last executing test programs: 5.311164612s ago: executing program 1 (id=3541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) 5.248147086s ago: executing program 1 (id=3542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000d200850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f9ffffff8500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.108445172s ago: executing program 1 (id=3546): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES16=r7, @ANYRESOCT=r2, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b051000e0ff030006004788aa96a13bb100000000008848400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa0, 0x11, 0x148, 0xa0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.099936358s ago: executing program 2 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00', @ANYBLOB="2309800000000000000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000180)=""/109, 0x6d}, {0x0}], 0x3, &(0x7f0000000740)=""/202, 0xca}, 0x9}, {{&(0x7f0000000840)=@tipc=@name, 0x80, &(0x7f0000000080)=[{&(0x7f00000008c0)=""/209, 0xd1}], 0x1, &(0x7f0000000cc0)=""/4096, 0x1000}, 0x7}], 0x2, 0x0, &(0x7f0000000200)) recvmmsg$unix(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 3.090792616s ago: executing program 2 (id=3584): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@remote}, 0x0, @in=@private, 0x0, 0xc17845d3a4071853}}, 0xe8) socket$inet_tcp(0x2, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x80, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xc0, 0x800, 0x8, 0x8, 0x1f, 0x0, 0x3, 0x40, r4}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x110}}], 0x3, 0x0) 2.150642362s ago: executing program 2 (id=3595): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_dellink={0x34, 0x11, 0x0, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x64004}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}]}, 0x34}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000400)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r9, 0x0) close(r9) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001900010004060000000000001d0109000800d3006401010199000680596ba1e9531921c3af1a61cacf3a2cb9bb5cd0bf73ed94c551f271fe52097b0b7e1869d38c7f699157808093e5ae94e28352d9e6b886cc1342a9f60da02a7aad0d609c3121b93d2514da9094da38a2a384f2d2138aa29a6a6bda405f7b74a89bc4e40b5243fd22b133b33bae78126a311c5df2990e8227ea3b06088a6893f038d10c9452cd810c0000000500"/181], 0xb8}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 1.415918853s ago: executing program 0 (id=3607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) unshare(0x40400) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 1.271612749s ago: executing program 0 (id=3610): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 1.216549728s ago: executing program 2 (id=3611): syz_emit_ethernet(0x2a, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6353, @private1, 0x1000}, 0x1c) listen(r0, 0x1000000) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e26, 0x0, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8929, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12, 0x0, 0xd, "fbdbf978590aa1b88c44306d20"}}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000180)=0x5, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) pipe(&(0x7f0000001080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.197022978s ago: executing program 0 (id=3612): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.188706886s ago: executing program 4 (id=3613): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 1.099161651s ago: executing program 0 (id=3615): r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, &(0x7f0000000000)) 1.023169598s ago: executing program 4 (id=3616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 938.933151ms ago: executing program 4 (id=3618): socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 936.624215ms ago: executing program 0 (id=3619): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00%', 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 889.700167ms ago: executing program 3 (id=3620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) unshare(0x40400) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 838.402131ms ago: executing program 0 (id=3621): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000e800850000004800000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20045040) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) close(r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x4004012}, 0x20000080) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x204000, 0x1000}, 0x20) 749.091492ms ago: executing program 3 (id=3622): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 593.735889ms ago: executing program 3 (id=3623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 458.281766ms ago: executing program 3 (id=3624): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0) 367.462658ms ago: executing program 4 (id=3625): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='+\x00'}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 349.790736ms ago: executing program 3 (id=3626): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) 282.57122ms ago: executing program 2 (id=3627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_getlink={0x3c, 0x12, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_EXT_MASK={0x8}]}, 0x3c}}, 0x0) 262.150256ms ago: executing program 4 (id=3628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 193.682548ms ago: executing program 3 (id=3629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 141.665029ms ago: executing program 4 (id=3630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, 0x0) 127.329967ms ago: executing program 1 (id=3631): syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00%', 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}, 0x10) 120.447226ms ago: executing program 2 (id=3632): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0xd3d}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000085009565a14100000e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7022533cd000008000000b70300000100008000000000700000009551c92a4d63c84e"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000cc2c850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x49) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000180), 0x4) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_a, @random="9136c8408ab7", {0x9, 0x2}, @value=@ver_80211n={0x0, 0x46, 0x3, 0x3, 0x0, 0x0, 0x1}}, 0xec06, 0x4, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x400, 0x1, 0x3, 0x0, {0x7fffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x4, 0x3}}, [{0xdd, 0xc3, "811bec8a68fc721afee1399767156307c174b4986a178389ab116bb7ee81a8849f5cf9350d83edf14305475ede897ca36dc50b92dfbece2ac55a9e0863d3bc4428d75e4311436ad910d75b108a7281b74c558ba0440bc41c1807aaa578e3d648a167da06a407b5f17ac20980de21b8339aaaa4ab15999d148e6b0e49438a996583009d379297e78f9b22ee3e1445c6511b0102e7aeb5dadfa2f67b92c2cd7313363334b49907a7f0353b12d7ba1642d14ea3e0a71ea13aff133a5ab72a2100386af1e8"}, {0xdd, 0x81, "9f3c509168f691934aa2421dfcfca8894e68d53bef5e59ae268a887d1e26e6430f6b1637a8c776a043ea946101524907afa365f4ae2d6b41ee584b6efa58a3c688a74593aa78fd2e03285523c215b5594ec48980bcfdf150820ebc4e7b9ec4056f2ca3dea9df47208841a4dd80ccf55005e6a8e607a65a5aaea466afe68dc8d0d8"}, {0xdd, 0xb3, "918d2a16d4518a64c499912d6be3ad094eef602b34dcd430449fb7b07af0713c0004746b197e88815372704b0cc563565714c335262adb420e7b417befc1c3e12bb9ec678ad1f4743aaa39639409f38db853e056261096835f54b0d8033da7f1091e33fd42367e5b6701cef39ee49a38dfcb80a06f1570bbd34cf98c7d282edcfcf60f8c30879a1c58cce45e6646940349b9f0669eddccc86b79dce71adf9f9e7c7915c465e44010a22b1f7a47756babedc29a"}, {0xdd, 0x50, "ba19058e16ffe148e4a3fdb299be56eafbaa00df760f93e6fb109555689790ad3dbe29325f2941484010de5d8c2dbc5cfab2a671914e7753e48956b509324f6a283851fe26db363497835098504be89d"}, {0xdd, 0x4e, "d4de64ab65be72867453bc25566d76ee2d9604476ac5e7a0b505c432f65189c9afb73a3a2502dcf3ef861defb8da81b760f55e3d4fcbabb5369d3fd993f0e7d4ee3910a6b41c61ea8e8da8abb2a9"}, {0xdd, 0x29, "eda33da4e14f9e43c5610d73662223a35f74f51b45529681020945e39d59610b0983e519a6a4b9beed"}, {0xdd, 0x1e, "1566e9e596a00b933d253f80a9f2b3883754ea64ccee026983425effb7b8"}]}, 0x32e) sendmsg$802154_dgram(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @short}, 0x14, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766972745f776966693000000000000008000a00", @ANYRES32=r5, @ANYBLOB="b721b6aba48731f5fb685b20069759c9623e2b861655f24d1f5a37fc40110b5ec0eaf8d860bc1eb69f10b62e8e15d352e80f3007c34b58f4ce41cfa101ee1491a85f70ceb43ce2a62d44177bdb1a418b276f1f089e2ec48a0e4ba0cab96c4760bde1841a198e7bda0ce0c04f2c3ce65d288c6a8cfb5b2595730c7fa52ec640ae8db2ae7244c39aadcc40d5558691e35a924a9f67bc5c547730f766f97c10aef902c4cb574b668dd86caa178a3249252fbd39b577996a94c799f5e14b0be94fb9f57c911a8a9e75acd1542dce45cda9633c4f40058d9ae6f82e2054773b836ef5b9e22d12bc8b"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_mark_inode_dirty\x00', r2}, 0x10) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) socket$unix(0x1, 0x5, 0x0) 69.735258ms ago: executing program 1 (id=3633): pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="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", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3}}], 0x4000000000002e4, 0x4000000) 0s ago: executing program 1 (id=3634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ot find add_set index 0 as target [ 79.930325][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.492503][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.507612][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.518535][ T1103] bond0 (unregistering): Released all slaves [ 80.530357][ T1103] bond1 (unregistering): Released all slaves [ 80.543149][ T5953] netlink: 9 bytes leftover after parsing attributes in process `syz.4.261'. [ 80.552197][ T5953] 0·: renamed from hsr0 (while UP) [ 80.560877][ T5953] 0·: entered allmulticast mode [ 80.565958][ T5953] hsr_slave_0: entered allmulticast mode [ 80.572418][ T5953] hsr_slave_1: entered allmulticast mode [ 80.583127][ T5953] net_ratelimit: 119 callbacks suppressed [ 80.583144][ T5953] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 80.623495][ T5962] syzkaller1: entered promiscuous mode [ 80.635064][ T5962] syzkaller1: entered allmulticast mode [ 80.773842][ T5088] Bluetooth: hci0: command tx timeout [ 81.042115][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.060815][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.078592][ T5918] bridge_slave_0: entered allmulticast mode [ 81.109005][ T5918] bridge_slave_0: entered promiscuous mode [ 81.117609][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 81.187464][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.204359][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.232532][ T5918] bridge_slave_1: entered allmulticast mode [ 81.250529][ T5918] bridge_slave_1: entered promiscuous mode [ 81.490013][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.549675][ T6013] netlink: 'syz.2.281': attribute type 1 has an invalid length. [ 81.590727][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 81.640408][ T1103] hsr_slave_0: left promiscuous mode [ 81.686081][ T1103] hsr_slave_1: left promiscuous mode [ 81.699001][ T6018] Cannot find add_set index 0 as target [ 81.714581][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.742470][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.753448][ T6024] xt_hashlimit: max too large, truncated to 1048576 [ 81.772999][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.820026][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.916592][ T1103] veth1_macvtap: left promiscuous mode [ 81.942989][ T1103] veth0_macvtap: left promiscuous mode [ 81.948674][ T1103] veth1_vlan: left promiscuous mode [ 82.003046][ T1103] veth0_vlan: left promiscuous mode [ 82.696524][ T6054] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.291'. [ 82.752134][ T29] audit: type=1804 audit(1719669465.520:5): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.291" name="/root/syzkaller.AJaqTp/64/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 82.854919][ T5088] Bluetooth: hci0: command tx timeout [ 82.911175][ T29] audit: type=1804 audit(1719669465.660:6): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.291" name="/root/syzkaller.AJaqTp/64/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 82.935161][ T29] audit: type=1804 audit(1719669465.670:7): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.291" name="/root/syzkaller.AJaqTp/64/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 82.969516][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 83.031297][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 83.471876][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.511913][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.288'. [ 83.637881][ T5918] team0: Port device team_slave_0 added [ 83.658643][ T5918] team0: Port device team_slave_1 added [ 83.755810][ T6064] netlink: 'syz.4.294': attribute type 27 has an invalid length. [ 83.814083][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.841994][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.842081][ T6068] xt_hashlimit: max too large, truncated to 1048576 [ 83.871480][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.891405][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.903578][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.001094][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.178992][ T5918] hsr_slave_0: entered promiscuous mode [ 84.197531][ T5918] hsr_slave_1: entered promiscuous mode [ 84.725747][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 84.842459][ T6103] netlink: 204 bytes leftover after parsing attributes in process `syz.4.305'. [ 84.869919][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 84.932904][ T5088] Bluetooth: hci0: command tx timeout [ 85.491095][ T5918] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.522988][ T5918] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.575417][ T5918] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.601099][ T5918] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.610377][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 85.947516][ T6149] netlink: 204 bytes leftover after parsing attributes in process `syz.3.320'. [ 86.029854][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 86.064284][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.147670][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.198057][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.205274][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.295169][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.302344][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.335664][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 86.389332][ T6171] Zero length message leads to an empty skb [ 86.460546][ T6178] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.328'. [ 86.503221][ T6178] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 86.999676][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.013771][ T5088] Bluetooth: hci0: command tx timeout [ 87.196672][ T5918] veth0_vlan: entered promiscuous mode [ 87.266942][ T5918] veth1_vlan: entered promiscuous mode [ 87.456271][ T5918] veth0_macvtap: entered promiscuous mode [ 87.520120][ T5918] veth1_macvtap: entered promiscuous mode [ 87.655461][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.720405][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.765703][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.791394][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.808844][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.854949][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.874792][ T6230] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.339'. [ 87.903435][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.941073][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.984729][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.007394][ T29] audit: type=1804 audit(1719669470.760:8): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.339" name="/root/syzkaller.HN5HZa/81/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 88.069990][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.103416][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.130398][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.171281][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.192552][ T29] audit: type=1804 audit(1719669470.950:9): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.339" name="/root/syzkaller.HN5HZa/81/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 88.233009][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.271800][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.293215][ T29] audit: type=1804 audit(1719669470.990:10): pid=6240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.339" name="/root/syzkaller.HN5HZa/81/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 88.323967][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.335732][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.347901][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.411093][ T5918] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.431404][ T5918] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.489024][ T5918] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.528644][ T5918] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578228][ T6254] netlink: 2 bytes leftover after parsing attributes in process `syz.4.349'. [ 88.723497][ T6262] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 88.884280][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.892145][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.049041][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.092526][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.583435][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.362'. [ 89.653208][ T6302] netlink: 284 bytes leftover after parsing attributes in process `syz.1.362'. [ 89.739703][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 90.735595][ T6364] __nla_validate_parse: 1 callbacks suppressed [ 90.735616][ T6364] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.375'. [ 90.905127][ T29] audit: type=1804 audit(1719669473.670:11): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.375" name="/root/syzkaller.EtCB6x/42/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 91.197037][ T29] audit: type=1804 audit(1719669473.960:12): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.375" name="/root/syzkaller.EtCB6x/42/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 91.274072][ T29] audit: type=1804 audit(1719669474.030:13): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.375" name="/root/syzkaller.EtCB6x/42/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 92.072289][ T6413] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.394'. [ 92.134113][ T6415] netlink: 72 bytes leftover after parsing attributes in process `syz.0.396'. [ 92.319111][ T29] audit: type=1804 audit(1719669475.070:14): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.394" name="/root/syzkaller.j8CrsM/93/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 92.607979][ T29] audit: type=1804 audit(1719669475.370:15): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.394" name="/root/syzkaller.j8CrsM/93/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 92.702548][ T29] audit: type=1804 audit(1719669475.370:16): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.394" name="/root/syzkaller.j8CrsM/93/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 93.411740][ T6466] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 93.426641][ T6466] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 93.919157][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.420'. [ 94.237859][ T6491] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 94.274078][ T6491] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 94.282349][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 94.337386][ T29] audit: type=1804 audit(1719669477.100:17): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.429" name="/root/syzkaller.j8CrsM/103/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 94.840763][ T6514] netlink: 'syz.2.432': attribute type 3 has an invalid length. [ 94.869120][ T6514] netlink: 'syz.2.432': attribute type 3 has an invalid length. [ 95.339780][ T6540] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.438'. [ 95.411258][ T29] audit: type=1804 audit(1719669478.170:18): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.438" name="/root/syzkaller.j8CrsM/105/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 95.709774][ T29] audit: type=1804 audit(1719669478.460:19): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.446" name="/root/syzkaller.EtCB6x/59/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 95.788602][ T29] audit: type=1804 audit(1719669478.460:20): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.438" name="/root/syzkaller.j8CrsM/105/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 95.838427][ T29] audit: type=1804 audit(1719669478.470:21): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.438" name="/root/syzkaller.j8CrsM/105/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 96.369826][ T6569] netlink: 'syz.3.451': attribute type 3 has an invalid length. [ 96.389040][ T6569] netlink: 'syz.3.451': attribute type 3 has an invalid length. [ 96.807713][ T6590] x_tables: duplicate underflow at hook 1 [ 97.358398][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.464'. [ 97.390222][ T6603] vlan2: entered allmulticast mode [ 97.400402][ T6603] bridge0: port 3(vlan2) entered blocking state [ 97.417589][ T6603] bridge0: port 3(vlan2) entered disabled state [ 97.461909][ T6609] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 98.102948][ T6638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.154583][ T6638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.179895][ T5135] IPVS: starting estimator thread 0... [ 98.208208][ T29] audit: type=1804 audit(1719669480.970:22): pid=6642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.478" name="/root/syzkaller.3wkpfU/24/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 98.274109][ T6653] netlink: 256 bytes leftover after parsing attributes in process `syz.2.479'. [ 98.294787][ T6646] IPVS: using max 23 ests per chain, 55200 per kthread [ 99.036147][ T6682] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 99.096804][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 99.199165][ T6687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 99.553111][ T29] audit: type=1804 audit(1719669482.300:23): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.494" name="/root/syzkaller.EtCB6x/65/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 99.640118][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 99.651741][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 99.760996][ T6710] IPv6: sit1: Disabled Multicast RS [ 100.100825][ T6723] sctp: [Deprecated]: syz.4.500 (pid 6723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.100825][ T6723] Use struct sctp_sack_info instead [ 100.487363][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.526587][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.793942][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.515'. [ 100.819539][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.515'. [ 100.837580][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.515'. [ 101.173052][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 101.277342][ T29] audit: type=1804 audit(1719669484.040:24): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.520" name="/root/syzkaller.EtCB6x/72/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 101.343511][ T29] audit: type=1804 audit(1719669484.070:25): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.520" name="/root/syzkaller.EtCB6x/72/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 101.426025][ T29] audit: type=1804 audit(1719669484.080:26): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.520" name="/root/syzkaller.EtCB6x/72/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 102.151569][ T6808] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 102.695451][ T6822] __nla_validate_parse: 2 callbacks suppressed [ 102.695470][ T6822] netlink: 256 bytes leftover after parsing attributes in process `syz.0.538'. [ 102.816220][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 102.854789][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 102.942862][ T29] audit: type=1804 audit(1719669485.700:27): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.544" name="/root/syzkaller.3wkpfU/37/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 103.031057][ T5136] IPVS: starting estimator thread 0... [ 103.152838][ T6836] IPVS: using max 20 ests per chain, 48000 per kthread [ 103.434141][ T6854] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 103.480253][ T6861] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.553'. [ 103.596472][ T29] audit: type=1804 audit(1719669486.350:28): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.553" name="/root/syzkaller.EtCB6x/79/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 103.731712][ T6876] netlink: 256 bytes leftover after parsing attributes in process `syz.4.558'. [ 103.899183][ T29] audit: type=1804 audit(1719669486.660:29): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.553" name="/root/syzkaller.EtCB6x/79/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 103.938362][ T29] audit: type=1804 audit(1719669486.700:30): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.553" name="/root/syzkaller.EtCB6x/79/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 104.224744][ T6899] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.343611][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.350848][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.514485][ T6913] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 104.561468][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 105.249701][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.592'. [ 105.824886][ T6980] netlink: 256 bytes leftover after parsing attributes in process `syz.1.601'. [ 106.071299][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.608'. [ 106.628283][ T7020] Bluetooth: MGMT ver 1.22 [ 107.204585][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.252468][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.327421][ T5136] IPVS: starting estimator thread 0... [ 107.422855][ T7053] IPVS: using max 21 ests per chain, 50400 per kthread [ 107.613652][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 108.541667][ T7116] netlink: 'syz.4.656': attribute type 64 has an invalid length. [ 108.574226][ T7116] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 108.692840][ T5088] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 108.693064][ T5102] Bluetooth: hci0: command 0x0405 tx timeout [ 108.832491][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 108.967674][ T7137] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 108.991770][ T7137] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 109.039792][ T7137] netlink: 192 bytes leftover after parsing attributes in process `syz.4.665'. [ 109.611163][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 109.650178][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 109.683549][ T7170] netlink: 'syz.3.680': attribute type 1 has an invalid length. [ 109.691247][ T7170] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 109.772130][ T7170] netlink: 192 bytes leftover after parsing attributes in process `syz.3.680'. [ 109.989072][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 110.039321][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 110.553902][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 111.306993][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 111.420358][ T7262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.716'. [ 111.724500][ T7277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.732226][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 111.739582][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 111.746893][ T7277] IPv6: NLM_F_CREATE should be set when creating new route [ 111.779171][ T7275] delete_channel: no stack [ 111.870103][ T7283] vlan3: entered promiscuous mode [ 111.912883][ T7283] macvtap0: entered promiscuous mode [ 111.930205][ T7283] vlan3: entered allmulticast mode [ 111.956196][ T7283] macvtap0: entered allmulticast mode [ 111.968956][ T7283] veth0_macvtap: entered allmulticast mode [ 111.975882][ T7287] openvswitch: netlink: Message has 2 unknown bytes. [ 112.404855][ T7309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.446760][ T7304] delete_channel: no stack [ 112.544236][ T7318] openvswitch: netlink: Message has 2 unknown bytes. [ 113.063403][ T7348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.070665][ T7348] IPv6: NLM_F_CREATE should be set when creating new route [ 113.078024][ T7348] IPv6: NLM_F_CREATE should be set when creating new route [ 113.085309][ T7348] IPv6: NLM_F_CREATE should be set when creating new route [ 113.130928][ T7347] delete_channel: no stack [ 113.516083][ T7363] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 113.573933][ T7357] syzkaller0: entered promiscuous mode [ 113.594939][ T7357] syzkaller0: entered allmulticast mode [ 113.840471][ T7366] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 115.751635][ T7409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.758979][ T7409] IPv6: NLM_F_CREATE should be set when creating new route [ 115.766335][ T7409] IPv6: NLM_F_CREATE should be set when creating new route [ 115.773604][ T7409] IPv6: NLM_F_CREATE should be set when creating new route [ 115.806245][ T7408] delete_channel: no stack [ 115.819982][ T7413] __nla_validate_parse: 7 callbacks suppressed [ 115.820000][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 115.849812][ T7413] netlink: 'syz.3.777': attribute type 19 has an invalid length. [ 116.062745][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.178099][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 116.481714][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 117.062941][ T7457] delete_channel: no stack [ 117.090157][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.797'. [ 117.148861][ T7462] netlink: 'syz.0.800': attribute type 1 has an invalid length. [ 117.186373][ T7459] vlan3: entered promiscuous mode [ 117.201203][ T7459] macvtap0: entered promiscuous mode [ 117.213257][ T7459] vlan3: entered allmulticast mode [ 117.218523][ T7459] macvtap0: entered allmulticast mode [ 117.231138][ T7459] veth0_macvtap: entered allmulticast mode [ 117.407935][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 117.440266][ T7471] netlink: 'syz.0.802': attribute type 19 has an invalid length. [ 117.507527][ T7473] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.575910][ T7477] tun0: tun_chr_ioctl cmd 35108 [ 117.991923][ T7492] netlink: 'syz.4.810': attribute type 10 has an invalid length. [ 118.001218][ T7492] netlink: 148 bytes leftover after parsing attributes in process `syz.4.810'. [ 118.056164][ T7494] delete_channel: no stack [ 118.298956][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.814'. [ 118.678553][ T7519] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 118.710142][ T7519] netlink: 148 bytes leftover after parsing attributes in process `syz.1.821'. [ 118.743726][ T7525] netlink: 256 bytes leftover after parsing attributes in process `syz.3.824'. [ 118.760511][ T7527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.823'. [ 118.771561][ T7525] unsupported nlmsg_type 40 [ 118.987728][ T7540] ip6t_rpfilter: unknown options [ 119.332948][ T7548] syzkaller0: entered promiscuous mode [ 119.340410][ T7548] syzkaller0: entered allmulticast mode [ 120.824919][ T7573] pim6reg0: tun_chr_ioctl cmd 2147767517 [ 120.943563][ T7585] __nla_validate_parse: 4 callbacks suppressed [ 120.943581][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'. [ 120.960481][ T7584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.099427][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 121.143977][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 121.278464][ T7604] nbd: must specify a size in bytes for the device [ 121.286239][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 121.395911][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'. [ 121.456442][ T7609] : entered promiscuous mode [ 121.509477][ T7609] netlink: 'syz.0.854': attribute type 1 has an invalid length. [ 121.530398][ T7609] sctp: [Deprecated]: syz.0.854 (pid 7609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.530398][ T7609] Use struct sctp_sack_info instead [ 121.683258][ T7616] netlink: 277 bytes leftover after parsing attributes in process `syz.0.858'. [ 121.833886][ T7617] syzkaller0: entered promiscuous mode [ 121.839655][ T7617] syzkaller0: entered allmulticast mode [ 123.452484][ T7655] netlink: 'syz.2.869': attribute type 10 has an invalid length. [ 123.497269][ T7655] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 123.642254][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 124.134864][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 124.224791][ T7694] syzkaller0: entered promiscuous mode [ 124.230336][ T7694] syzkaller0: entered allmulticast mode [ 125.644081][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 125.770532][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 126.139624][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.898'. [ 126.161081][ T7734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.899'. [ 126.338572][ T7744] macvlan2: entered allmulticast mode [ 126.375426][ T7744] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 126.421906][ T7744] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 126.486957][ T7744] team0: Port device macvlan2 added [ 126.511293][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 126.599571][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 127.072441][ T7773] netlink: 256 bytes leftover after parsing attributes in process `syz.1.914'. [ 127.236680][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'. [ 127.476038][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 127.699009][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 127.845018][ T7802] netlink: 'syz.2.926': attribute type 11 has an invalid length. [ 127.965045][ T7808] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 127.988975][ T7808] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.928'. [ 127.993170][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 127.999794][ T7808] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 128.148469][ T7804] netlink: 'syz.4.927': attribute type 29 has an invalid length. [ 128.160221][ T7804] netlink: 'syz.4.927': attribute type 29 has an invalid length. [ 128.272258][ T7817] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 129.279572][ T7859] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 129.289099][ T7859] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 129.430344][ T7868] netlink: 'syz.1.946': attribute type 10 has an invalid length. [ 129.526519][ T7868] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 130.318217][ T7906] macvlan3: entered allmulticast mode [ 130.331259][ T7906] team0: Port device macvlan3 added [ 130.500473][ T7921] Cannot find del_set index 4 as target [ 130.518117][ T7922] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 130.595561][ T7922] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 131.107781][ T7951] Cannot find add_set index 0 as target [ 131.269119][ T7955] __nla_validate_parse: 9 callbacks suppressed [ 131.269142][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 131.376577][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 131.398792][ T7967] syz.4.986[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.398944][ T7967] syz.4.986[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.400629][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 131.415227][ T7967] syz.4.986[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.431834][ T7961] netlink: 'syz.1.982': attribute type 29 has an invalid length. [ 131.451274][ T7967] syz.4.986[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.461238][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 131.513834][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 131.721946][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 131.758220][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 131.760972][ T7979] netlink: 830 bytes leftover after parsing attributes in process `syz.3.990'. [ 131.866599][ T7984] Cannot find del_set index 4 as target [ 132.118959][ T7998] syz.4.1000[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.119115][ T7998] syz.4.1000[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.141631][ T7998] syz.4.1000[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.160382][ T7998] syz.4.1000[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.438373][ T8012] Cannot find add_set index 0 as target [ 132.484983][ T8015] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1004'. [ 132.664187][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 132.937843][ T8038] syz.3.1015[8038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.937989][ T8038] syz.3.1015[8038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.989554][ T8037] validate_nla: 5 callbacks suppressed [ 132.989575][ T8037] netlink: 'syz.4.1016': attribute type 4 has an invalid length. [ 133.256241][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263339][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.461054][ T8055] netlink: 'syz.0.1023': attribute type 29 has an invalid length. [ 133.485488][ T8055] netlink: 'syz.0.1023': attribute type 29 has an invalid length. [ 133.640690][ T8073] netlink: 'syz.2.1031': attribute type 4 has an invalid length. [ 133.718099][ T8073] netlink: 'syz.2.1031': attribute type 4 has an invalid length. [ 133.839619][ T29] audit: type=1804 audit(1719669516.600:31): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1035" name="/root/syzkaller.EtCB6x/180/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 133.875655][ T29] audit: type=1804 audit(1719669516.630:32): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1035" name="/root/syzkaller.EtCB6x/180/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 133.908981][ T29] audit: type=1804 audit(1719669516.630:33): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1035" name="/root/syzkaller.EtCB6x/180/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 134.082196][ T8086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.294543][ T8098] netlink: 'syz.4.1041': attribute type 3 has an invalid length. [ 134.323087][ T8098] netlink: 'syz.4.1041': attribute type 4 has an invalid length. [ 134.330997][ T8098] netlink: 'syz.4.1041': attribute type 7 has an invalid length. [ 134.353311][ T8098] netlink: 'syz.4.1041': attribute type 8 has an invalid length. [ 134.392775][ T8098] netlink: 'syz.4.1041': attribute type 7 has an invalid length. [ 135.758025][ T8186] Bluetooth: MGMT ver 1.22 [ 135.779261][ T8186] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 136.303653][ T8205] __nla_validate_parse: 14 callbacks suppressed [ 136.303672][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 136.480174][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 136.769988][ T5138] IPVS: starting estimator thread 0... [ 136.894802][ T8231] IPVS: using max 24 ests per chain, 57600 per kthread [ 137.140246][ T8245] pim6reg: entered allmulticast mode [ 137.311857][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 137.355180][ T8258] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1107'. [ 137.555888][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 137.572269][ T8272] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1116'. [ 137.720164][ T8283] pim6reg: entered allmulticast mode [ 137.967805][ T8297] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1125'. [ 138.327602][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 138.432487][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 138.459297][ T8319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1135'. [ 138.472931][ T8319] block nbd0: Unsupported socket: shutdown callout must be supported. [ 139.579531][ T8382] validate_nla: 1 callbacks suppressed [ 139.579553][ T8382] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 139.800846][ T8389] pim6reg: entered allmulticast mode [ 140.393262][ T29] audit: type=1804 audit(1719669523.160:34): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1180" name="/root/syzkaller.EtCB6x/209/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 140.453669][ T29] audit: type=1804 audit(1719669523.190:35): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1180" name="/root/syzkaller.EtCB6x/209/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 140.479615][ T29] audit: type=1804 audit(1719669523.190:36): pid=8416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1180" name="/root/syzkaller.EtCB6x/209/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 141.426814][ T8459] __nla_validate_parse: 8 callbacks suppressed [ 141.426834][ T8459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1196'. [ 141.505202][ T8459] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.528111][ T8459] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 142.177284][ T8479] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1204'. [ 142.417151][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 142.551985][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1214'. [ 142.590407][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1214'. [ 142.703542][ T8498] syz.3.1214 (8498) used greatest stack depth: 17880 bytes left [ 142.938545][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 143.254985][ T8537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1228'. [ 143.328744][ T8539] tipc: Started in network mode [ 143.353960][ T8539] tipc: Node identity 1, cluster identity 4711 [ 143.368079][ T8539] tipc: Node number set to 1 [ 143.388737][ T8541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1232'. [ 143.409305][ T8541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1232'. [ 143.570758][ T8550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1236'. [ 143.677549][ T8552] netlink: 'syz.2.1237': attribute type 33 has an invalid length. [ 143.688414][ T8549] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 144.252321][ T8574] netlink: 'syz.4.1248': attribute type 13 has an invalid length. [ 144.384154][ T8580] smc: net device lo applied user defined pnetid SYZ2 [ 144.799341][ T8606] pim6reg: entered allmulticast mode [ 144.841428][ T8602] pim6reg: left allmulticast mode [ 145.029477][ T8613] netlink: 'syz.4.1264': attribute type 13 has an invalid length. [ 145.186545][ T8620] netlink: 'syz.4.1267': attribute type 7 has an invalid length. [ 145.195482][ T8620] netlink: 'syz.4.1267': attribute type 8 has an invalid length. [ 147.050960][ T8688] macvlan3: entered allmulticast mode [ 147.067178][ T8688] team_slave_0: entered promiscuous mode [ 147.073305][ T8688] team_slave_1: entered promiscuous mode [ 147.086073][ T8688] team0: entered allmulticast mode [ 147.091233][ T8688] team_slave_0: entered allmulticast mode [ 147.102495][ T8688] team_slave_1: entered allmulticast mode [ 147.115980][ T8688] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 147.129755][ T8688] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 147.888202][ T8726] __nla_validate_parse: 10 callbacks suppressed [ 147.888223][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 148.128833][ T8737] netlink: 'syz.1.1313': attribute type 1 has an invalid length. [ 148.144394][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1313'. [ 148.506234][ T8754] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 148.508331][ T8756] bridge0: entered promiscuous mode [ 148.519480][ T8754] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1322'. [ 148.531912][ T8756] bridge0: left promiscuous mode [ 148.555470][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1322'. [ 149.179242][ T8788] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1338'. [ 149.215981][ T8788] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1338'. [ 149.311676][ T8794] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 149.575505][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1345'. [ 150.122895][ T8822] netlink: 'syz.2.1352': attribute type 3 has an invalid length. [ 150.152791][ T8822] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1352'. [ 150.191396][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 150.202321][ T8829] xt_NFQUEUE: number of total queues is 0 [ 150.891485][ T8863] bridge0: entered promiscuous mode [ 150.908520][ T8863] bridge0: left promiscuous mode [ 150.993430][ T8866] xt_NFQUEUE: number of total queues is 0 [ 152.766991][ T8971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'. [ 154.742096][ T9080] dccp_xmit_packet: Payload too large (65475) for featneg. [ 155.238496][ T9114] Cannot find set identified by id 0 to match [ 155.284648][ T9117] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 155.305498][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1477'. [ 155.398201][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 155.413274][ T9122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1479'. [ 155.422354][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 155.434534][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1479'. [ 155.707353][ T9142] Cannot find set identified by id 0 to match [ 155.903541][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 155.923494][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'. [ 155.932507][ T9156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1496'. [ 155.959074][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 155.986438][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'. [ 156.062399][ T9165] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 156.082564][ T9165] nbd: couldn't find a device at index 32 [ 156.257429][ T9180] Cannot find set identified by id 0 to match [ 156.710715][ T9201] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 156.719642][ T9201] nbd: couldn't find a device at index 32 [ 157.459000][ T9236] netlink: 'syz.3.1530': attribute type 2 has an invalid length. [ 157.484138][ T9243] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 157.498473][ T9236] : entered promiscuous mode [ 158.995099][ T9284] Cannot find set identified by id 0 to match [ 159.126171][ T9290] dccp_xmit_packet: Payload too large (65475) for featneg. [ 