last executing test programs: 32.980656046s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x92}], {0x95, 0x0, 0x700}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 32.773438144s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001bc0)={0xa00, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x998, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x991, 0x1, "8493a7e8efd9b65774e9660620b5a89ab4f68d36f8d40c7b7a8ed7cd739131efe1f47a728a1c55de38b2f456fedde5d4301a68bc119b2bfb34055be28f55c2b6ee31a712d69a46b448626682f0f6d0a6ab5bcb52d81457730f4a34e1a92897c2bf8cba11a2c894c05a2ee912cc4a6be9dd2e4887a8b08f2256b236959f08adb53c787eda6e352fab3e3eea99647d3a5a40813bb8b4321db88e1303d4c7d40652fc5e8028e758ab3eb9a9e5308857db672c156869d379fbdce059c06256bb08b165970a8b7a318d49c454b803c7e019002d8bd624138658005c1ff8b7fb471dcf410749402fe43b5bff53a4c1c78f8e5b8c2a8ccb93712734e56f58fcd8f1ba67a03f76e46afeb7906682060dac7a9cc3d3d0cd0e3b373a817d24ab90e8afe64e588e55d8b5d4fba032b25d27e8357c7b3255199031f02c15287183824caf7af7fb12ae7cc779394947c21213fd668190fc0b92ab3852d16bcf4fa4034c28f9273da0c9a8fe8dbce382387837dda5b171ce1a2010aa14818a184412c516e90f2e65ebccc6d5a7a1ed3f37f5db6c7e370cc3e75f1e62164e82f59299f0c13cda87ff049af1429dbad86a536e9cbb6e90ff74bb68a0f260e9a8612f8833536ae0f7b31630eb18a43f50d4ecc026609cbe91ab82731ac938f52a0dfd5a9faf1b1acab5a879346c5098fa4caf18adf0077b2b108087fa1ee60d19095e53049ef3664f5940486b7393a4baa8a0d3b989646f8982d504e1b00c8bd7ffd2adac8a21be3f0d8f2ecc05005bd07042088c05adc3aa86895e7fd816de4cef777f23e034aa71c2f9e1cb7fec0fdbd0f54a153300e29c876eed624d963e1f49952802756bb50523a4f38184efaa45543656c4b9f4c3ad1ecad6c17d0b0836715a05ebc80f949265488daa2d00f3ba3c0c9b10a3fcbe3f49cda7de6100a3d5f39a1a85312e34253e6bfa35b9a8ca97e45c1589e792e385e3ca5773059911ca229f3417c452304f8c2ecc0b68862144d64b41557ebe54bd25fc9dd89ca8c795030a825f2e0e51fb092a5ce150f9e33469f796bf1cea755a4bf1612d678a08270e5083df81f65a778990a86e52ca25c7c2ee8edb5c7a5b9265c2aa1be46e6f851368022a759115d5218c607f123d564f2bb7d5758da422eccbe4b341525d01b7ef69fa04d4237d04b2cfc98e631472dea0933846b36e8f369b4ec5743ca621f44b28f12306ed6783dbfd5258600427a4a150a2d57c112e89d6f1b32eb9be71276affc63e73a0431c3c73a38c9678ab3ae9cf81ed21458ac7e77fd9bf9b59151c2cc08ee7c01ef3b952f74a6e589b4aeb9805ae17ebb2be3130d01633878a149ae7895f61b1e1b92026ac735500c27d93029ad612bd76c3ff69ac3f771fea103989e811583e8dedb9a9f2c2727f3d9506cdf9e6eede651b15e36949bff89f7bd9c702e858fbf772745fe6e2a3ca2162737a7cec3f4e11f5ce33f2319bcf3c7287f64b22e2463c720ea895aec2bf23bf4471d38e63c73422c15794a62ab80768634d85568590a86ed79444182092ea584e660816ea0c4f4e8d8539cae775712d7b3cf398d63919bee977e4b93808e060c9951fe27b877676e958e0df0365ecdb26764ffd2cf63b513c1804beb92f148fe269738cccec374acaa59bf27ba374c59bb168f36221cbb64dc1c84a58abab35e51176d6c2e8a3ba7b28405a970596ba9380c0072383a1b8e2d524529a2231cf68d03d4d1956758fd7eafd6ef06008f9efed07869f2151082947f7566d7713a44d4524f9b454fdcd368750d02473231389a1e77e181d138b5980dd9e0268c3366036dc8bcfeade7d563fb659e83ddbeb8513ae94b1917f6081fdfffe9a21f08148d238a0a1a09afa970a466e4a6a86b9c24ff333bd71182f2cebb476f6239c3cd25be444736f0502bac9f5727faa9b12669eeae897e066c7d81e2ea81db29a38ef6acbcff45194ab23ac21ff9ea7786674319849580c9d4b9875b95ff141bb3c07dd4cc48bd119281c21cb46101631cc7f4b647761ef693bfd9a6e29568f1652652feaaea6d1b101529c873d86ffcc9f800e039addaf4f2696797a98ba9c2c3b5ce322958435b22b8ed489530b5994593a68977bc1b99991cb4b8d8a04690c43e2be6ff5a7e5ac19efa921b6f2c68d2fd00ed40cb9d348b71f2ed1bf29c0bd0eac8f4fff6acbdb44bc299610268c7c5d1dea953d3db0a4fea302b20b5aaabb6fed1feac15127557eca2e3c761e85322a0b31e490de2e8d54a38acdb8ee88008d86bb36e211228c2e129534736e959f7503d4433c406ae27a61a1ab993da10d0e8ce38b2936a9d634facb50c9775a24212f3b8dad1631c3a354b95ae3bfc167bcd847c0fb118c2f5ea32c1ce317f9aa1f898d34d1553340f1bc613aecd8fb6f7f3287614e83b03ef7c03664569fc8bd918f59c7c1e8bf8f9b793656bf45676096359ff17e225326387f77587efea67753b2abe04f8cc086ef449392428220e876c3adf56368f8046436663d092d792ea8f54ab2d117739bfadbb8f47a629dfb734147e496f45c8ec4df5f8869c5bf7a508e6c9772820b84be1ae07c3133585be52e5a37af93b2407ce9a071a36c63a3aa5df5a68ae3a32f7fc6c284a9ee312a80702f2b99e5dcfbc4dbf45bf22b119c892e6e3a4eff24aee5aff03437dc31cb00abdf6013271ee738b917fb93d7188c92223b783cbbb50a5831f9c9ebea68db6df467db2e4db02b5bae9a27a44e467b2a0bcc7a7d6c2abb5b4a57a21207b3357c7a6dd2a8415b36fabab2d4b996730dd61d1d6ff92fe9771715eede82083a01adfc5a28bc127d6bb3479a36f467bdced4c7cde9498bbf9fbeae38d64abfb9e37f31fe6f6b20a5e8a31010d9a259b4ec67c227245653d13401fea490949844cc94d7dff858a3c975ed9662f67b792f3d7c8244e2c1464483243d5af84305f2fbd634b1021ca734371392a333878ac7b1964ec5d6f9682d430bc7772a750c79a68569cdea4e6f90bd1f28e77877707b60fb8e453ce46c2e931bf2acb484b2e91f48197e6da41adb696a0f46005bc3588fe9ea411c9ec4cb1d8b3b6c23553d92887ab10cfdca641033d5866e70e7701d93e79fd8f8ba5ddb05cee57b53152d4ed402e641af8ca0f958cef17fcb11a8a6293851bdaa121324d5989c654c115aa4829abaa846a6a3051e71e266b756dc2d5c30e889073eedd520c06ca27ef5b6ce7aa61b88c9fad6ba1e42eaca1cee4369d86c0c65d0c59f6096a5054afcb19ec8331fef2375a80791c8f43763fb2f5c56d55bee9fa0e1183264ee24ec213be2d9c5721b73c304156c7c029b96d8f6ea7d45ad8115008fdc2e237ba624e5b6a7733e754344283ef26c917a71058058ee3b219bd01c9f01c10a8a98d81d61db146cefa14372db3040faf2727b7a1679442d3aaeb5b0f1efaf9e9a834b8b7733b31f3ebd4322f0b05104"}]}]}, 0xa00}}, 0x0) 32.620936052s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) 32.449766171s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) 32.355780589s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_pauseparam}) 32.343344382s ago: executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xd8}}, 0x0) 32.294240785s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) 32.219439724s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0) 32.209275117s ago: executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) socket(0x28, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x541b, &(0x7f0000000300)={'geneve1\x00', {0x2, 0x0, @local}}) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x11f, 0x1d}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xc}}, 0x4004) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0x7d, 0x0, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x54}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4008, 0x3, 0x268, 0x0, 0x500b, 0x148, 0x0, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'hsr0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@private, @rand_addr, 0x0, 0x0, 'veth0_to_batadv\x00', 'pim6reg0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001d07940e000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x168, 0x2b8, 0xb0000010, 0x0, 0x5c8fca04, 0x230, 0x3a8, 0x3a8, 0x230, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x168, 0x700, {}, [@common=@frag={{0x30}}, @common=@unspec=@limit={{0x48}, {0x0, 0x10000003}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev}}}, {{@ipv6={@private1, @empty, [], [], 'veth0_to_team\x00', 'veth0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x4) sendto$packet(r0, &(0x7f0000000140)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x50) 32.054080047s ago: executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x80}, 0x1, 0x7}, 0x0) 32.023059664s ago: executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffefffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x200000000000000}, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) 31.973017288s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 31.866419957s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "0400", "0d00000000000f7fdfff00", "cf0d00", "8657e2b7e43b34e4"}, 0x28) r1 = socket$inet6(0x10, 0x80002, 0x4) sendto$inet6(r1, &(0x7f0000000140)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 31.807749126s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}]}, 0x3c}}, 0x0) 31.79953537s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000200), 0x20000000}, 0x20) 31.721160785s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x0, 0x130, 0x26010000, 0xc8, 0x130, 0x338, 0x220, 0x220, 0x338, 0x220, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'hsr0\x00', 'pim6reg0\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x25e}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'team_slave_0\x00'}, 0x0, 0x208, 0x270, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x8, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @mcast2, @dev, @ipv4={'\x00', '\xff\xff', @local}, @remote, @mcast1, @remote, @private0, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @remote, @private1, @local, @private1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "031686e62c78", @long="71ae0ef2355a69d2dc510d0ca89bd043"}}}}]}, 0x54}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@ld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_type(r4, &(0x7f0000000000), 0x180000) 31.661341317s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.624797139s ago: executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xd8}}, 0x0) 31.343441329s ago: executing program 1: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000130003800800040000000000040002000000000004000100"], 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='f2fs_destroy_extent_tree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r9, &(0x7f0000000180)={0x27, @short}, 0x14) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 31.270016545s ago: executing program 4: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x8912, &(0x7f0000000100)) 30.387781543s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x92}], {0x95, 0x0, 0x700}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 30.319145454s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 30.225024921s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000170a05"], 0x2c}}, 0x0) 30.136145425s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_allocate_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 30.027797822s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000140)=@ethtool_pauseparam}) 1.677713992s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @private0}}, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @dev}}]}, 0x210) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 1.634625862s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_OIF={0x4}]}, 0x24}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0x71, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) sendmsg$sock(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000980)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13209f4c6b61f836", 0xf2}, {&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b710e1a1bed2b0bf3b639a0330dfd84769348c374bc3df81dcba87c805741808d97453f774927a7eac58c92dcb5bbe6c7f3", 0x72}, {&(0x7f0000000200)="e6fa9509b3792cd8646ebb9e5cd3c4a3c0298aa2f0e9af3211b9955da6183790f633515fc57370dc7213c5344ed303e14a4df7bdf7c927fdba448e0f08f7279b9dcdeaf9da197bebd94e1cef1fdc75679ea9503c9d7d411ef4ec64f9f8c4cf89c9eb1c8ca62a1ee73ef25529b0a184249f2bef66", 0x74}, {&(0x7f0000000280)="bade6986c4232e27e3f99c07302eade2ff6d6f759679f4facdf6527ccd2990bf067d2035a5a40b89881da26e8e31b8a69542e9c28544292a9f7b98ed76ec55f43051e0f5c054e218f68921671d930e4482680ecdb7b48da951639612eb96e3f5dde849be9be09d7c4344", 0x6a}, {&(0x7f0000000300)="cbc573c9900f51448fab2864e1d1172045", 0x11}, {&(0x7f0000000600)="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", 0x367}], 0x6}, 0x0) r7 = accept4$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10, 0x80000) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000440), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10) 1.316533452s ago: executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 1.250780614s ago: executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. 