827695][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.839520][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.857781][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.862243][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.878936][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.893428][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.970751][ T2426] veth1_macvtap: left promiscuous mode [ 288.984026][ T2426] veth0_macvtap: left promiscuous mode [ 288.989688][ T2426] veth1_vlan: left promiscuous mode [ 289.002609][ T2426] veth0_vlan: left promiscuous mode [ 289.840951][ T2426] team_slave_1 (unregistering): left promiscuous mode [ 289.865856][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 289.939776][ T2426] team_slave_0 (unregistering): left promiscuous mode [ 289.952613][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 290.327051][T14941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.918319][T14941] veth0_vlan: entered promiscuous mode [ 290.988755][T14941] veth1_vlan: entered promiscuous mode [ 291.067791][T14941] veth0_macvtap: entered promiscuous mode [ 291.093268][T14941] veth1_macvtap: entered promiscuous mode [ 291.158082][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.180545][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.194143][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.211081][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.232955][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.252552][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.263178][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.277358][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.311425][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.329841][T15283] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.350540][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.353969][T15283] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.369717][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.369738][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.371740][T14941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.414942][T15283] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.436675][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.449201][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.459783][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.471891][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.482087][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.492728][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.514867][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.530302][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.540445][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.553025][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.564961][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.577243][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.580588][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.589350][T14941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.614375][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.622694][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.626620][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.654697][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.664730][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.671483][T14941] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.681495][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.691844][T14941] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.725100][T14941] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.757672][T14941] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.063453][ T5294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.072505][ T5294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.172966][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.174458][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.183733][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.400546][T15288] chnl_net:caif_netlink_parms(): no params data found [ 292.638939][ T2426] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.692900][ T29] audit: type=1804 audit(1717335557.588:64): pid=15345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir361373245/syzkaller.wCADRg/912/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 292.862360][ T2426] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.965476][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.972566][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.983199][T15288] bridge_slave_0: entered allmulticast mode [ 292.995654][T15288] bridge_slave_0: entered promiscuous mode [ 293.010201][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.079399][ T2426] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.135223][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.142396][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.175162][T15288] bridge_slave_1: entered allmulticast mode [ 293.188979][T15288] bridge_slave_1: entered promiscuous mode [ 293.318930][ T2426] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.364355][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.376191][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.395367][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.577008][T15288] team0: Port device team_slave_0 added [ 293.610684][T15288] team0: Port device team_slave_1 added [ 293.717242][ T5110] Bluetooth: hci3: command tx timeout [ 293.738624][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.747165][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.775501][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.006142][ T2426] bridge_slave_1: left allmulticast mode [ 294.022086][ T2426] bridge_slave_1: left promiscuous mode [ 294.054017][ T2426] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.106907][ T2426] bridge_slave_0: left allmulticast mode [ 294.112594][ T2426] bridge_slave_0: left promiscuous mode [ 294.142672][ T2426] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.446150][T15412] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.571619][ T29] audit: type=1804 audit(1717335559.468:65): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3474205266/syzkaller.YZ6T9v/15/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 294.762001][ T2426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.777535][ T2426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.790006][ T2426] bond0 (unregistering): Released all slaves [ 294.814602][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.821554][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.852014][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.107558][T15288] hsr_slave_0: entered promiscuous mode [ 295.139860][T15288] hsr_slave_1: entered promiscuous mode [ 