last executing test programs: 2.115671276s ago: executing program 2 (id=4383): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004050) 2.036746812s ago: executing program 2 (id=4387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x50}}, 0x20040054) 1.777909829s ago: executing program 2 (id=4394): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='netlink_extack\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00'], 0x68}, 0x1, 0x0, 0x0, 0x90acdd2a3b8167f}, 0x800) 1.719843943s ago: executing program 3 (id=4395): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 1.612841776s ago: executing program 0 (id=4397): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.580889739s ago: executing program 3 (id=4398): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020303020601ab1702"], 0xb) 1.508744324s ago: executing program 2 (id=4400): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x1b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) 1.477019698s ago: executing program 4 (id=4401): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="cb8e363f2486d7bf4a8bc2f5e05a86875d8788e66617e2cfe55a2fcdc8c9b3cda2bcd2cb5f68b5c1fc763d40600b012cb332881ddce472b2895b431668eec36572a4c1ae89a3cfbaef904d1a0177ca03fc75772892690cb392e8d960eba7aaf2f5b9706e0f7e09acc09fcc9f76eaaf74c4f993355eb90deaa7b786c38567692e8f46d70be362a8ed63d5cbd1ba100fb13d288986ff7759e088e65de1dae77ef35ffdd43961d8126939530d8b091b19171ab38d636711c367239afe8d", 0xbc}, {&(0x7f0000000240)="954c3a6807ef8c18bd057c378794103572333b3a", 0x14}], 0x2, 0x0, 0x0, 0x4004}], 0x1, 0x20044000) 1.427969233s ago: executing program 0 (id=4402): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.414938312s ago: executing program 4 (id=4403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 1.410932241s ago: executing program 2 (id=4404): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc) 1.316120305s ago: executing program 4 (id=4405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x4044041) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1}, 0x2}], 0x1, 0x10100, 0x0) 1.270722061s ago: executing program 4 (id=4406): unshare(0x22020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x610c40, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) 1.176024694s ago: executing program 4 (id=4407): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) sendfile(r1, r1, 0x0, 0x10001) 739.035143ms ago: executing program 4 (id=4409): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x4d5d, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 610.272638ms ago: executing program 1 (id=4410): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001c80)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "3d8cd2", 0xd4b, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xaf2, 0x3, [], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "26522e23d654ee0993028b9863a5ce45be96553e3038406252a7ff150434692fad2f528c92370cd3cec3e2cf5b0614ad6755907c306e003ea5088e892585ddbb4752d01918d4fa0bf341d111a5e478c5c423444398efffd2458015ec43caad0167459a541f454cc62a48ecf5d58302f2f4462aeaf89447ca9322e9f29d41a2ddc78f7c1f903068a938a36e700b06eb7c9af9e12b6bb3c743e4962756ee8cd564022a0fb11955db45fb5e2bdaf1d83355b6df8235e8bf9bcf863323e8839b53b382c0d01331405c5493be4580700597f1e668da026e77b35368dd7243389c183a5ca7db6fd59a13cb97a41b72cbaebb44"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x6, 0x0], "69fcad2a513da2661eaa53a1624134f96d86077b5349bd5eec76836cd6fdf614808eb87b0ab45443524433ef6abc66618d1660d5541383"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x4, 0x3, 0x0, 0x1, 0x2}, 0x1, {0x6c5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x67, 0x1, 0x0, 0x0, 0x6, 0x3c}, 0x2, {0x9, 0x5, 0x0, 0x11, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "d0bbfc61e628b7388f5df6203b822aec76cee11c0390f702d50fd14442affe0b7f465e1681f17b98653f105fdd26cf9c6a6fcd2f1b982df18ec94c22640cb13a933f02a5e40537260d346343024e8671f97abec6bb421f92224991f981148d1ef231270bd7d31d82e955dcd696d92403fce2579815394f83b281a7a72aacec10cb40569dca0e2a5f20ab0e1521bc2343cf3cbf14128ad8363e571b0d25f7946334fe1728c0763cd30ab1fced8d7b7cf6bf84baf1422d2b12fa9fd2df437b63c95c034be68ec8e24e208b80055611f4e68ffd0d55ceed79f529f3148a9ba45ec0da45456a248b3c27475d"}}}}}}}, 0x0) 609.888623ms ago: executing program 3 (id=4411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 609.714555ms ago: executing program 2 (id=4412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) sendto$inet6(r0, &(0x7f0000000380)='\b', 0x1, 0x8d9, &(0x7f0000000fc0)={0xa, 0x4e27, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) 495.909268ms ago: executing program 3 (id=4413): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000010000104"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 474.532404ms ago: executing program 1 (id=4414): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x4) 457.242542ms ago: executing program 0 (id=4415): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000001640)="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", 0x2dc}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a", 0xba}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 377.77708ms ago: executing program 0 (id=4416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684a100d0000e96ca4b72643dd3689729568e9", '\\\v\x00:', "29a78ab9b0a4e8ae"}, 0x38) 311.368596ms ago: executing program 1 (id=4417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendto$unix(r1, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 299.942713ms ago: executing program 0 (id=4418): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 276.933391ms ago: executing program 1 (id=4419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/21, 0x15}], 0x1}, 0x0) 227.8915ms ago: executing program 3 (id=4420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 164.491813ms ago: executing program 1 (id=4421): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) 110.478624ms ago: executing program 3 (id=4422): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000084) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140), 0x2}, 0x2}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 79.068222ms ago: executing program 1 (id=4423): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="3875c120c2aee1b9d7dc2e78f298c86ad11434a73956c5dcb96575b3d255484ed7e57590e5aa3e2e1b4d87b143ca486b97b93b51c847acb7e7217648f819570e2294f1dd30ef42903f4f8f3484c1015c900c0bc526c9c4b73e9d389278f104858bef56af938b79613645226da2", 0x6d}], 0x1, 0x0, 0x98}, 0x20000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 0s ago: executing program 0 (id=4424): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x470f, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 73.145201][ T5849] cgroup: Unknown subsys name 'net' [ 73.318352][ T5849] cgroup: Unknown subsys name 'cpuset' [ 73.326621][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.732224][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.066295][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.074181][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.081721][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.089650][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.097276][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.153312][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.161044][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.170275][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.178725][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.186333][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.375089][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.403050][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.411494][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.420370][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.433424][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.444391][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.459008][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.478763][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.479631][ T5182] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.494680][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.502303][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.510933][ T5182] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.528454][ T5182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.536385][ T5182] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.544216][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.620811][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 79.868151][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.875564][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.882802][ T5863] bridge_slave_0: entered allmulticast mode [ 79.890333][ T5863] bridge_slave_0: entered promiscuous mode [ 79.901885][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.909161][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.916339][ T5863] bridge_slave_1: entered allmulticast mode [ 79.923414][ T5863] bridge_slave_1: entered promiscuous mode [ 79.980230][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 80.009133][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.056249][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.140220][ T5863] team0: Port device team_slave_0 added [ 80.151245][ T5863] team0: Port device team_slave_1 added [ 80.262303][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.269365][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.296012][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.307389][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.314594][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.321706][ T5859] bridge_slave_0: entered allmulticast mode [ 80.329788][ T5859] bridge_slave_0: entered promiscuous mode [ 80.338008][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.345165][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.352285][ T5859] bridge_slave_1: entered allmulticast mode [ 80.359536][ T5859] bridge_slave_1: entered promiscuous mode [ 80.385703][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 80.397598][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.405332][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.431670][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.513542][ T5863] hsr_slave_0: entered promiscuous mode [ 80.519843][ T5863] hsr_slave_1: entered promiscuous mode [ 80.571809][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.589111][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 80.631175][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.704567][ T5859] team0: Port device team_slave_0 added [ 80.730350][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.738031][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.745408][ T5871] bridge_slave_0: entered allmulticast mode [ 80.752343][ T5871] bridge_slave_0: entered promiscuous mode [ 80.770718][ T5859] team0: Port device team_slave_1 added [ 80.777613][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 80.792486][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.800116][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.807352][ T5871] bridge_slave_1: entered allmulticast mode [ 80.814352][ T5871] bridge_slave_1: entered promiscuous mode [ 80.897281][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.904334][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.930581][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.960598][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.980876][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.987921][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.013934][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.036570][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.073599][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.080746][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.087960][ T5873] bridge_slave_0: entered allmulticast mode [ 81.095569][ T5873] bridge_slave_0: entered promiscuous mode [ 81.130354][ T5871] team0: Port device team_slave_0 added [ 81.138929][ T5871] team0: Port device team_slave_1 added [ 81.149375][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.156649][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.164059][ T5873] bridge_slave_1: entered