2024/06/04 05:12:39 fuzzer started 2024/06/04 05:12:39 dialing manager at 10.128.0.169:30018 [ 76.909511][ T25] cfg80211: failed to load regulatory.db [ 111.940919][ T5112] cgroup: Unknown subsys name 'net' [ 112.073237][ T5112] cgroup: Unknown subsys name 'rlimit' 2024/06/04 05:13:38 starting 5 executor processes [ 113.187028][ T5111] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.756383][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.765640][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.774876][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.779494][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.782763][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.796245][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.798627][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.806036][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.819517][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.819558][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.835668][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.835748][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.843501][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.850153][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.857779][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.866095][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.872374][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.878188][ T5147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.885660][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.891778][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.899117][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.912848][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.920349][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.929767][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.930371][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.940562][ T4494] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.945144][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.959217][ T4494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.959728][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.967737][ T4494] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.583279][ T5132] chnl_net:caif_netlink_parms(): no params data found [ 114.593215][ T5133] chnl_net:caif_netlink_parms(): no params data found [ 114.636127][ T5134] chnl_net:caif_netlink_parms(): no params data found [ 114.685245][ T5131] chnl_net:caif_netlink_parms(): no params data found [ 114.740365][ T5141] chnl_net:caif_netlink_parms(): no params data found [ 114.916012][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.923305][ T5133] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.931406][ T5133] bridge_slave_0: entered allmulticast mode [ 114.939495][ T5133] bridge_slave_0: entered promiscuous mode [ 114.951986][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.959205][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.966582][ T5132] bridge_slave_0: entered allmulticast mode [ 114.974262][ T5132] bridge_slave_0: entered promiscuous mode [ 114.985367][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.992776][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.000118][ T5134] bridge_slave_0: entered allmulticast mode [ 115.007169][ T5134] bridge_slave_0: entered promiscuous mode [ 115.015428][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.025696][ T5133] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.033286][ T5133] bridge_slave_1: entered allmulticast mode [ 115.043034][ T5133] bridge_slave_1: entered promiscuous mode [ 115.065253][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.072579][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.080324][ T5132] bridge_slave_1: entered allmulticast mode [ 115.087091][ T5132] bridge_slave_1: entered promiscuous mode [ 115.110114][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.117260][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.124688][ T5134] bridge_slave_1: entered allmulticast mode [ 115.132528][ T5134] bridge_slave_1: entered promiscuous mode [ 115.195469][ T5133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.246539][ T5133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.271120][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.278480][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.286036][ T5131] bridge_slave_0: entered allmulticast mode [ 115.293911][ T5131] bridge_slave_0: entered promiscuous mode [ 115.305553][ T5132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.319357][ T5132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.328948][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.336077][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.343828][ T5141] bridge_slave_0: entered allmulticast mode [ 115.350927][ T5141] bridge_slave_0: entered promiscuous mode [ 115.359958][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.367185][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.374882][ T5141] bridge_slave_1: entered allmulticast mode [ 115.382431][ T5141] bridge_slave_1: entered promiscuous mode [ 115.392744][ T5134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.406001][ T5134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.425411][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.433202][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.440998][ T5131] bridge_slave_1: entered allmulticast mode [ 115.448176][ T5131] bridge_slave_1: entered promiscuous mode [ 115.489736][ T5133] team0: Port device team_slave_0 added [ 115.550359][ T5133] team0: Port device team_slave_1 added [ 115.560367][ T5141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.572570][ T5134] team0: Port device team_slave_0 added [ 115.594150][ T5131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.606880][ T5132] team0: Port device team_slave_0 added [ 115.617244][ T5132] team0: Port device team_slave_1 added [ 115.639176][ T5141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.660495][ T5134] team0: Port device team_slave_1 added [ 115.679481][ T5131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.734548][ T5141] team0: Port device team_slave_0 added [ 115.763627][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.774282][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.806506][ T5133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.823697][ T5133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.831047][ T5133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.858213][ T5133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.881215][ T5141] team0: Port device team_slave_1 added [ 115.888413][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.895443][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.921649][ T5134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.936301][ T5131] team0: Port device team_slave_0 added [ 115.943264][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.951476][ T5150] Bluetooth: hci3: command tx timeout [ 115.956439][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.983677][ T5132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.011149][ T5134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.018628][ T5134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.029060][ T5149] Bluetooth: hci0: command tx timeout [ 116.044817][ T5150] Bluetooth: hci4: command tx timeout [ 116.045089][ T5150] Bluetooth: hci1: command tx timeout [ 116.055832][ T5149] Bluetooth: hci2: command tx timeout [ 116.056987][ T5134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.080522][ T5131] team0: Port device team_slave_1 added [ 116.091762][ T5132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.098822][ T5132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.125028][ T5132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.166646][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.173769][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.200279][ T5141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.257946][ T5133] hsr_slave_0: entered promiscuous mode [ 116.264481][ T5133] hsr_slave_1: entered promiscuous mode [ 116.274267][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.284667][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.311063][ T5141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.327928][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.334900][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.361363][ T5131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.418551][ T5134] hsr_slave_0: entered promiscuous mode [ 116.425324][ T5134] hsr_slave_1: entered promiscuous mode [ 116.433587][ T5134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.441986][ T5134] Cannot create hsr debugfs directory [ 116.449008][ T5131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.455965][ T5131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.482172][ T5131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.503299][ T5132] hsr_slave_0: entered promiscuous mode [ 116.509885][ T5132] hsr_slave_1: entered promiscuous mode [ 116.516049][ T5132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.523989][ T5132] Cannot create hsr debugfs directory [ 116.562104][ T5141] hsr_slave_0: entered promiscuous mode [ 116.568982][ T5141] hsr_slave_1: entered promiscuous mode [ 116.574998][ T5141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.583428][ T5141] Cannot create hsr debugfs directory [ 116.656173][ T5131] hsr_slave_0: entered promiscuous mode [ 116.663566][ T5131] hsr_slave_1: entered promiscuous mode [ 116.671716][ T5131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.680208][ T5131] Cannot create hsr debugfs directory [ 117.119583][ T5133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.145192][ T5133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.164776][ T5133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.179756][ T5133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.217333][ T5131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.230995][ T5131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.264386][ T5131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.276219][ T5131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.333562][ T5141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.345696][ T5141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.357389][ T5141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.390178][ T5141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.500187][ T5132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.535443][ T5132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.546537][ T5132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.562077][ T5134] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.582867][ T5132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.593982][ T5134] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.606493][ T5134] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.630747][ T5133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.642363][ T5134] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.706649][ T5133] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.750260][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.757665][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.790024][ T5131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.818921][ T5131] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.868292][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.875405][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.894295][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.901536][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.930057][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.937204][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.016522][ T5141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.034576][ T5149] Bluetooth: hci3: command tx timeout [ 118.107983][ T5149] Bluetooth: hci1: command tx timeout [ 118.113444][ T5149] Bluetooth: hci2: command tx timeout [ 118.119622][ T5150] Bluetooth: hci0: command tx timeout [ 118.125064][ T5150] Bluetooth: hci4: command tx timeout [ 118.153523][ T5141] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.205936][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.224488][ T5134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.249394][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.256566][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.291445][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.298653][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.364801][ T5134] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.392122][ T5132] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.423318][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.430791][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.442914][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.450121][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.523683][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.531051][ T5184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.575282][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.582500][ T5184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.619565][ T5133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.656664][ T5131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.732477][ T5141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.836894][ T5132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.944226][ T5133] veth0_vlan: entered promiscuous mode [ 119.036694][ T5131] veth0_vlan: entered promiscuous mode [ 119.071690][ T5133] veth1_vlan: entered promiscuous mode [ 119.136334][ T5131] veth1_vlan: entered promiscuous mode [ 119.215956][ T5133] veth0_macvtap: entered promiscuous mode [ 119.230765][ T5133] veth1_macvtap: entered promiscuous mode [ 119.299600][ T5134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.322884][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.336415][ T5132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.357842][ T5141] veth0_vlan: entered promiscuous mode [ 119.385465][ T5131] veth0_macvtap: entered promiscuous mode [ 119.402394][ T5141] veth1_vlan: entered promiscuous mode [ 119.412818][ T5133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.425749][ T5133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.436375][ T5133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.446221][ T5133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.455100][ T5133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.472882][ T5131] veth1_macvtap: entered promiscuous mode [ 119.542409][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.555183][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.567081][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.582349][ T5131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.593354][ T5131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.605266][ T5131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.621064][ T5131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.634254][ T5131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.643221][ T5131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.652349][ T5131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.675144][ T5132] veth0_vlan: entered promiscuous mode [ 119.690825][ T5134] veth0_vlan: entered promiscuous mode [ 119.723287][ T5132] veth1_vlan: entered promiscuous mode [ 119.791877][ T5134] veth1_vlan: entered promiscuous mode [ 119.812052][ T5141] veth0_macvtap: entered promiscuous mode [ 119.840750][ T5141] veth1_macvtap: entered promiscuous mode [ 119.904557][ T5184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.914282][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.914307][ T5184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.924957][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.942879][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.963646][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.975003][ T5141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.014665][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.022747][ T5134] veth0_macvtap: entered promiscuous mode [ 120.029121][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.029144][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.029155][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.029167][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.030549][ T5141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.066165][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.102604][ T5132] veth0_macvtap: entered promiscuous mode [ 120.109457][ T5150] Bluetooth: hci3: command tx timeout [ 120.139306][ T5134] veth1_macvtap: entered promiscuous mode [ 120.162178][ T5132] veth1_macvtap: entered promiscuous mode [ 120.176238][ T5141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.186338][ T5141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.195754][ T5150] Bluetooth: hci4: command tx timeout [ 120.202107][ T5141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.207030][ T5147] Bluetooth: hci0: command tx timeout [ 120.212203][ T5149] Bluetooth: hci1: command tx timeout [ 120.216373][ T5150] Bluetooth: hci2: command tx timeout [ 120.227715][ T5141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.253918][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.262322][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.287084][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.296080][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.312686][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.324567][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.334860][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.346103][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.358621][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.369418][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.381329][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.394584][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.405258][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.415966][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.430411][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.440686][ T5134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.451246][ T5134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.463149][ T5134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.513449][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.525611][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.538575][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.549756][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.560164][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.571410][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.581361][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.592952][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.604696][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.614563][ T5134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.623649][ T5134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.633662][ T5134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.642838][ T5134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.662912][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.684175][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.694516][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.711218][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.731240][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.744428][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.756843][ T5132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.781991][ T5132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.794018][ T5132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.876138][ T5132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.902704][ T5132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.914960][ T5132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.924721][ T5132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.955451][ T5184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.974223][ T5184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.089118][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.104607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.278068][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.294917][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.360076][ T5230] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 121.411260][ T5233] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 121.422992][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.465212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.555410][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.587658][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.626589][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.652390][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.749016][ T5244] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.777997][ T5244] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.794583][ T5244] Zero length message leads to an empty skb [ 122.024579][ T5254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.090306][ T5249] unknown channel width for channel at 909000KHz? [ 122.153432][ T5258] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.192798][ T5150] Bluetooth: hci3: command tx timeout [ 122.251055][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.268237][ T5150] Bluetooth: hci2: command tx timeout [ 122.269997][ T5149] Bluetooth: hci0: command tx timeout [ 122.273679][ T5150] Bluetooth: hci1: command tx timeout [ 122.279605][ T5147] Bluetooth: hci4: command tx timeout [ 122.295873][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.360527][ T5260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.465586][ T5271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.534552][ T5271] block nbd0: not configured, cannot reconfigure [ 122.725786][ T5286] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 122.758450][ T5286] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 123.413396][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.473789][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.526433][ T5316] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.163269][ T5348] Bluetooth: MGMT ver 1.22 [ 124.175470][ T5348] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 125.620389][ T5395] xt_l2tp: wrong L2TP version: 0 [ 126.640861][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.657304][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.677578][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.696602][ T2888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.709712][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.720301][ T5149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.728860][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.943589][ T5454] __nla_validate_parse: 5 callbacks suppressed [ 126.943614][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.982298][ T5454] block nbd0: not configured, cannot reconfigure [ 126.992874][ T2888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.124521][ T2888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.167036][ T5460] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.250456][ T2888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.350778][ T5471] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.410115][ T5471] lo speed is unknown, defaulting to 1000 [ 127.464741][ T5471] lo speed is unknown, defaulting to 1000 [ 127.498591][ T5471] lo speed is unknown, defaulting to 1000 [ 127.524490][ T5471] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.601462][ T5471] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.665739][ T2888] bridge_slave_1: left allmulticast mode [ 127.673597][ T2888] bridge_slave_1: left promiscuous mode [ 127.681831][ T2888] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.704893][ T2888] bridge_slave_0: left allmulticast mode [ 127.719540][ T2888] bridge_slave_0: left promiscuous mode [ 127.740824][ T2888] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.090357][ T5498] net_ratelimit: 2 callbacks suppressed [ 128.090376][ T5498] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 128.447839][ T2888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.468786][ T2888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.484409][ T2888] bond0 (unregistering): Released all slaves [ 128.526594][ T5471] lo speed is unknown, defaulting to 1000 [ 128.556606][ T5471] lo speed is unknown, defaulting to 1000 [ 128.599594][ T5471] lo speed is unknown, defaulting to 1000 [ 128.645943][ T5471] lo speed is unknown, defaulting to 1000 [ 128.770307][ T5471] lo speed is unknown, defaulting to 1000 [ 128.805732][ T5471] lo speed is unknown, defaulting to 1000 [ 128.828226][ T5149] Bluetooth: hci3: command tx timeout [ 128.885148][ T5443] chnl_net:caif_netlink_parms(): no params data found [ 129.239283][ T2888] hsr_slave_0: left promiscuous mode [ 129.249259][ T2888] hsr_slave_1: left promiscuous mode [ 129.262998][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.273429][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.298299][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.328204][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.409687][ T2888] veth1_macvtap: left promiscuous mode [ 129.416374][ T2888] veth0_macvtap: left promiscuous mode [ 129.422510][ T2888] veth1_vlan: left promiscuous mode [ 129.429288][ T2888] veth0_vlan: left promiscuous mode [ 129.982090][ T2888] team0 (unregistering): Port device team_slave_1 removed [ 130.019752][ T2888] team0 (unregistering): Port device team_slave_0 removed [ 130.395199][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.454238][ T5545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.473395][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.489236][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.499958][ T5443] bridge_slave_0: entered allmulticast mode [ 130.527736][ T5443] bridge_slave_0: entered promiscuous mode [ 130.543997][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.562672][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.575240][ T5566] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 130.583960][ T5443] bridge_slave_1: entered allmulticast mode [ 130.599621][ T5443] bridge_slave_1: entered promiscuous mode [ 130.618255][ T5563] veth1_macvtap: left promiscuous mode [ 130.702647][ T5566] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 130.771905][ T5570] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 130.862780][ T5443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.892087][ T5443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.908254][ T5149] Bluetooth: hci3: command tx timeout [ 