last executing test programs: 31.822677527s ago: executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a14000000160a030200000000000000000200000014000000110001"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000000800018004b140d1500002800800020000000000080001"], 0x30}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001ca650000000000001807"], 0x114}], 0x1}, 0x40) 31.715681506s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7000200000085000000030003008500009500"/80], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='mem_connect\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2009) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x82, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000f8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f00000002c0)=0x55a5, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040da973f4000000000000f7000000000000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 31.631413781s ago: executing program 2: close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000400)={0x20002007}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00'}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r7, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x400c005}, 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f00000000c0)) 31.464402549s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @mcast2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}], 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x1b, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x53, &(0x7f0000000340)=""/83, 0x1f00, 0x17, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x1, 0x80000000, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f0000000600)=[{0xfffffffc, 0x5, 0xa, 0x3}, {0x1, 0x2, 0x1, 0x1}, {0x3, 0x4, 0x0, 0x6}, {0x3, 0x5, 0xc, 0x9}, {0x2, 0x5, 0x2, 0x2}]}, 0x90) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r2, r3}, 0xc) (async) writev(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x934}], 0x1) 31.460009672s ago: executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa10900", 0x37}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100), 0xf}], 0x492492492492642, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000004a224116023f812dc5660000cf950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 31.276812945s ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc9, &(0x7f0000000000), &(0x7f0000000240)=0x4) 31.234395387s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{}]}, @union]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa}, 0x20) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000005580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0xf01}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xd4, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x960}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x200400c0}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)='%-010d \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0xa}, 0x20) 31.04519119s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="d0f5f36e38644d09eb28ebffe4dd0b99752a38727468297a363726e48dc098bfccedd95ea4f7d4c7584a66ca09a327bdcf44d451e484de102a73784f24fbe1ddec8ec5235643574814810e8f4842874cddef70504aa98992c28f9c0be53726d84e5166552b336cbcb947e39a30413c4d838807cb638b4fb40f21ff1bfffbb06abb2bd6a7b953f65ce5deedf88604b4051c8fa6f81c9545ccbb2e487ed5840e197b7fe318836bef7b53f5989a3d0dca0854d097cfca05224ae1c9b3e1ed1e1e7608"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000020c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x7, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='generic_add_lease\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004662b, 0x7ff3843f8fff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r5 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x6020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r7, @ANYBLOB="00007053d2207c9238c9", @ANYRES32=r6, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x23) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r8, 0xffffffffffffffff, {}, 0x1f9}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r8}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) setsockopt$sock_int(r5, 0x1, 0x4b, &(0x7f0000000240)=0x7ff, 0x4) recvmsg$can_j1939(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/95, 0x5f}, 0x0) 30.945384775s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 30.733115312s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) 30.648440766s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 30.605698005s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x80086601, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 30.597943841s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="000000002d3030303030303030303030303030303030a1ff0205"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x3, 0x22, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186500000800000000000000ff070000183a000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000d3f820bb00000081000000bf91000000000000b7020000010000008500000084000000b7000003000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x14, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000002060181000000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000014000300686173683a69702c706f72742c69700014000780080006400000000008000840"], 0x60}}, 0x0) r3 = socket(0x25, 0x6, 0x7) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xcb, 0x0, 0x5b) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x10, 0x5e, 0x401, 0x0, 0x0, "", [@generic]}, 0x10}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={&(0x7f00000001c0), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082abd7000fedbdf2512000000080006e151cbbc2c7c4d110003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000084) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @private=0xa010100}}, 0xaa, 0x0, 0x43, 0x0, "9e62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000580)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298900000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24490a660583eecdbf5bcd3de3a83247da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1fcff7a1ef3282837771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969cc1595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d400000000000004011c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0890700eef552fcde2981f48c482bde8a168c3f5db2eaa6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000100000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed90868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121048b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcd2cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c83ae45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422636f949e2ab8f162d7e3f855e378f4a1f40bc96fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df775e411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8605000000000000003fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373eaea36546791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf00000000f3ffffffffffff12a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca0000000000000000000090044ed83fec890f693d54e1c0adf7b3fe6cfcf3b9873cecd116826f1be38a8d61d866516197c199d5a3721a378de95d5c25b3887a271db57518e630dd132a518a3b2490b3a9ac177d286502aa73eb67275de3523ce65e50b67a3820faaab5e7b22850c8265b44085a0d2d3c734712591007e15d7f0b2cd7eb796e8f4318d2eb8343c5176056000000000000000000000007444a9a2b71016c9cf336078fa3fcfbdf4dcfc2f5acc09ad13dda373957ab7ed731565049f1d18bcba118079dc5307fa972f19cdf463cbf159985aeb0d92fceb4d62956f6de3f2a416a740000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = epoll_create(0x6ec) r8 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)) 30.540489101s ago: executing program 3: syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "0cbb45", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x3, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) 30.517043536s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.458137965s ago: executing program 3: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7000000}) 30.397758081s ago: executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff2ecafcc67af208004500003d00000300002f907800000000e0000001320088be00299078994ae28517351256a19e66b1bb2519808c70b0b9dfcdcb736d8a666700000000003da248ad1bf7ea7a965761b3dcd8f58054fca45220fac7c4c5809ab9fa42beef8337ee01002df155e71c1f5ffd9750b682"], 0x0) 30.358192931s ago: executing program 3: socket(0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1}, 0x18) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000f00000005003800000000000800030000000000000000", @ANYRES32=r5, @ANYBLOB='\b\x009\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) sendmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) 30.341154462s ago: executing program 2: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @window={0x3, 0x3}, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 30.249513489s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 30.191452058s ago: executing program 2: unshare(0x28000600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000000580)='ext4_es_insert_delayed_block\x00'}, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x9de, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000040)="bb53a945842851722bb479853e60", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/101, 0x65}}], 0x1, 0x12040, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000f6ffffe3ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff07000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bind$bt_sco(r1, &(0x7f0000001140)={0x1f, @none}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=@framed, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f00000002c0), 0x0}, 0x20) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000026c0)=0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) 30.164946046s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) 30.114593182s ago: executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x1d0, 0x30, 0x51b, 0x70bd2c, 0x0, {}, [{0x1bc, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcc}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d44495e54b20"}]}, {0xc, 0x14, "64024002124c8f82"}, {0xc}, {0xc, 0x6}}}, @m_simple={0x78, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfff, 0x0, 0x1, 0x6, 0x4bc92492}}, @TCA_DEF_DATA={0x8, 0x3, '{-%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x6, 0x9, 0xf6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0xc, 0x6, "f76edcae06a5015b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x7fff}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1d0}}, 0x0) 30.098230262s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 30.01571672s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(r2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x7, @remote, 0xffff}, {0xa, 0x4e20, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20}, 0x0, {[0x9, 0x2, 0x9, 0xaaa, 0xfff, 0x7, 0x3ff, 0x1ff]}}, 0x5c) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}, 0xc000014) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x7, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x72}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x9c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r7, 0x10b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}]}, 0x28}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 474.751717ms ago: executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000080007"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x32, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc080005470000080002"], 0x78}}, 0x40) 157.123067ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="128d16d90c697b08f3c9704225d1", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="628abacd7163"}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000000000400040001000000", 0x24) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r5, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x4e39}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a08000140000000010900010073797a30000000001400000011001c0000000000000000000000000a"], 0xc8}}, 0x0) 137.031723ms ago: executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x77, &(0x7f0000000e40)=[@in={0x2, 0x0, @broadcast}], 0x10) r1 = socket$inet(0x2, 0x80003, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) 65.366398ms ago: executing program 1: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7000000}) 0s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x33, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000007200a1430000000000004d0007"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): to keep mac addresses unique to avoid problems! [ 246.070682][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.092160][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.105309][T11316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.131670][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.143464][ T4492] Bluetooth: hci4: command tx timeout [ 246.150161][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.162385][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.177759][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.187822][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.198667][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.209169][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.219797][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.238593][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.268471][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.278338][T11316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.302441][T11601] x_tables: unsorted entry at hook 2 [ 246.330616][T11599] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 246.341788][T11316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.360864][ T29] audit: type=1800 audit(1717209378.426:9): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 246.385942][T11316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.404073][T11316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.416473][ T29] audit: type=1804 audit(1717209378.476:10): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1226053135/syzkaller.PWm7uW/50/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 