159.460461][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.469996][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.478862][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.488618][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.503430][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.511841][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.164859][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 160.425326][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.434924][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.442186][ T9298] bridge_slave_0: entered allmulticast mode [ 160.465442][ T9298] bridge_slave_0: entered promiscuous mode [ 160.492474][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.511443][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.543095][ T9298] bridge_slave_1: entered allmulticast mode [ 160.550660][ T9298] bridge_slave_1: entered promiscuous mode [ 160.668780][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.686272][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.791030][ T9298] team0: Port device team_slave_0 added [ 160.821297][ T9298] team0: Port device team_slave_1 added [ 160.907581][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.917293][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.950968][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.975582][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.985597][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.013834][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.130472][ T9298] hsr_slave_0: entered promiscuous mode [ 161.143642][ T9298] hsr_slave_1: entered promiscuous mode [ 161.152215][ T9298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.167672][ T9298] Cannot create hsr debugfs directory [ 161.491586][ T9298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.579410][ T5102] Bluetooth: hci0: command tx timeout [ 161.664867][ T9298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.826049][ T9298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.872453][ T9370] netlink: 'syz.0.1576': attribute type 4 has an invalid length. [ 161.986807][ T9298] bond0: (slave netdevsim0): Releasing backup interface [ 162.009654][ T9298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.048666][ T9376] Cannot find set identified by id 0 to match [ 162.368631][ T9298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.395324][ T9298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.431834][ T9298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.456391][ T9298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.789006][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.851387][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.907682][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.914909][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.931216][ T29] audit: type=1804 audit(1719669545.680:37): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1585" name="/root/syzkaller.j8CrsM/344/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 162.991678][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.998909][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.068559][ T9298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.518215][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.650194][ T9298] veth0_vlan: entered promiscuous mode [ 163.667361][ T5102] Bluetooth: hci0: command tx timeout [ 163.701998][ T9298] veth1_vlan: entered promiscuous mode [ 163.789415][ T9298] veth0_macvtap: entered promiscuous mode [ 163.838011][ T9298] veth1_macvtap: entered promiscuous mode [ 163.895707][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.919695][ T9430] Bluetooth: MGMT ver 1.22 [ 163.924457][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.953040][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.994094][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.004662][ T9426] __nla_validate_parse: 10 callbacks suppressed [ 164.004680][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 164.022881][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.035412][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.045531][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.058905][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.078236][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.091054][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.107882][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.121347][ T9438] netlink: 'syz.2.1602': attribute type 3 has an invalid length. [ 164.133308][ T9438] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1602'. [ 164.210730][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.227305][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.237942][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.249632][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.262456][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.274307][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.287126][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.298295][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.308517][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.320720][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.337011][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.368661][ T9298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.396840][ T9298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.425408][ T9298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.439990][ T9298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.610797][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.644415][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.708410][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.732878][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.765920][ T9471] netlink: 'syz.0.1615': attribute type 4 has an invalid length. [ 165.740890][ T5102] Bluetooth: hci0: command tx timeout [ 166.146885][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 166.649543][ T9560] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 166.712311][ T9560] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.841968][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 167.300456][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 167.302609][ T9602] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1659'. [ 167.352907][ T9602] openvswitch: netlink: Multiple metadata blocks provided [ 167.470519][ T9602] pim6reg1: entered promiscuous mode [ 167.482117][ T9602] pim6reg1: entered allmulticast mode [ 167.534539][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1661'. [ 167.711347][ T9620] bridge0: port 3(team0) entered blocking state [ 167.732521][ T9620] bridge0: port 3(team0) entered disabled state [ 167.744915][ T9620] team0: entered allmulticast mode [ 167.750416][ T9620] team_slave_0: entered allmulticast mode [ 167.765620][ T9620] team_slave_1: entered allmulticast mode [ 167.772384][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1671'. [ 167.775538][ T9620] team0: entered promiscuous mode [ 167.795849][ T9620] team_slave_0: entered promiscuous mode [ 167.802053][ T9620] team_slave_1: entered promiscuous mode [ 167.813129][ T5102] Bluetooth: hci0: command tx timeout [ 167.823119][ T9620] bridge0: port 3(team0) entered blocking state [ 167.829792][ T9620] bridge0: port 3(team0) entered forwarding state [ 167.869835][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.900518][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.924849][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.936204][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.946568][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.957403][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.967557][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.978826][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.989166][ T9626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.000021][ T9626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.011271][ T9636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1673'. [ 168.330238][ T9661] netlink: 'syz.4.1684': attribute type 13 has an invalid length. [ 168.457581][ T9667] bridge0: port 3(team0) entered blocking state [ 168.473474][ T9667] bridge0: port 3(team0) entered disabled state [ 168.490118][ T9667] team0: entered allmulticast mode [ 168.506782][ T9667] team_slave_0: entered allmulticast mode [ 168.524751][ T9667] team_slave_1: entered allmulticast mode [ 168.537101][ T9667] team0: entered promiscuous mode [ 168.544348][ T9667] team_slave_0: entered promiscuous mode [ 168.553152][ T9667] team_slave_1: entered promiscuous mode [ 168.560903][ T9667] bridge0: port 3(team0) entered blocking state [ 168.567364][ T9667] bridge0: port 3(team0) entered forwarding state [ 168.656365][ T9671] vlan2: entered promiscuous mode [ 168.663678][ T9671] gretap0: entered promiscuous mode [ 168.688459][ T9671] vlan2: entered allmulticast mode [ 168.702519][ T9673] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1690'. [ 168.710439][ T9671] gretap0: entered allmulticast mode [ 168.713882][ T9673] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 168.758007][ T9671] gretap0: left allmulticast mode [ 168.773907][ T9671] gretap0: left promiscuous mode [ 168.883624][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.075849][ T9686] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1696'. [ 169.168114][ T9688] team0: Port device veth0_to_hsr added [ 169.309088][ T9694] bridge0: port 3(team0) entered blocking state [ 169.326808][ T9694] bridge0: port 3(team0) entered disabled state [ 169.350934][ T9694] team0: entered allmulticast mode [ 169.367189][ T9694] team_slave_0: entered allmulticast mode [ 169.387200][ T9694] team_slave_1: entered allmulticast mode [ 169.406528][ T9694] vlan2: entered allmulticast mode [ 169.422118][ T9694] xfrm0: entered allmulticast mode [ 169.435104][ T9694] team0: entered promiscuous mode [ 169.446429][ T9694] team_slave_0: entered promiscuous mode [ 169.468635][ T9694] team_slave_1: entered promiscuous mode [ 169.479100][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1699'. [ 169.488415][ T9694] bridge0: port 3(team0) entered blocking state [ 169.488558][ T9694] bridge0: port 3(team0) entered forwarding state [ 169.503347][ T9702] vlan2: entered promiscuous mode [ 169.511957][ T9702] gretap0: entered promiscuous mode [ 169.518153][ T9702] vlan2: entered allmulticast mode [ 169.523615][ T9702] gretap0: entered allmulticast mode [ 169.533846][ T9702] gretap0: left allmulticast mode [ 169.539168][ T9702] gretap0: left promiscuous mode [ 169.550406][ T9710] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 169.581007][ T9708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1706'. [ 169.962089][ T9733] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1715'. [ 169.980642][ T9733] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 169.981482][ T9725] veth0_to_hsr: entered promiscuous mode [ 170.033184][ T9725] veth0_to_hsr: entered allmulticast mode [ 170.058183][ T9725] team0: Port device veth0_to_hsr added [ 170.093967][ T9712] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1708'. [ 170.324551][ T9746] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 170.866133][ T9770] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1729'. [ 170.869754][ T9771] netlink: 'syz.3.1728': attribute type 21 has an invalid length. [ 170.883974][ T9770] openvswitch: netlink: Multiple metadata blocks provided [ 171.037972][ T9770] pim6reg1: entered promiscuous mode [ 171.054795][ T9770] pim6reg1: entered allmulticast mode [ 171.233261][ T9777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.095386][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1744'. [ 172.493114][ T9822] bridge0: port 4(gretap0) entered blocking state [ 172.510890][ T9822] bridge0: port 4(gretap0) entered disabled state [ 172.535054][ T9828] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.550824][ T9822] gretap0: entered allmulticast mode [ 172.577548][ T9822] gretap0: entered promiscuous mode [ 172.593378][ T9822] bridge0: port 4(gretap0) entered blocking state [ 172.600008][ T9822] bridge0: port 4(gretap0) entered forwarding state [ 172.879668][ T9846] netlink: 'syz.3.1761': attribute type 2 has an invalid length. [ 173.087521][ T9862] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.139141][ T9861] bridge0: port 3(gretap0) entered blocking state [ 173.202433][ T9861] bridge0: port 3(gretap0) entered disabled state [ 173.225049][ T9861] gretap0: entered allmulticast mode [ 173.231751][ T9861] gretap0: entered promiscuous mode [ 173.251757][ T9861] bridge0: port 3(gretap0) entered blocking state [ 173.258378][ T9861] bridge0: port 3(gretap0) entered forwarding state [ 173.798023][ T9913] bridge0: port 4(gretap0) entered blocking state [ 173.813596][ T9913] bridge0: port 4(gretap0) entered disabled state [ 173.822505][ T9913] gretap0: entered allmulticast mode [ 173.849967][ T9913] gretap0: entered promiscuous mode [ 173.867442][ T9913] bridge0: port 4(gretap0) entered blocking state [ 173.874110][ T9913] bridge0: port 4(gretap0) entered forwarding state [ 173.962325][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 174.028656][ T9928] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1800'. [ 174.040724][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 174.199566][ T9921] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1797'. [ 174.229089][ T9945] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 174.246390][ T9945] pim6reg0: linktype set to 821 [ 174.436206][ T9955] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 174.724223][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1813'. [ 174.750471][ T9975] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1816'. [ 174.775621][ T9977] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 174.845220][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 174.942939][ T9983] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 174.981741][ T9983] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 175.044079][ T9989] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 175.433693][T10006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1827'. [ 175.465477][T10009] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1829'. [ 175.498037][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1830'. [ 176.297419][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 176.304500][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 176.304514][ T4489] Bluetooth: hci4: command 0x0406 tx timeout [ 176.426774][T10050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1843'. [ 177.332148][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1860'. [ 177.406308][T10090] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1858'. [ 178.798202][T10164] tap0: tun_chr_ioctl cmd 1074025673 [ 178.912044][T10170] Bluetooth: MGMT ver 1.22 [ 179.460021][T10193] __nla_validate_parse: 5 callbacks suppressed [ 179.460042][T10193] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1890'. [ 179.699000][T10215] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 179.728759][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1898'. [ 179.817732][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 180.051360][T10233] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 180.269333][T10246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1911'. [ 180.459543][T10251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1913'. [ 181.979050][T10354] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 182.007319][T10354] macsec1: entered promiscuous mode [ 182.024487][T10354] macsec1: entered allmulticast mode [ 