130.977163][ T5581] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.036832][ T5443] team0: Port device team_slave_0 added [ 131.071352][ T5443] team0: Port device team_slave_1 added [ 131.201868][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.223223][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.262067][ T5443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.319464][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.344881][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.395005][ T5443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.514549][ T5443] hsr_slave_0: entered promiscuous mode [ 131.532205][ T5443] hsr_slave_1: entered promiscuous mode [ 131.552079][ T5443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.563211][ T5443] Cannot create hsr debugfs directory [ 131.652211][ T5608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.675004][ T5608] vlan2: entered promiscuous mode [ 131.685121][ T5608] bridge0: entered promiscuous mode [ 131.698317][ T5608] bridge0: left promiscuous mode [ 131.957584][ T5616] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.227137][ T5632] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.308483][ T5636] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.545058][ T5443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.564524][ T5443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.590940][ T5443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.606959][ T5443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.855275][ T5443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.884126][ T5443] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.929483][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.936681][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.970979][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.978211][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.987842][ T5149] Bluetooth: hci3: command tx timeout [ 133.234471][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.241756][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.600439][ T5685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.640490][ T5443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.793413][ T5443] veth0_vlan: entered promiscuous mode [ 133.851222][ T5443] veth1_vlan: entered promiscuous mode [ 133.925795][ T5701] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.955821][ T5701] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.983551][ T5443] veth0_macvtap: entered promiscuous mode [ 134.041397][ T5443] veth1_macvtap: entered promiscuous mode [ 134.096718][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.116630][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.142904][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.184331][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.197466][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.209315][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.220707][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.231388][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.245462][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.267213][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.280838][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.291639][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.302210][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.312253][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.324865][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.339893][ T5717] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 134.347440][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.362358][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.374253][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.394095][ T5717] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 134.416601][ T5443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.427579][ T5443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.447080][ T5443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.467263][ T5443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.484058][ T5717] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 134.524115][ T5720] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 134.536083][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.545060][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.621937][ T5721] bridge_slave_1: left allmulticast mode [ 134.628589][ T5721] bridge_slave_1: left promiscuous mode [ 134.636234][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.662795][ T5721] bridge_slave_0: left allmulticast mode [ 134.673460][ T5721] bridge_slave_0: left promiscuous mode [ 134.680895][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.780611][ T5720] team_slave_1: mtu greater than device maximum [ 134.791265][ T5720] team0: Device team_slave_1 failed to change mtu [ 134.944816][ T2888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.971277][ T2888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.987715][ T5728] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.017306][ T5728] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.078352][ T5149] Bluetooth: hci3: command tx timeout [ 135.125675][ T2888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.138628][ T5735] siw: device registration error -23 [ 135.155494][ T2888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.881954][ T5767] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 135.894628][ T5767] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 135.929521][ T5767] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 136.370456][ T5792] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.391908][ T5788] vlan2: entered promiscuous mode [ 136.398800][ T5788] bond0: entered promiscuous mode [ 136.405844][ T5788] bond_slave_0: entered promiscuous mode [ 136.417973][ T5788] bond_slave_1: entered promiscuous mode [ 136.424682][ T5788] vlan2: entered allmulticast mode [ 136.436032][ T5788] bond0: entered allmulticast mode [ 136.447013][ T5788] bond_slave_0: entered allmulticast mode [ 136.476998][ T5788] bond_slave_1: entered allmulticast mode [ 136.787791][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.825382][ T5812] vlan3: entered promiscuous mode [ 136.842573][ T5819] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 136.854060][ T5812] bridge0: entered promiscuous mode [ 136.881572][ T5812] bridge0: left promiscuous mode [ 137.060030][ T5820] syzkaller0: entered promiscuous mode [ 137.071658][ T5820] syzkaller0: entered allmulticast mode [ 137.089308][ T5819] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 137.108944][ T5821] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 138.313283][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.706873][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.603722][ T5836] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 139.626380][ T5837] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 140.002676][ T5885] tap0: tun_chr_ioctl cmd 1074025677 [ 140.031840][ T5885] tap0: linktype set to 65534 [ 140.096328][ T29] audit: type=1804 audit(1717478045.795:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir40800080/syzkaller.5fZ82T/62/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 140.205441][ T5893] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 140.313355][ T5898] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.536974][ T5909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.568850][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.794118][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.831280][ T5923] vlan3: entered promiscuous mode [ 140.850718][ T5923] bridge0: entered promiscuous mode [ 140.874589][ T5923] bridge0: left promiscuous mode [ 140.925374][ T29] audit: type=1804 audit(1717478046.625:3): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3564261459/syzkaller.CuuPG8/73/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 141.265294][ T5942] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 141.413678][ T5948] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.606609][ T5942] syz-executor.2 (5942) used greatest stack depth: 18800 bytes left [ 141.641904][ T5961] netlink: 508 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.816302][ T5968] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 141.830406][ T5969] bridge1: entered allmulticast mode [ 142.041617][ T5968] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 142.191192][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.250020][ T5989] vlan2: entered promiscuous mode [ 142.255292][ T5989] bridge0: entered promiscuous mode [ 142.263485][ T5989] bridge0: left promiscuous mode [ 142.319605][ T5996] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.331559][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.346299][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.353573][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.524921][ T6005] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 142.765859][ T6019] Bluetooth: MGMT ver 1.22 [ 143.235198][ T6047] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 143.271682][ T6048] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 143.344492][ T6054] __nla_validate_parse: 5 callbacks suppressed [ 143.344514][ T6054] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.167978][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.195730][ T6101] tipc: Started in network mode [ 144.210472][ T6101] tipc: Node identity 6, cluster identity 4711 [ 144.221876][ T6105] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 144.230470][ T6101] tipc: Node number set to 6 [ 144.358835][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.379162][ T6112] vlan2: entered promiscuous mode [ 144.384278][ T6112] bridge0: entered promiscuous mode [ 144.399369][ T6112] bridge0: left promiscuous mode [ 144.667837][ T5147] Bluetooth: hci3: command tx timeout [ 144.722534][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.734982][ T6131] tipc: Started in network mode [ 144.740305][ T6131] tipc: Node identity 6, cluster identity 4711 [ 144.746841][ T6131] tipc: Node number set to 6 [ 144.865361][ T6139] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 144.952465][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.008208][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.070275][ T6152] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.096142][ T6152] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.779074][ T6190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.942777][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.125691][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.469223][ T29] audit: type=1800 audit(1717478052.165:4): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 146.524979][ T29] audit: type=1804 audit(1717478052.215:5): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/87/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 146.633750][ T29] audit: type=1804 audit(1717478052.275:6): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/87/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 146.747619][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 146.764771][ T29] audit: type=1804 audit(1717478052.285:7): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/87/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 147.263281][ T6280] vlan3: entered promiscuous mode [ 147.290208][ T6280] bridge0: entered promiscuous mode [ 147.335946][ T6280] bridge0: left promiscuous mode [ 147.574858][ T6299] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 147.713978][ T6305] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 147.915514][ T6319] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 147.939817][ T6319] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 148.206947][ T6333] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 148.708230][ T6351] tipc: Can't bind to reserved service type 0 [ 150.089747][ T6408] __nla_validate_parse: 15 callbacks suppressed [ 150.089767][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.138411][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.286814][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.311032][ T6412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.459137][ T6412] tipc: Failed to remove unknown binding: 66,1,1/0:3601111688/3601111690 [ 150.506884][ T6412] tipc: Failed to remove unknown binding: 66,1,1/0:3601111688/3601111690 [ 150.537493][ T6412] tipc: Failed to remove unknown binding: 66,1,1/0:3601111688/3601111690 [ 151.223640][ T6448] dvmrp0: entered allmulticast mode [ 152.677639][ T5149] Bluetooth: hci0: command 0x0c20 tx timeout [ 153.101375][ T6450] dvmrp0: left allmulticast mode [ 153.148838][ T6465] vlan2: entered promiscuous mode [ 153.157751][ T6465] macvtap0: entered promiscuous mode [ 153.171703][ T6465] vlan2: entered allmulticast mode [ 153.190133][ T6465] macvtap0: entered allmulticast mode [ 153.203588][ T6465] veth0_macvtap: entered allmulticast mode [ 153.727604][ T29] audit: type=1800 audit(1717478059.425:8): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 153.779904][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.817621][ T29] audit: type=1804 audit(1717478059.445:9): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/104/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 153.934858][ T29] audit: type=1804 audit(1717478059.535:10): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/104/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 154.004357][ T29] audit: type=1804 audit(1717478059.565:11): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/104/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 154.213885][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.747529][ T5149] Bluetooth: hci0: command 0x0c20 tx timeout [ 154.971996][ T6567] xt_limit: Overflow, try lower: 0/0 [ 155.465559][ T6597] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 155.661230][ T6614] veth1_macvtap: left promiscuous mode [ 155.670846][ T6614] macsec0: entered promiscuous mode [ 155.731971][ T6614] veth1_macvtap: entered promiscuous mode [ 155.759599][ T6614] macsec0: left promiscuous mode [ 156.097896][ T6632] xt_limit: Overflow, try lower: 0/0 [ 156.550797][ T6656] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.576525][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.619015][ T6656] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.656827][ T6664] xt_limit: Overflow, try lower: 0/0 [ 156.673925][ T6656] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 156.717645][ T6656] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 156.755231][ T6656] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.309905][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.663903][ T6703] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 157.680036][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.070863][ T29] audit: type=1804 audit(1717478063.775:12): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir517706112/syzkaller.p5caVE/137/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 158.238506][ T6737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.488778][ T6752] dvmrp0: entered allmulticast mode [ 158.578291][ T6752] dvmrp0: left allmulticast mode [ 158.712310][ T6764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.804261][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.388392][ T6796] syzkaller0: entered allmulticast mode [ 159.915905][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.464815][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.498972][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.926998][ T6866] netlink: 'syz-executor.2': attribute type 22 has an invalid length. [ 160.960937][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.187935][ T6877] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.313246][ T6885] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 161.445840][ T6889] syzkaller0: entered allmulticast mode [ 161.774097][ T6903] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 161.974319][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.014232][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.082901][ T6926] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 162.929836][ T6954] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.082627][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.388115][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.415754][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.630514][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.200171][ T7011] IPv6: sit1: Disabled Multicast RS [ 164.206185][ T7011] sit1: entered allmulticast mode [ 164.497116][ T7021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.538453][ T7019] xt_CT: No such helper "pptp" [ 164.550024][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.716111][ T7019] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 164.739806][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.788972][ T7033] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.619026][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.626787][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.431097][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.502975][ T7019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.702016][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.717008][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.034567][ T7019] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.060251][ T7019] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.072974][ T7019] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.085275][ T7019] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.100267][ T29] audit: type=1804 audit(1717478072.805:13): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir517706112/syzkaller.p5caVE/169/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 167.114729][ T7098] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 167.399604][ T7104] Bluetooth: hci3: unsupported parameter 64512 [ 167.405823][ T7104] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 168.114190][ T7137] __nla_validate_parse: 2 callbacks suppressed [ 168.114211][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.142370][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.166706][ T7137] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.370660][ T7153] sctp: [Deprecated]: syz-executor.2 (pid 7153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.370660][ T7153] Use struct sctp_sack_info instead [ 168.411706][ T7156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.586486][ T7163] IPv6: sit1: Disabled Multicast RS [ 168.624596][ T7163] sit1: entered allmulticast mode [ 168.692009][ T7169] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 168.899787][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.939517][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.070760][ T7192] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 169.088074][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.336830][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.142859][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.046746][ T7287] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 171.058126][ T7287] netlink: 128636 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.224836][ T7291] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.528494][ T7305] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.550841][ T7305] ip6gretap0: entered promiscuous mode [ 172.177324][ T7342] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 172.298082][ T7349] xt_TCPMSS: Only works on TCP SYN packets [ 172.840516][ T7379] xt_TCPMSS: Only works on TCP SYN packets [ 173.289901][ T7404] batadv0: entered promiscuous mode [ 173.295294][ T7409] __nla_validate_parse: 3 callbacks suppressed [ 173.295331][ T7409] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.484623][ T29] audit: type=1804 audit(1717478079.185:14): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3564261459/syzkaller.CuuPG8/207/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 174.029288][ T7442] netlink: 864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.062107][ T7442] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.073780][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.139984][ T7448] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 174.180417][ T7447] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 174.667308][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.701334][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.352302][ T7505] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 175.377953][ T7505] netlink: 'syz-executor.2': attribute type 44 has an invalid length. [ 175.728646][ T7526] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 175.748019][ T7523] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 175.754723][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.795328][ T7526] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 175.850881][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 176.063643][ T7542] bond0: entered promiscuous mode [ 176.345086][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.778769][ T7567] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 177.648927][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.796934][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.475406][ T29] audit: type=1800 audit(1717478084.175:15): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 178.532588][ T29] audit: type=1804 audit(1717478084.175:16): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir517706112/syzkaller.p5caVE/217/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 178.597792][ T7663] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 178.641977][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.696939][ T7671] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 178.748680][ T7671] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 178.813417][ T7677] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.870407][ T29] audit: type=1804 audit(1717478084.575:17): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir40800080/syzkaller.5fZ82T/211/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 179.277301][ T5149] Bluetooth: hci3: link tx timeout [ 179.283200][ T5149] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.294069][ T5147] Bluetooth: hci3: link tx timeout [ 179.301972][ T5147] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.485025][ T7713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.599461][ T7717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.616772][ T7717] batadv_slave_1: entered promiscuous mode [ 179.706259][ T7719] Bluetooth: MGMT ver 1.22 [ 179.998760][ T7743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.510606][ T7761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.550199][ T7761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.377198][ T7801] netlink: 'syz-executor.0': attribute type 49 has an invalid length. [ 181.386488][ T7801] netlink: 'syz-executor.0': attribute type 49 has an invalid length. [ 181.395112][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 182.588963][ T7868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.231010][ T7901] ipvlan2: entered promiscuous mode [ 183.236600][ T7901] ipvlan2: entered allmulticast mode [ 183.242590][ T7901] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 183.467533][ T5149] Bluetooth: hci3: command 0x0405 tx timeout [ 183.806436][ T7933] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.822651][ T7933] ip6gretap0: entered promiscuous mode [ 183.834731][ T7933] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.137224][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.162083][ T7955] batadv_slave_1: entered promiscuous mode [ 184.335742][ T7964] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 184.350825][ T7964] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 184.530059][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.831694][ T8001] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 184.921290][ T8005] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.515592][ T8044] xt_TCPMSS: Only works on TCP SYN packets [ 185.926565][ T8068] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 186.268561][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 186.508321][ T8110] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 186.520153][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.593290][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.986083][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.139792][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.165356][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.700108][ T8183] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 187.770093][ T8188] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 187.870280][ T8195] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 188.168922][ T8214] xt_ecn: cannot match TCP bits for non-tcp packets [ 188.266574][ T8222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.324999][ T8222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.325014][ T8224] xt_TCPMSS: Only works on TCP SYN packets [ 188.336600][ T8228] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 188.834745][ T8259] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 188.951140][ T8265] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 188.988214][ T5147] Bluetooth: hci3: command 0x0405 tx timeout [ 189.158988][ T8283] tipc: Started in network mode [ 189.166126][ T8283] tipc: Node identity ac1414aa, cluster identity 4711 [ 189.175713][ T8283] tipc: Enabled bearer , priority 10 [ 189.219536][ T8283] tipc: Disabling bearer [ 189.310447][ T8288] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 189.326423][ T8288] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.349402][ T8295] xt_TCPMSS: Only works on TCP SYN packets [ 189.366832][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.784754][ T8324] xt_TCPMSS: Only works on TCP SYN packets [ 189.792634][ T8323] tipc: Started in network mode [ 189.825460][ T8323] tipc: Node identity ac1414aa, cluster identity 4711 [ 189.844213][ T8323] tipc: Enabled bearer , priority 10 [ 189.874509][ T8323] tipc: Disabling bearer [ 190.214996][ T8356] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 190.229431][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.368249][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.546215][ T8378] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 190.644186][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.654095][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.676870][ T8388] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 190.869142][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.889205][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.900470][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.957178][ T8401] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 191.300856][ T8421] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 191.326016][ T8421] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 191.360741][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.561660][ T8439] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 192.339595][ T8481] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 193.012394][ T8524] xt_ipcomp: unknown flags B [ 193.230405][ T8541] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 193.249739][ T8542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.290877][ T8542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.096050][ T8580] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 194.395338][ T8599] __nla_validate_parse: 10 callbacks suppressed [ 194.395359][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.413716][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.671843][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.679687][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.011310][ T8682] lo speed is unknown, defaulting to 1000 [ 197.745760][ T8707] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.762115][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.108379][ T8777] xt_CT: No such helper "pptp" [ 199.114168][ T8786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.213380][ T8777] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 199.229496][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.520639][ T29] audit: type=1804 audit(1717478105.225:18): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3564261459/syzkaller.CuuPG8/332/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 201.040383][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.116730][ T8777] batadv_slave_1: left promiscuous mode [ 201.460608][ T8777] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.470468][ T8777] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.479842][ T8777] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.489157][ T8777] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.587565][ T8] lo speed is unknown, defaulting to 1000 [ 202.214010][ T8874] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.254798][ T8874] 0ªX¹¦D: renamed from gretap0 (while UP) [ 202.276862][ T8874] 0ªX¹¦D: entered allmulticast mode [ 202.290300][ T8874] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 202.433632][ T8889] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 202.443288][ T8889] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.114042][ T8927] xt_CT: No such helper "pptp" [ 203.152518][ T8927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.201940][ T8927] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 203.210791][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.277936][ T8927] 0ªX¹¦D: left allmulticast mode [ 203.577963][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.585827][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.666594][ T8927] bond0: left allmulticast mode [ 203.683947][ T8927] bond_slave_0: left allmulticast mode [ 203.692918][ T8927] bond_slave_1: left allmulticast mode [ 203.698741][ T8927] bond0: left promiscuous mode [ 203.704022][ T8927] bond_slave_0: left promiscuous mode [ 203.710164][ T8927] bond_slave_1: left promiscuous mode [ 204.026462][ T8949] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.279687][ T8958] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.501117][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.575313][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.011005][ T8927] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.027830][ T8927] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.036745][ T8927] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.045966][ T8927] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.213653][ T8927] vlan2: left promiscuous mode [ 205.232601][ T8927] vlan2: left allmulticast mode [ 206.677039][ T9065] tun0: tun_chr_ioctl cmd 1074025677 [ 206.692214][ T9065] tun0: linktype set to 823 [ 207.096185][ T9082] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 207.374570][ T9098] Bluetooth: hci3: invalid length 0, exp 2 for type 23 [ 207.445753][ T9103] tun0: tun_chr_ioctl cmd 1074025677 [ 207.459036][ T9103] tun0: linktype set to 823 [ 207.995569][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.212672][ T9228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.535508][ T9249] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 209.547207][ T9243] : renamed from ipvlan1 [ 209.893606][ T9264] pim6reg: entered allmulticast mode [ 209.958820][ T9264] pim6reg: left allmulticast mode [ 210.023074][ T9272] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 210.474922][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.619772][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.298056][ T9330] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.763559][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.332327][ T9365] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.352997][ T9365] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 212.558501][ T9374] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 212.599997][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.955807][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.151441][ T9414] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 213.187715][ T9414] nbd: illegal input index -1708589048 [ 213.218649][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.326178][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.509120][ T9428] lo: Caught tx_queue_len zero misconfig [ 213.672857][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.785357][ T9437] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.801028][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.814302][ T9437] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.930000][ T9444] bond0: Unable to set down delay as MII monitoring is disabled [ 214.086175][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.212423][ T9463] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.296370][ T9466] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 214.323944][ T9466] nbd: illegal input index -1708589048 [ 214.362231][ T9470] geneve1: entered promiscuous mode [ 214.377555][ T9470] geneve1: entered allmulticast mode [ 214.444442][ T9470] team0: Port device geneve1 added [ 214.784412][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.032120][ T29] audit: type=1804 audit(1717478120.735:19): pid=9495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir40800080/syzkaller.5fZ82T/375/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 215.099911][ T29] audit: type=1804 audit(1717478120.795:20): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3564261459/syzkaller.CuuPG8/416/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 215.272882][ T9506] netlink: 1084 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.305491][ T9548] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 216.388111][ T9548] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.397227][ T9548] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.406203][ T9548] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.415016][ T9548] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.447649][ T9537] infiniband syz0: set down [ 216.453296][ T9548] vxlan0: entered promiscuous mode [ 216.458624][ T9537] infiniband syz0: added batadv_slave_1 [ 216.607226][ T9537] RDS/IB: syz0: added [ 216.635363][ T9537] smc: adding ib device syz0 with port count 1 [ 216.676750][ T9537] smc: ib device syz0 port 1 has pnetid [ 217.213692][ T9598] ip_vti0: entered promiscuous mode [ 217.225745][ T9598] vlan3: entered promiscuous mode [ 217.240665][ T9598] vlan3: entered allmulticast mode [ 217.249488][ T9598] ip_vti0: entered allmulticast mode [ 217.282770][ T9598] ip_vti0: left allmulticast mode [ 217.300027][ T9598] ip_vti0: left promiscuous mode [ 217.335115][ T9606] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 218.638777][ T9680] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 219.184806][ T9713] lo speed is unknown, defaulting to 1000 [ 219.461029][ T9733] __nla_validate_parse: 5 callbacks suppressed [ 219.461050][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.496566][ T9736] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 219.516889][ T9733] vxcan3: entered promiscuous mode [ 219.558367][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.674759][ T9744] bridge0: port 3(macsec0) entered blocking state [ 219.691478][ T9744] bridge0: port 3(macsec0) entered disabled state [ 219.710040][ T9744] macsec0: entered allmulticast mode [ 219.738460][ T9744] veth1_macvtap: entered allmulticast mode [ 219.751888][ T9744] macsec0: entered promiscuous mode [ 219.760103][ T9744] bridge0: port 3(macsec0) entered blocking state [ 219.766730][ T9744] bridge0: port 3(macsec0) entered forwarding state [ 220.001829][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.027209][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.160755][ T9713] could not set up IPv6 listen sock [ 220.381168][ T9780] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.403789][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.472340][ T9775] vxcan3: entered promiscuous mode [ 220.502582][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.601849][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.627238][ T9790] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 220.989527][ T9810] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 221.220627][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.251748][ T9823] xt_socket: unknown flags 0x8 [ 221.272922][ T9819] vxcan3: entered promiscuous mode [ 221.278698][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.342881][ T9821] block nbd0: not configured, cannot reconfigure [ 223.340066][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.352601][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.361262][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.377635][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.385627][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.393892][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.477778][ T9931] lo speed is unknown, defaulting to 1000 [ 224.106178][ T62] bridge_slave_1: left allmulticast mode [ 224.130579][ T62] bridge_slave_1: left promiscuous mode [ 224.136415][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.182762][ T62] bridge_slave_0: left allmulticast mode [ 224.197947][ T62] bridge_slave_0: left promiscuous mode [ 224.204710][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.594610][ T9971] __nla_validate_parse: 3 callbacks suppressed [ 224.594630][ T9971] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.464671][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.473692][ T5149] Bluetooth: hci2: command tx timeout [ 225.481980][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.493022][ T62] bond0 (unregistering): Released all slaves [ 225.504956][ T62] bond1 (unregistering): Released all slaves [ 225.521407][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.533695][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.557603][ T9983] tap0: tun_chr_ioctl cmd 1074025677 [ 225.563191][ T9983] tap0: linktype set to 804 [ 225.698974][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.840448][T10012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.864173][T10016] syz-executor.0[10016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.864591][T10016] syz-executor.0[10016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.054185][T10019] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.204787][ T9931] chnl_net:caif_netlink_parms(): no params data found [ 226.407451][ T62] hsr_slave_0: left promiscuous mode [ 226.438286][ T62] hsr_slave_1: left promiscuous mode [ 226.477442][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.504597][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.766543][T10055] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 227.326110][ T62] team0 (unregistering): Port device team_slave_1 removed [ 227.393034][ T62] team0 (unregistering): Port device team_slave_0 removed [ 227.547781][ T5149] Bluetooth: hci2: command tx timeout [ 227.920962][T10087] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 228.057620][T10088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.092695][T10088] bond0: (slave bond1): Enslaving as an active interface with an up link [ 228.286419][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.306896][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.345836][ T9931] bridge_slave_0: entered allmulticast mode [ 228.368382][ T9931] bridge_slave_0: entered promiscuous mode [ 228.386646][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.394981][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.416329][ T9931] bridge_slave_1: entered allmulticast mode [ 228.435464][ T9931] bridge_slave_1: entered promiscuous mode [ 228.580624][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.641549][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.760391][ T9931] team0: Port device team_slave_0 added [ 228.782411][ T9931] team0: Port device team_slave_1 added [ 228.898816][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.925384][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.978392][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.013410][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.035458][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.075859][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.208688][ T9931] hsr_slave_0: entered promiscuous mode [ 229.223147][ T9931] hsr_slave_1: entered promiscuous mode [ 229.249219][ T9931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.257270][ T9931] Cannot create hsr debugfs directory [ 229.292174][T10161] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.443786][T10168] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.628130][ T5149] Bluetooth: hci2: command tx timeout [ 229.836183][T10193] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 230.087965][T10211] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 230.203590][T10211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.213323][T10211] bond0: (slave bond2): Enslaving as an active interface with an up link [ 230.273968][ T9931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.295173][T10222] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 230.335455][ T9931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.390450][ T9931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.421701][ T9931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.681477][ T9931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.717211][T10242] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 230.736820][ T9931] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.742793][T10248] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 230.795609][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.802791][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.871066][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.878354][ T5181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.236846][T10271] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 231.424810][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.571991][ T9931] veth0_vlan: entered promiscuous mode [ 231.611222][ T9931] veth1_vlan: entered promiscuous mode [ 231.657163][ T9931] veth0_macvtap: entered promiscuous mode [ 231.679559][ T9931] veth1_macvtap: entered promiscuous mode [ 231.719706][ T5149] Bluetooth: hci2: command tx timeout [ 231.734761][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.766818][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.783748][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.796191][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.814682][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.852524][ T9931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.866186][ T9931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.893293][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.927289][ T9931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.936535][ T9931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.952357][ T9931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.977994][ T9931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.215802][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.244348][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.335946][T10321] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 232.400819][T10321] bond0: entered promiscuous mode [ 232.406256][T10321] bond_slave_0: entered promiscuous mode [ 232.415663][ T29] audit: type=1804 audit(1717478138.115:21): pid=10323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3564261459/syzkaller.CuuPG8/492/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 232.450003][T10321] bond_slave_1: entered promiscuous mode [ 232.460929][T10321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.497722][T10321] bond0: left promiscuous mode [ 232.514109][T10321] bond_slave_0: left promiscuous mode [ 232.545350][T10321] bond_slave_1: left promiscuous mode [ 232.624295][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.661797][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.103453][T10356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.178675][T10406] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 234.396230][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.408515][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.416287][ T29] audit: type=1804 audit(1717478140.115:22): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir992228688/syzkaller.hNIdoq/378/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 234.462145][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.490523][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.501378][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.516047][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.616697][T10414] lo speed is unknown, defaulting to 1000 [ 235.168362][T10414] chnl_net:caif_netlink_parms(): no params data found [ 235.540687][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.558681][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.565951][T10414] bridge_slave_0: entered allmulticast mode [ 235.580242][T10414] bridge_slave_0: entered promiscuous mode [ 235.589830][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.600450][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.622663][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.656991][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.676100][T10414] bridge_slave_1: entered allmulticast mode [ 235.683715][T10414] bridge_slave_1: entered promiscuous mode [ 235.691713][T10478] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 235.905209][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.976671][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.090309][T10414] team0: Port device team_slave_0 added [ 236.119543][T10414] team0: Port device team_slave_1 added [ 236.283757][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.301718][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.358630][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.428918][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.447768][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.477253][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.501080][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.560835][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.588459][ T5150] Bluetooth: hci2: command tx timeout [ 236.683100][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.772744][ T29] audit: type=1804 audit(1717478142.475:23): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir992228688/syzkaller.hNIdoq/386/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 236.841301][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.893512][T10414] hsr_slave_0: entered promiscuous mode [ 236.934891][T10414] hsr_slave_1: entered promiscuous mode [ 236.961268][T10414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.972359][T10414] Cannot create hsr debugfs directory [ 237.105522][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.275868][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.325011][T10545] ip6gretap0: entered promiscuous mode [ 237.349952][T10545] batadv_slave_0: entered promiscuous mode [ 237.369015][T10545] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 237.382089][T10545] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.393536][T10545] hsr1: entered allmulticast mode [ 237.398969][T10545] ip6gretap0: entered allmulticast mode [ 237.404800][T10545] batadv_slave_0: entered allmulticast mode [ 237.708273][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 237.714387][ T5150] Bluetooth: hci4: command 0x0406 tx timeout [ 237.758920][ T12] bridge_slave_1: left allmulticast mode [ 237.767168][ T12] bridge_slave_1: left promiscuous mode [ 237.773624][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.786150][ T12] bridge_slave_0: left allmulticast mode [ 237.793370][ T12] bridge_slave_0: left promiscuous mode [ 237.797990][T10565] openvswitch: netlink: Unknown key attributes 1 [ 237.804783][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.284963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.297512][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.318271][ T12] bond0 (unregistering): Released all slaves [ 238.668001][ T5147] Bluetooth: hci2: command tx timeout [ 239.086476][T10414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.126594][ T12] hsr_slave_0: left promiscuous mode [ 239.133087][T10623] --map-set only usable from mangle table [ 239.140209][ T12] hsr_slave_1: left promiscuous mode [ 239.146481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.154690][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.181855][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.189501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.219985][ T12] veth1_macvtap: left promiscuous mode [ 239.225709][ T12] veth0_macvtap: left promiscuous mode [ 239.231801][ T12] veth1_vlan: left promiscuous mode [ 239.237270][ T12] veth0_vlan: left promiscuous mode [ 239.862306][ T12] team0 (unregistering): Port device team_slave_1 removed [ 239.901542][ T12] team0 (unregistering): Port device team_slave_0 removed [ 240.261933][T10414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.274104][T10414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.294074][T10414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.407073][T10644] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 240.629839][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.730784][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.753422][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.767494][ T5147] Bluetooth: hci2: command tx timeout [ 240.776350][T10656] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 240.828335][ T29] audit: type=1804 audit(1717478146.535:24): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/485/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 240.835503][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.981557][T10414] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.039081][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.046234][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.111989][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.119183][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.134456][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.164714][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.427807][ T29] audit: type=1804 audit(1717478147.125:25): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=E3CED329A1618B95918620A1835F7756B82C1D5A75A8F115D6E756D2DD357320F63759526F59C0CA dev="sda1" ino=1942 res=1 errno=0 [ 241.463697][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.489461][T10690] xt_l2tp: invalid flags combination: c [ 241.651656][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.802149][T10414] veth0_vlan: entered promiscuous mode [ 241.825780][T10707] IPv6: Can't replace route, no match found [ 241.843971][T10414] veth1_vlan: entered promiscuous mode [ 241.926703][T10414] veth0_macvtap: entered promiscuous mode [ 241.955028][T10414] veth1_macvtap: entered promiscuous mode [ 