246.417009][T11316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.490291][T11316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.503427][T11316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.561104][T11602] __nla_validate_parse: 1 callbacks suppressed [ 246.561125][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.597597][T11610] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.840027][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.888894][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.975354][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.995826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.065382][T11625] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.394278][T11632] sctp: [Deprecated]: syz-executor.0 (pid 11632) Use of int in max_burst socket option deprecated. [ 247.394278][T11632] Use struct sctp_assoc_value instead [ 247.524806][T11645] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 247.530041][T11644] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 247.557176][T11644] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.953912][T11670] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.208808][ T4492] Bluetooth: hci4: command tx timeout [ 248.459028][T11694] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 248.567031][T11698] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.783639][T11708] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 249.171080][T11730] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.287769][T11737] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.363723][T11743] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 249.398950][T11743] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.444909][T11743] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 249.701930][T11756] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.958152][T11768] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 250.623263][T11794] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 250.649429][T11794] macvlan2: entered promiscuous mode [ 250.655184][T11794] macvlan2: entered allmulticast mode [ 250.670767][T11794] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 250.701196][T11794] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 250.708433][T11794] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 250.831685][T11799] lo speed is unknown, defaulting to 1000 [ 251.319313][T11796] lo speed is unknown, defaulting to 1000 [ 251.449789][T11817] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 251.676301][T11824] __nla_validate_parse: 7 callbacks suppressed [ 251.676321][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.823006][T11824] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.036327][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.064696][T11801] lo speed is unknown, defaulting to 1000 [ 252.440606][T11806] lo speed is unknown, defaulting to 1000 [ 252.813063][T11849] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 252.927345][T11853] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 253.079303][T11856] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.689166][T11882] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 254.717008][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.114412][T11904] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.151658][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.179141][T11904] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.222134][T11904] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.252384][T11908] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.286983][T11908] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.371100][T11913] lo speed is unknown, defaulting to 1000 [ 255.897067][T11915] lo speed is unknown, defaulting to 1000 [ 256.295296][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.225029][T11969] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 257.957443][T11990] lo speed is unknown, defaulting to 1000 [ 258.500173][T11995] lo speed is unknown, defaulting to 1000 [ 258.904124][T12002] lo speed is unknown, defaulting to 1000 [ 259.001442][T12020] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.026352][T12020] openvswitch: netlink: Multiple metadata blocks provided [ 259.294685][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.587786][T12003] lo speed is unknown, defaulting to 1000 [ 260.174215][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.190812][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.287745][T12010] lo speed is unknown, defaulting to 1000 [ 260.706127][T12012] lo speed is unknown, defaulting to 1000 [ 261.130660][T12076] lo speed is unknown, defaulting to 1000 [ 263.040068][T12100] tap0: tun_chr_ioctl cmd 1074025677 [ 263.045681][T12100] tap0: linktype set to 0 [ 263.560103][T12114] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.738021][T12127] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 263.903532][T12129] lo speed is unknown, defaulting to 1000 [ 264.305370][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.450845][T12133] lo speed is unknown, defaulting to 1000 [ 264.839766][T12165] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.729551][T12188] Cannot find add_set index 0 as target [ 265.909570][T12194] bond0: entered promiscuous mode [ 265.922886][T12194] bond_slave_1: entered promiscuous mode [ 265.944750][T12194] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 266.290024][T12202] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 266.495555][T12207] Cannot find add_set index 0 as target [ 267.337701][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.821038][T12273] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.231552][T12287] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 268.243623][T12285] x_tables: unsorted underflow at hook 3 [ 268.524445][T12306] Cannot find add_set index 0 as target [ 268.708994][T12317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.855551][T12318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.927879][T12321] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.988245][T12326] batadv0: entered promiscuous mode [ 269.153295][T12318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.191047][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.205376][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.237911][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.362712][T12318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.498999][T12318] bond0: (slave netdevsim0): Releasing backup interface [ 269.551342][T12318] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 269.571556][T12318] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 269.597870][T12318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.626467][ T29] audit: type=1804 audit(1717209401.686:11): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1226053135/syzkaller.PWm7uW/93/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 269.792281][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.843676][T12318] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.911673][T12318] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.939061][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.962528][T12318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.015983][T12318] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.219216][T12380] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 270.296124][T12380] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 271.023317][T12405] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.169577][T12412] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 271.188598][T12412] netlink: 9384 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.844833][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.859550][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.883438][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.899871][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.909542][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.921630][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.162148][ T2430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.357436][ T2430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.389845][T12464] lo speed is unknown, defaulting to 1000 [ 273.510475][ T2430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.608040][ T2430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.747655][T12486] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.824277][ T2430] bridge_slave_1: left allmulticast mode [ 273.834076][ T2430] bridge_slave_1: left promiscuous mode [ 273.847028][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.858197][ T2430] bridge_slave_0: left allmulticast mode [ 273.866957][ T2430] bridge_slave_0: left promiscuous mode [ 273.873122][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.709426][ T2430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.737518][ T2430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.765749][ T2430] bond0 (unregistering): Released all slaves [ 275.009098][ T5119] Bluetooth: hci4: command tx timeout [ 275.149272][ T29] audit: type=1804 audit(1717209407.206:12): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1610467391/syzkaller.zIKmAd/496/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 275.475721][T12464] chnl_net:caif_netlink_parms(): no params data found [ 275.598181][T12529] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.683631][T12532] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.801911][T12533] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.911780][ T2430] hsr_slave_0: left promiscuous mode [ 275.939822][ T2430] hsr_slave_1: left promiscuous mode [ 275.959691][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.976635][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.999829][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.008791][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.084204][ T2430] veth1_macvtap: left promiscuous mode [ 276.099069][ T2430] veth0_macvtap: left promiscuous mode [ 276.111029][ T2430] veth1_vlan: left promiscuous mode [ 276.122277][ T2430] veth0_vlan: left promiscuous mode [ 277.002164][ T2430] team0 (unregistering): Port device team_slave_1 removed [ 277.062298][ T2430] team0 (unregistering): Port device team_slave_0 removed [ 277.088713][ T5119] Bluetooth: hci4: command tx timeout [ 277.840660][T12464] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.847908][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.871541][T12464] bridge_slave_0: entered allmulticast mode [ 277.895976][T12464] bridge_slave_0: entered promiscuous mode [ 277.913390][T12575] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.968795][T12464] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.975973][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.019234][T12464] bridge_slave_1: entered allmulticast mode [ 278.042401][T12464] bridge_slave_1: entered promiscuous mode [ 278.276886][T12464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.332973][T12464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.595002][T12464] team0: Port device team_slave_0 added [ 278.627470][T12464] team0: Port device team_slave_1 added [ 278.839739][T12464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.852485][T12604] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 278.858616][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.901898][T12464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.032179][T12603] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-xor(2) [ 279.055063][T12609] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 279.083922][T12464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.122834][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.168788][ T5119] Bluetooth: hci4: command tx timeout [ 279.188555][T12464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.321028][T12464] hsr_slave_0: entered promiscuous mode [ 279.333590][T12464] hsr_slave_1: entered promiscuous mode [ 279.362173][T12464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.383910][T12464] Cannot create hsr debugfs directory [ 279.440559][T12622] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 279.567802][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.596556][T12626] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.605973][T12626] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.614386][T12626] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.623819][T12626] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.638815][T12626] vxlan0: entered promiscuous mode [ 279.644000][T12626] vxlan0: entered allmulticast mode [ 279.657991][T12628] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.183653][T12633] tipc: Failed to remove unknown binding: 66,0,0/10922666:1127286095/1127286096 [ 280.388012][T12648] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.481223][T12464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.564737][T12464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.613238][T12464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.635152][T12464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.793644][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.815022][T12662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.823814][T12662] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.832725][T12662] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.841021][T12662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.854120][T12662] vxlan0: entered promiscuous mode [ 280.861532][T12662] vxlan0: entered allmulticast mode [ 280.986817][T12464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.085370][T12464] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.123965][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.131178][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.206860][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.214078][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.249895][ T5119] Bluetooth: hci4: command tx timeout [ 281.533222][T12685] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.656286][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.697305][T12692] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 281.741197][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.779636][T12464] veth0_vlan: entered promiscuous mode [ 281.815140][T12464] veth1_vlan: entered promiscuous mode [ 281.848212][T12692] team0: Port device bridge0 added [ 281.930410][T12464] veth0_macvtap: entered promiscuous mode [ 281.958885][T12464] veth1_macvtap: entered promiscuous mode [ 281.997382][T12694] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 282.027114][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.046812][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.062445][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.081191][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.102907][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.121853][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.139393][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.162146][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.174821][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.201033][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.213092][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.223885][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.234234][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.268198][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.299546][T12464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.316494][T12701] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.344357][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.371050][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.412666][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.443619][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.469348][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.496786][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.498863][T12716] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 282.515095][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.525673][T12716] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.538067][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.549274][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.560295][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.587107][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.599568][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.640993][T12464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.819997][T12464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.840428][T12464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.850367][T12464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.863790][T12464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.124380][ T2889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.143817][ T2889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.220445][T12742] hsr0: entered promiscuous mode [ 283.226476][T12742] macvtap1: entered allmulticast mode [ 283.233820][T12742] hsr0: entered allmulticast mode [ 283.239230][T12742] hsr_slave_0: entered allmulticast mode [ 283.245088][T12742] hsr_slave_1: entered allmulticast mode [ 283.266210][T12742] hsr0: left allmulticast mode [ 283.271442][T12742] hsr_slave_0: left allmulticast mode [ 283.277058][T12742] hsr_slave_1: left allmulticast mode [ 283.335803][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.362802][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.409575][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.529710][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.574537][T12755] veth0Wvlan: renamed from bridge0 (while UP) [ 283.605473][T12755] veth0Wvlan: port 2(bridge_slave_1) entered disabled state [ 283.613668][T12755] veth0Wvlan: port 1(bridge_slave_0) entered disabled state [ 283.636251][T12748] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 283.663509][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.677349][T12748] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.724886][T12751] vlan2: entered promiscuous mode [ 283.748659][T12751] syz_tun: entered promiscuous mode [ 283.771467][T12751] syz_tun: left promiscuous mode [ 283.824256][T12767] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 283.833131][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.873245][T12766] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 284.213568][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.300129][T12781] : entered allmulticast mode [ 284.312957][T12781] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 284.453085][T12786] tipc: Resetting bearer [ 284.485161][T12786] veth0Wvlan: renamed from bridge0 (while UP) [ 284.510784][T12786] tipc: Disabling bearer [ 284.529484][T12786] veth0Wvlan: port 2(bridge_slave_1) entered disabled state [ 284.537497][T12786] veth0Wvlan: port 1(bridge_slave_0) entered disabled state [ 284.578050][T12788] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 284.599802][T12789] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 284.995987][ C0] Unknown status report in ack skb [ 285.147486][ T29] audit: type=1800 audit(1717209417.206:13): pid=12828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1946 res=0 errno=0 [ 285.244808][T12832] veth0Wvlan: renamed from bridge0 (while UP) [ 285.301686][T12832] veth0Wvlan: port 2(bridge_slave_1) entered disabled state [ 285.309793][T12832] veth0Wvlan: port 1(bridge_slave_0) entered disabled state [ 285.831395][T12873] __nla_validate_parse: 9 callbacks suppressed [ 285.831414][T12873] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.897849][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.928745][T12878] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 285.979285][T12878] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.031671][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.103597][T12888] veth0: entered promiscuous mode [ 286.145961][T12888] veth0: left promiscuous mode [ 286.486850][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.675059][T12909] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 286.708286][T12909] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.798064][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.831158][T12935] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 286.850128][T12935] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.015708][T12944] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 287.031860][T12944] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 287.133198][T12949] bridge0: port 1(gretap2) entered blocking state [ 287.152946][T12949] bridge0: port 1(gretap2) entered disabled state [ 287.161374][T12949] gretap2: entered allmulticast mode [ 287.176291][T12949] gretap2: entered promiscuous mode [ 287.185908][T12944] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 287.209021][T12944] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 287.232230][T12952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.250759][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.722679][T12976] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 287.873964][T12971] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 288.183989][T12992] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 288.746072][T13013] ipvlan0: entered allmulticast mode [ 288.881882][T13019] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 289.052377][T13029] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 289.680548][T13060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.705275][T13060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.157317][T13090] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 290.444505][T13102] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 290.468898][T13102] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (255) [ 291.114251][T13140] __nla_validate_parse: 11 callbacks suppressed [ 291.114271][T13140] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.262844][T13142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.280454][T13142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.305802][T13140] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.489792][T13142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.513824][T13142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.515626][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.582509][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.745764][T13142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.772204][T13142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.816403][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.828922][T13162] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.943865][T13142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.985650][T13142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 292.019281][T13174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.166450][T13188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.171355][T13142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 292.200044][T13142] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.240283][T13142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 292.268652][T13142] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.322315][T13142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 292.360842][T13142] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.410627][T13142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 292.448619][T13142] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 293.152846][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.183514][T13226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.237378][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.208500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.421611][ T29] audit: type=1804 audit(1717209426.486:14): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3149435543/syzkaller.rGYY96/680/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 294.807514][T13286] validate_nla: 3 callbacks suppressed [ 294.807533][T13286] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 295.248515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.478052][T13319] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 295.545645][T13322] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 296.352732][T13347] team0: Port device team_slave_0 removed [ 296.371611][T13347] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 296.542802][T13356] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 296.955433][T13374] __nla_validate_parse: 7 callbacks suppressed [ 296.955454][T13374] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.255259][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.305462][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.366991][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.704515][T13389] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 297.784523][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.131255][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 298.181917][T13424] bond0: entered promiscuous mode [ 298.209021][T13424] bond_slave_0: entered promiscuous mode [ 298.215510][T13424] bond_slave_1: entered promiscuous mode [ 298.250966][T13424] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 298.315355][T13424] dummy0: entered promiscuous mode [ 298.329813][T13424] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 298.364441][T13422] bond0: left promiscuous mode [ 298.375650][T13422] bond_slave_0: left promiscuous mode [ 298.391721][T13422] bond_slave_1: left promiscuous mode [ 298.408735][T13422] dummy0: left promiscuous mode [ 298.535692][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.908943][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.966295][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.039971][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.405780][T13473] bond0: entered promiscuous mode [ 299.411605][T13471] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 299.419837][T13473] bond_slave_0: entered promiscuous mode [ 299.435104][T13473] bond_slave_1: entered promiscuous mode [ 299.474710][T13473] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 299.539799][T13473] dummy0: entered promiscuous mode [ 299.557827][T13473] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 299.621118][T13472] bond0: left promiscuous mode [ 299.635712][T13472] bond_slave_0: left promiscuous mode [ 299.649583][T13472] bond_slave_1: left promiscuous mode [ 299.671416][T13472] dummy0: left promiscuous mode [ 301.313444][T13569] bond0: entered promiscuous mode [ 301.354830][T13569] bond_slave_0: entered promiscuous mode [ 301.375907][T13569] bond_slave_1: entered promiscuous mode [ 301.404189][T13576] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 301.451163][T13576] dummy0: entered promiscuous mode [ 301.466119][T13576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.522066][T13568] bond0: left promiscuous mode [ 301.537874][T13568] bond_slave_0: left promiscuous mode [ 301.553200][T13568] bond_slave_1: left promiscuous mode [ 301.566041][T13568] dummy0: left promiscuous mode [ 301.981479][T13598] openvswitch: netlink: IP tunnel dst address not specified [ 302.222238][T13608] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 302.262975][T13608] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 302.456314][T13623] xt_l2tp: v2 doesn't support IP mode [ 302.850069][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.954606][T13641] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.970984][T13641] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.133809][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.170190][T13653] netlink: 'syz-executor.3': attribute type 19 has an invalid length. [ 304.025915][T13692] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 304.114460][T13694] macvlan2: entered allmulticast mode [ 304.128463][T13694] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 304.145769][T13694] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 304.195555][T13694] team0: Port device macvlan2 added [ 304.348700][T13703] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 304.372011][T13703] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 304.779135][T13723] pimreg: entered allmulticast mode [ 304.802393][T13722] pimreg: left allmulticast mode [ 305.114856][T13740] IPv6: sit1: Disabled Multicast RS [ 305.173308][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.290966][T13747] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 305.296433][T13739] lo speed