295.163923][T15288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.178505][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 295.190123][T15288] Cannot create hsr debugfs directory [ 295.616760][ T2426] hsr_slave_0: left promiscuous mode [ 295.651467][ T2426] hsr_slave_1: left promiscuous mode [ 295.659849][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.703712][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.733079][ T2426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.747136][ T2426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.801465][ T5110] Bluetooth: hci3: command tx timeout [ 295.895128][ T2426] veth1_macvtap: left promiscuous mode [ 295.919947][ T2426] veth0_macvtap: left promiscuous mode [ 295.931010][ T2426] veth1_vlan: left promiscuous mode [ 295.939972][ T2426] veth0_vlan: left promiscuous mode [ 295.946814][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.959250][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.969758][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.980384][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.990047][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.998530][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.665385][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 296.708236][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 297.782620][T15454] chnl_net:caif_netlink_parms(): no params data found [ 297.874558][ T5125] Bluetooth: hci3: command tx timeout [ 298.033897][ T5125] Bluetooth: hci0: command tx timeout [ 298.084902][T15454] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.092143][T15454] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.101465][T15454] bridge_slave_0: entered allmulticast mode [ 298.110691][T15454] bridge_slave_0: entered promiscuous mode [ 298.120841][T15454] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.128388][T15454] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.135915][T15454] bridge_slave_1: entered allmulticast mode [ 298.142571][T15454] bridge_slave_1: entered promiscuous mode [ 298.183253][ T2426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.271139][ T2426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.286735][T15288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.298367][T15288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.310808][T15454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.320697][T15288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.335798][T15454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.361963][T15288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.390182][ T2426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.420418][T15454] team0: Port device team_slave_0 added [ 298.428730][T15454] team0: Port device team_slave_1 added [ 298.472773][ T2426] bond0: (slave netdevsim0): Releasing backup interface [ 298.485060][ T2426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.498756][T15454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.506059][T15454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.532731][T15454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.547099][T15454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.554340][T15454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.588143][T15454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.701737][ T29] audit: type=1804 audit(1717335563.598:66): pid=15525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1719237974/syzkaller.fQAJ5N/175/cgroup.controllers" dev="sda1" ino=1936 res=1 errno=0 [ 298.748113][T15454] hsr_slave_0: entered promiscuous mode [ 298.755749][T15454] hsr_slave_1: entered promiscuous mode [ 298.763058][T15454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.778041][T15454] Cannot create hsr debugfs directory [ 299.620577][ T2426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.635028][ T2426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.650809][ T2426] bond0 (unregistering): Released all slaves [ 299.669089][ T2426] bond1 (unregistering): Released all slaves [ 299.724117][T15559] sctp: [Deprecated]: syz-executor.0 (pid 15559) Use of int in maxseg socket option. [ 299.724117][T15559] Use struct sctp_assoc_value instead [ 299.802824][ T2426] tipc: Disabling bearer [ 299.818326][ T2426] tipc: Left network mode [ 299.953701][ T5125] Bluetooth: hci3: command tx timeout [ 300.115346][ T5125] Bluetooth: hci0: command tx timeout [ 300.252849][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.601331][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.640154][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.647337][ T5294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.701468][ T2426] dummy0: left promiscuous mode [ 300.733316][ T2426] veth1_macvtap: left promiscuous mode [ 300.739429][ T2426] veth0_macvtap: left promiscuous mode [ 300.750395][ T2426] veth1_vlan: left promiscuous mode [ 300.757949][ T2426] veth0_vlan: left promiscuous mode [ 300.788499][T15602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.280314][ T2426] team0 (unregistering): Port device team_slave_1 removed [ 301.369231][ T2426] team0 (unregistering): Port device team_slave_0 removed [ 301.886885][T15625] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 302.115309][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.122474][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.195020][ T5125] Bluetooth: hci0: command tx timeout [ 302.348818][T15454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.410723][T15454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.487963][T15454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.521279][T15651] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 302.548722][T15454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.826781][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.906598][T15454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.974814][T15288] veth0_vlan: entered promiscuous mode [ 302.990320][T15288] veth1_vlan: entered promiscuous mode [ 303.011633][T15454] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.039342][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.046535][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.085424][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.092606][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.185758][T15288] veth0_macvtap: entered promiscuous mode [ 303.211507][T15288] veth1_macvtap: entered promiscuous mode [ 