241.981895][ T29] audit: type=1804 audit(1717478147.685:26): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=E3CED329A1618B95918620A1835F7756B82C1D5A75A8F115D6E756D2DD357320F63759526F59C0CA dev="sda1" ino=1951 res=1 errno=0 [ 242.061349][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.074748][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.085254][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.095858][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.107131][T10414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.116709][T10721] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 242.250134][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.269639][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.293768][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.827796][ T5147] Bluetooth: hci2: command tx timeout [ 243.808653][T10414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.819499][T10414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.828825][T10414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.837595][T10414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.142988][ T5181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.166189][ T5181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.248219][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.264786][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.401639][T10769] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.411217][T10769] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.420019][T10769] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.428914][T10769] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.652327][T10784] IPv6: Can't replace route, no match found [ 245.019694][T10806] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 245.472134][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.684107][ T29] audit: type=1804 audit(1717478151.385:27): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1932845945/syzkaller.uXkiTX/497/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 246.330891][T10871] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.376261][T10871] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.469908][T10875] bridge_slave_0: default FDB implementation only supports local addresses [ 247.174623][T10905] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 247.248629][T10907] lo speed is unknown, defaulting to 1000 [ 247.554682][T10927] xt_HMARK: spi-set and port-set can't be combined [ 248.439407][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.209728][T10997] No such timeout policy "syz1" [ 251.069741][T11062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.120087][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.126417][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.186494][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.197796][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.205542][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.263333][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.276526][ T5149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.297559][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.453983][ T5149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.463640][ T5149] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.477016][ T5149] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.486044][ T5149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.493811][ T5149] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.501239][ T5149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.588051][ T5149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.597474][ T5149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.605468][ T5149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.626316][ T5146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.635526][ T5146] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.644573][ T5146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 280.652182][ T5150] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.663537][ T5146] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 280.677986][ T5146] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 280.690056][ T5146] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 280.702251][ T5146] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 280.709683][ T5146] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 281.597193][ T5149] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 281.613029][ T5149] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 281.621026][ T5149] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 281.634844][ T5149] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 281.642752][ T5149] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 281.651436][ T5149] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 282.355338][ T5146] Bluetooth: hci5: command tx timeout [ 282.587638][ T5146] Bluetooth: hci6: command tx timeout [ 282.749360][ T5146] Bluetooth: hci8: command tx timeout [ 282.749386][ T5149] Bluetooth: hci7: command tx timeout [ 283.707648][ T5146] Bluetooth: hci9: command tx timeout [ 284.428448][ T5146] Bluetooth: hci5: command tx timeout [ 284.674692][ T5146] Bluetooth: hci6: command tx timeout [ 284.835653][ T5149] Bluetooth: hci8: command tx timeout [ 284.841171][ T5146] Bluetooth: hci7: command tx timeout [ 285.787564][ T5146] Bluetooth: hci9: command tx timeout [ 286.507559][ T5146] Bluetooth: hci5: command tx timeout [ 286.747507][ T5146] Bluetooth: hci6: command tx timeout [ 286.907649][ T5146] Bluetooth: hci7: command tx timeout [ 286.907671][ T5149] Bluetooth: hci8: command tx timeout [ 287.867965][ T5149] Bluetooth: hci9: command tx timeout [ 288.595301][ T5149] Bluetooth: hci5: command tx timeout [ 288.837521][ T5149] Bluetooth: hci6: command tx timeout [ 288.988629][ T5149] Bluetooth: hci8: command tx timeout [ 288.997547][ T5149] Bluetooth: hci7: command tx timeout [ 289.948919][ T5149] Bluetooth: hci9: command tx timeout [ 317.552710][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.567433][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.247446][ T5146] Bluetooth: hci3: command 0x0405 tx timeout [ 345.552673][ T5146] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 345.583947][ T5146] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 345.597595][ T5146] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 345.617599][ T5146] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 345.637719][ T5146] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 345.645162][ T5146] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.716355][ T5146] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 345.725756][ T5146] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 345.737319][ T5150] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 345.737837][ T5146] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 345.754578][ T5150] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 345.755084][ T5146] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 345.769835][ T5146] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 345.778245][ T5146] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 345.786701][ T5146] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 345.790960][ T5150] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 345.797729][ T5146] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 345.801561][ T5150] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 345.876944][ T5146] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 345.886731][ T5146] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 345.894692][ T5146] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 345.902943][ T5146] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 345.910938][ T5146] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 345.919051][ T5146] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 346.583300][ T5146] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 346.598524][ T5146] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 346.613279][ T5146] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 346.621527][ T5146] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 346.630445][ T5146] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 346.637953][ T5146] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 347.707561][ T5149] Bluetooth: hci10: command tx timeout [ 347.867637][ T5146] Bluetooth: hci11: command tx timeout [ 347.875522][ T5149] Bluetooth: hci12: command tx timeout [ 347.947775][ T5149] Bluetooth: hci13: command tx timeout [ 348.667602][ T5149] Bluetooth: hci14: command tx timeout [ 349.787586][ T5149] Bluetooth: hci10: command tx timeout [ 349.947674][ T5149] Bluetooth: hci12: command tx timeout [ 349.953201][ T5149] Bluetooth: hci11: command tx timeout [ 350.027720][ T5149] Bluetooth: hci13: command tx timeout [ 350.747532][ T5149] Bluetooth: hci14: command tx timeout [ 351.874965][ T5149] Bluetooth: hci10: command tx timeout [ 352.027713][ T5149] Bluetooth: hci11: command tx timeout [ 352.027721][ T5146] Bluetooth: hci12: command tx timeout [ 352.107855][ T5149] Bluetooth: hci13: command tx timeout [ 352.827587][ T5149] Bluetooth: hci14: command tx timeout [ 353.947996][ T5149] Bluetooth: hci10: command tx timeout [ 354.107505][ T5149] Bluetooth: hci11: command tx timeout [ 354.107515][ T5146] Bluetooth: hci12: command tx timeout [ 354.199432][ T5146] Bluetooth: hci13: command tx timeout [ 354.907609][ T5146] Bluetooth: hci14: command tx timeout [ 370.827692][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 378.991944][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.006846][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.187823][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 398.195415][ T30] Not tainted 6.10.0-rc1-syzkaller-00248-g83042ce9b7c3 #0 [ 398.206011][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.215836][ T30] task:kworker/1:0 state:D stack:21840 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 398.226099][ T30] Workqueue: events_power_efficient check_lifetime [ 398.232705][ T30] Call Trace: 2024/06/04 05:18:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 398.237087][ T30] [ 398.240266][ T30] __schedule+0x17e8/0x4a20 [ 398.244810][ T30] ? __pfx___schedule+0x10/0x10 [ 398.260918][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.266935][ T30] ? __pfx_lock_release+0x10/0x10 [ 398.272281][ T30] ? kick_pool+0x1bd/0x620 [ 398.276723][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.282088][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 398.287303][ T30] ? schedule+0x90/0x320 [ 398.291934][ T30] schedule+0x14b/0x320 [ 398.303715][ T30] schedule_preempt_disabled+0x13/0x30 [ 398.312218][ T30] __mutex_lock+0x6a4/0xd70 [ 398.316760][ T30] ? __mutex_lock+0x527/0xd70 [ 398.326033][ T30] ? check_lifetime+0x433/0x960 [ 398.332136][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 398.337199][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.351248][ T30] check_lifetime+0x433/0x960 [ 398.355958][ T30] ? check_lifetime+0x73/0x960 [ 398.364058][ T30] ? process_scheduled_works+0x945/0x1830 [ 398.373209][ T30] process_scheduled_works+0xa2c/0x1830 [ 398.378925][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.384927][ T30] ? assign_work+0x364/0x3d0 [ 398.395896][ T30] worker_thread+0x86d/0xd70 [ 398.407597][ T30] ? __kthread_parkme+0x169/0x1d0 [ 398.412652][ T30] ? __pfx_worker_thread+0x10/0x10 [ 398.437587][ T30] kthread+0x2f0/0x390 [ 398.442702][ T30] ? __pfx_worker_thread+0x10/0x10 [ 398.457409][ T30] ? __pfx_kthread+0x10/0x10 [ 398.462027][ T30] ret_from_fork+0x4b/0x80 [ 398.466458][ T30] ? __pfx_kthread+0x10/0x10 [ 398.487452][ T30] ret_from_fork_asm+0x1a/0x30 [ 398.492268][ T30] [ 398.495411][ T30] INFO: task syz-executor.3:11025 blocked for more than 143 seconds. [ 398.517424][ T30] Not tainted 6.10.0-rc1-syzkaller-00248-g83042ce9b7c3 #0 [ 398.525075][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 398.535918][ T30] task:syz-executor.3 state:D stack:26112 pid:11025 tgid:11022 ppid:5133 flags:0x00000006 [ 398.548234][ T30] Call Trace: [ 398.551534][ T30] [ 398.554478][ T30] __schedule+0x17e8/0x4a20 [ 398.559116][ T30] ? __pfx___schedule+0x10/0x10 [ 398.563986][ T30] ? __pfx_lock_release+0x10/0x10 [ 398.569126][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 398.574615][ T30] ? schedule+0x90/0x320 [ 398.584320][ T30] schedule+0x14b/0x320 [ 398.588662][ T30] schedule_preempt_disabled+0x13/0x30 [ 398.594137][ T30] __mutex_lock+0x6a4/0xd70 [ 398.598828][ T30] ? __mutex_lock+0x527/0xd70 [ 398.603529][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 398.614832][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 398.620963][ T30] ? __nla_parse+0x40/0x60 [ 398.625417][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 398.635933][ T30] genl_rcv_msg+0xaaa/0xe