is unknown, defaulting to 1000 [ 305.521671][T13756] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 305.656280][T13763] sctp: [Deprecated]: syz-executor.2 (pid 13763) Use of int in max_burst socket option. [ 305.656280][T13763] Use struct sctp_assoc_value instead [ 305.780327][T13766] vlan2: entered promiscuous mode [ 305.794902][T13766] vlan2: entered allmulticast mode [ 306.403286][T13792] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 306.502388][T13795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.532867][T13792] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 306.706608][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.733257][T13804] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.867064][T13811] vlan2: entered promiscuous mode [ 306.907838][T13811] vlan2: entered allmulticast mode [ 307.119232][T13827] --map-set only usable from mangle table [ 307.594557][T13845] hsr_slave_0: left promiscuous mode [ 307.621777][T13845] hsr_slave_1: left promiscuous mode [ 307.706922][T13847] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 307.975182][T13855] vlan2: entered promiscuous mode [ 307.983076][T13855] vlan2: entered allmulticast mode [ 308.028961][T13857] : renamed from ipvlan1 [ 308.056964][T13858] bond0: entered promiscuous mode [ 308.101258][T13858] bond_slave_0: entered promiscuous mode [ 308.125134][T13858] bond_slave_1: entered promiscuous mode [ 308.139656][T13858] dummy0: entered promiscuous mode [ 308.192828][T13864] bond0: entered promiscuous mode [ 308.197925][T13864] bond_slave_0: entered promiscuous mode [ 308.229871][T13864] bond_slave_1: entered promiscuous mode [ 308.236140][T13864] dummy0: entered promiscuous mode [ 308.359888][T13879] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.533182][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.817951][T13898] Bluetooth: MGMT ver 1.22 [ 308.903975][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.176350][T13915] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.884665][T13930] syz-executor.3[13930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.885130][T13930] syz-executor.3[13930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.767666][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.152590][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.817614][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.883524][T13996] ebtables: ebtables: counters copy to user failed while replacing table [ 312.011409][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.057640][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.760135][T14027] netem: incorrect gi model size [ 312.765693][T14027] netem: change failed [ 312.870627][T14027] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 312.915735][T14027] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 312.958612][T14027] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 313.292423][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.326666][T14039] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 313.344760][T14039] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 314.286984][T14078] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 314.304261][T14078] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.658494][T14096] netem: incorrect gi model size [ 314.665309][T14096] netem: change failed [ 314.724587][T14096] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 314.766344][T14096] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 314.791192][T14096] debugfs: Directory 'netdev:' with parent 'phy17' already present! [ 315.039995][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.067928][T14103] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 315.082407][T14103] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 315.281558][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.305189][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.365516][T14092] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 315.619088][T14126] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 315.634409][T14126] x_tables: ip_tables: osf match: only valid for protocol 6 [ 315.957814][T14142] veth1_macvtap: left promiscuous mode [ 315.970171][T14142] macsec0: entered allmulticast mode [ 316.005210][T14142] veth1_macvtap: entered promiscuous mode [ 316.023446][T14142] veth1_macvtap: entered allmulticast mode [ 316.210540][T14157] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 316.233753][T14157] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.266828][T14157] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 316.296034][T14157] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.458959][T14187] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.603654][T14187] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.667762][T14187] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.989067][T14194] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 317.024007][T14194] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.310884][T14214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.471888][T14220] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 317.498499][T14220] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 317.736143][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.956377][T14246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.964394][T14246] IPv6: NLM_F_CREATE should be set when creating new route [ 317.971684][T14246] IPv6: NLM_F_CREATE should be set when creating new route [ 318.368877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.421149][T14264] validate_nla: 4 callbacks suppressed [ 318.421169][T14264] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 318.530000][T14269] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20003 [ 318.640584][T14278] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 318.963031][T14288] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 318.973965][T14297] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 318.984561][T14288] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 319.083237][T14303] pim6reg: entered allmulticast mode [ 319.091710][T14303] pim6reg: left allmulticast mode [ 319.343640][T14314] __nla_validate_parse: 10 callbacks suppressed [ 319.343661][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.408619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.487498][ T29] audit: type=1800 audit(1717209451.546:15): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 319.497767][T14322] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.559193][ T29] audit: type=1804 audit(1717209451.546:16): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1226053135/syzkaller.PWm7uW/239/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 319.623034][ T29] audit: type=1804 audit(1717209451.616:17): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1226053135/syzkaller.PWm7uW/239/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 319.952173][T14343] lo speed is unknown, defaulting to 1000 [ 320.009593][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.029697][T14349] vlan2: entered allmulticast mode [ 320.035139][T14349] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 320.043727][T14342] sctp: [Deprecated]: syz-executor.2 (pid 14342) Use of int in max_burst socket option. [ 320.043727][T14342] Use struct sctp_assoc_value instead [ 320.271818][T14358] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 320.683718][T14376] SET target dimension over the limit! [ 321.033079][T14386] netlink: 696 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.396870][T14398] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 321.908963][ T29] audit: type=1800 audit(1717209453.966:18): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 322.255926][ T29] audit: type=1804 audit(1717209454.316:19): pid=14418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3377484640/syzkaller.fDdoV0/357/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 323.638243][T14487] IPv6: addrconf: prefix option has invalid lifetime [ 323.736457][T14493] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.770901][T14493] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 323.790579][T14493] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.859983][T14494] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 324.330982][T14507] infiniband syz1: set active [ 324.356232][ T9] lo speed is unknown, defaulting to 1000 [ 324.365497][T14509] infiniband syz1: set active [ 324.437532][T14514] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 324.469357][ T9] lo speed is unknown, defaulting to 1000 [ 324.502430][T14514] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.712063][T14531] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.738989][T14531] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 324.758227][T14531] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.855735][T14539] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.982540][ T785] IPVS: starting estimator thread 0... [ 325.061485][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.108767][T14548] IPVS: using max 17 ests per chain, 40800 per kthread [ 325.133223][T14556] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.426678][T14578] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.444275][T14578] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 325.454097][T14578] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.475271][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.986896][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.161902][T14610] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 326.194532][T14610] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 326.270120][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.694156][T14643] SET target dimension over the limit! [ 326.941717][T14655] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 326.969595][T14655] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 327.504606][T14680] xt_l2tp: invalid flags combination: 0 [ 327.775317][T14706] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 327.825431][T14706] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 327.977454][ T5119] Bluetooth: hci4: link tx timeout [ 327.991187][ T5119] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 328.201847][T14727] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 328.320017][T14727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.898269][T14759] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 328.915523][T14759] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 329.259883][T14773] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 329.298704][T14773] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 329.334652][T14773] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.344324][T14773] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.353439][T14773] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.362313][T14773] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.379236][T14773] vxlan0: entered promiscuous mode [ 329.665677][ T785] IPVS: starting estimator thread 0... [ 329.758866][T14788] IPVS: using max 18 ests per chain, 43200 per kthread [ 329.789428][T14791] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 329.828318][T14791] __nla_validate_parse: 20 callbacks suppressed [ 329.828340][T14791] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.881844][T14791] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 329.903001][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 329.914768][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.924328][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.933930][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.942671][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 329.950699][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.959008][T14791] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.050483][ T4492] Bluetooth: hci4: command 0x0405 tx timeout [ 330.057073][T13506] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.067757][T13506] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.155284][T13506] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.183009][T13506] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.240334][T14797] lo speed is unknown, defaulting to 1000 [ 330.313576][T13506] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.337354][T13506] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.379804][T14810] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.418047][T13506] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.433302][T13506] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.783908][T13506] bridge_slave_1: left allmulticast mode [ 330.805881][T13506] bridge_slave_1: left promiscuous mode [ 330.826848][T13506] veth0Wvlan: port 2(bridge_slave_1) entered disabled state [ 330.851662][T13506] bridge_slave_0: left allmulticast mode [ 330.857355][T13506] bridge_slave_0: left promiscuous mode [ 330.888698][T13506] veth0Wvlan: port 1(bridge_slave_0) entered disabled state [ 330.905609][T13506] gretap1: left allmulticast mode [ 330.915627][T13506] gretap1: left promiscuous mode [ 330.931118][T13506] bridge1: port 1(gretap1) entered disabled state [ 331.830952][T13506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.843703][T13506] bond_slave_1: left promiscuous mode [ 331.849802][T13506] bond_slave_1: left allmulticast mode [ 331.857847][T13506] bond0 (unregistering): Released all slaves [ 331.873931][T13506] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 331.885245][T13506] bond1 (unregistering): Released all slaves [ 332.048725][ T5119] Bluetooth: hci5: command tx timeout [ 332.180828][T13506] IPVS: stopping master sync thread 6658 ... [ 332.274241][T14851] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 332.282977][T14851] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.293217][T14851] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 332.302181][T14851] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 332.595601][T14797] chnl_net:caif_netlink_parms(): no params data found [ 333.108230][T14797] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.130056][T14797] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.137616][T14797] bridge_slave_0: entered allmulticast mode [ 333.152544][T14797] bridge_slave_0: entered promiscuous mode [ 333.186707][T14797] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.213828][T14797] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.269760][T14797] bridge_slave_1: entered allmulticast mode [ 333.318497][T14797] bridge_slave_1: entered promiscuous mode [ 333.458622][T14842] syz-executor.3: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 333.505633][T14842] CPU: 0 PID: 14842 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 333.515856][T14842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 333.525944][T14842] Call Trace: [ 333.529241][T14842] [ 333.532183][T14842] dump_stack_lvl+0x241/0x360 [ 333.536904][T14842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.542119][T14842] ? __pfx__printk+0x10/0x10 [ 333.546743][T14842] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 333.553187][T14842] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 333.559729][T14842] warn_alloc+0x278/0x410 [ 333.564103][T14842] ? __pfx_warn_alloc+0x10/0x10 [ 333.568993][T14842] ? translate_table+0x174/0x2330 [ 333.574049][T14842] ? __get_vm_area_node+0x23d/0x270 [ 333.579284][T14842] __vmalloc_node_range_noprof+0x6d0/0x1490 [ 333.585235][T14842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 333.591594][T14842] ? rcu_is_watching+0x15/0xb0 [ 333.596395][T14842] ? trace_kmalloc+0x1f/0xd0 [ 333.601036][T14842] ? __kmalloc_node_noprof+0x247/0x440 [ 333.606522][T14842] ? kvmalloc_node_noprof+0x72/0x190 [ 333.611840][T14842] kvmalloc_node_noprof+0x142/0x190 [ 333.617069][T14842] ? translate_table+0x174/0x2330 [ 333.622124][T14842] translate_table+0x174/0x2330 [ 333.627007][T14842] ? __pfx_translate_table+0x10/0x10 [ 333.632297][T14842] ? __might_fault+0xaa/0x120 [ 333.637012][T14842] ? __pfx_lock_release+0x10/0x10 [ 333.642052][T14842] ? __might_fault+0xaa/0x120 [ 333.646761][T14842] ? __might_fault+0xc6/0x120 [ 333.651480][T14842] ? _copy_from_user+0xa6/0xe0 [ 333.656286][T14842] ? copy_from_sockptr_offset+0x6b/0xb0 [ 333.661861][T14842] do_ip6t_set_ctl+0xe4c/0x1270 [ 333.666748][T14842] ? __pfx___might_resched+0x10/0x10 [ 333.672061][T14842] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 333.677370][T14842] ? __pfx_lock_release+0x10/0x10 [ 333.682438][T14842] ? __mutex_unlock_slowpath+0x21d/0x750 [ 333.688108][T14842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.694128][T14842] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.699018][T14842] nf_setsockopt+0x295/0x2c0 [ 333.703650][T14842] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.709569][T14842] do_sock_setsockopt+0x3af/0x720 [ 333.714642][T14842] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 333.720218][T14842] ? __fget_files+0x29/0x470 [ 333.724838][T14842] ? __fget_files+0x3f6/0x470 [ 333.729553][T14842] __sys_setsockopt+0x1ae/0x250 [ 333.734439][T14842] __x64_sys_setsockopt+0xb5/0xd0 [ 333.739494][T14842] do_syscall_64+0xf3/0x230 [ 333.744020][T14842] ? clear_bhb_loop+0x35/0x90 [ 333.748719][T14842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.754655][T14842] RIP: 0033:0x7f9d0147cee9 [ 333.759091][T14842] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 333.778815][T14842] RSP: 002b:00007f9d00fff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.787265][T14842] RAX: ffffffffffffffda RBX: 00007f9d015b3fa0 RCX: 00007f9d0147cee9 [ 333.795278][T14842] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 333.803273][T14842] RBP: 00007f9d014c947f R08: 0000000000000548 R09: 0000000000000000 [ 333.811278][T14842] R10: 0000000020000700 R11: 0000000000000246 R12: 0000000000000000 [ 333.819278][T14842] R13: 000000000000000b R14: 00007f9d015b3fa0 R15: 00007ffdcb1e5be8 [ 333.827329][T14842] [ 333.848306][T14797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.903691][T13506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.918766][T14842] Mem-Info: [ 333.922031][T14842] active_anon:14561 inactive_anon:0 isolated_anon:0 [ 333.922031][T14842] active_file:0 inactive_file:46943 isolated_file:0 [ 333.922031][T14842] unevictable:768 dirty:77 writeback:0 [ 333.922031][T14842] slab_reclaimable:11893 slab_unreclaimable:108087 [ 333.922031][T14842] mapped:21662 shmem:1734 pagetables:658 [ 333.922031][T14842] sec_pagetables:0 bounce:0 [ 333.922031][T14842] kernel_misc_reclaimable:0 [ 333.922031][T14842] free:1350822 free_pcp:1215 free_cma:0 [ 333.972281][T13506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.999411][T13506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.006902][T13506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.030256][T14842] Node 0 active_anon:58344kB inactive_anon:0kB active_file:0kB inactive_file:187696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86648kB dirty:304kB writeback:0kB shmem:5400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12244kB pagetables:2632kB sec_pagetables:0kB all_unreclaimable? no [ 334.064431][T14842] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 334.097594][T14842] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.119353][T13506] veth1_macvtap: left promiscuous mode [ 334.130520][ T4492] Bluetooth: hci5: command tx timeout [ 334.136581][T14842] lowmem_reserve[]: 0 2571 2571 0 0 [ 334.148785][T14842] Node 0 DMA32 free:1440132kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:58304kB inactive_anon:0kB active_file:0kB inactive_file:187388kB unevictable:1536kB writepending:300kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:5200kB local_pcp:1852kB free_cma:0kB [ 334.203455][T13506] veth0_macvtap: left promiscuous mode [ 334.209751][T13506] veth1_vlan: left promiscuous mode [ 334.215197][T13506] veth0_vlan: left promiscuous mode [ 334.221411][T14842] lowmem_reserve[]: 0 0 0 0 0 [ 334.226257][T14842] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 334.254733][T14842] lowmem_reserve[]: 0 0 0 0 0 [ 334.259950][T14842] Node 1 Normal free:3947652kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.319508][T14842] lowmem_reserve[]: 0 0 0 0 0 [ 334.325530][T14842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.356965][T14842] Node 0 DMA32: 108*4kB (UME) 181*8kB (ME) 164*16kB (ME) 85*32kB (UME) 26*64kB (UME) 32*128kB (UME) 9*256kB (UM) 4*512kB (UME) 1*1024kB (U) 4*2048kB (UM) 346*4096kB (UM) = 1443768kB [ 334.427242][T14842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 334.466698][T14842] Node 1 Normal: 5*4kB (U) 6*8kB (UM) 10*16kB (UM) 13*32kB (UM) 8*64kB (U) 8*128kB (U) 2*256kB (UM) 3*512kB (UM) 3*1024kB (U) 2*2048kB (UM) 961*4096kB (M) = 3947652kB [ 334.514629][T14842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.568464][T14842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.588858][T14842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 334.611964][T14842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 334.635739][T14842] 48654 total pagecache pages [ 334.646195][T14842] 0 pages in swap cache [ 334.650582][T14842] Free swap = 124996kB [ 334.654894][T14842] Total swap = 124996kB [ 334.660385][T14842] 2097051 pages RAM [ 334.679720][T14842] 0 pages HighMem/MovableOnly [ 334.684614][T14842] 400871 pages reserved [ 334.691928][T14842] 0 pages cma reserved [ 335.674846][T13506] team0 (unregistering): Port device team_slave_1 removed [ 336.209505][ T4492] Bluetooth: hci5: command 0x040f tx timeout [ 336.280214][T14916] ip6t_srh: unknown srh invflags 4000 [ 336.439023][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.756649][T14797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.772912][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.912842][T14931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.938713][T14931] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 336.955960][T14931] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 336.967799][T14797] team0: Port device team_slave_0 added [ 336.983070][T14931] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.032404][T14797] team0: Port device team_slave_1 added [ 337.105549][T14941] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 337.140527][T14941] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.165536][T14941] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 337.176873][T14797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.193820][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.199824][T14941] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.227366][T14797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.326764][T14797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.361402][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.429792][T14797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.479622][T14957] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 337.530019][T14797] hsr_slave_0: entered promiscuous mode [ 337.546145][T14797] hsr_slave_1: entered promiscuous mode [ 337.594713][T14797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.605375][T14797] Cannot create hsr debugfs directory [ 337.641661][T14965] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.723184][T13506] IPVS: stop unused estimator thread 0... [ 338.288818][ T5114] Bluetooth: hci5: command 0x040f tx timeout [ 338.493978][T14973] gretap0: entered promiscuous mode [ 338.504876][T14982] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 338.515621][T14982] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 338.516355][T14973] gretap0: left promiscuous mode [ 338.672278][T14797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.693660][T14797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.702081][T14990] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 338.721885][T14990] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.735322][T14797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.748133][T14990] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 338.759281][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.786632][T14797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.840471][T14997] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 338.961858][T15001] IPVS: length: 215 != 24 [ 339.001432][T15004] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.140857][T14797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.202779][T14797] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.235306][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.242516][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.283240][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.290437][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.383170][T14797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.904039][T15042] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 339.915188][T15042] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 339.946017][T15042] xt_TCPMSS: Only works on TCP SYN packets [ 339.953008][T14797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.153172][T14797] veth0_vlan: entered promiscuous mode [ 340.221762][T14797] veth1_vlan: entered promiscuous mode [ 340.288805][ T5114] Bluetooth: hci1: command 0x0405 tx timeout acpid: malformed netlink msg, length -1639779736 [ 340.369123][ T4492] Bluetooth: hci5: command 0x040f tx timeout [ 340.370034][T14797] veth0_macvtap: entered promiscuous mode [ 340.408978][T14797] veth1_macvtap: entered promiscuous mode [ 340.435583][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.457670][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.474870][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.485690][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.497309][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.508089][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.517998][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.530611][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.540775][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.553727][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.564236][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.574927][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.585158][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.596010][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.610754][T14797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.660932][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.681797][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.709108][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.730582][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.744919][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.772527][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.795491][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.821027][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.842815][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.880356][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.891765][T14797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.902573][T14797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.916175][T14797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.940617][T14797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.949909][T14797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.967396][T14797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.988700][T14797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.231811][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.250970][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.339294][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.363718][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.920906][T15109] __nla_validate_parse: 9 callbacks suppressed [ 341.920928][T15109] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.990367][T15109] validate_nla: 11 callbacks suppressed [ 341.990391][T15109] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 342.035938][T15109] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.449198][ T4492] Bluetooth: hci5: command 0x040f tx timeout [ 342.475864][T15133] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.561003][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.782562][T15150] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 342.799147][T15150] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.815628][T15150] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 