182.043348][T10354] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 182.087627][T10354] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 182.117696][T10354] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 182.458213][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 182.473333][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 182.598309][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 182.729710][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 182.920893][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 183.398286][T10421] netlink: 'syz.1.1991': attribute type 1 has an invalid length. [ 183.460588][T10426] netlink: 'syz.0.1993': attribute type 2 has an invalid length. [ 183.628564][T10435] Cannot find del_set index 3 as target [ 183.950032][T10458] netlink: 'syz.1.2007': attribute type 2 has an invalid length. [ 184.468793][T10488] __nla_validate_parse: 3 callbacks suppressed [ 184.468814][T10488] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2022'. [ 184.485362][T10488] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 184.547066][T10488] netlink: 'syz.4.2022': attribute type 21 has an invalid length. [ 184.581817][T10488] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2022'. [ 184.620893][T10488] netlink: 'syz.4.2022': attribute type 4 has an invalid length. [ 184.660271][T10488] netlink: 'syz.4.2022': attribute type 5 has an invalid length. [ 184.690680][T10488] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2022'. [ 185.284938][T10523] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 185.295072][T10523] macsec1: entered promiscuous mode [ 185.300548][T10523] macsec1: entered allmulticast mode [ 185.326404][T10523] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 185.347491][T10523] mac80211_hwsim hwsim24 wlan0: left allmulticast mode [ 185.355405][T10523] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 185.410338][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 185.924471][T10551] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 186.533144][ T53] Bluetooth: hci1: command 0x040f tx timeout [ 186.692411][T10598] Cannot find del_set index 3 as target [ 187.320546][T10622] dccp_invalid_packet: P.Data Offset(172) too large [ 188.013103][T10650] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2084'. [ 188.030898][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2083'. [ 188.040305][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2083'. [ 188.146282][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2083'. [ 188.188569][T10665] netlink: 'syz.4.2086': attribute type 22 has an invalid length. [ 188.792322][T10689] dccp_invalid_packet: P.Data Offset(172) too large [ 188.870183][T10693] netlink: 'syz.3.2097': attribute type 22 has an invalid length. [ 189.236250][T10714] vlan4: entered promiscuous mode [ 189.250139][T10714] team0: Device vlan4 is already an upper device of the team interface [ 189.671776][T10736] Bluetooth: MGMT ver 1.22 [ 189.701539][ T29] audit: type=1800 audit(1719669572.460:38): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2118" name="memory.events" dev="sda1" ino=1976 res=0 errno=0 [ 189.775369][T10745] raw_sendmsg: syz.4.2119 forgot to set AF_INET. Fix it! [ 189.799577][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 190.025603][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'. [ 190.303765][T10771] netlink: 'syz.1.2130': attribute type 22 has an invalid length. [ 190.384310][ T29] audit: type=1800 audit(1719669573.150:39): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2132" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 190.440943][T10779] bpf_get_probe_write_proto: 6 callbacks suppressed [ 190.440956][T10779] syz.1.2134[10779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.448431][T10779] syz.1.2134[10779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.856729][T10803] netlink: 'syz.3.2142': attribute type 22 has an invalid length. [ 190.998194][ T29] audit: type=1800 audit(1719669573.760:40): pid=10807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2144" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 191.136281][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.212168][T10819] syzkaller0: entered promiscuous mode [ 191.222801][T10819] syzkaller0: entered allmulticast mode [ 191.759554][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.776420][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.790080][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.820079][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.831234][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 191.843089][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.026538][T10821] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 193.339947][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.578864][T10868] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 193.674441][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.698236][T10826] chnl_net:caif_netlink_parms(): no params data found [ 193.811810][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.893448][ T5102] Bluetooth: hci1: command tx timeout [ 193.953098][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.073359][T10891] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 194.087699][T10891] macvlan2: entered allmulticast mode [ 194.096662][T10891] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 194.113691][T10891] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 194.182342][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.198344][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.205768][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.216888][T10826] bridge_slave_0: entered allmulticast mode [ 194.230100][T10826] bridge_slave_0: entered promiscuous mode [ 194.240696][T10896] netlink: 'syz.2.2180': attribute type 2 has an invalid length. [ 194.253174][T10896] netlink: 'syz.2.2180': attribute type 8 has an invalid length. [ 194.263725][T10896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2180'. [ 194.282535][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.306601][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.325861][T10826] bridge_slave_1: entered allmulticast mode [ 194.350799][T10826] bridge_slave_1: entered promiscuous mode [ 194.445042][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.481843][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.607764][T10826] team0: Port device team_slave_0 added [ 194.635674][T10826] team0: Port device team_slave_1 added [ 194.648632][ T51] bridge_slave_1: left allmulticast mode [ 194.658641][ T51] bridge_slave_1: left promiscuous mode [ 194.670872][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.691919][ T51] bridge_slave_0: left allmulticast mode [ 194.714056][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.718702][ T51] bridge_slave_0: left promiscuous mode [ 194.720707][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.736177][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.422385][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 195.511416][T10932] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 195.955731][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.976597][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.976762][ T5102] Bluetooth: hci1: command tx timeout [ 196.005601][ T51] bond0 (unregistering): Released all slaves [ 196.050819][T10914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2187'. [ 196.073668][T10914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2187'. [ 196.106329][T10914] macvlan0: entered promiscuous mode [ 196.118259][T10914] batadv_slave_0: entered promiscuous mode [ 196.125707][T10914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.134645][T10914] Cannot create hsr debugfs directory [ 196.140368][T10914] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.175667][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2191'. [ 196.259147][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.272105][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.312346][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.365358][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.382108][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.463498][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.489450][ T51] : left promiscuous mode [ 196.694405][T10826] hsr_slave_0: entered promiscuous mode [ 196.720946][T10826] hsr_slave_1: entered promiscuous mode [ 196.743885][T10826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.751586][T10826] Cannot create hsr debugfs directory [ 197.098058][T10953] syzkaller0: entered promiscuous mode [ 197.105562][T10953] syzkaller0: entered allmulticast mode [ 197.579484][T10970] nbd: illegal input index -1 [ 198.052968][ T5102] Bluetooth: hci1: command tx timeout [ 198.271863][T10982] SET target dimension over the limit! [ 199.359857][ T51] hsr_slave_0: left promiscuous mode [ 199.378393][ T75] tipc: Subscription rejected, illegal request [ 199.396941][ T51] hsr_slave_1: left promiscuous mode [ 199.429410][T10997] nbd: illegal input index -1 [ 199.453199][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.471367][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.481984][T11004] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 199.503740][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.519966][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.568704][ T51] veth1_macvtap: left promiscuous mode [ 199.579992][ T51] veth0_macvtap: left promiscuous mode [ 199.589556][ T51] veth1_vlan: left promiscuous mode [ 199.599340][ T51] veth0_vlan: left promiscuous mode [ 199.724338][ T51] pim6reg (unregistering): left allmulticast mode [ 200.133162][ T5102] Bluetooth: hci1: command tx timeout [ 200.248635][ T51] team0 (unregistering): Port device veth0_to_hsr removed [ 200.376756][T11020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.441554][ T51] team0 (unregistering): Port device team_slave_1 removed [ 200.465859][T11020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.501795][ T51] team0 (unregistering): Port device team_slave_0 removed [ 200.530252][T11023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.084386][T11030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2228'. [ 201.153657][T11030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2228'. [ 201.263580][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 201.267463][T11036] nbd: illegal input index -1 [ 201.436974][T10826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.460087][ T51] IPVS: stop unused estimator thread 0... [ 201.467405][T10826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.495885][T10826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.508730][T10826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.677116][T10826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.701817][T11052] netlink: 'syz.2.2238': attribute type 3 has an invalid length. [ 201.709881][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 201.987846][T11063] nbd: illegal input index -1 [ 203.298068][T10826] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.356736][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.364068][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.434640][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.441850][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.573851][T11073] sctp: [Deprecated]: syz.4.2246 (pid 11073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.573851][T11073] Use struct sctp_sack_info instead [ 203.644474][T11082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.752609][T11091] nbd: illegal input index -1 [ 203.804364][T11082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.894020][T11098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.922200][T10826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.024943][T10826] veth0_vlan: entered promiscuous mode [ 204.047272][T10826] veth1_vlan: entered promiscuous mode [ 204.140296][T10826] veth0_macvtap: entered promiscuous mode [ 204.156702][T10826] veth1_macvtap: entered promiscuous mode [ 204.196543][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.209218][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.219685][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.231197][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.241239][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.252061][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.262132][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.273627][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.283732][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.295496][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.307726][T10826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.308240][T11119] sctp: [Deprecated]: syz.3.2262 (pid 11119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.308240][T11119] Use struct sctp_sack_info instead [ 205.783993][T11132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.135642][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.152818][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.162981][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.174788][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.190489][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.210762][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.230195][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.251084][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.271106][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.291922][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.316913][T10826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.340574][T11143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2271'. [ 206.384618][T10826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.411319][T10826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.444633][T10826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.463806][T10826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.656279][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.670143][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.734751][T11162] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2277'. [ 206.746293][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.776540][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.813928][ T75] tipc: Subscription rejected, illegal request [ 206.999688][T11168] sctp: [Deprecated]: syz.3.2280 (pid 11168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.999688][T11168] Use struct sctp_sack_info instead [ 207.436328][T11196] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2290'. [ 207.657185][T11204] sctp: [Deprecated]: syz.3.2294 (pid 11204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.657185][T11204] Use struct sctp_sack_info instead [ 208.210872][T11216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2299'. [ 209.241274][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2298'. [ 209.548278][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 209.664561][T11243] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 209.738609][T11243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2311'. [ 209.762843][T11243] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2311'. [ 209.812508][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2311'. [ 209.815687][T11249] netlink: 'syz.4.2314': attribute type 1 has an invalid length. [ 210.937803][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'. [ 210.979833][T11302] sctp: [Deprecated]: syz.3.2336 (pid 11302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.979833][T11302] Use