allmulticast mode [ 81.171003][ T5873] bridge_slave_1: entered promiscuous mode [ 81.193380][ T5182] Bluetooth: hci0: command tx timeout [ 81.259189][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.266430][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.273145][ T5182] Bluetooth: hci1: command tx timeout [ 81.293515][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.310587][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.317781][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.343945][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.370737][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.378134][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.385652][ T5876] bridge_slave_0: entered allmulticast mode [ 81.393379][ T5876] bridge_slave_0: entered promiscuous mode [ 81.410727][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.424483][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.461497][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.476927][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.489772][ T5876] bridge_slave_1: entered allmulticast mode [ 81.497611][ T5876] bridge_slave_1: entered promiscuous mode [ 81.513780][ T5182] Bluetooth: hci3: command tx timeout [ 81.543105][ T5859] hsr_slave_0: entered promiscuous mode [ 81.549649][ T5859] hsr_slave_1: entered promiscuous mode [ 81.556392][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 81.562219][ T5859] Cannot create hsr debugfs directory [ 81.593430][ T5866] Bluetooth: hci2: command tx timeout [ 81.599178][ T5182] Bluetooth: hci4: command tx timeout [ 81.707400][ T5873] team0: Port device team_slave_0 added [ 81.718002][ T5871] hsr_slave_0: entered promiscuous mode [ 81.724397][ T5871] hsr_slave_1: entered promiscuous mode [ 81.731036][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 81.737343][ T5871] Cannot create hsr debugfs directory [ 81.756775][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.767788][ T5873] team0: Port device team_slave_1 added [ 81.787646][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.855143][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.862087][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.888137][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.904045][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.931774][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.938786][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.964773][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.980202][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.992289][ T5876] team0: Port device team_slave_0 added [ 82.019284][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.030676][ T5876] team0: Port device team_slave_1 added [ 82.057227][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.133692][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.140639][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.166779][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.178875][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.185880][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.211902][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.227001][ T5873] hsr_slave_0: entered promiscuous mode [ 82.233417][ T5873] hsr_slave_1: entered promiscuous mode [ 82.239866][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 82.245785][ T5873] Cannot create hsr debugfs directory [ 82.374941][ T5876] hsr_slave_0: entered promiscuous mode [ 82.381440][ T5876] hsr_slave_1: entered promiscuous mode [ 82.387896][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 82.395056][ T5876] Cannot create hsr debugfs directory [ 82.489989][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.532260][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.542602][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.572755][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.708316][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.738733][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.753134][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.774827][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.840332][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.859280][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.869005][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.882033][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.894980][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.975236][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.985339][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.007975][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.019579][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.031940][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.070007][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.077218][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.088320][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.095423][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.126672][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.167491][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.200981][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.208197][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.239428][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.251211][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.258463][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.273213][ T5866] Bluetooth: hci0: command tx timeout [ 83.337956][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.353003][ T5182] Bluetooth: hci1: command tx timeout [ 83.368438][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.428173][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.440433][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.462149][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.469315][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.480355][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.487674][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.512322][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.519440][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.550805][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.558043][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.586862][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.594451][ T5182] Bluetooth: hci3: command tx timeout [ 83.638082][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.649519][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.656864][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.674661][ T5182] Bluetooth: hci4: command tx timeout [ 83.680075][ T5182] Bluetooth: hci2: command tx timeout [ 83.718889][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.726006][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.859763][ T5863] veth0_vlan: entered promiscuous mode [ 83.889037][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.900364][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.962656][ T5863] veth1_vlan: entered promiscuous mode [ 84.059230][ T5859] veth0_vlan: entered promiscuous mode [ 84.076886][ T5863] veth0_macvtap: entered promiscuous mode [ 84.107873][ T5863] veth1_macvtap: entered promiscuous mode [ 84.125392][ T5859] veth1_vlan: entered promiscuous mode [ 84.188407][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.218067][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.237878][ T5859] veth0_macvtap: entered promiscuous mode [ 84.256244][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.281560][ T5859] veth1_macvtap: entered promiscuous mode [ 84.297240][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.308245][ T3522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.344954][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.353281][ T3522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.378421][ T3522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.388543][ T3522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.400474][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.418529][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.462104][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.471150][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.515991][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527696][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.582547][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.602438][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.639163][ T5871] veth0_vlan: entered promiscuous mode [ 84.668879][ T5876] veth0_vlan: entered promiscuous mode [ 84.685134][ T5871] veth1_vlan: entered promiscuous mode [ 84.709199][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.727307][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.760378][ T5876] veth1_vlan: entered promiscuous mode [ 84.796371][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.816322][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.839231][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.884715][ T5876] veth0_macvtap: entered promiscuous mode [ 84.892326][ T5871] veth0_macvtap: entered promiscuous mode [ 84.898815][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.910104][ T5876] veth1_macvtap: entered promiscuous mode [ 84.917143][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.926374][ T5871] veth1_macvtap: entered promiscuous mode [ 84.978906][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.010210][ T5873] veth0_vlan: entered promiscuous mode [ 85.028558][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.041542][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.077533][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.105891][ T5873] veth1_vlan: entered promiscuous mode [ 85.119572][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.152040][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154965][ T5979] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 85.161479][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.178351][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.241876][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.276291][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.307285][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.332096][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.355502][ T5182] Bluetooth: hci0: command tx timeout [ 85.362838][ T5873] veth0_macvtap: entered promiscuous mode [ 85.433622][ T5182] Bluetooth: hci1: command tx timeout [ 85.456457][ T5873] veth1_macvtap: entered promiscuous mode [ 85.468567][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.484991][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.499732][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.538207][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.607764][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.629832][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.671452][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.680321][ T5182] Bluetooth: hci3: command tx timeout [ 85.690319][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.716154][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.735537][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.753661][ T5866] Bluetooth: hci4: command tx timeout [ 85.759136][ T5182] Bluetooth: hci2: command tx timeout [ 85.820679][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.845334][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.968564][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.002944][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.027717][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.063215][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.154880][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.162725][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.358688][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.475972][ T9] cfg80211: failed to load regulatory.db [ 87.350166][ T6062] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 87.382822][ T6062] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 87.408154][ T6068] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 87.416411][ T6068] netlink: 'syz.0.41': attribute type 2 has an invalid length. [ 87.435792][ T5182] Bluetooth: hci0: command tx timeout [ 87.516167][ T5182] Bluetooth: hci1: command tx timeout [ 87.753068][ T5182] Bluetooth: hci3: command tx timeout [ 87.834612][ T5182] Bluetooth: hci2: command tx timeout [ 87.840053][ T5182] Bluetooth: hci4: command tx timeout [ 88.856000][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 89.124225][ T6139] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 89.308011][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 89.330943][ T6149] netem: change failed [ 89.366701][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 89.763125][ T6168] tipc: Started in network mode [ 89.777936][ T6168] tipc: Node identity ac14140f, cluster identity 4711 [ 89.802727][ T6168] tipc: New replicast peer: 255.255.255.255 [ 89.810306][ T6168] tipc: Enabled bearer , priority 10 [ 90.112454][ T6189] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.575245][ T10] IPVS: starting estimator thread 0... [ 90.703169][ T6218] IPVS: using max 33 ests per chain, 79200 per kthread [ 90.781409][ T6225] batadv1: entered promiscuous mode [ 90.813873][ T6225] batadv1: entered allmulticast mode [ 90.928638][ T5946] tipc: Node number set to 2886997007 [ 91.057688][ T6236] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 91.064093][ T6236] syzkaller0: linktype set to 1 [ 91.139326][ T6240] warning: `syz.2.