342.824890][T15150] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.902653][T15155] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.272408][T15181] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.429618][T15190] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 343.441999][T15190] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.457158][T15190] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 343.479754][T15190] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.860884][T15201] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 344.194882][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888076dd5400: rx timeout, send abort [ 344.242973][T15229] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 344.311346][T15231] warn_alloc: 4 callbacks suppressed [ 344.311366][T15231] syz-executor.0: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 344.348724][T15231] CPU: 0 PID: 15231 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 344.358848][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 344.368930][T15231] Call Trace: [ 344.372235][T15231] [ 344.375192][T15231] dump_stack_lvl+0x241/0x360 [ 344.379902][T15231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.385125][T15231] ? __pfx__printk+0x10/0x10 [ 344.389738][T15231] ? __rcu_read_unlock+0xa1/0x110 [ 344.394766][T15231] warn_alloc+0x278/0x410 [ 344.399097][T15231] ? stack_depot_save_flags+0x29/0x830 [ 344.404551][T15231] ? __vmalloc_node_range_noprof+0x106/0x1490 [ 344.410615][T15231] ? __pfx_warn_alloc+0x10/0x10 [ 344.415465][T15231] ? kasan_save_track+0x3f/0x80 [ 344.420307][T15231] ? __kasan_kmalloc+0x98/0xb0 [ 344.425068][T15231] ? xsk_setsockopt+0x598/0x950 [ 344.429914][T15231] ? do_sock_setsockopt+0x3af/0x720 [ 344.435109][T15231] ? __sys_setsockopt+0x1ae/0x250 [ 344.440131][T15231] ? __x64_sys_setsockopt+0xb5/0xd0 [ 344.445330][T15231] ? do_syscall_64+0xf3/0x230 [ 344.450005][T15231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.456077][T15231] __vmalloc_node_range_noprof+0x126/0x1490 [ 344.461995][T15231] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 344.468322][T15231] ? __kasan_kmalloc+0x98/0xb0 [ 344.473089][T15231] ? xskq_create+0x54/0x170 [ 344.477596][T15231] vmalloc_user_noprof+0x74/0x80 [ 344.482532][T15231] ? xskq_create+0xb6/0x170 [ 344.487035][T15231] xskq_create+0xb6/0x170 [ 344.491372][T15231] xsk_init_queue+0xa1/0x100 [ 344.495962][T15231] xsk_setsockopt+0x598/0x950 [ 344.500644][T15231] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.505842][T15231] ? __pfx_lock_acquire+0x10/0x10 [ 344.510860][T15231] ? aa_sock_opt_perm+0x79/0x120 [ 344.515794][T15231] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 344.521346][T15231] ? security_socket_setsockopt+0x87/0xb0 [ 344.527063][T15231] ? __pfx_xsk_setsockopt+0x10/0x10 [ 344.532265][T15231] do_sock_setsockopt+0x3af/0x720 [ 344.537296][T15231] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 344.542846][T15231] ? __fget_files+0x29/0x470 [ 344.547436][T15231] ? __fget_files+0x3f6/0x470 [ 344.552119][T15231] __sys_setsockopt+0x1ae/0x250 [ 344.556983][T15231] __x64_sys_setsockopt+0xb5/0xd0 [ 344.562020][T15231] do_syscall_64+0xf3/0x230 [ 344.566520][T15231] ? clear_bhb_loop+0x35/0x90 [ 344.571192][T15231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.577204][T15231] RIP: 0033:0x7fa51e47cee9 [ 344.581615][T15231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 344.601214][T15231] RSP: 002b:00007fa51f1840c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.609637][T15231] RAX: ffffffffffffffda RBX: 00007fa51e5b3fa0 RCX: 00007fa51e47cee9 [ 344.617628][T15231] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 344.625595][T15231] RBP: 00007fa51e4c947f R08: 0000000000000020 R09: 0000000000000000 [ 344.633562][T15231] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 344.641527][T15231] R13: 000000000000000b R14: 00007fa51e5b3fa0 R15: 00007ffcdb3c0168 [ 344.649510][T15231] [ 344.701454][T15231] Mem-Info: [ 344.704966][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888076dd5400: abort rx timeout. Force session deactivation [ 344.729286][T15231] active_anon:14569 inactive_anon:0 isolated_anon:0 [ 344.729286][T15231] active_file:0 inactive_file:46963 isolated_file:0 [ 344.729286][T15231] unevictable:768 dirty:27 writeback:0 [ 344.729286][T15231] slab_reclaimable:11410 slab_unreclaimable:108830 [ 344.729286][T15231] mapped:21662 shmem:1734 pagetables:671 [ 344.729286][T15231] sec_pagetables:0 bounce:0 [ 344.729286][T15231] kernel_misc_reclaimable:0 [ 344.729286][T15231] free:1367182 free_pcp:889 free_cma:0 [ 344.814796][T15231] Node 0 active_anon:58176kB inactive_anon:0kB active_file:0kB inactive_file:187776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86648kB dirty:104kB writeback:0kB shmem:5400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11956kB pagetables:2584kB sec_pagetables:0kB all_unreclaimable? no [ 344.849474][T15231] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 344.924030][T15231] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.976440][T15231] lowmem_reserve[]: 0 2571 2571 0 0 [ 344.993010][T15231] Node 0 DMA32 free:1506220kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:58536kB inactive_anon:0kB active_file:0kB inactive_file:187468kB unevictable:1536kB writepending:104kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:2816kB local_pcp:1568kB free_cma:0kB [ 345.039575][T15231] lowmem_reserve[]: 0 0 0 0 0 [ 345.069143][T15231] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 345.114761][T15231] lowmem_reserve[]: 0 0 0 0 0 [ 345.140024][T15231] Node 1 Normal free:3946896kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:748kB local_pcp:500kB free_cma:0kB [ 345.194433][T15231] lowmem_reserve[]: 0 0 0 0 0 [ 345.209330][T15253] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 345.221006][T15231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.238813][T15231] Node 0 DMA32: 614*4kB (UE) 665*8kB (UME) 304*16kB (UME) 397*32kB (UME) 228*64kB (UME) 154*128kB (UME) 67*256kB (UM) 26*512kB (UME) 11*1024kB (U) 4*2048kB (UM) 341*4096kB (UM) = 1506304kB [ 345.260537][T15231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.272622][T15231] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 5*64kB (U) 8*128kB (U) 2*256kB (UM) 3*512kB (UM) 3*1024kB (U) 2*2048kB (UM) 961*4096kB (M) = 3946896kB [ 345.274245][T15264] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 345.298045][T15231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.330774][T15231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.351774][T15231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.380978][T15231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.405631][T15231] 48717 total pagecache pages [ 345.410515][ T5114] Bluetooth: hci2: command 0x0406 tx timeout [ 345.419166][T15231] 0 pages in swap cache [ 345.462229][ T29] audit: type=1107 audit(1717209477.506:20): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Z 6$5G%w [ 345.462229][ T29] [ 345.462229][ T29] [ 345.462229][ T29] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqMZ]4sz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 345.462229][ T29] ޴tI:Ś"wBɥxlbs[ s}QEsܟqIGhzC Ja0J ҵ~ͳڷ[jҤ|>IflQTjТ:|{gq"|kӂ[Z |EJIzɈT0m#R~F^왙r [ 345.462633][T15231] Free swap = 124996kB [ 345.615658][T15231] Total swap = 124996kB [ 345.622475][T15231] 2097051 pages RAM [ 345.638860][T15231] 0 pages HighMem/MovableOnly [ 345.648542][T15231] 400871 pages reserved [ 345.656262][T15231] 0 pages cma reserved [ 345.840129][T15295] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 345.904927][T15292] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.946693][T15303] xt_l2tp: missing protocol rule (udp|l2tpip) [ 346.840029][T15339] lo speed is unknown, defaulting to 1000 [ 347.910590][T15365] __nla_validate_parse: 43 callbacks suppressed [ 347.910610][T15365] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.029539][T15366] validate_nla: 8 callbacks suppressed [ 348.029558][T15366] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 348.043740][T15366] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.117355][ T29] audit: type=1804 audit(1717209481.176:21): pid=15388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3119279616/syzkaller.sfguon/181/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 349.279168][T15400] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 349.300908][T15400] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.342970][T15405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 349.659661][T15414] batadv_slave_1: entered promiscuous mode [ 349.710236][T15413] batadv_slave_1: left promiscuous mode [ 349.829306][T15420] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 349.830841][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.313067][T15440] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 351.164707][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.174570][T15452] block nbd0: not configured, cannot reconfigure [ 352.040556][T15489] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.107076][T15491] vxcan1: entered allmulticast mode [ 352.156153][T15491] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.565151][T15506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.598858][T15506] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 352.650891][T15506] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.659475][T15506] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.667680][T15506] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.676016][T15506] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.728348][T15512] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 352.747844][T15506] vxlan0: entered promiscuous mode [ 352.758883][T15512] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 352.780796][T15511] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.788831][T15512] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 352.861274][T15515] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 353.123344][T15520] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.370635][T15530] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.379694][T15530] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.388608][T15530] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.397341][T15530] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.436502][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.462875][T15534] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.485423][T15534] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 353.656799][T15545] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 353.737212][T15551] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 353.957055][T15560] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.127391][T15566] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 354.479243][T15584] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.498686][ T29] audit: type=1804 audit(1717209486.556:22): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2738557559/syzkaller.XREtvZ/41/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 354.565043][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.630339][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.707598][T15593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.178268][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.200138][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.223272][T15619] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 355.242503][T15621] Cannot find add_set index 0 as target [ 356.017524][T15656] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 356.061532][T15656] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 356.177562][T13506] tipc: Subscription rejected, illegal request [ 356.423939][T15679] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 356.761209][T15696] 0XD: renamed from gretap0 (while UP) [ 356.805510][T15696] 0XD: entered allmulticast mode [ 356.824259][T15696] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 356.846670][T15706] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 359.269778][T15757] __nla_validate_parse: 9 callbacks suppressed [ 359.269799][T15757] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.421456][T15757] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.455543][T15768] batadv_slave_1: entered promiscuous mode [ 359.474402][T15756] batadv_slave_1: left promiscuous mode [ 360.553019][T15826] lo speed is unknown, defaulting to 1000 [ 361.062852][T15840] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 361.510619][T15854] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 361.537064][T15853] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 361.721464][T15858] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 361.763615][T15858] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 362.196938][T15876] syzkaller0: entered allmulticast mode [ 364.065707][T15930] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.428916][T15932] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 364.591110][T15950] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 364.681432][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.843674][T15969] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 364.896208][T15972] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.927356][T15972] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 365.498986][T15976] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.816463][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.972795][T15999] lo speed is unknown, defaulting to 1000 [ 366.723117][T16020] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.303598][T16042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 367.393709][T16043] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 367.419574][T16043] batman_adv: batadv0: Adding interface: wlan0 [ 367.425789][T16043] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.470386][T16043] batman_adv: batadv0: Interface activated: wlan0 [ 367.522081][T16047] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 367.533038][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.548835][T16047] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.567797][T16047] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 368.629392][T16096] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 368.667000][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.869656][T16110] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.996733][T16110] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 