struct sctp_sack_info instead [ 211.028153][T11301] netlink: 'syz.1.2337': attribute type 4 has an invalid length. [ 211.672546][T11333] __nla_validate_parse: 2 callbacks suppressed [ 211.672560][T11333] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2349'. [ 211.951182][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2357'. [ 212.014641][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2357'. [ 212.069465][T11349] veth1_vlan: left promiscuous mode [ 212.106681][T11349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2357'. [ 212.251563][T11360] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2362'. [ 212.375388][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 212.421960][T11364] sctp: [Deprecated]: syz.1.2364 (pid 11364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.421960][T11364] Use struct sctp_sack_info instead [ 212.983541][T11406] IPVS: Error joining to the multicast group [ 213.217736][T11419] netlink: 'syz.1.2386': attribute type 4 has an invalid length. [ 213.227578][T11419] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2386'. [ 213.314426][T11425] netlink: 'syz.1.2388': attribute type 5 has an invalid length. [ 213.434999][T11430] tipc: Failed to remove unknown binding: 66,1,1/0:812468772/812468774 [ 213.547010][T11430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.572324][T11430] bond0: entered promiscuous mode [ 213.589104][T11430] bond_slave_0: entered promiscuous mode [ 213.605423][T11430] bond_slave_1: entered promiscuous mode [ 213.611416][T11430] bond0: entered allmulticast mode [ 213.636359][T11430] bond_slave_0: entered allmulticast mode [ 213.642125][T11430] bond_slave_1: entered allmulticast mode [ 213.656782][T11430] team0: Port device bond0 added [ 213.695951][T11445] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 213.936806][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 214.361833][T11477] netlink: 'syz.3.2411': attribute type 29 has an invalid length. [ 214.376625][T11477] netlink: 'syz.3.2411': attribute type 29 has an invalid length. [ 214.401172][T11473] netlink: 'syz.3.2411': attribute type 29 has an invalid length. [ 215.010387][T11509] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 215.085636][T11509] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 215.097206][T11509] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 215.110533][T11509] bond1: (slave vcan1): making interface the new active one [ 215.119300][T11509] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 215.302269][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 215.596769][T11540] IPVS: Error joining to the multicast group [ 215.625701][T11543] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 215.631240][T11546] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2444'. [ 215.718478][T11550] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 215.728721][T11550] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 215.742961][T11550] bond2: (slave vcan2): making interface the new active one [ 215.752221][T11550] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 215.795076][T11554] netlink: 'syz.3.2447': attribute type 5 has an invalid length. [ 215.898562][T11560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.002216][T11547] delete_channel: no stack [ 216.109230][T11574] netlink: 'syz.4.2455': attribute type 14 has an invalid length. [ 216.170970][T11576] vlan2: entered promiscuous mode [ 216.181070][T11576] bond0: entered promiscuous mode [ 216.199237][T11576] bond_slave_0: entered promiscuous mode [ 216.217946][T11576] bond_slave_1: entered promiscuous mode [ 216.241277][T11576] team0: Port device vlan2 added [ 216.965523][T11601] netlink: 'syz.3.2467': attribute type 15 has an invalid length. [ 217.210572][T11614] netlink: 'syz.3.2472': attribute type 3 has an invalid length. [ 217.380953][T11622] netlink: 'syz.0.2476': attribute type 1 has an invalid length. [ 217.404613][T11622] __nla_validate_parse: 2 callbacks suppressed [ 217.404637][T11622] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.2476'. [ 217.458233][T11625] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 217.504235][T11628] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 217.534013][T11628] bond0: entered promiscuous mode [ 217.542931][T11628] bond_slave_0: entered promiscuous mode [ 217.560001][T11628] bond_slave_1: entered promiscuous mode [ 217.583315][T11628] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.718756][T11627] bond0: left promiscuous mode [ 217.734249][T11627] bond_slave_0: left promiscuous mode [ 217.739945][T11627] bond_slave_1: left promiscuous mode [ 218.243604][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 218.395988][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 218.746847][T11695] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 218.760542][T11695] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.2508'. [ 218.783999][T11698] netlink: 'syz.1.2507': attribute type 29 has an invalid length. [ 219.108478][T11705] sctp: [Deprecated]: syz.2.2510 (pid 11705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.108478][T11705] Use struct sctp_sack_info instead [ 219.591135][T11728] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2520'. [ 219.798854][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'. [ 219.815896][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'. [ 220.487014][T11772] validate_nla: 2 callbacks suppressed [ 220.487035][T11772] netlink: 'syz.4.2539': attribute type 29 has an invalid length. [ 220.515917][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.660808][T11772] netlink: 'syz.4.2539': attribute type 29 has an invalid length. [ 220.691022][T11769] netlink: 'syz.4.2539': attribute type 29 has an invalid length. [ 220.739129][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'. [ 220.907258][T11778] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 221.113234][T11795] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 221.574907][T11818] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 221.902099][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 222.023492][T11826] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 222.793368][T11864] dummy0: entered promiscuous mode [ 222.812233][T11864] dummy0: left promiscuous mode [ 223.004751][T11874] netlink: 'syz.4.2580': attribute type 2 has an invalid length. [ 223.198676][T11883] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 224.093640][T11921] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2600'. [ 224.121647][T11926] No such timeout policy "syz0" [ 224.139532][T11921] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2600'. [ 224.286846][T11931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.374521][T11931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.436606][T11931] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2603'. [ 224.652387][T11945] netlink: 'syz.4.2609': attribute type 2 has an invalid length. [ 225.201857][T11974] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2620'. [ 225.899544][T12006] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. [ 226.019423][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.553085][T12036] netlink: 'syz.4.2647': attribute type 9 has an invalid length. [ 226.581398][T12036] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2647'. [ 227.331095][T12066] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. [ 227.673549][T12041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.526169][ T75] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 229.050399][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.076426][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2683'. [ 229.158349][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.249590][T12127] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2684'. [ 229.491120][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 229.530533][T12142] pim6reg1: entered promiscuous mode [ 229.555190][T12142] pim6reg1: entered allmulticast mode [ 230.253722][T12164] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. [ 230.581068][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'. [ 231.026300][T12193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.111461][T12193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.232078][T12193] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2705'. [ 232.146735][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2724'. [ 232.253631][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 232.493964][T12245] pim6reg1: entered promiscuous mode [ 232.519352][T12245] pim6reg1: entered allmulticast mode [ 232.840856][T12256] batadv0: entered promiscuous mode [ 232.864915][T12256] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 232.889897][T12256] bond0: (slave macvlan6): Enslaving as an active interface with an up link [ 232.903600][T12261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2736'. [ 233.228564][T12269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'. [ 233.898606][T12300] netlink: 'syz.4.2750': attribute type 4 has an invalid length. [ 233.923070][T12304] netlink: 'syz.1.2753': attribute type 1 has an invalid length. [ 233.948404][T12304] netlink: 'syz.1.2753': attribute type 2 has an invalid length. [ 233.975699][T12306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2751'. [ 234.168340][T12314] netlink: 'syz.3.2757': attribute type 4 has an invalid length. [ 234.172257][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2756'. [ 234.284645][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 234.414989][T12326] batadv0: entered promiscuous mode [ 234.434967][T12326] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 234.460136][T12326] macvlan3: entered promiscuous mode [ 234.479450][T12326] macvlan3: entered allmulticast mode [ 234.491348][T12326] batadv0: entered allmulticast mode [ 234.507921][T12326] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 234.627354][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2760'. [ 234.641517][T12337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2767'. [ 234.886173][T12344] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 234.914875][T12344] netlink: 'syz.2.2770': attribute type 2 has an invalid length. [ 234.983630][T12346] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2771'. [ 235.022088][T12346] netlink: 'syz.4.2771': attribute type 1 has an invalid length. [ 235.249469][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2779'. [ 235.866552][T12387] : renamed from bond0 (while UP) [ 236.391063][T12418] : renamed from bond0 (while UP) [ 236.584000][T12427] netlink: 'syz.1.2806': attribute type 4 has an invalid length. [ 236.699387][T12435] xt_l2tp: invalid flags combination: c [ 236.707812][T12437] pim6reg1: entered promiscuous mode [ 236.725406][T12437] pim6reg1: entered allmulticast mode [ 237.087453][T12453] sctp: [Deprecated]: syz.1.2813 (pid 12453) Use of int in maxseg socket option. [ 237.087453][T12453] Use struct sctp_assoc_value instead [ 237.466996][T12461] tipc: Started in network mode [ 237.493326][T12461] tipc: Node identity 2d5f00000000003a0000400000000001, cluster identity 4711 [ 237.502855][T12461] tipc: Enabling of bearer rejected, failed to enable media [ 237.676543][T12465] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.122241][T12499] tipc: Started in network mode [ 238.144031][T12499] tipc: Node identity 2d5f00000000003a0000400000000001, cluster identity 4711 [ 238.180948][T12499] tipc: Enabling of bearer rejected, failed to enable media [ 238.819805][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 240.357292][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2876'. [ 240.395348][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 240.434569][T12607] geneve2: entered promiscuous mode [ 240.439827][T12607] geneve2: entered allmulticast mode [ 240.578779][T12614] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.021367][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 241.374491][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'. [ 241.519356][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 241.623395][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 241.681315][T12675] netlink: 'syz.0.2907': attribute type 21 has an invalid length. [ 241.696458][T12675] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2907'. [ 241.708871][T12675] netlink: 'syz.0.2907': attribute type 5 has an invalid length. [ 241.718218][T12675] netlink: 'syz.0.2907': attribute type 6 has an invalid length. [ 241.732393][T12675] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2907'. [ 241.758299][T12671] team1: Mode changed to "loadbalance" [ 242.113850][T12698] sock: sock_set_timeout: `syz.0.2918' (pid 12698) tries to set negative timeout [ 242.134594][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 243.154532][T12756] netlink: 'syz.3.2937': attribute type 1 has an invalid length. [ 243.177569][T12756] netlink: 'syz.3.2937': attribute type 3 has an invalid length. [ 243.207775][T12756] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2937'. [ 243.262830][T12756] NCSI netlink: No device for ifindex 0 [ 243.830905][T12793] netlink: 'syz.0.2952': attribute type 1 has an invalid length. [ 243.839205][T12793] netlink: 'syz.0.2952': attribute type 3 has an invalid length. [ 243.857287][T12786] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 243.878030][T12793] NCSI netlink: No device for ifindex 0 [ 243.900561][T12799] netlink: 'syz.1.2955': attribute type 21 has an invalid length. [ 244.298957][T12826] netlink: 'syz.4.2966': attribute type 1 has an invalid length. [ 244.315987][T12826] NCSI netlink: No device for ifindex 0 [ 245.331206][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.344479][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.345134][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.366515][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.385808][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.393715][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.401127][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.439271][T12861] __nla_validate_parse: 4 callbacks suppressed [ 245.439291][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2978'. [ 245.575516][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.695275][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.790008][T12887] tipc: Enabling of bearer rejected, failed to enable media [ 246.023288][T12896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.200183][ T51] team0: left allmulticast mode [ 246.222063][ T51] team_slave_0: left allmulticast mode [ 246.240993][ T51] team_slave_1: left allmulticast mode [ 246.247832][ T51] bond0: left allmulticast mode [ 246.259192][ T51] bond_slave_0: left allmulticast mode [ 246.268224][ T51] bond_slave_1: left allmulticast mode [ 246.278749][ T51] macvlan3: left allmulticast mode [ 246.290720][ T51] batadv0: left allmulticast mode [ 246.305835][ T51] team0: left promiscuous mode [ 246.319832][ T51] team_slave_0: left promiscuous mode [ 246.335974][ T51] team_slave_1: left promiscuous mode [ 246.341536][ T51] bond0: left promiscuous mode [ 246.360891][ T51] bond_slave_0: left promiscuous mode [ 246.372980][ T51] bond_slave_1: left promiscuous mode [ 246.378739][ T51] macvlan3: left promiscuous mode [ 246.394276][ T51] bridge0: port 3(team0) entered disabled state [ 246.424441][ T51] bridge_slave_1: left allmulticast mode [ 246.430327][ T51] bridge_slave_1: left promiscuous mode [ 246.443426][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.463409][ T51] bridge_slave_0: left allmulticast mode [ 246.479154][ T51] bridge_slave_0: left promiscuous mode [ 246.491480][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.965177][T12925] sctp: [Deprecated]: syz.3.3005 (pid 12925) Use of int in maxseg socket option. [ 246.965177][T12925] Use struct sctp_assoc_value instead [ 247.317146][ T51] team0: Port device bond0 removed [ 247.364156][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.375449][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.389861][ T51] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 247.402029][ T51] batadv0: left promiscuous mode [ 247.409871][ T51] bond0 (unregistering): Released all slaves [ 247.429944][T12865] chnl_net:caif_netlink_parms(): no params data found [ 247.492849][ T5102] Bluetooth: hci3: command tx timeout [ 247.615674][T12934] validate_nla: 4 callbacks suppressed [ 247.615690][T12934] netlink: 'syz.2.3007': attribute type 4 has an invalid length. [ 247.847143][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.861998][T12948] syz.3.3011[12948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.862135][T12948] syz.3.3011[12948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.975049][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.017018][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.033031][T12865] bridge_slave_0: entered allmulticast mode [ 248.044520][T12865] bridge_slave_0: entered promiscuous mode [ 248.082072][T12865] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.089673][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.100843][T12865] bridge_slave_1: entered allmulticast mode [ 248.110762][T12865] bridge_slave_1: entered promiscuous mode [ 248.271703][T12865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.314688][T12865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.416565][T12964] pim6reg1: entered promiscuous mode [ 248.421928][T12964] pim6reg1: entered allmulticast mode [ 248.546506][T12865] team0: Port device team_slave_0 added [ 248.589168][T12865] team0: Port device team_slave_1 added [ 248.696175][T12865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.703315][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.738116][T12865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.761121][ T51] macvlan0: left promiscuous mode [ 248.769808][ T51] batadv_slave_0: left promiscuous mode [ 248.798696][ T51] hsr_slave_0: left promiscuous mode [ 248.807178][ T51] hsr_slave_1: left promiscuous mode [ 248.815828][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.824340][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.834903][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.845366][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.871364][ T51] veth1_macvtap: left promiscuous mode [ 248.877059][ T51] veth0_macvtap: left promiscuous mode [ 248.883769][ T51] veth1_vlan: left promiscuous mode [ 248.889124][ T51] veth0_vlan: left promiscuous mode [ 249.027960][T12977] netlink: 9356 bytes leftover after parsing attributes in process `syz.1.3024'. [ 249.037556][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3024'. [ 249.048558][T12977] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3024'. [ 249.572981][ T5102] Bluetooth: hci3: command tx timeout [ 249.649075][ T51] team0 (unregistering): Port device team_slave_1 removed [ 249.691430][ T51] team0 (unregistering): Port device team_slave_0 removed [ 250.081453][T12865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.089077][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.129467][T12865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.354072][T12991] veth1_macvtap: left promiscuous mode [ 250.359845][T12991] macsec0: entered allmulticast mode [ 250.412711][T12994] veth1_macvtap: entered promiscuous mode [ 250.433058][T12994] veth1_macvtap: entered allmulticast mode [ 250.524412][T12996] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3032'. [ 250.527532][T12865] hsr_slave_0: entered promiscuous mode [ 250.564782][T12865] hsr_slave_1: entered promiscuous mode [ 250.579429][T12865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.601560][T12865] Cannot create hsr debugfs directory [ 251.161486][T13008] netlink: 'syz.1.3037': attribute type 3 has an invalid length. [ 251.204770][T13008] netlink: 'syz.1.3037': attribute type 1 has an invalid length. [ 251.228549][T13008] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3037'. [ 251.295411][T13013] can: request_module (can-proto-0) failed. [ 251.653192][ T5102] Bluetooth: hci3: command tx timeout [ 251.726930][T12865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.743563][T12865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.761246][T12865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.801650][T12865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.134948][T12865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.182609][T12865] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.226980][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.234185][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.277510][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.284735][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.470275][T13076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3065'. [ 252.705040][T12865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.805352][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 252.940039][T13097] bridge0: port 4(bond0) entered blocking state [ 252.984962][T13097] bridge0: port 4(bond0) entered disabled state [ 252.991599][T13097] bond0: entered allmulticast mode [ 252.999915][T13097] bond0: entered promiscuous mode [ 253.105934][T13112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3077'. [ 253.214816][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'. [ 253.310188][T13115] wireguard0: entered promiscuous mode [ 253.316512][T13115] wireguard0: entered allmulticast mode [ 253.394787][T13130] netlink: 'syz.1.3083': attribute type 29 has an invalid length. [ 253.403683][T13130] netlink: 'syz.1.3083': attribute type 29 has an invalid length. [ 253.441257][T13130] netlink: 'syz.1.3083': attribute type 29 has an invalid length. [ 253.483821][T13134] netlink: 'syz.3.3084': attribute type 3 has an invalid length. [ 253.491834][T13134] netlink: 'syz.3.3084': attribute type 1 has an invalid length. [ 253.532626][T13134] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3084'. [ 253.545998][T12865] veth0_vlan: entered promiscuous mode [ 253.562521][T13136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.601056][T12865] veth1_vlan: entered promiscuous mode [ 253.618069][T13136] syz.2.3085[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.618215][T13136] syz.2.3085[13136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.690446][T13137] can: request_module (can-proto-0) failed. [ 253.712270][T12865] veth0_macvtap: entered promiscuous mode [ 253.733091][ T5102] Bluetooth: hci3: command tx timeout [ 253.764809][T12865] veth1_macvtap: entered promiscuous mode [ 253.855726][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.892898][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.912064][T13151] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3089'. [ 253.917753][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.946568][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.959708][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.974050][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.984342][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.996189][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.006320][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.017176][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.036010][T12865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.093588][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.112198][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.132901][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.149713][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.161811][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.174191][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.186064][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.199629][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.222182][T12865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.244457][T12865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.257078][T12865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.287266][T12865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.316326][T12865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.337107][T12865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.352925][T12865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.599043][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.623508][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.648225][T13174] x_tables: duplicate underflow at hook 2 [ 254.770861][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.785893][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.811626][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 254.843994][T13182] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.854128][T13182] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.863890][T13182] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.872602][T13182] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.914218][T13182] vxlan0: entered promiscuous mode [ 255.072953][T13186] @ÿ: renamed from veth0_vlan (while UP) [ 255.256496][T13197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3107'. [ 255.313903][T13164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.458958][T13205] x_tables: duplicate underflow at hook 2 [ 255.512596][T13209] batadv_slave_1: entered promiscuous mode [ 255.548803][T13207] batadv_slave_1: left promiscuous mode [ 255.927020][T13228] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 255.939896][T13228] netlink: 636 bytes leftover after parsing attributes in process `syz.1.3121'. [ 256.137013][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.344103][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'. [ 256.399140][T13245] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.408279][T13245] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.417268][T13245] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.431456][T13245] vxlan0: entered promiscuous mode [ 257.591506][T13299] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3151'. [ 257.915569][T13304] atomic_op ffff888011a89998 conn xmit_atomic 0000000000000000 [ 258.295592][T13314] : entered promiscuous mode [ 258.312879][T13314] bond_slave_0: entered promiscuous mode [ 258.318792][T13314] bond_slave_1: entered promiscuous mode [ 258.499826][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3163'. [ 258.511037][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3163'. [ 258.543336][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3163'. [ 258.613233][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 258.621757][T13330] netlink: 'syz.0.3166': attribute type 1 has an invalid length. [ 259.289401][T13352] : entered promiscuous mode [ 259.303547][T13352] bond_slave_0: entered promiscuous mode [ 259.319092][T13352] bond_slave_1: entered promiscuous mode [ 259.345319][T13352] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 259.373046][T13352] macvlan6: entered promiscuous mode [ 259.396179][T13359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3177'. [ 259.409280][T13361] atomic_op ffff88807dacf998 conn xmit_atomic 0000000000000000 [ 259.418068][T13359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3177'. [ 259.443083][T13359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3177'. [ 259.862261][T13386] atomic_op ffff88802d35b998 conn xmit_atomic 0000000000000000 [ 260.021104][ T9] IPVS: starting estimator thread 0... [ 260.032733][T13395] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 260.133293][T13399] IPVS: using max 19 ests per chain, 45600 per kthread [ 260.213473][T13407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.355137][T13416] atomic_op ffff888067df4998 conn xmit_atomic 0000000000000000 [ 260.516596][T13424] netlink: 'syz.0.3207': attribute type 3 has an invalid length. [ 260.525249][T13424] netlink: 'syz.0.3207': attribute type 3 has an invalid length. [ 260.559442][T13426] syzkaller1: entered promiscuous mode [ 260.581822][T13426] syzkaller1: entered allmulticast mode [ 260.900540][T13444] dccp_v6_rcv: dropped packet with invalid checksum [ 261.207434][T13462] syzkaller1: entered promiscuous mode [ 261.231082][T13462] syzkaller1: entered allmulticast mode [ 261.804031][T13487] sctp: [Deprecated]: syz.0.3235 (pid 13487) Use of int in max_burst socket option. [ 261.804031][T13487] Use struct sctp_assoc_value instead [ 262.215048][T13512] __nla_validate_parse: 6 callbacks suppressed [ 262.215068][T13512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3244'. [ 262.317605][T13512] Êü: entered promiscuous mode [ 263.098300][T13567] IPv6: Can't replace route, no match found [ 263.197044][T13569] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 263.240484][T13575] bridge0: entered promiscuous mode [ 263.300055][T13578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.474555][T13573] bridge0: left promiscuous mode [ 263.619353][T13595] netlink: 'syz.4.3275': attribute type 3 has an invalid length. [ 263.640065][T13595] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3275'. [ 263.906603][T13609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3281'. [ 263.917001][T13609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3281'. [ 263.928614][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3281'. [ 263.949198][T13609] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 263.992308][T13612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.072441][T13616] bridge0: entered promiscuous mode [ 264.219436][T13615] bridge0: left promiscuous mode [ 264.335338][ T29] audit: type=1804 audit(1719669647.100:41): pid=13625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3287" name="/root/syzkaller.oJjMO7/237/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 264.342391][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 264.647258][T13644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.711335][T13650] bridge0: entered promiscuous mode [ 264.728384][T13649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3298'. [ 264.761229][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 264.781781][T13649] netlink: 772 bytes leftover after parsing attributes in process `syz.3.3298'. [ 264.805124][T13654] tls_set_device_offload_rx: netdev not found [ 264.825762][T13648] bridge0: left promiscuous mode [ 264.949367][T13660] netlink: 'syz.3.3301': attribute type 1 has an invalid length. [ 264.964590][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 265.155845][T13677] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 265.294786][T13686] tls_set_device_offload_rx: netdev not found [ 265.472556][T13691] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 265.491000][T13694] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 266.059117][T13718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.086580][T13717] tls_set_device_offload_rx: netdev not found [ 266.267866][ T29] audit: type=1800 audit(1719669649.030:42): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3334" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 266.819161][T13763] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 267.313577][T13792] __nla_validate_parse: 6 callbacks suppressed [ 267.313597][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3359'. [ 267.399093][T13796] netlink: 