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.984555][ T6291] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 92.111510][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'. [ 92.532522][ T6317] netlink: 27 bytes leftover after parsing attributes in process `syz.1.163'. [ 92.564354][ T6319] Bluetooth: MGMT ver 1.23 [ 93.133107][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 93.599645][ T6375] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 93.627409][ T6375] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 93.678539][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 94.164912][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 94.206103][ T6405] gretap0: entered promiscuous mode [ 94.461478][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 94.632620][ T5946] IPVS: starting estimator thread 0... [ 94.663342][ T6425] block nbd0: server does not support multiple connections per device. [ 94.683638][ T6425] block nbd0: shutting down sockets [ 94.733031][ T6430] IPVS: using max 29 ests per chain, 69600 per kthread [ 95.096888][ T6448] sctp: [Deprecated]: syz.1.223 (pid 6448) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.096888][ T6448] Use struct sctp_sack_info instead [ 95.420071][ T6464] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.108584][ T6486] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 96.726806][ T6521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.257'. [ 96.766497][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 97.812775][ T6570] netlink: 'syz.2.279': attribute type 21 has an invalid length. [ 97.853297][ T6570] netlink: 128 bytes leftover after parsing attributes in process `syz.2.279'. [ 97.885891][ T6570] netlink: 3 bytes leftover after parsing attributes in process `syz.2.279'. [ 98.089152][ T6584] Zero length message leads to an empty skb [ 98.731903][ T6616] netlink: 27 bytes leftover after parsing attributes in process `syz.3.302'. [ 100.126990][ T6675] sctp: [Deprecated]: syz.1.330 (pid 6675) Use of int in maxseg socket option. [ 100.126990][ T6675] Use struct sctp_assoc_value instead [ 100.843387][ T982] IPVS: starting estimator thread 0... [ 100.943044][ T6721] IPVS: using max 33 ests per chain, 79200 per kthread [ 100.995068][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 101.007112][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 101.055485][ T6725] nbd0: detected capacity change from 0 to 127 [ 101.078305][ T5182] block nbd0: Receive control failed (result -32) [ 101.093373][ T5867] block nbd0: Dead connection, failed to find a fallback [ 101.119659][ T5867] block nbd0: shutting down sockets [ 101.129057][ T5867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.138597][ T5867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.146667][ T5867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.161149][ T5867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.169077][ T5867] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.173802][ T6734] ipvlan2: entered promiscuous mode [ 101.187714][ T5867] Buffer I/O error on dev nbd0, logical block 2, async page read [ 101.223173][ T5867] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.243977][ T6734] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.262290][ T5867] Buffer I/O error on dev nbd0, logical block 3, async page read [ 101.286324][ T5867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.314661][ T5867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.333808][ T6743] sctp: [Deprecated]: syz.4.362 (pid 6743) Use of int in maxseg socket option. [ 101.333808][ T6743] Use struct sctp_assoc_value instead [ 101.348230][ T5867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.365048][ T5867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.393118][ T5867] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.402705][ T5867] Buffer I/O error on dev nbd0, logical block 2, async page read [ 101.433140][ T5867] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.443173][ T5867] Buffer I/O error on dev nbd0, logical block 3, async page read [ 101.451040][ T5867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.516670][ T5867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 101.547942][ T5867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.568885][ T5867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 101.580750][ T5867] ldm_validate_partition_table(): Disk read failed. [ 101.610218][ T5867] Dev nbd0: unable to read RDB block 0 [ 101.631111][ T5867] nbd0: unable to read partition table [ 101.674272][ T5867] ldm_validate_partition_table(): Disk read failed. [ 101.708128][ T5867] Dev nbd0: unable to read RDB block 0 [ 101.738072][ T5867] nbd0: unable to read partition table [ 102.064867][ T6782] team0: Device gtp0 is of different type [ 102.267068][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 103.055379][ T6827] block nbd1: server does not support multiple connections per device. [ 103.068383][ T6827] block nbd1: shutting down sockets [ 104.398345][ T6878] vlan2: entered promiscuous mode [ 104.412510][ T6878] bond0: entered promiscuous mode [ 104.422270][ T6878] bond_slave_0: entered promiscuous mode [ 104.436100][ T6878] bond_slave_1: entered promiscuous mode [ 104.454621][ T6878] vlan2: entered allmulticast mode [ 104.461324][ T6878] bond0: entered allmulticast mode [ 104.470294][ T6878] bond_slave_0: entered allmulticast mode [ 104.477276][ T6878] bond_slave_1: entered allmulticast mode [ 105.453540][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 105.531211][ T6923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.445'. [ 105.565737][ T6923] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 106.008396][ T6952] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.457'. [ 107.568927][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 107.601607][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 107.621949][ T7040] netlink: 58 bytes leftover after parsing attributes in process `syz.3.495'. [ 108.102083][ T7058] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 108.131162][ T7058] macsec2: entered promiscuous mode [ 108.143138][ T7058] macsec2: entered allmulticast mode [ 108.148452][ T7058] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 108.849954][ T7093] netlink: 'syz.4.513': attribute type 4 has an invalid length. [ 110.080379][ T7147] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 110.513494][ T7165] tap0: tun_chr_ioctl cmd 1074812118 [ 110.722771][ T7181] vlan3: entered promiscuous mode [ 110.734480][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.549'. [ 110.894067][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 110.902864][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 111.301048][ T7211] netem: change failed [ 111.928331][ T7242] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 112.477398][ T7277] netlink: 84 bytes leftover after parsing attributes in process `syz.2.582'. [ 112.501432][ T7277] netlink: 'syz.2.582': attribute type 43 has an invalid length. [ 112.643589][ T7284] netem: incorrect ge model size [ 112.656560][ T7284] netem: change failed [ 113.600900][ T7342] macvlan2: entered promiscuous mode [ 113.606476][ T7342] vlan0: entered promiscuous mode [ 113.869360][ T7357] netlink: 'syz.2.615': attribute type 11 has an invalid length. [ 113.891913][ T7357] netlink: 44 bytes leftover after parsing attributes in process `syz.2.615'. [ 113.948544][ T7365] netlink: 76 bytes leftover after parsing attributes in process `syz.1.619'. [ 114.314266][ T7384] tap0: tun_chr_ioctl cmd 1074025677 [ 114.327161][ T7384] tap0: linktype set to 270 [ 114.358267][ T7390] syz.2.631 uses obsolete (PF_INET,SOCK_PACKET) [ 115.090274][ T7427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.646'. [ 115.577841][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 115.587400][ T7455] netlink: 'syz.2.659': attribute type 29 has an invalid length. [ 115.597174][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 115.996707][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 116.074290][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 116.283561][ T7489] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 116.297623][ T7489] netlink: 'syz.4.674': attribute type 4 has an invalid length. [ 116.324003][ T7489] netlink: 188 bytes leftover after parsing attributes in process `syz.4.674'. [ 116.359001][ T7489] NCSI netlink: No device for ifindex 3321692160 [ 116.725695][ T7512] netlink: 'syz.1.685': attribute type 39 has an invalid length. [ 116.957872][ T7521] netlink: 48 bytes leftover after parsing attributes in process `syz.4.689'. [ 117.853920][ T7553] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 118.047371][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 118.433249][ T7584] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 118.440914][ T7584] nbd: error processing sock list [ 118.446358][ T7584] block nbd1: shutting down sockets [ 118.669396][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 118.680200][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.688486][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.846264][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 118.925720][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 118.935627][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 118.945950][ T7606] netlink: 'syz.4.729': attribute type 18 has an invalid length. [ 119.117505][ T7610] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.768303][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 120.569106][ T7704] netlink: 'syz.2.776': attribute type 3 has an invalid length. [ 120.619331][ T7702] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.828691][ T7717] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 120.843381][ T7717] dvmrp1: linktype set to 804 [ 122.028905][ T7777] __nla_validate_parse: 2 callbacks suppressed [ 122.028923][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 122.634746][ T3522] wlan1: Trigger new scan to find an IBSS to join [ 123.183919][ T7834] Bluetooth: MGMT ver 1.23 [ 124.173436][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 124.423771][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 124.449865][ T7871] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 124.464378][ T7871] netlink: 172 bytes leftover after parsing attributes in process `syz.3.856'. [ 125.346152][ T7915] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 125.684275][ T7931] netlink: 52 bytes leftover after parsing attributes in process `syz.4.886'. [ 125.787449][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'. [ 125.808482][ T7938] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 126.183365][ T7955] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 126.901653][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 127.269129][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 127.604992][ T3476] wlan1: Trigger new scan to find an