369.263149][T16131] batadv_slave_1: entered promiscuous mode [ 369.288176][T16126] batadv_slave_1: left promiscuous mode [ 369.784518][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.886703][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.918883][T16165] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.959851][T16160] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.075028][T16165] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 370.157614][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.398983][T16179] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 370.907613][T16199] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 371.003144][T16199] team0: Port device wlan1 added [ 371.267317][T16206] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.3'. [ 371.290415][T16198] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 371.469788][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.921481][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.951242][T16232] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 372.072539][T16233] bridge0: entered promiscuous mode [ 372.102903][T16233] macsec2: entered promiscuous mode [ 372.156564][T16233] bridge0: left promiscuous mode [ 372.401617][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.580951][T16262] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 372.684768][T16264] bridge0: port 3(ip6gretap0) entered blocking state [ 372.706808][T16264] bridge0: port 3(ip6gretap0) entered disabled state [ 372.715719][T16264] ip6gretap0: entered allmulticast mode [ 372.727351][T16264] ip6gretap0: entered promiscuous mode [ 372.744022][T16264] bridge0: port 3(ip6gretap0) entered blocking state [ 372.751335][T16264] bridge0: port 3(ip6gretap0) entered forwarding state [ 372.885313][T16282] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.909463][T16282] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 373.183581][T16294] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 373.217930][T16294] team0: Port device wlan1 added [ 373.794478][T16310] IPVS: length: 192 != 8 [ 373.986816][T16318] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 374.001952][T16318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 374.034581][T16321] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 374.060915][T16322] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 374.084463][T16322] netlink: 'syz-executor.1': attribute type 18 has an invalid length. [ 374.714565][T16346] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 374.769073][T16346] team0: Port device wlan1 added [ 374.775812][T16352] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 374.790174][T16354] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 375.583231][T16395] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 375.611620][T16395] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 375.675317][T16395] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 375.797032][T16404] __nla_validate_parse: 6 callbacks suppressed [ 375.797052][T16404] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.192245][T16426] syz-executor.2[16426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.194404][T16426] syz-executor.2[16426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.222875][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.343754][T16434] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.405987][T16434] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 377.093408][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.135744][T16460] xt_ecn: cannot match TCP bits for non-tcp packets [ 377.363598][T16464] vlan2: entered promiscuous mode [ 377.385283][T16464] dummy0: entered promiscuous mode [ 377.402243][T16464] vlan2: entered allmulticast mode [ 377.426055][T16464] dummy0: entered allmulticast mode [ 377.633981][T16476] tun0: tun_chr_ioctl cmd 2147767506 [ 377.657685][T16477] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 377.790825][T16484] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 377.857484][T16484] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 378.286097][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.358814][T16505] : renamed from pim6reg1 [ 378.398619][T16507] syz-executor.3[16507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.401262][T16507] syz-executor.3[16507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.097572][T16519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.176809][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.337288][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.377737][T16529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.935833][T16550] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.132002][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.344757][T16562] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 380.461199][T16564] macvlan3: entered allmulticast mode [ 380.469671][T16564] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 380.508985][T16564] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 380.536910][T16564] team0: Port device macvlan3 added [ 380.678887][T16566] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.915782][T16573] syz-executor.1[16573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.917242][T16573] syz-executor.1[16573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.087777][T16578] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.157994][T16583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.191531][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.436476][T16589] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 381.464907][T16589] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 382.409200][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.009982][T16633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.177927][T16639] syz-executor.1[16639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.178184][T16639] syz-executor.1[16639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.502173][T16656] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 383.582540][T16658] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.306830][T16681] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 384.349022][T16681] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.470663][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.372155][T16725] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 385.447241][T16725] bond1: entered promiscuous mode [ 385.471836][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 385.516640][T16727] bond1: entered allmulticast mode [ 385.551118][T16727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.626601][T16730] bond0: entered promiscuous mode [ 385.651583][T16730] bond_slave_0: entered promiscuous mode [ 385.671102][T16730] bond_slave_1: entered promiscuous mode [ 385.697672][T16732] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 385.742657][T16732] dummy0: entered promiscuous mode [ 385.757269][T16732] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 385.779508][T16728] bond0: left promiscuous mode [ 385.791324][T16728] bond_slave_0: left promiscuous mode [ 385.807666][T16728] bond_slave_1: left promiscuous mode [ 385.828844][T16728] dummy0: left promiscuous mode [ 386.240409][T16758] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 386.286839][T16758] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 386.319563][T16758] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 386.615666][T16767] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 386.667710][T16767] bond2: entered promiscuous mode [ 386.784965][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.892582][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 386.922408][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.924609][T16770] bond2: entered allmulticast mode [ 386.952829][T16770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.982412][T16781] SET target dimension over the limit! [ 387.190919][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.227261][T16792] vlan2: entered promiscuous mode [ 387.233755][T16792] team0: entered promiscuous mode [ 387.252232][T16792] team_slave_0: entered promiscuous mode [ 387.266317][T16792] team_slave_1: entered promiscuous mode [ 387.282236][T16792] team0: left promiscuous mode [ 387.290545][T16792] team_slave_0: left promiscuous mode [ 387.306620][T16792] team_slave_1: left promiscuous mode [ 387.364702][T16795] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.393437][T16801] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 387.445913][T16801] bond0: (slave dummy0): Releasing backup interface [ 387.486388][T16801] dummy0: left promiscuous mode [ 387.505337][T16801] team0: Port device dummy0 added [ 387.658113][T16819] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.719449][T16824] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 387.782852][T16824] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 387.800533][T16824] team0: Port device wlan1 added [ 387.889677][T16827] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 388.136389][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 388.491336][T16852] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.894076][T16870] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.952807][T16863] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 389.177250][T16878] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 389.265514][T16878] bond3: entered promiscuous mode [ 389.289217][T16883] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 389.306799][T16883] macvtap1: entered promiscuous mode [ 389.312624][T16883] macvtap1: entered allmulticast mode [ 389.318147][T16883] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 389.345405][T16883] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 389.362780][T16883] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 389.505185][T16886] bond3: entered allmulticast mode [ 389.520083][T16886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.741441][T16904] xt_l2tp: v2 sid > 0xffff: 150994944 [ 390.056940][T16918] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 390.236968][T16924] Cannot find set identified by id 0 to match [ 390.269484][T16929] bridge0: port 3(ip6gretap0) entered disabled state [ 390.276733][T16929] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.284667][T16929] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.070157][T16949] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 391.679593][T16984] ip6gretap0: left allmulticast mode [ 391.696403][T16984] ip6gretap0: left promiscuous mode [ 391.712275][T16984] bridge0: port 3(ip6gretap0) entered disabled state [ 391.733990][T16984] bridge_slave_1: left allmulticast mode [ 391.748303][T16984] bridge_slave_1: left promiscuous mode [ 391.761744][T16984] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.796351][T16984] bridge_slave_0: left allmulticast mode [ 391.807980][T16984] bridge_slave_0: left promiscuous mode [ 391.830733][T16984] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.884692][T16994] openvswitch: netlink: Message has 4 unknown bytes. [ 393.420527][T17006] __nla_validate_parse: 7 callbacks suppressed [ 393.420560][T17006] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.467007][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.551946][T17000] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 393.593704][T16999] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 393.624672][T17014] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 393.774824][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.580366][T17070] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.760865][T17078] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 394.780070][T17077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.795999][T17078] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 394.830018][T17078] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 394.862617][T17078] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 395.070629][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 395.445787][T17106] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 395.451468][ T29] audit: type=1804 audit(1717209527.506:23): pid=17116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3119279616/syzkaller.sfguon/288/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 395.567086][T17116] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 395.831072][T17132] lo speed is unknown, defaulting to 1000 [ 396.633813][T17158] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.907409][ T29] audit: type=1804 audit(1717209528.966:24): pid=17164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3149435543/syzkaller.rGYY96/940/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 396.954923][T17164] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 397.339607][T17171] sctp: [Deprecated]: syz-executor.3 (pid 17171) Use of int in max_burst socket option deprecated. [ 397.339607][T17171] Use struct sctp_assoc_value instead [ 398.017563][T17191] xt_time: unknown flags 0x4 [ 398.035380][T17190] gretap0: entered promiscuous mode [ 398.038899][T17191] xt_time: unknown flags 0x4 [ 398.050432][T17191] xt_time: unknown flags 0x4 [ 398.062973][T17190] gretap0: left promiscuous mode [ 398.064304][T17191] xt_time: unknown flags 0x4 [ 398.087810][T17191] xt_time: unknown flags 0x4 [ 398.139167][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.161018][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.451210][T17210] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 398.469205][T17212] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 398.480155][T17210] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.496390][T17212] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.041168][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.143189][T17231] 8021q: adding VLAN 0 to HW filter on device team1 [ 399.174655][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.256284][T17234] 8021q: adding VLAN 0 to HW filter on device team1 [ 399.276744][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.667295][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.752915][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.537590][ T29] audit: type=1804 audit(1717209532.596:25): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3119279616/syzkaller.sfguon/304/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 400.610901][T17287] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 400.807388][T17294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.868215][T17296] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.064743][T17303] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 401.086999][T17303] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 401.168051][T17311] ip6t_srh: unknown srh match flags 4001 [ 401.186289][T17303] debugfs: Directory 'netdev:' with parent 'phy31' already present! [ 401.216511][T17313] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 401.591562][ T29] audit: type=1804 audit(1717209533.656:26): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1226053135/syzkaller.PWm7uW/443/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 401.627448][T17331] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 401.663464][T17340] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 401.672681][T17340] hsr0: entered promiscuous mode [ 401.699117][T17340] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 401.728694][T17340] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 401.766408][T17340] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 401.776812][T17345] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.790557][T17340] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 402.091552][T17357] IPv6: Can't replace route, no match found [ 402.133096][ T5114] Bluetooth: hci5: command 0x040f tx timeout [ 402.294163][T17361] team_slave_1: mtu greater than device maximum [ 402.326591][T17361] team0: Device team_slave_1 failed to change mtu [ 402.607687][ T29] audit: type=1804 audit(1717209534.666:27): pid=17377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2738557559/syzkaller.XREtvZ/150/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 402.702541][T17377] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 403.013613][T17397] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 403.050743][T17400] lo speed is unknown, defaulting to 1000 [ 403.189439][T17415] team_slave_1: mtu greater than device maximum [ 403.229438][T17415] team0: Device team_slave_1 failed to change mtu [ 403.309588][T17418] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 403.492229][T17426] __nla_validate_parse: 5 callbacks suppressed [ 403.492262][T17426] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.524612][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.569579][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.821526][T17446] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 404.019792][T17457] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 404.190243][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 404.218606][ T5114] Bluetooth: hci5: command 0x040f tx timeout [ 404.302011][T17465] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 404.414593][T17471] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 404.489541][T17471] sctp: [Deprecated]: syz-executor.0 (pid 17471) Use of int in max_burst socket option deprecated. [ 404.489541][T17471] Use struct sctp_assoc_value instead [ 404.514625][T17471] sctp: [Deprecated]: syz-executor.0 (pid 17471) Use of int in max_burst socket option deprecated. [ 404.514625][T17471] Use struct sctp_assoc_value instead [ 404.534353][T17471] sctp: [Deprecated]: syz-executor.0 (pid 17471) Use of int in max_burst socket option deprecated. [ 404.534353][T17471] Use struct sctp_assoc_value instead [ 404.581061][T17471] sctp: [Deprecated]: syz-executor.0 (pid 17471) Use of int in max_burst socket option deprecated. [ 404.581061][T17471] Use struct sctp_assoc_value instead [ 404.640364][T17471] sctp: [Deprecated]: syz-executor.0 (pid 17471) Use of int in max_burst socket option deprecated. [ 404.640364][T17471] Use struct sctp_assoc_value instead [ 404.652092][T17485] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 404.868063][T17492] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 404.913643][T17494] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 404.915791][T17492] netlink: 3285 bytes leftover after parsing attributes in process `syz-executor.3'. [ 405.052652][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 406.289109][ T5114] Bluetooth: hci5: command 0x040f tx timeout [ 435.843747][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.898870][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 435.908087][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 435.928653][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.940041][ T5114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 435.947446][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.081924][ T4492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 436.119060][ T4492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 436.128974][ T4492] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 436.148958][ T4492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 436.169511][ T4492] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 436.176949][ T4492] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 436.315631][ T4492] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 436.325535][ T4492] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 436.335074][ T4492] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 436.344465][ T4492] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 436.352324][ T4492] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 436.379349][ T4492] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 436.482973][ T5114] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 436.495363][ T5114] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 436.504410][ T5114] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 436.512797][ T5114] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 436.523650][ T5114] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 436.548827][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 436.602720][ T5114] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 436.620608][ T5114] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 436.637849][ T5114] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 436.647546][ T5114] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 436.655720][ T5114] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 436.663537][ T5114] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 438.049447][ T5114] Bluetooth: hci6: command tx timeout [ 438.208903][ T5114] Bluetooth: hci7: command tx timeout [ 438.448678][ T5114] Bluetooth: hci8: command tx timeout [ 438.609734][ T5114] Bluetooth: hci9: command tx timeout [ 438.689053][ T5114] Bluetooth: hci10: command tx timeout [ 440.128577][ T5114] Bluetooth: hci6: command tx timeout [ 440.298581][ T5114] Bluetooth: hci7: command tx timeout [ 440.529102][ T5114] Bluetooth: hci8: command tx timeout [ 440.613368][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.689369][ T5114] Bluetooth: hci9: command tx timeout [ 440.768697][ T5114] Bluetooth: hci10: command tx timeout [ 442.212630][ T5114] Bluetooth: hci6: command tx timeout [ 442.369075][ T5114] Bluetooth: hci7: command tx timeout [ 442.609149][ T5114] Bluetooth: hci8: command tx timeout [ 442.768804][ T5114] Bluetooth: hci9: command tx timeout [ 442.848547][ T5114] Bluetooth: hci10: command tx timeout [ 444.288607][ T5114] Bluetooth: hci6: command tx timeout [ 444.449481][ T5114] Bluetooth: hci7: command tx timeout [ 444.688907][ T5114] Bluetooth: hci8: command tx timeout [ 444.848617][ T5114] Bluetooth: hci9: command tx timeout [ 444.929494][ T5114] Bluetooth: hci10: command tx timeout [ 452.928862][ T4492] Bluetooth: hci4: command 0x0405 tx timeout [ 478.534765][ T5114] Bluetooth: hci5: command 0x040f tx timeout [ 501.393237][ T4492] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 501.403729][ T4492] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 501.417367][ T4492] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 501.464342][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 501.472499][ T5119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 501.482548][T17570] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 501.490932][ T5119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 501.502943][T17569] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 501.511691][ T5119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 501.520514][T17569] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 501.532000][ T5114] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 501.541781][ T5114] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 501.570081][T17574] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 501.581194][T17574] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 501.587670][ T5114] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 501.597718][ T5114] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 501.612682][ T5114] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 501.621143][ T5114] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 501.640343][T17569] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 501.668953][T17574] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 501.677535][T17574] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 501.687139][T17574] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 501.694537][T17570] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 501.706213][T17570] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 501.713986][T17574] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 501.715379][T17570] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 501.730815][T17574] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 501.743111][T17570] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 501.771882][T17570] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 501.782502][T17570] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 502.052144][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.658654][T17569] Bluetooth: hci11: command tx timeout [ 503.669898][T17570] Bluetooth: hci12: command tx timeout [ 503.728702][T17569] Bluetooth: hci13: command tx timeout [ 503.808814][T17569] Bluetooth: hci15: command tx timeout [ 503.809704][T17570] Bluetooth: hci14: command tx timeout [ 505.729520][T17570] Bluetooth: hci11: command tx timeout [ 505.732774][T17569] Bluetooth: hci12: command tx timeout [ 505.808820][T17569] Bluetooth: hci13: command tx timeout [ 505.889254][T17569] Bluetooth: hci15: command tx timeout [ 505.889266][T17570] Bluetooth: hci14: command tx timeout [ 507.809015][T17569] Bluetooth: hci12: command tx timeout [ 507.814567][T17569] Bluetooth: hci11: command tx timeout [ 507.888800][T17569] Bluetooth: hci13: command tx timeout [ 507.971804][T17569] Bluetooth: hci14: command tx timeout [ 507.971817][T17570] Bluetooth: hci15: command tx timeout [ 509.888731][T17569] Bluetooth: hci12: command tx timeout [ 509.894292][T17570] Bluetooth: hci11: command tx timeout [ 509.968648][T17570] Bluetooth: hci13: command tx timeout [ 510.048909][T17569] Bluetooth: hci14: command tx timeout [ 510.054473][T17570] Bluetooth: hci15: command tx timeout [ 549.409012][ T30] INFO: task syz-executor.2:17526 blocked for more than 143 seconds. [ 549.417140][ T30] Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 549.426385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.448166][ T30] task:syz-executor.2 state:D stack:23088 pid:17526 tgid:17525 ppid:9212 flags:0x00000006 2024/06/01 02:41:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 549.459756][ T30] Call Trace: [ 549.463168][ T30] [ 549.466117][ T30] __schedule+0x17e8/0x4a20 [ 549.500669][ T30] ? __pfx___schedule+0x10/0x10 [ 549.505600][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.528690][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 549.534226][ T30] ? schedule+0x90/0x320 [ 549.548456][ T30] schedule+0x14b/0x320 [ 549.552727][ T30] schedule_preempt_disabled+0x13/0x30 [ 549.558206][ T30] __mutex_lock+0x6a4/0xd70 [ 549.578494][ T30] ? __mutex_lock+0x527/0xd70 [ 549.583249][ T30] ? do_ipv6_setsockopt+0x9e4/0x3630 [ 549.598509][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 549.603608][ T30] ? __might_fault+0xc6/0x120 [ 549.608319][ T30] do_ipv6_setsockopt+0x9e4/0x3630 [ 549.618488][ T30] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 549.624089][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 549.639365][ T30] ? __pfx___might_resched+0x10/0x10 [ 549.645505][ T30] ? aa_sk_perm+0x967/0xab0 [ 549.668452][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 549.673376][ T30] ? __might_fault+0xaa/0x120 [ 549.678079][ T30] ? __sys_sendto+0x3c7/0x4f0 [ 549.698517][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.703611][ T30] ipv6_setsockopt+0x5c/0x1a0 [ 549.708319][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 549.728871][ T30] do_sock_setsockopt+0x3af/0x720 [ 549.733974][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 549.749335][ T30] __sys_setsockopt+0x1ae/0x250 [ 549.754258][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 549.768476][ T30] do_syscall_64+0xf3/0x230 [ 549.773049][ T30] ? clear_bhb_loop+0x35/0x90 [ 549.777749][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.798462][ T30] RIP: 0033:0x7f800f47cee9 [ 549.802942][ T30] RSP: 002b:00007f800efff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.828608][ T30] RAX: ffffffffffffffda RBX: 00007f800f5b3fa0 RCX: 00007f800f47cee9 [ 549.836653][ T30] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000004 [ 549.859291][ T30] RBP: 00007f800f4c947f R08: 0000000000000088 R09: 0000000000000000 [ 549.867323][ T30] R10: 0000000020fca000 R11: 0000000000000246 R12: 0000000000000000 [ 549.898556][ T30] R13: 000000000000000b R14: 00007f800f5b3fa0 R15: 00007fffa4becdf8 [ 549.906609][ T30] [ 549.918601][ T30] INFO: task syz-executor.3:17528 blocked for more than 143 seconds. [ 549.926732][ T30] Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 549.958608][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.967337][ T30] task:syz-executor.3 state:D stack:26800 pid:17528 tgid:17527 ppid:12464 flags:0x00000006 [ 549.998491][ T30] Call Trace: [ 550.001836][ T30] [ 5