303.259908][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.306145][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.326767][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.348959][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.371458][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.390143][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.413221][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.430214][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.442788][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.455076][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.465412][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.477759][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.492372][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.502565][T15682] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 303.540245][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.584298][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.600719][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.638007][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.665487][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.684530][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.695198][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.707841][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.718040][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.728606][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.739426][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.750382][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.777258][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.807459][T15288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.818546][T15288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.836914][T15288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.852671][T15288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.948958][T15454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.109343][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.125572][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.141163][T15454] veth0_vlan: entered promiscuous mode [ 304.218529][T15454] veth1_vlan: entered promiscuous mode [ 304.273586][ T5125] Bluetooth: hci0: command tx timeout [ 304.287389][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.314558][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.400846][T15454] veth0_macvtap: entered promiscuous mode [ 304.450169][T15454] veth1_macvtap: entered promiscuous mode [ 304.534192][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.558464][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.569095][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.588266][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.600189][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.612807][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.623148][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.634703][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.645283][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.656770][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.667071][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.678138][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.688459][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.700534][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.715126][T15454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.726102][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.736599][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.747897][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.773978][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.792714][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.811936][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.822188][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.833116][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.844559][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.856562][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.866951][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.879141][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.889233][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.900043][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.916700][T15454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.942016][T15725] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 304.951264][T15454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.952046][T15726] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 304.980577][T15454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.989430][T15454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.009670][T15454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.185466][ T2426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.212026][ T2426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.320591][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.344272][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.686530][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.368349][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.386438][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.396238][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.404627][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.413118][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.423204][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 306.431458][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.653699][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.700785][T15769] Bluetooth: MGMT ver 1.22 [ 306.766960][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.067385][T15753] chnl_net:caif_netlink_parms(): no params data found [ 307.138176][ T51] bridge_slave_1: left allmulticast mode [ 307.153114][ T51] bridge_slave_1: left promiscuous mode [ 307.208301][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.233054][ T51] bridge_slave_0: left allmulticast mode [ 307.250266][ T51] bridge_slave_0: left promiscuous mode [ 307.256799][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.131650][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.159359][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.192015][ T51] bond0 (unregistering): Released all slaves [ 308.258389][ T5125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.282393][ T5125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.294637][ T5125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.307408][T15788] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 308.342070][ T5125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.350212][ T5125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.361128][T15797] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.370682][T15797] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.384569][ T5125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.456114][T15799] bond0: entered promiscuous mode [ 308.514250][ T5110] Bluetooth: hci0: command tx timeout [ 308.863129][T15813] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.884145][T15813] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.165645][ T5125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.176039][ T5125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.188740][ T5125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.197430][ T5125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.213101][ T5125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 309.221984][ T5125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.271722][T15753] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.301947][T15753] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.310902][T15753] bridge_slave_0: entered allmulticast mode [ 309.321016][T15753] bridge_slave_0: entered promiscuous mode [ 309.341189][T15753] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.355785][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.363000][T15753] bridge_slave_1: entered allmulticast mode [ 309.379970][T15753] bridge_slave_1: entered promiscuous mode [ 309.412047][T15837] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.437544][T15836] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.532939][ T51] hsr_slave_0: left promiscuous mode [ 309.552436][ T51] hsr_slave_1: left promiscuous mode [ 309.565238][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.572675][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.588709][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.603361][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.662327][ T51] veth1_macvtap: left promiscuous mode [ 309.682773][ T51] veth0_macvtap: left promiscuous mode [ 309.688844][ T51] veth1_vlan: left promiscuous mode [ 309.709496][ T51] veth0_vlan: left promiscuous mode [ 310.433460][ T5125] Bluetooth: hci3: command tx timeout [ 310.595438][ T5125] Bluetooth: hci0: command tx timeout [ 310.641779][ T51] team0 (unregistering): Port device team_slave_1 removed [ 310.689875][ T51] team0 (unregistering): Port device team_slave_0 removed [ 311.104058][T15863] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 311.112257][T15863] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.141107][T15863] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 311.149596][T15863] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 311.161192][T15863] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.226039][T15753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.264455][T15753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.323999][ T5125] Bluetooth: hci4: command tx timeout [ 311.448217][T15753] team0: Port device team_slave_0 added [ 311.481348][T15753] team0: Port device team_slave_1 added [ 311.584701][T15753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.591680][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.621277][T15753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.656435][T15753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.664884][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.703426][T15753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.713146][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.881942][T15753] hsr_slave_0: entered promiscuous mode [ 311.897886][T15753] hsr_slave_1: entered promiscuous mode [ 311.910939][T15753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.921074][T15753] Cannot create hsr debugfs directory [ 311.949895][T15802] chnl_net:caif_netlink_parms(): no params data found [ 312.513489][ T5125] Bluetooth: hci3: command tx timeout [ 312.673493][ T5125] Bluetooth: hci0: command tx timeout [ 313.393934][ T5125] Bluetooth: hci4: command tx timeout [ 314.593930][ T5125] Bluetooth: hci3: command tx timeout [ 314.753580][ T5125] Bluetooth: hci0: command tx timeout [ 315.487066][ T5125] Bluetooth: hci4: command tx timeout [ 316.693374][ T5125] Bluetooth: hci3: command tx timeout [ 317.406531][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553711][ T5125] Bluetooth: hci4: command tx timeout [ 342.608511][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.618866][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.627768][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.636720][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.645142][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 342.652441][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.682789][ T5125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.692592][ T5125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.702046][ T5125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.711011][ T5125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.719229][ T5125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.727512][ T5125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.754136][ T5112] Bluetooth: hci5: command tx timeout [ 344.754164][ T5125] Bluetooth: hci6: command tx timeout [ 346.834117][ T5112] Bluetooth: hci5: command tx timeout [ 346.834656][ T5125] Bluetooth: hci6: command tx timeout [ 348.913454][ T5125] Bluetooth: hci5: command tx timeout [ 348.923429][ T5125] Bluetooth: hci6: command tx timeout [ 350.993553][ T5125] Bluetooth: hci6: command tx timeout [ 350.993838][ T5112] Bluetooth: hci5: command tx timeout [ 365.553483][ T5125] Bluetooth: hci1: command 0x040f tx timeout [ 371.267053][ T5125] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.276792][ T5125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.293962][ T5125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.302378][ T5125] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.316028][ T5125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 371.323498][ T5125] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.053600][ T5112] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.072797][ T5112] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.089679][ T5110] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.099165][ T5110] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.124240][ T5110] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 373.131551][ T5110] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.393771][ T5125] Bluetooth: hci7: command tx timeout [ 373.661471][ T5110] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 373.671869][ T5110] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 373.697941][ T5110] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 373.712669][ T5110] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 373.725624][ T5110] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 373.732963][ T5110] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 375.244011][ T5110] Bluetooth: hci8: command tx timeout [ 375.484068][ T5110] Bluetooth: hci7: command tx timeout [ 375.793960][ T5110] Bluetooth: hci9: command tx timeout [ 377.314222][ T5110] Bluetooth: hci8: command tx timeout [ 377.553984][ T5110] Bluetooth: hci7: command tx timeout [ 377.873936][ T5110] Bluetooth: hci9: command tx timeout [ 378.853881][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.404013][ T5110] Bluetooth: hci8: command tx timeout [ 379.633847][ T5110] Bluetooth: hci7: command tx timeout [ 379.958310][ T5110] Bluetooth: hci9: command tx timeout [ 381.473499][ T5110] Bluetooth: hci8: command tx timeout [ 382.043799][ T5110] Bluetooth: hci9: command tx timeout [ 391.154127][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 407.903994][ T5112] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 407.913738][ T5112] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 407.922194][ T5112] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 407.936869][ T5112] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 407.944678][ T5112] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 407.952078][ T5112] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 407.963900][ T5122] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 407.993974][ T5122] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 408.001898][ T5122] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 408.010668][ T5122] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 408.019383][ T5122] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 408.030828][ T5122] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 410.033472][ T5110] Bluetooth: hci10: command tx timeout [ 410.113657][ T5110] Bluetooth: hci11: command tx timeout [ 412.124251][ T5110] Bluetooth: hci10: command tx timeout [ 412.203819][ T5110] Bluetooth: hci11: command tx timeout [ 414.193492][ T5110] Bluetooth: hci10: command tx timeout [ 414.283611][ T5110] Bluetooth: hci11: command tx timeout [ 416.273423][ T5110] Bluetooth: hci10: command tx timeout [ 416.363404][ T5110] Bluetooth: hci11: command tx timeout [ 432.123306][T15930] Bluetooth: hci3: command 0x0406 tx timeout [ 432.124245][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 432.129344][T15930] Bluetooth: hci4: command 0x0406 tx timeout [ 436.463852][ T5120] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 436.475786][ T5120] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 436.484108][ T5120] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 436.492209][ T5120] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 436.504774][ T5120] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 436.513561][ T5120] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 438.111043][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 438.120777][ T5120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 438.129067][ T5120] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 438.144082][ T5120] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 438.151815][ T5120] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 438.159404][ T5120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 438.593383][ T5120] Bluetooth: hci12: command tx timeout [ 438.804383][ T5125] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 438.813878][ T5125] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 438.821722][ T5125] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 438.830240][ T5125] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 438.838152][ T5125] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 438.847577][ T5125] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 440.194094][ T5120] Bluetooth: hci13: command tx timeout [ 440.293706][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.681711][ T5120] Bluetooth: hci12: command tx timeout [ 440.913530][ T5125] Bluetooth: hci14: command tx timeout [ 442.274004][ T5125] Bluetooth: hci13: command tx timeout [ 442.754104][ T5125] Bluetooth: hci12: command tx timeout [ 442.994454][ T5125] Bluetooth: hci14: command tx timeout [ 444.353496][ T5125] Bluetooth: hci13: command tx timeout [ 444.838985][ T5125] Bluetooth: hci12: command tx timeout [ 445.074418][ T5125] Bluetooth: hci14: command tx timeout [ 446.433968][ T5125] Bluetooth: hci13: command tx timeout [ 447.154266][ T5125] Bluetooth: hci14: command tx timeout [ 462.042520][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 462.050576][ T30] Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 [ 462.068861][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.078188][ T30] task:kworker/u8:3 state:D stack:19504 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 462.103850][ T30] Workqueue: netns cleanup_net [ 462.108707][ T30] Call Trace: [ 462.111999][ T30] [ 462.133775][ T30] __schedule+0x17e8/0x4a20 [ 462.138353][ T30] ? __pfx___schedule+0x10/0x10 2024/06/02 13:42:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 462.163141][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.179498][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 462.190043][ T30] ? kthread_data+0x52/0xd0 [ 462.197172][ T30] ? schedule+0x90/0x320 [ 462.201465][ T30] ? wq_worker_sleeping+0x66/0x240 [ 462.222413][ T30] ? schedule+0x90/0x320 [ 462.228466][ T30] schedule+0x14b/0x320 [ 462.232656][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.250228][ T30] __mutex_lock+0x6a4/0xd70 [ 462.255411][ T30] ? __mutex_lock+0x527/0xd70 [ 462.260107][ T30] ? fib_net_exit_batch+0x20/0x90 [ 462.277218][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.282296][ T30] ? evict+0x577/0x630 [ 462.287260][ T30] ? __pfx_fib_net_exit_batch+0x10/0x10 [ 462.292841][ T30] fib_net_exit_batch+0x20/0x90 [ 462.311282][ T30] ? __pfx_fib_net_exit_batch+0x10/0x10 [ 462.317917][ T30] cleanup_net+0x89d/0xcc0 [ 462.322369][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 462.338423][ T30] ? process_scheduled_works+0x945/0x1830 [ 462.345833][ T30] process_scheduled_works+0xa2c/0x1830 [ 462.351437][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.369763][ T30] ? assign_work+0x364/0x3d0 [ 462.375030][ T30] worker_thread+0x86d/0xd70 [ 462.379652][ T30] ? __kthread_parkme+0x169/0x1d0 [ 462.396533][ T30] ? __pfx_worker_thread+0x10/0x10 [ 462.403139][ T30] kthread+0x2f0/0x390 [ 462.413822][ T30] ? __pfx_worker_thread+0x10/0x10 [ 462.418966][ T30] ? __pfx_kthread+0x10/0x10 [ 462.436461][ T30] ret_from_fork+0x4b/0x80 [ 462.440907][ T30] ? __pfx_kthread+0x10/0x10 [ 462.454784][ T30] ret_from_fork_asm+0x1a/0x30 [ 462.459600][ T30] [ 462.473916][ T30] INFO: task kworker/0:4:5165 blocked for more than 143 seconds. [ 462.481652][ T30] Not tainted 6.10.0-rc1-syzkaller-00236-gb5c089880723 #0 [ 462.499471][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.532642][ T30] task:kworker/0:4 state:D stack:23632 pid:5165 tgid:5165 ppid:2 flags:0x00004000 [ 462.555064][ T30] Workqueue: events_power_efficient check_lifetime [ 462.561614][ T30] Call Trace: [ 462.573373][ T30] [ 462.576335][ T30] __schedule+0x17e8/0x4a20 [ 462.580875][ T30] ? __pfx___schedule+0x10/0x10 [ 462.594353][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 462.600363][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.621552][ T30] ? kick_pool+0x45c/0x620 [ 462.626681][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.631896][