IBSS to join [ 127.663185][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 127.948250][ T8048] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 128.064759][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 128.233459][ T5182] Bluetooth: hci4: command 0x0401 tx timeout [ 128.317990][ T8076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 128.517621][ T8087] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 128.529923][ T8087] syzkaller1: linktype set to 6 [ 128.542640][ T13] wlan1: Creating new IBSS network, BSSID d2:46:f0:c7:19:85 [ 129.123069][ T30] audit: type=1800 audit(1758758441.869:2): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.966" name=CB dev="tmpfs" ino=1032 res=0 errno=0 [ 129.361932][ T8127] syzkaller1: entered promiscuous mode [ 129.369507][ T8127] syzkaller1: entered allmulticast mode [ 129.715276][ T8149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.982'. [ 129.909412][ T8162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.925130][ T8162] batadv_slave_0: entered promiscuous mode [ 130.391834][ T8192] bond0: option ad_select: unable to set because the bond device is up [ 130.513309][ T8196] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1001'. [ 130.652832][ T8211] tap0: tun_chr_ioctl cmd 2147767507 [ 130.706807][ T8216] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 130.726348][ T8218] veth0: entered promiscuous mode [ 130.732903][ T8217] veth0: left promiscuous mode [ 130.952683][ T8235] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 131.392744][ T8204] delete_channel: no stack [ 131.485864][ T8261] netlink: 'syz.4.1029': attribute type 29 has an invalid length. [ 131.504181][ T8264] netlink: 'syz.4.1029': attribute type 29 has an invalid length. [ 131.537921][ T8261] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1029'. [ 131.590712][ T8261] unsupported nla_type 58 [ 131.890160][ T8290] netlink: 'syz.2.1042': attribute type 11 has an invalid length. [ 131.898820][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 131.910031][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 132.179980][ T8310] netlink: 'syz.2.1051': attribute type 4 has an invalid length. [ 132.247156][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 132.267829][ T8315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.299462][ T8313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.376598][ T8313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.410419][ T8317] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.1054'. [ 132.559262][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.565993][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879089][ T8344] tipc: Started in network mode [ 132.884663][ T8344] tipc: Node identity , cluster identity 4711 [ 132.890759][ T8344] tipc: Failed to obtain node identity [ 132.896392][ T8344] tipc: Enabling of bearer rejected, failed to enable media [ 133.080322][ T8360] pim6reg1: entered promiscuous mode [ 133.089133][ T8360] pim6reg1: entered allmulticast mode [ 133.168204][ T8365] netlink: 'syz.2.1079': attribute type 12 has an invalid length. [ 133.178050][ T8365] netlink: 'syz.2.1079': attribute type 29 has an invalid length. [ 133.198919][ T8365] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1079'. [ 133.234924][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1078'. [ 133.249392][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1078'. [ 133.998633][ T8424] netlink: 'syz.0.1105': attribute type 1 has an invalid length. [ 134.089444][ T8426] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.531805][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 134.554929][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 134.964276][ T8482] Bluetooth: MGMT ver 1.23 [ 135.117684][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 135.203187][ T8499] syzkaller1: entered promiscuous mode [ 135.208792][ T8499] syzkaller1: entered allmulticast mode [ 135.397458][ T8509] IPVS: Scheduler module ip_vs_sip not found [ 135.844101][ T8543] netlink: 'syz.4.1162': attribute type 23 has an invalid length. [ 137.100188][ T8604] team0: Device ipip0 is of different type [ 137.281308][ T8615] netlink: 'syz.2.1196': attribute type 29 has an invalid length. [ 137.291165][ T8615] netlink: 'syz.2.1196': attribute type 29 has an invalid length. [ 138.444082][ T8664] syz.2.1218 (8664) used greatest stack depth: 17864 bytes left [ 138.487684][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 138.505563][ T8673] netlink: 'syz.0.1222': attribute type 30 has an invalid length. [ 138.557765][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 138.568088][ T8675] syzkaller1: entered promiscuous mode [ 138.581025][ T8681] netlink: 'syz.4.1227': attribute type 7 has an invalid length. [ 138.591242][ T8675] syzkaller1: entered allmulticast mode [ 138.597780][ T8681] netlink: 'syz.4.1227': attribute type 8 has an invalid length. [ 138.600131][ T8673] netlink: 'syz.0.1222': attribute type 30 has an invalid length. [ 138.610090][ T8681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1227'. [ 138.770839][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.794663][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.811734][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.852983][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.097437][ T8707] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 139.139497][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 139.211903][ T8713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 139.241878][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1242'. [ 139.286447][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1243'. [ 139.289622][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 139.855359][ T8758] macvtap1: entered allmulticast mode [ 139.866828][ T8758] veth0_macvtap: entered allmulticast mode [ 139.897533][ T8761] pim6reg1: entered allmulticast mode [ 140.231924][ T8780] netlink: 'syz.1.1273': attribute type 2 has an invalid length. [ 140.436873][ T8794] sctp: [Deprecated]: syz.1.1280 (pid 8794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.436873][ T8794] Use struct sctp_sack_info instead [ 142.066877][ T8898] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1322'. [ 143.151311][ T8959] netlink: 'syz.3.1344': attribute type 11 has an invalid length. [ 144.130575][ T9012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.665412][ T9045] pim6reg: entered allmulticast mode [ 144.673878][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 144.676928][ T9045] pim6reg: left allmulticast mode [ 145.074106][ T9058] block nbd1: shutting down sockets [ 145.268001][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 145.361636][ T9075] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 145.601238][ T9091] syzkaller1: entered promiscuous mode [ 145.612990][ T9091] syzkaller1: entered allmulticast mode [ 145.874154][ T9109] veth1_to_hsr: entered promiscuous mode [ 145.880092][ T9109] macvtap2: entered promiscuous mode [ 145.900028][ T9109] macvtap2: entered allmulticast mode [ 145.914138][ T9109] veth1_to_hsr: entered allmulticast mode [ 145.952392][ T9118] macvtap3: entered promiscuous mode [ 145.964892][ T9118] macvtap3: entered allmulticast mode [ 146.151623][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 146.842261][ T9174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1421'. [ 147.664528][ T9236] raw_sendmsg: syz.2.1448 forgot to set AF_INET. Fix it! [ 147.836827][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 147.847099][ T9248] netlink: 'syz.4.1453': attribute type 21 has an invalid length. [ 148.055104][ T9258] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1456'. [ 148.482723][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1467'. [ 148.569375][ T9288] ipvlan1: entered promiscuous mode [ 148.607221][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'. [ 148.628431][ T9288] ipvlan1 (unregistering): left promiscuous mode [ 148.770877][ T9301] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1473'. [ 148.781197][ T9301] netlink: zone id is out of range [ 148.781599][ T9302] netlink: 'syz.0.1472': attribute type 13 has an invalid length. [ 148.787031][ T9301] netlink: zone id is out of range [ 148.800023][ T9301] netlink: zone id is out of range [ 148.813701][ T9301] netlink: zone id is out of range [ 148.821750][ T9302] gretap0: refused to change device tx_queue_len [ 148.832520][ T9302] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 148.836898][ T9301] netlink: zone id is out of range [ 148.880680][ T9301] netlink: zone id is out of range [ 148.893997][ T9301] netlink: zone id is out of range [ 148.899380][ T9301] netlink: zone id is out of range [ 148.911580][ T9301] netlink: get zone limit has 8 unknown bytes [ 149.886752][ T9371] netlink: 'syz.0.1492': attribute type 2 has an invalid length. [ 149.899882][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1492'. [ 150.248341][ T5182] Bluetooth: hci4: link tx timeout [ 150.254280][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.277638][ T5182] Bluetooth: hci4: link tx timeout [ 150.282827][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.290815][ T5182] Bluetooth: hci4: link tx timeout [ 150.296315][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.305848][ T5182] Bluetooth: hci4: link tx timeout [ 150.311032][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.319059][ T5182] Bluetooth: hci4: link tx timeout [ 150.324552][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.332316][ T5182] Bluetooth: hci4: link tx timeout [ 150.337559][ T5182] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.859571][ T9413] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 150.894612][ T9413] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.977219][ T9420] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 151.191498][ T9436] syzkaller1: entered promiscuous mode [ 151.201802][ T9436] syzkaller1: entered allmulticast mode [ 151.333977][ T9444] syzkaller1: entered promiscuous mode [ 151.374054][ T9444] syzkaller1: entered allmulticast mode [ 151.516616][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'. [ 152.033593][ T9494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1545'. [ 152.042681][ T9494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.050073][ T9494] IPv6: NLM_F_CREATE should be set when creating new route [ 152.057377][ T9494] IPv6: NLM_F_CREATE should be set when creating new route [ 152.313607][ T5182] Bluetooth: hci4: command 0x0401 tx timeout [ 152.361263][ T9511] syz.4.1553 (9511) used greatest stack depth: 17464 bytes left [ 152.451873][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 153.301892][ T9571] netlink: 'syz.3.1582': attribute type 4 has an invalid length. [ 153.322373][ T9571] netlink: 'syz.3.1582': attribute type 4 has an invalid length. [ 153.809333][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1593'. [ 154.891859][ T9641] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 154.902847][ T9641] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 154.928758][ T9641] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1615'. [ 154.949525][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055a00400: rx timeout, send abort [ 154.958872][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055a00400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 155.202450][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 155.883176][ T9688] syzkaller1: entered promiscuous mode [ 155.888688][ T9688] syzkaller1: entered allmulticast mode [ 156.175865][ T9697] netlink: 'syz.4.1638': attribute type 10 has an invalid length. [ 156.220381][ T9697] syz_tun: entered promiscuous mode [ 156.256165][ T9697] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.587232][ T9714] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1646'. [ 156.608961][ T9714] 0ªX¹¦À: renamed from caif0 [ 156.643002][ T9714] 0ªX¹¦À: entered allmulticast mode [ 156.650880][ T9714] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 156.903902][ T9725] batadv_slave_1: entered promiscuous mode [ 156.921795][ T9724] batadv_slave_1: left promiscuous mode [ 157.335221][ T9751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.572584][ T30] audit: type=1804 