'syz.2.3360': attribute type 2 has an invalid length. [ 267.423023][T13796] netlink: 'syz.2.3360': attribute type 1 has an invalid length. [ 267.441648][T13796] netlink: 'syz.2.3360': attribute type 1 has an invalid length. [ 267.461532][T13796] netlink: 'syz.2.3360': attribute type 2 has an invalid length. [ 267.488101][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 267.508352][T13796] netlink: 'syz.2.3360': attribute type 2 has an invalid length. [ 267.577869][T13804] netlink: 'syz.1.3363': attribute type 3 has an invalid length. [ 267.594867][T13804] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3363'. [ 267.650795][T13808] xt_TCPMSS: Only works on TCP SYN packets [ 267.703933][T13810] IPv6: Can't replace route, no match found [ 267.847217][T13810] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 267.947960][T13810] team0: Port device macvlan2 removed [ 268.008642][T13810] team0: Port device macvlan3 removed [ 268.239392][T13834] netlink: 'syz.4.3375': attribute type 2 has an invalid length. [ 268.303823][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 268.361836][T13830] xt_connbytes: Forcing CT accounting to be enabled [ 268.902253][T13864] IPv6: Can't replace route, no match found [ 269.556839][T13877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3392'. [ 269.629780][T13877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3392'. [ 270.154870][T13909] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3402'. [ 270.192565][T13909] bridge0: port 4(gretap0) entered disabled state [ 270.205049][T13912] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.3406'. [ 270.385215][T13919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3409'. [ 270.486699][T13919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3409'. [ 271.218422][T13955] IPv6: sit2: Disabled Multicast RS [ 271.302274][T13963] IPv6: Can't replace route, no match found [ 271.572844][ T5102] Bluetooth: hci3: command tx timeout [ 271.881876][T13986] xt_connbytes: Forcing CT accounting to be enabled [ 271.978681][T13994] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 272.065919][T13990] 8021q: adding VLAN 0 to HW filter on device team1 [ 272.913504][T14025] IPv6: sit1: Disabled Multicast RS [ 273.284752][T14002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.631472][ T29] audit: type=1804 audit(1719669656.390:43): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3453" name="/root/syzkaller.pFeTbb/104/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 275.713901][T14137] wg2: entered promiscuous mode [ 275.719051][T14137] wg2: entered allmulticast mode [ 275.997436][ T29] audit: type=1804 audit(1719669658.760:44): pid=14149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3498" name="/root/syzkaller.pFeTbb/115/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 276.307168][T14155] __nla_validate_parse: 3 callbacks suppressed [ 276.307188][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3503'. [ 276.406820][T14155] 8021q: adding VLAN 0 to HW filter on device team1 [ 276.446345][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 276.505550][T14168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3504'. [ 276.812730][ T29] audit: type=1804 audit(1719669659.560:45): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3510" name="/root/syzkaller.pFeTbb/118/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 277.235987][T14196] xt_l2tp: v2 tid > 0xffff: 150994944 [ 277.462311][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3525'. [ 277.750656][T14222] xt_SECMARK: invalid mode: 0 [ 277.760022][T14224] xt_l2tp: v2 tid > 0xffff: 150994944 [ 277.908915][T14232] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 278.021651][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 278.422000][T14266] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 278.746978][T14283] smc: net device lo erased user defined pnetid SYZ2 [ 279.303314][T14262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.289930][T14340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.349116][T14340] team0: Port device virt_wifi0 added [ 283.260899][T14459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.279765][T14459] [ 283.282140][T14459] ====================================================== [ 283.289172][T14459] WARNING: possible circular locking dependency detected [ 283.296198][T14459] 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 Not tainted [ 283.303314][T14459] ------------------------------------------------------ [ 283.310364][T14459] syz.2.3632/14459 is trying to acquire lock: [ 283.316527][T14459] ffff8880232f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x308/0x1490 [ 283.327295][T14459] [ 283.327295][T14459] but task is already holding lock: [ 283.334668][T14459] ffff88806a154d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 283.344385][T14459] [ 283.344385][T14459] which lock already depends on the new lock. [ 283.344385][T14459] [ 283.354806][T14459] [ 283.354806][T14459] the existing dependency chain (in reverse order) is: [ 283.363835][T14459] [ 283.363835][T14459] -> #1 (team->team_lock_key#3){+.+.}-{3:3}: [ 283.372025][T14459] lock_acquire+0x1ed/0x550 [ 283.377052][T14459] __mutex_lock+0x136/0xd70 [ 283.382072][T14459] team_port_change_check+0x51/0x1e0 [ 283.387869][T14459] team_device_event+0x161/0x5b0 [ 283.393319][T14459] notifier_call_chain+0x19f/0x3e0 [ 283.398937][T14459] dev_close_many+0x33c/0x4c0 [ 283.404125][T14459] unregister_netdevice_many_notify+0x537/0x1d20 [ 283.410964][T14459] macvlan_device_event+0x7e0/0x870 [ 283.416692][T14459] notifier_call_chain+0x19f/0x3e0 [ 283.422692][T14459] unregister_netdevice_many_notify+0xdc8/0x1d20 [ 283.429551][T14459] unregister_netdevice_queue+0x303/0x370 [ 283.435794][T14459] _cfg80211_unregister_wdev+0x162/0x560 [ 283.441995][T14459] ieee80211_if_remove+0x25d/0x3a0 [ 283.447615][T14459] ieee80211_del_iface+0x19/0x30 [ 283.453062][T14459] cfg80211_remove_virtual_intf+0x23f/0x410 [ 283.459486][T14459] genl_rcv_msg+0xb14/0xec0 [ 283.464515][T14459] netlink_rcv_skb+0x1e3/0x430 [ 283.469791][T14459] genl_rcv+0x28/0x40 [ 283.474286][T14459] netlink_unicast+0x7f0/0x990 [ 283.479559][T14459] netlink_sendmsg+0x8e4/0xcb0 [ 283.484831][T14459] __sock_sendmsg+0x221/0x270 [ 283.490018][T14459] ____sys_sendmsg+0x525/0x7d0 [ 283.495294][T14459] __sys_sendmsg+0x2b0/0x3a0 [ 283.500395][T14459] do_syscall_64+0xf3/0x230 [ 283.505407][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.511810][T14459] [ 283.511810][T14459] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 283.519529][T14459] validate_chain+0x18e0/0x5900 [ 283.524889][T14459] __lock_acquire+0x1346/0x1fd0 [ 283.530435][T14459] lock_acquire+0x1ed/0x550 [ 283.535451][T14459] __mutex_lock+0x136/0xd70 [ 283.540497][T14459] cfg80211_netdev_notifier_call+0x308/0x1490 [ 283.547095][T14459] notifier_call_chain+0x19f/0x3e0 [ 283.552732][T14459] dev_open+0x13a/0x1b0 [ 283.557409][T14459] team_add_slave+0x9b3/0x2750 [ 283.562704][T14459] do_setlink+0xe70/0x41f0 [ 283.567631][T14459] rtnl_newlink+0x180d/0x20a0 [ 283.572822][T14459] rtnetlink_rcv_msg+0x89b/0x1180 [ 283.578361][T14459] netlink_rcv_skb+0x1e3/0x430 [ 283.583638][T14459] netlink_unicast+0x7f0/0x990 [ 283.588905][T14459] netlink_sendmsg+0x8e4/0xcb0 [ 283.594179][T14459] __sock_sendmsg+0x221/0x270 [ 283.599362][T14459] ____sys_sendmsg+0x525/0x7d0 [ 283.604644][T14459] __sys_sendmsg+0x2b0/0x3a0 [ 283.609773][T14459] do_syscall_64+0xf3/0x230 [ 283.614806][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.621219][T14459] [ 283.621219][T14459] other info that might help us debug this: [ 283.621219][T14459] [ 283.631438][T14459] Possible unsafe locking scenario: [ 283.631438][T14459] [ 283.638876][T14459] CPU0 CPU1 [ 283.644226][T14459] ---- ---- [ 283.649573][T14459] lock(team->team_lock_key#3); [ 283.654509][T14459] lock(&rdev->wiphy.mtx); [ 283.661526][T14459] lock(team->team_lock_key#3); [ 283.668978][T14459] lock(&rdev->wiphy.mtx); [ 283.673469][T14459] [ 283.673469][T14459] *** DEADLOCK *** [ 283.673469][T14459] [ 283.681590][T14459] 2 locks held by syz.2.3632/14459: [ 283.686768][T14459] #0: ffffffff8f5e81c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 283.696250][T14459] #1: ffff88806a154d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 283.706342][T14459] [ 283.706342][T14459] stack backtrace: [ 283.712218][T14459] CPU: 1 PID: 14459 Comm: syz.2.3632 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 283.722366][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.732420][T14459] Call Trace: [ 283.735695][T14459] [ 283.738614][T14459] dump_stack_lvl+0x241/0x360 [ 283.743284][T14459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.748495][T14459] ? print_circular_bug+0x130/0x1a0 [ 283.753688][T14459] check_noncircular+0x36a/0x4a0 [ 283.758615][T14459] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.764757][T14459] ? __pfx_check_noncircular+0x10/0x10 [ 283.770204][T14459] ? lockdep_lock+0x123/0x2b0 [ 283.774872][T14459] validate_chain+0x18e0/0x5900 [ 283.779725][T14459] ? mark_lock+0x9a/0x350 [ 283.784045][T14459] ? __pfx_stack_trace_save+0x10/0x10 [ 283.789413][T14459] ? __pfx_validate_chain+0x10/0x10 [ 283.794607][T14459] ? mark_lock+0x9a/0x350 [ 283.798925][T14459] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.805043][T14459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.811382][T14459] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 283.817262][T14459] ? lockdep_hardirqs_on+0x99/0x150 [ 283.822452][T14459] ? mark_lock+0x9a/0x350 [ 283.826781][T14459] __lock_acquire+0x1346/0x1fd0 [ 283.831713][T14459] lock_acquire+0x1ed/0x550 [ 283.836202][T14459] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 283.842438][T14459] ? __pfx_lock_acquire+0x10/0x10 [ 283.847461][T14459] ? __pfx___might_resched+0x10/0x10 [ 283.852740][T14459] ? rtmsg_fib+0x3a3/0x630 [ 283.857144][T14459] __mutex_lock+0x136/0xd70 [ 283.861636][T14459] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 283.867882][T14459] ? __lock_acquire+0x1346/0x1fd0 [ 283.872911][T14459] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 283.879153][T14459] ? __pfx___mutex_lock+0x10/0x10 [ 283.884211][T14459] cfg80211_netdev_notifier_call+0x308/0x1490 [ 283.890368][T14459] ? __pfx_lock_release+0x10/0x10 [ 283.895383][T14459] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 283.901886][T14459] ? __pfx_arp_key_eq+0x10/0x10 [ 283.906733][T14459] ? neigh_lookup+0x417/0x500 [ 283.911400][T14459] ? __pfx_fib_magic+0x10/0x10 [ 283.916152][T14459] ? neigh_lookup+0xb1/0x500 [ 283.920729][T14459] ? __pfx_neigh_lookup+0x10/0x10 [ 283.925755][T14459] ? fib_rebalance+0x8e/0xed0 [ 283.930420][T14459] ? dev_get_flags+0x147/0x1d0 [ 283.935186][T14459] ? fib_sync_up+0x74b/0x7d0 [ 283.939768][T14459] ? igmp_netdev_event+0x7c/0x770 [ 283.944791][T14459] notifier_call_chain+0x19f/0x3e0 [ 283.949996][T14459] dev_open+0x13a/0x1b0 [ 283.954141][T14459] ? __pfx_dev_open+0x10/0x10 [ 283.958806][T14459] ? team_add_slave+0x686/0x2750 [ 283.963735][T14459] ? team_add_slave+0x8a0/0x2750 [ 283.968668][T14459] team_add_slave+0x9b3/0x2750 [ 283.973433][T14459] ? __pfx_team_add_slave+0x10/0x10 [ 283.978648][T14459] ? 0xffffffffa0002008 [ 283.982801][T14459] ? 0xffffffffa0002008 [ 283.986941][T14459] ? is_bpf_text_address+0x285/0x2a0 [ 283.992235][T14459] ? is_bpf_text_address+0x26/0x2a0 [ 283.997435][T14459] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.003696][T14459] ? kernel_text_address+0xa7/0xe0 [ 284.008811][T14459] ? nla_strscpy+0x100/0x180 [ 284.013390][T14459] ? mutex_is_locked+0x12/0x50 [ 284.018140][T14459] do_setlink+0xe70/0x41f0 [ 284.022545][T14459] ? stack_trace_save+0x118/0x1d0 [ 284.027576][T14459] ? __pfx_stack_trace_save+0x10/0x10 [ 284.032935][T14459] ? __pfx_do_setlink+0x10/0x10 [ 284.037785][T14459] ? __nla_validate_parse+0x26ce/0x3090 [ 284.043320][T14459] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 284.048699][T14459] ? rtnl_newlink+0xf2/0x20a0 [ 284.053378][T14459] ? __pfx___nla_validate_parse+0x10/0x10 [ 284.059273][T14459] ? nla_strscpy+0x100/0x180 [ 284.063849][T14459] ? full_name_hash+0x93/0xe0 [ 284.068511][T14459] ? validate_linkmsg+0x71e/0x900 [ 284.073541][T14459] rtnl_newlink+0x180d/0x20a0 [ 284.078214][T14459] ? rtnl_newlink+0x4f1/0x20a0 [ 284.082974][T14459] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.087988][T14459] ? __pfx___mutex_trylock_common+0x10/0x10 [ 284.093881][T14459] ? __pfx_lock_release+0x10/0x10 [ 284.098900][T14459] ? __pfx_rtnl_newlink+0x10/0x10 [ 284.103920][T14459] rtnetlink_rcv_msg+0x89b/0x1180 [ 284.108963][T14459] ? rtnetlink_rcv_msg+0x208/0x1180 [ 284.114153][T14459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.119604][T14459] ? __local_bh_enable_ip+0x168/0x200 [ 284.124983][T14459] ? lockdep_hardirqs_on+0x99/0x150 [ 284.130369][T14459] ? __local_bh_enable_ip+0x168/0x200 [ 284.135730][T14459] ? dev_hard_start_xmit+0x773/0x7e0 [ 284.141011][T14459] ? __dev_queue_xmit+0x2da/0x3e90 [ 284.146117][T14459] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 284.151828][T14459] ? __dev_queue_xmit+0x2da/0x3e90 [ 284.156934][T14459] ? __dev_queue_xmit+0x1763/0x3e90 [ 284.162122][T14459] ? kasan_save_track+0x51/0x80 [ 284.166962][T14459] ? do_syscall_64+0xf3/0x230 [ 284.171626][T14459] ? __dev_queue_xmit+0x2da/0x3e90 [ 284.176731][T14459] ? __pfx___dev_queue_xmit+0x10/0x10 [ 284.182103][T14459] ? ref_tracker_free+0x643/0x7e0 [ 284.187173][T14459] netlink_rcv_skb+0x1e3/0x430 [ 284.191958][T14459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 284.197440][T14459] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.202743][T14459] ? netlink_deliver_tap+0x2e/0x1b0 [ 284.207935][T14459] netlink_unicast+0x7f0/0x990 [ 284.212694][T14459] ? __pfx_netlink_unicast+0x10/0x10 [ 284.218011][T14459] ? __virt_addr_valid+0x183/0x520 [ 284.223205][T14459] ? __check_object_size+0x49c/0x900 [ 284.228501][T14459] ? bpf_lsm_netlink_send+0x9/0x10 [ 284.233607][T14459] netlink_sendmsg+0x8e4/0xcb0 [ 284.238370][T14459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.243731][T14459] ? __import_iovec+0x536/0x820 [ 284.248788][T14459] ? aa_sock_msg_perm+0x91/0x160 [ 284.253740][T14459] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.259033][T14459] ? security_socket_sendmsg+0x87/0xb0 [ 284.264607][T14459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.269907][T14459] __sock_sendmsg+0x221/0x270 [ 284.274582][T14459] ____sys_sendmsg+0x525/0x7d0 [ 284.279348][T14459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.284742][T14459] __sys_sendmsg+0x2b0/0x3a0 [ 284.289327][T14459] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.294454][T14459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 284.300774][T14459] ? do_syscall_64+0x100/0x230 [ 284.305533][T14459] ? do_syscall_64+0xb6/0x230 [ 284.310197][T14459] do_syscall_64+0xf3/0x230 [ 284.314705][T14459] ? clear_bhb_loop+0x35/0x90 [ 284.319371][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.325299][T14459] RIP: 0033:0x7fe858775b99 [ 284.329719][T14459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.349327][T14459] RSP: 002b:00007fe8594d1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.357750][T14459] RAX: ffffffffffffffda RBX: 00007fe858903fa0 RCX: 00007fe858775b99 [ 284.365723][T14459] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000008 [ 284.373724][T14459] RBP: 00007fe8587f677e R08: 0000000000000000 R09: 0000000000000000 [ 284.381702][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.389671][T14459] R13: 000000000000000b R14: 00007fe858903fa0 R15: 00007ffe4949f2f8 [ 284.397677][T14459] [ 284.412448][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 284.429913][T14459] team0: Port device virt_wifi0 added