audit(1758758470.309:3): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1670" name="cgroup.controllers" dev="tmpfs" ino=1602 res=1 errno=0 [ 157.661707][ T30] audit: type=1800 audit(1758758470.319:4): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1670" name="cgroup.controllers" dev="tmpfs" ino=1602 res=0 errno=0 [ 157.896244][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1682'. [ 157.914849][ T9798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1681'. [ 158.000828][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'. [ 158.010539][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1683'. [ 158.028408][ T9804] geneve3: entered promiscuous mode [ 158.045706][ T9804] geneve3: entered allmulticast mode [ 158.266422][ T9825] batadv0: entered promiscuous mode [ 158.282166][ T9825] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 158.517019][ T9843] netlink: 'syz.3.1701': attribute type 4 has an invalid length. [ 159.253361][ T9885] syzkaller1: entered promiscuous mode [ 159.259073][ T9885] syzkaller1: entered allmulticast mode [ 159.361632][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 160.113429][ T9937] geneve2: entered promiscuous mode [ 162.066023][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 162.114311][ T9994] hsr0: entered promiscuous mode [ 162.143167][ T9994] macvtap1: entered allmulticast mode [ 162.148657][ T9994] hsr0: entered allmulticast mode [ 162.175239][ T9994] hsr_slave_0: entered allmulticast mode [ 162.192086][ T9994] hsr_slave_1: entered allmulticast mode [ 162.338525][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 162.356863][T10005] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1775'. [ 162.443744][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 163.353259][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1793'. [ 163.407090][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1793'. [ 165.684443][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1857'. [ 165.762294][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 166.584646][T10236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1882'. [ 168.452570][T10325] netlink: 'syz.1.1923': attribute type 11 has an invalid length. [ 168.664201][T10343] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 168.672191][T10343] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 168.680356][T10343] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1931'. [ 168.697982][T10341] netlink: 'syz.2.1929': attribute type 2 has an invalid length. [ 169.257415][T10381] syzkaller1: entered promiscuous mode [ 169.263188][T10381] syzkaller1: entered allmulticast mode [ 169.967432][T10427] macvlan0: entered promiscuous mode [ 169.984515][T10427] batadv0: entered promiscuous mode [ 169.994977][T10427] debugfs: 'hsr1' already exists in 'hsr' [ 170.019588][T10427] Cannot create hsr debugfs directory [ 170.030295][T10427] hsr1: entered allmulticast mode [ 170.049889][T10427] macvlan0: entered allmulticast mode [ 170.059483][T10427] veth1_vlan: entered allmulticast mode [ 170.065321][T10427] batadv0: entered allmulticast mode [ 170.092308][T10427] macvlan0: left promiscuous mode [ 170.106993][T10427] batadv0: left promiscuous mode [ 170.782637][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 171.381217][T10490] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.500744][T10498] netlink: 'syz.0.2011': attribute type 11 has an invalid length. [ 172.426772][T10546] netlink: 'syz.3.2024': attribute type 2 has an invalid length. [ 172.460449][T10546] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2024'. [ 172.473019][T10546] nbd: must specify a device to reconfigure [ 172.917524][ T982] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 172.954849][ T982] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 174.187350][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'. [ 174.216259][T10635] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 174.227708][T10637] sctp: [Deprecated]: syz.2.2062 (pid 10637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.227708][T10637] Use struct sctp_sack_info instead [ 174.249463][T10635] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 174.294062][T10638] syzkaller1: entered promiscuous mode [ 174.299666][T10638] syzkaller1: entered allmulticast mode [ 174.454246][T10653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2071'. [ 175.395942][T10720] veth1_to_bond: entered allmulticast mode [ 175.414791][T10720] veth1_to_bond: entered promiscuous mode [ 175.438794][T10718] veth1_to_bond: left promiscuous mode [ 175.454999][T10718] veth1_to_bond: left allmulticast mode [ 175.953774][T10755] nbd: device at index 1 is going down [ 176.215566][T10768] tipc: Started in network mode [ 176.231721][T10768] tipc: Node identity ac14142f, cluster identity 4711 [ 176.260935][T10768] tipc: New replicast peer: 0.0.0.0 [ 176.276782][T10768] tipc: Enabled bearer , priority 10 [ 176.297819][T10771] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 176.425984][T10778] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2121'. [ 176.427037][T10783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 176.811827][T10808] netlink: 'syz.4.2132': attribute type 11 has an invalid length. [ 177.403026][ T979] tipc: Node number set to 2886997039 [ 177.510072][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 177.575510][T10851] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 177.602499][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 177.768445][T10866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2157'. [ 178.164919][T10896] syzkaller1: entered promiscuous mode [ 178.170425][T10896] syzkaller1: entered allmulticast mode [ 178.201731][T10896] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 178.484337][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 179.034112][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2185'. [ 179.071593][T10933] netem: change failed [ 179.170964][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 179.184426][T10944] ip_vti0: Master is either lo or non-ether device [ 179.293852][T10947] syzkaller1: entered promiscuous mode [ 179.303412][T10947] syzkaller1: entered allmulticast mode [ 180.276516][T11014] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2224'. [ 180.365469][T11018] netlink: 'syz.0.2220': attribute type 25 has an invalid length. [ 180.377295][T11018] netlink: 'syz.0.2220': attribute type 28 has an invalid length. [ 180.522276][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2232'. [ 180.561453][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2232'. [ 181.795407][T11100] sctp: [Deprecated]: syz.0.2262 (pid 11100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.795407][T11100] Use struct sctp_sack_info instead [ 181.827861][T11100] sctp: [Deprecated]: syz.0.2262 (pid 11100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.827861][T11100] Use struct sctp_sack_info instead [ 182.857625][T11145] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2280'. [ 183.218976][T11172] C: renamed from team_slave_0 (while UP) [ 183.244099][T11172] netlink: 'syz.1.2293': attribute type 1 has an invalid length. [ 183.257769][T11172] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2293'. [ 183.268022][T11172] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 183.622468][T11203] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2308'. [ 183.782345][T11216] IPv6: Can't replace route, no match found [ 184.275600][T11241] unknown channel width for channel at 909000KHz? [ 184.526568][T11255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2332'. [ 184.877175][T11266] netlink: 'syz.3.2337': attribute type 5 has an invalid length. [ 185.614656][T11312] pim6reg1: entered promiscuous mode [ 185.619988][T11312] pim6reg1: entered allmulticast mode [ 186.049061][T11349] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2375'. [ 186.058959][T11349] ksmbd: Unknown IPC event: 0, ignore. [ 186.977254][T11385] sctp: [Deprecated]: syz.1.2391 (pid 11385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.977254][T11385] Use struct sctp_sack_info instead [ 187.208482][ T5946] IPVS: starting estimator thread 0... [ 187.268765][T11393] tipc: Enabled bearer , priority 10 [ 187.303014][T11394] IPVS: using max 31 ests per chain, 74400 per kthread [ 187.876122][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2412'. [ 187.910505][T11432] syzkaller1: entered promiscuous mode [ 187.916532][T11432] syzkaller1: entered allmulticast mode [ 187.936337][T11429] netlink: 'syz.2.2412': attribute type 2 has an invalid length. [ 188.535030][T11469] netem: incorrect gi model size [ 188.554750][T11471] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.570105][T11473] netlink: 'syz.1.2432': attribute type 27 has an invalid length. [ 188.655754][T11473] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.664191][T11473] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.771146][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.787655][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.891716][T11473] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 188.901728][T11473] macsec2: left promiscuous mode [ 188.907885][T11473] macsec2: left allmulticast mode [ 188.915830][ T9141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.924997][ T9141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.943387][ T9141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.958217][ T9141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.769089][T11546] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2461'. [ 189.783446][T11538] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2461'. [ 190.235926][T11571] syzkaller1: entered promiscuous mode [ 190.249324][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'. [ 190.252799][T11571] syzkaller1: entered allmulticast mode [ 191.046018][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2505'. [ 191.489560][T11666] gretap0: Device is already in use. [ 191.529231][T11664] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 191.758200][T11681] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2527'. [ 191.898925][T11691] netlink: 'syz.3.2529': attribute type 4 has an invalid length. [ 192.239047][T11708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 192.617523][T11733] veth1_to_team: entered promiscuous mode [ 192.628068][T11733] bond0: entered promiscuous mode [ 192.637235][T11733] bond_slave_0: entered promiscuous mode [ 192.643149][T11733] bond_slave_1: entered promiscuous mode [ 192.650344][T11733] debugfs: 'hsr1' already exists in 'hsr' [ 192.656365][T11733] Cannot create hsr debugfs directory [ 192.662102][T11733] hsr1: entered allmulticast mode [ 192.711706][T11733] veth1_to_team: entered allmulticast mode [ 192.737408][T11733] bond0: entered allmulticast mode [ 192.742547][T11733] bond_slave_0: entered allmulticast mode [ 192.763448][T11733] bond_slave_1: entered allmulticast mode [ 192.787027][T11733] syz_tun: entered allmulticast mode [ 193.993403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.998099][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.008310][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.155243][T11825] trusted_key: syz.4.2591 sent an empty control message without MSG_MORE. [ 194.393790][T11833] sctp: [Deprecated]: syz.4.2594 (pid 11833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.393790][T11833] Use struct sctp_sack_info instead [ 194.473165][ T5866] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.066860][T11853] tipc: New replicast peer: 255.255.255.255 [ 195.075253][T11853] tipc: Enabled bearer , priority 10 [ 195.206082][T11864] veth0_to_bridge: entered promiscuous mode [ 195.213714][T11861] veth0_to_bridge: left promiscuous mode [ 195.328257][T11871] netlink: 'syz.2.2613': attribute type 21 has an invalid length. [ 195.337069][T11871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2613'. [ 195.531028][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2618'. [ 195.580280][T11887] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 195.656869][T11890] lo: entered allmulticast mode [ 195.668052][T11890] lo: left allmulticast mode [ 196.262986][T11906] batadv_slave_0: entered promiscuous mode [ 196.278240][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 196.297518][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 196.313034][T11907] netlink: 'syz.2.2628': attribute type 15 has an invalid length. [ 196.342399][ T3476] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 196.360791][ T3476] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 196.375231][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2628'. [ 196.391323][T11913] syzkaller1: entered promiscuous mode [ 196.398560][T11913] syzkaller1: entered allmulticast mode [ 196.405588][ T3476] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 196.417680][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2628'. [ 196.427110][ T3476] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 196.437790][T11907] netlink: 'syz.2.2628': attribute type 15 has an invalid length. [ 196.470593][T11911] bond1: entered promiscuous mode [ 196.478594][T11911] bond1: entered allmulticast mode [ 196.484659][T11911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.001636][T11948] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 197.265537][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 197.293005][T11963] netlink: 'syz.3.2655': attribute type 20 has an invalid length. [ 197.314517][T11963] netlink: 'syz.3.2655': attribute type 21 has an invalid length. [ 197.428384][T11973] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 197.436858][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 197.460197][T11977] netlink: 'syz.2.2662': attribute type 29 has an invalid length. [ 197.476308][T11977] netlink: 'syz.2.2662': attribute type 29 has an invalid length. [ 197.484942][T11977] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2662'. [ 197.592610][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2664'. [ 197.765994][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2670'. [ 197.994208][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2678'. [ 198.105809][T12021] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2682'. [ 198.338760][T12039] dummy0: entered promiscuous mode [ 198.414322][T12039] batadv_slave_0: entered promiscuous mode [ 198.438523][T12039] batadv_slave_0: left promiscuous mode [ 198.464027][T12039] dummy0: left promiscuous mode [ 199.750021][T12073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2705'. [ 200.411694][T12103] pim6reg: entered allmulticast mode [ 200.435016][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 200.578514][T12115] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.655845][T12115] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 200.765226][T12119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2725'. [ 201.167916][T12148] netlink: 'syz.0.2738': attribute type 1 has an invalid length. [ 201.175723][T12151] tipc: Enabling of bearer rejected, already enabled [ 201.176404][T12151] tipc: New replicast peer: 255.255.255.255 [ 201.239457][T12148] bond2: entered promiscuous mode [ 201.244984][T12148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.283789][T12155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.292403][T12155] bond2: (slave bond3): making interface the new active one [ 201.299928][T12155] bond3: entered promiscuous mode [ 201.306219][T12155] bond2: (slave bond3): Enslaving as an active interface with an up link [ 201.439670][T12161] vlan0 (unregistering): left promiscuous mode [ 201.825306][ T30] audit: type=1800 audit(1758758514.579:5): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2755" name="memory.events" dev="tmpfs" ino=2686 res=0 errno=0 [ 202.831230][T12227] __nla_validate_parse: 5 callbacks suppressed [ 202.831248][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2772'. [ 203.103936][ T10] IPVS: starting estimator thread 0... [ 203.202999][T12246] IPVS: using max 31 ests per chain, 74400 per kthread [ 203.500433][T12276] team_slave_0: entered promiscuous mode [ 203.506497][T12276] team_slave_1: entered promiscuous mode [ 203.516231][T12276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.543664][T12276] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 203.710692][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 205.041786][T12349] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.2829'. [ 205.060015][T12349] netlink: zone id is out of range [ 205.074613][T12349] netlink: zone id is out of range [ 205.596894][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'. [ 206.324074][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 206.330141][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 206.341539][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 206.522020][T12441] syzkaller1: entered promiscuous mode [ 206.532742][T12441] syzkaller1: entered allmulticast mode [ 206.542732][T12443] netlink: 'syz.2.2873': attribute type 11 has an invalid length. [ 206.657839][T12450] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.703530][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2878'. [ 206.717238][T12453] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2878'. [ 206.729986][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2878'. [ 206.750087][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'. [ 206.759665][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2880'. [ 206.822796][T12459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2881'. [ 206.920102][T12465] vxcan1: tx address claim with dlc 0 [ 207.096304][T12478] tipc: Enabling of bearer rejected, already enabled [ 208.406062][T12533] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 208.504058][T12538] sctp: [Deprecated]: syz.4.2915 (pid 12538) Use of int in max_burst socket option. [ 208.504058][T12538] Use struct sctp_assoc_value instead [ 208.529184][T12541] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2917'. [ 208.985002][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2930'. [ 209.390323][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2936'. [ 209.402322][T12596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2936'. [ 209.753059][ T5182] Bluetooth: hci4: command 0x0401 tx timeout [ 210.383041][T12654] syz.2.2962 (12654) used obsolete PPPIOCDETACH ioctl [ 210.762675][ T30] audit: type=1800 audit(1758758523.519:6): pid=12680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2974" name="@" dev="tmpfs" ino=2904 res=0 errno=0 [ 211.368762][T12719] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2990'. [ 211.428606][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 211.439109][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2992'. [ 211.730420][T12738] syzkaller1: entered promiscuous mode [ 211.737863][T12738] syzkaller1: entered allmulticast mode [ 211.912350][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3001'. [ 212.806826][T12802] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3026'. [ 213.056435][T12816] syzkaller1: entered promiscuous mode [ 213.061946][T12816] syzkaller1: entered allmulticast mode [ 213.361319][T12847] sctp: [Deprecated]: syz.2.3048 (pid 12847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.361319][T12847] Use struct sctp_sack_info instead [ 213.745707][ T49] nci: nci_rsp_packet: unsupported rsp opcode 0xf02 [ 214.104568][T12882] netlink: 'syz.1.3062': attribute type 29 has an invalid length. [ 214.129048][T12882] netlink: 'syz.1.3062': attribute type 29 has an invalid length. [ 214.152714][T12882] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3062'. [ 214.499732][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'. [ 214.516221][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'. [ 215.399644][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 215.442756][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 215.513742][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 215.518734][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.553535][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.582719][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 215.586499][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.634077][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.006144][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'. [ 216.394079][ T9136] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 216.613816][T12989] tls_set_device_offload_rx: netdev not found [ 217.484538][T13047] xt_l2tp: missing protocol rule (udp|l2tpip) [ 217.842517][T13075] netlink: 'syz.4.3142': attribute type 1 has an invalid length. [ 217.930518][T13075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.997618][T13080] bond1: (slave ip6erspan0): making interface the new active one [ 218.007965][T13080] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 218.015832][T13088] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 218.056162][T13088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.116777][T13088] bond1: (slave geneve2): making interface the new active one [ 218.164163][T13088] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 218.379338][T13112] netlink: 'syz.0.3158': attribute type 19 has an invalid length. [ 218.393732][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 218.474507][T13112] netlink: 'syz.0.3158': attribute type 19 has an invalid length. [ 218.483684][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'. [ 218.648207][T13126] netlink: 'syz.2.3165': attribute type 11 has an invalid length. [ 219.343347][ T9136] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 219.672179][T13209] syzkaller1: entered promiscuous mode [ 219.678456][T13209] syzkaller1: entered allmulticast mode [ 221.262541][T13278] syzkaller1: entered promiscuous mode [ 221.286964][T13278] syzkaller1: entered allmulticast mode [ 221.840858][T13307] netlink: 'syz.3.3240': attribute type 5 has an invalid length. [ 221.957721][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3246'. [ 223.012440][T13376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.020799][T13376] bridge0: port 3(bond1) entered blocking state [ 223.027423][T13376] bridge0: port 3(bond1) entered disabled state [ 223.035402][T13376] bond1: entered allmulticast mode [ 223.043010][T13376] bond1: entered promiscuous mode [ 223.238887][T13395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3280'. [ 223.408964][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 225.359867][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3310'. [ 225.376121][T13474] netlink: 'syz.1.3310': attribute type 5 has an invalid length. [ 225.389982][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'. [ 225.571930][T13482] batadv_slave_0: left promiscuous mode [ 225.626001][T13488] netlink: 'syz.4.3316': attribute type 10 has an invalid length. [ 225.695878][T13488] team0: Port device dummy0 added [ 225.719814][T13485] netlink: 'syz.4.3316': attribute type 10 has an invalid length. [ 225.769658][T13485] team0: Port device dummy0 removed [ 225.799267][T13485] dummy0: entered promiscuous mode [ 225.811755][T13485] dummy0: entered allmulticast mode [ 225.821316][T13485] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 225.843259][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3317'. [ 225.880424][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3317'. [ 225.880436][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.923993][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.963126][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.972077][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.058176][T13509] ip6tnl1: entered promiscuous mode [ 226.335296][T13526] bond0: (slave syz_tun): Releasing backup interface [ 226.360052][T13526] syz_tun: left allmulticast mode [ 226.391150][T13526] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.742765][T13550] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3340'. [ 226.842358][T13562] netlink: 'syz.2.3344': attribute type 3 has an invalid length. [ 227.078369][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3351'. [ 227.420666][T13601] syzkaller1: entered promiscuous mode [ 227.433104][T13601] syzkaller1: entered allmulticast mode [ 227.675708][T13620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3369'. [ 227.896041][T13632] unknown channel width for channel at 909000KHz? [ 227.906514][T13632] unknown channel width for channel at 909000KHz? [ 227.916906][T13632] unknown channel width for channel at 909000KHz? [ 228.570352][T13674] netlink: 'syz.1.3390': attribute type 8 has an invalid length. [ 228.580244][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 228.595723][T13674] bond0: entered promiscuous mode [ 228.600924][T13674] bond_slave_0: entered promiscuous mode [ 228.609232][T13674] bond_slave_1: entered promiscuous mode [ 228.616539][T13674] veth1_to_bridge: entered promiscuous mode [ 228.624038][T13674] ip6gretap0: entered promiscuous mode [ 228.631695][T13674] debugfs: 'hsr1' already exists in 'hsr' [ 228.638435][T13674] Cannot create hsr debugfs directory [ 228.644822][T13674] hsr1: entered promiscuous mode [ 228.960927][T13701] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 229.026512][T13701] bond1: entered promiscuous mode [ 229.041832][T13701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.120502][T13707] bond1: (slave bridge2): making interface the new active one [ 229.155950][T13707] bridge2: entered promiscuous mode [ 229.168454][T13707] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 229.193760][ T5866] Bluetooth: hci4: command 0x0401 tx timeout [ 229.596830][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3414'. [ 229.641551][T13730] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3413'. [ 230.222407][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3432'. [ 230.246585][T13772] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 230.254632][T13772] netlink: 'syz.1.3432': attribute type 2 has an invalid length. [ 230.262766][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3432'. [ 230.850994][T13810] atomic_op ffff888076681998 conn xmit_atomic 0000000000000000 [ 231.015960][T13825] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 231.348701][T13849] netlink: 'syz.4.3466': attribute type 39 has an invalid length. [ 231.834563][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 231.875735][T13879] netlink: 'syz.4.3481': attribute type 30 has an invalid length. [ 231.909579][ T9141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.909587][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 231.909619][ T9141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.921188][T13879] netlink: 'syz.4.3481': attribute type 30 has an invalid length. [ 231.949761][ T9141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.960352][ T9141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.466126][T13915] netlink: 'syz.2.3498': attribute type 12 has an invalid length. [ 232.474661][T13915] netlink: 'syz.2.3498': attribute type 29 has an invalid length. [ 232.482478][T13915] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3498'. [ 232.496653][T13915] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3498'. [ 232.749135][T13933] batadv_slave_1: entered promiscuous mode [ 232.762209][T13932] batadv_slave_1: left promiscuous mode [ 232.784473][T13935] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.058261][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 233.156795][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 233.230231][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3513'. [ 233.280110][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3513'. [ 233.625538][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3526'. [ 234.052460][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 234.064527][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'. [ 234.118535][T14001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3537'. [ 234.631781][T14036] vlan3: entered allmulticast mode [ 234.682761][T14039] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 234.703118][T14039] netlink: 'syz.2.3554': attribute type 2 has an invalid length. [ 235.503958][T14087] ip6tnl1: entered promiscuous mode [ 236.016886][T14098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.054464][T14098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.232991][ T3476] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 236.241847][ T3476] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.263831][ T3476] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 236.282930][ T3476] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.298428][ T3476] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 236.334783][ T3476] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.355730][ T3476] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 236.370375][ T3476] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.545432][T14131] netem: change failed [ 236.689113][T14138] netlink: 'syz.2.3592': attribute type 6 has an invalid length. [ 236.708183][T14138] netlink: 'syz.2.3592': attribute type 6 has an invalid length. [ 236.716404][ T9136] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.726134][ T9136] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.800606][ T9136] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.811737][ T9136] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.863118][T14145] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 236.976275][T14147] syzkaller1: entered promiscuous mode [ 236.981778][T14147] syzkaller1: entered allmulticast mode [ 237.724969][T14200] netlink: 'syz.4.3619': attribute type 1 has an invalid length. [ 237.817915][T14200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.839492][T14200] __nla_validate_parse: 8 callbacks suppressed [ 237.839508][T14200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3619'. [ 237.866551][T14200] bond2: (slave geneve2): making interface the new active one [ 237.875939][T14200] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 238.672724][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.681088][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.708626][T14229] team_slave_0: left promiscuous mode [ 238.726984][T14229] team_slave_1: left promiscuous mode [ 238.849413][T14229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.864592][T14229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.945682][T14252] netlink: 'syz.0.3640': attribute type 10 has an invalid length. [ 238.998948][ T10] syz1: Port: 1 Link DOWN [ 239.025121][T14252] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.046410][T14252] bond0: (slave team0): Enslaving as an active interface with an up link [ 239.077507][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.093240][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.113308][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.122370][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.181437][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.186199][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 239.199961][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.251120][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.262453][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.431170][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3650'. [ 239.501575][T14277] bridge0: entered promiscuous mode [ 239.520392][T14277] macsec2: entered allmulticast mode [ 239.530065][T14277] bridge0: entered allmulticast mode [ 239.544542][T14277] bridge0: port 3(macsec2) entered blocking state [ 239.553641][T14277] bridge0: port 3(macsec2) entered disabled state [ 239.578926][T14277] bridge0: left allmulticast mode [ 239.593514][T14277] bridge0: left promiscuous mode [ 239.640866][T14295] veth1_vlan: left allmulticast mode [ 239.656235][T14295] veth1_vlan: entered allmulticast mode [ 239.695147][T14295] team0: Port device macvlan0 added [ 240.529638][T14340] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 240.553596][T14340] netlink: 'syz.2.3679': attribute type 4 has an invalid length. [ 240.561656][T14340] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.3679'. [ 241.430384][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3698'. [ 242.171225][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3708'. [ 242.278719][T14417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.374155][T14422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 242.381408][T14422] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 242.393529][T14422] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 242.410785][T14429] netlink: 'syz.3.3714': attribute type 4 has an invalid length. [ 242.710462][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 243.075398][T14467] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.292636][T14483] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3736'. [ 243.664091][T14510] syzkaller1: entered promiscuous mode [ 243.669635][T14510] syzkaller1: entered allmulticast mode [ 243.868656][T14524] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 245.042052][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 245.076045][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 245.234851][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 245.268039][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 245.364573][T14623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3795'. [ 245.475830][T14634] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3800'. [ 245.550901][T14638] netlink: 'syz.2.3802': attribute type 13 has an invalid length. [ 245.635096][ T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.661874][ T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.686242][ T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.696476][ T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.079981][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 246.089021][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 246.154305][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3821'. [ 246.796001][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 247.012105][T14734] netlink: 'syz.4.3841': attribute type 6 has an invalid length. [ 247.806677][T14783] netlink: 'syz.0.3861': attribute type 29 has an invalid length. [ 247.816856][T14783] netlink: 'syz.0.3861': attribute type 29 has an invalid length. [ 248.416527][T14825] netlink: 'syz.0.3881': attribute type 1 has an invalid length. [ 248.451060][T14825] bond4: entered promiscuous mode [ 248.456726][T14825] bond4: entered allmulticast mode [ 248.490715][T14825] bridge1: entered promiscuous mode [ 248.503328][T14825] bridge1: entered allmulticast mode [ 248.527092][T14825] bond4: (slave bridge1): making interface the new active one [ 248.535261][T14825] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 248.813605][T14859] __nla_validate_parse: 2 callbacks suppressed [ 248.813621][T14859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3894'. [ 249.045943][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 249.063171][T14870] macsec3: entered allmulticast mode [ 249.068602][T14870] bridge0: entered allmulticast mode [ 249.081070][T14870] bridge0: port 3(macsec3) entered blocking state [ 249.087909][T14870] bridge0: port 3(macsec3) entered disabled state [ 249.117693][T14870] bridge0: left allmulticast mode [ 249.434737][T14900] vlan5: entered allmulticast mode [ 249.464384][T14900] dummy0: entered allmulticast mode [ 249.885534][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'. [ 251.407413][T14991] bond2: entered promiscuous mode [ 251.412741][T14991] bond2: entered allmulticast mode [ 251.418776][T14991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.707611][T14991] bond2 (unregistering): Released all slaves [ 251.817578][T15022] netlink: 'syz.3.3957': attribute type 11 has an invalid length. [ 251.955438][T15028] netlink: 'syz.2.3959': attribute type 10 has an invalid length. [ 252.292411][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3966'. [ 252.414983][T15046] nbd: socks must be embedded in a SOCK_ITEM attr [ 252.423746][T15046] block nbd2: shutting down sockets [ 253.753503][ T5866] Bluetooth: hci4: command 0x0401 tx timeout [ 254.152356][T15110] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3991'. [ 254.162469][T15107] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3991'. [ 254.426437][T15119] batadv_slave_1: entered promiscuous mode [ 254.437960][T15117] batadv_slave_1: left promiscuous mode [ 255.030360][T15142] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4005'. [ 255.176963][T15146] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4009'. [ 255.436526][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003466][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4024'. [ 256.095942][T15184] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4026'. [ 256.132968][T15184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4026'. [ 256.940455][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4041'. [ 256.997107][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 257.539271][T15267] netlink: 'syz.0.4060': attribute type 4 has an invalid length. [ 257.608015][T15272] netlink: 'syz.0.4060': attribute type 4 has an invalid length. [ 257.742009][ T30] audit: type=1800 audit(1758758570.499:7): pid=15277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4065" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=4125 res=0 errno=0 [ 257.881239][T15285] ip6gre1: entered allmulticast mode [ 258.322115][T15308] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 258.333001][T15308] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4077'. [ 259.364855][T15346] pim6reg1: entered promiscuous mode [ 259.370190][T15346] pim6reg1: entered allmulticast mode [ 261.113025][T15443] __nla_validate_parse: 1 callbacks suppressed [ 261.113042][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 261.155607][T15443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.336917][T15443] bond3: (slave batadv1): Opening slave failed [ 261.420441][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 262.100954][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'. [ 262.202051][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 262.711093][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4183'. [ 263.243452][T15567] netlink: 'syz.3.4194': attribute type 1 has an invalid length. [ 263.297552][T15567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.336766][T15567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.343990][T15567] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.358187][T15567] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 263.446298][T15580] netlink: 'syz.0.4200': attribute type 13 has an invalid length. [ 263.621527][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.629292][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.781959][T15580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.938538][T15580] hsr0: left allmulticast mode [ 263.944684][T15580] hsr_slave_0: left allmulticast mode [ 263.951128][T15580] hsr_slave_1: left allmulticast mode [ 263.979656][T15599] veth1_vlan: left allmulticast mode [ 264.007534][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.044431][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.065984][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.085368][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.112378][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.121474][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.138670][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.154805][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4214'. [ 264.173124][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4214'. [ 264.179345][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.261337][T15622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 264.291321][T15622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 264.530715][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 264.540932][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4228'. [ 264.558144][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 264.587491][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4228'. [ 264.748334][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 265.651860][T15691] netlink: 'syz.3.4244': attribute type 1 has an invalid length. [ 265.659817][T15691] netlink: 'syz.3.4244': attribute type 4 has an invalid length. [ 267.329569][T15785] __nla_validate_parse: 3 callbacks suppressed [ 267.329589][T15785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4280'. [ 267.428698][T15789] netlink: 'syz.0.4283': attribute type 1 has an invalid length. [ 267.457300][T15789] netlink: 'syz.0.4283': attribute type 2 has an invalid length. [ 267.625650][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 267.660856][T15805] chnl_net:caif_netlink_parms(): no params data found [ 268.586199][T15870] netlink: 'syz.3.4318': attribute type 1 has an invalid length. [ 268.658490][T15870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.699026][T15875] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 268.726575][T15875] bond3: (slave batadv1): making interface the new active one [ 268.744769][T15875] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 269.002144][T15898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4324'. [ 271.856549][T16056] netlink: 'syz.1.4391': attribute type 1 has an invalid length. [ 271.864476][T16056] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4391'. [ 271.873624][T16056] netlink: 'syz.1.4391': attribute type 2 has an invalid length. [ 271.881351][T16056] netlink: 'syz.1.4391': attribute type 1 has an invalid length. [ 272.000419][T16062] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4394'. [ 272.069395][T16069] netlink: 'syz.0.4397': attribute type 1 has an invalid length. [ 272.078025][T16069] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4397'. [ 272.261926][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 272.929985][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'. [ 273.269435][T16112] syzkaller1: entered promiscuous mode [ 273.279113][T16112] syzkaller1: entered allmulticast mode [ 273.452390][T16121] veth0: entered promiscuous mode [ 273.483557][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4418'. [ 273.521544][T16121] veth0 (unregistering): left promiscuous mode [ 273.658918][T16131] ================================================================== [ 273.667019][T16131] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 273.674936][T16131] Read of size 1 at addr ffff88807542edb0 by task syz.1.4423/16131 [ 273.682835][T16131] [ 273.685185][T16131] CPU: 0 UID: 0 PID: 16131 Comm: syz.1.4423 Not tainted syzkaller #0 PREEMPT(full) [ 273.685211][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.685227][T16131] Call Trace: [ 273.685239][T16131] [ 273.685248][T16131] dump_stack_lvl+0x189/0x250 [ 273.685283][T16131] ? __kasan_check_byte+0x12/0x40 [ 273.685308][T16131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.685328][T16131] ? lock_release+0x4b/0x3e0 [ 273.685356][T16131] ? __virt_addr_valid+0x4a5/0x5c0 [ 273.685379][T16131] print_report+0xca/0x240 [ 273.685406][T16131] ? xfrm_state_find+0x2cf2/0x5400 [ 273.685428][T16131] kasan_report+0x118/0x150 [ 273.685452][T16131] ? xfrm_state_find+0x2cf2/0x5400 [ 273.685479][T16131] xfrm_state_find+0x2cf2/0x5400 [ 273.685500][T16131] ? unwind_get_return_address+0x4d/0x90 [ 273.685519][T16131] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.685557][T16131] ? xfrm_state_find+0x1da/0x5400 [ 273.685583][T16131] ? __pfx_xfrm_state_find+0x10/0x10 [ 273.685609][T16131] ? trace_fib_table_lookup+0x85/0x200 [ 273.685637][T16131] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 273.685679][T16131] ? fib_rules_lookup+0xc55/0xe90 [ 273.685702][T16131] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 273.685730][T16131] ? __lock_acquire+0xab9/0xd20 [ 273.685763][T16131] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 273.685798][T16131] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 273.685827][T16131] ? xfrm_expand_policies+0x41f/0x6a0 [ 273.685857][T16131] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 273.685889][T16131] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 273.685915][T16131] ? rcuref_put+0x1b7/0x210 [ 273.685938][T16131] ? __pfx_rcuref_put+0x10/0x10 [ 273.685961][T16131] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 273.685990][T16131] xfrm_lookup_route+0x3c/0x1c0 [ 273.686019][T16131] __ip4_datagram_connect+0x9a5/0x1270 [ 273.686055][T16131] __ip6_datagram_connect+0x9f0/0x1150 [ 273.686079][T16131] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 273.686098][T16131] ? __local_bh_enable_ip+0x12d/0x1c0 [ 273.686124][T16131] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.686156][T16131] ip6_datagram_connect_v6_only+0x63/0xa0 [ 273.686177][T16131] __sys_connect+0x316/0x440 [ 273.686197][T16131] ? __pfx___sys_connect+0x10/0x10 [ 273.686228][T16131] __x64_sys_connect+0x7a/0x90 [ 273.686247][T16131] do_syscall_64+0xfa/0x3b0 [ 273.686263][T16131] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.686289][T16131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.686305][T16131] ? clear_bhb_loop+0x60/0xb0 [ 273.686325][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.686342][T16131] RIP: 0033:0x7f289e18eec9 [ 273.686358][T16131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.686374][T16131] RSP: 002b:00007f289f015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 273.686399][T16131] RAX: ffffffffffffffda RBX: 00007f289e3e5fa0 RCX: 00007f289e18eec9 [ 273.686412][T16131] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 273.686424][T16131] RBP: 00007f289e211f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.686435][T16131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.686445][T16131] R13: 00007f289e3e6038 R14: 00007f289e3e5fa0 R15: 00007fff88089928 [ 273.686468][T16131] [ 273.686474][T16131] [ 274.008771][T16131] Allocated by task 12882: [ 274.013179][T16131] kasan_save_track+0x3e/0x80 [ 274.017856][T16131] __kasan_slab_alloc+0x6c/0x80 [ 274.022701][T16131] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 274.028152][T16131] xfrm_state_alloc+0x24/0x2f0 [ 274.032919][T16131] __find_acq_core+0x8a7/0x1c00 [ 274.037801][T16131] xfrm_find_acq+0x78/0xa0 [ 274.042223][T16131] xfrm_alloc_userspi+0x6b3/0xc90 [ 274.047239][T16131] xfrm_user_rcv_msg+0x7a0/0xab0 [ 274.052177][T16131] netlink_rcv_skb+0x208/0x470 [ 274.056933][T16131] xfrm_netlink_rcv+0x79/0x90 [ 274.061635][T16131] netlink_unicast+0x82c/0x9e0 [ 274.066419][T16131] netlink_sendmsg+0x805/0xb30 [ 274.071184][T16131] __sock_sendmsg+0x21c/0x270 [ 274.075881][T16131] ____sys_sendmsg+0x505/0x830 [ 274.080646][T16131] ___sys_sendmsg+0x21f/0x2a0 [ 274.085319][T16131] __x64_sys_sendmsg+0x19b/0x260 [ 274.090295][T16131] do_syscall_64+0xfa/0x3b0 [ 274.094790][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.100672][T16131] [ 274.102987][T16131] Freed by task 979: [ 274.106865][T16131] kasan_save_track+0x3e/0x80 [ 274.111534][T16131] kasan_save_free_info+0x46/0x50 [ 274.116546][T16131] __kasan_slab_free+0x5b/0x80 [ 274.121302][T16131] kmem_cache_free+0x18f/0x400 [ 274.126082][T16131] xfrm_state_gc_task+0x52d/0x6b0 [ 274.131120][T16131] process_scheduled_works+0xae1/0x17b0 [ 274.136666][T16131] worker_thread+0x8a0/0xda0 [ 274.141251][T16131] kthread+0x70e/0x8a0 [ 274.145312][T16131] ret_from_fork+0x439/0x7d0 [ 274.149893][T16131] ret_from_fork_asm+0x1a/0x30 [ 274.154649][T16131] [ 274.156967][T16131] The buggy address belongs to the object at ffff88807542ea80 [ 274.156967][T16131] which belongs to the cache xfrm_state of size 928 [ 274.170966][T16131] The buggy address is located 816 bytes inside of [ 274.170966][T16131] freed 928-byte region [ffff88807542ea80, ffff88807542ee20) [ 274.184759][T16131] [ 274.187083][T16131] The buggy address belongs to the physical page: [ 274.193500][T16131] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807542ea80 pfn:0x7542c [ 274.203555][T16131] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 274.212060][T16131] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 274.219602][T16131] page_type: f5(slab) [ 274.223578][T16131] raw: 00fff00000000040 ffff8880206aea00 dead000000000122 0000000000000000 [ 274.232157][T16131] raw: ffff88807542ea80 00000000800f0008 00000000f5000000 0000000000000000 [ 274.240737][T16131] head: 00fff00000000040 ffff8880206aea00 dead000000000122 0000000000000000 [ 274.249399][T16131] head: ffff88807542ea80 00000000800f0008 00000000f5000000 0000000000000000 [ 274.258096][T16131] head: 00fff00000000002 ffffea0001d50b01 00000000ffffffff 00000000ffffffff [ 274.266755][T16131] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 274.275499][T16131] page dumped because: kasan: bad access detected [ 274.281916][T16131] page_owner tracks the page as allocated [ 274.287618][T16131] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8841, tgid 8840 (syz.2.1301), ts 141077780822, free_ts 140902814116 [ 274.306882][T16131] post_alloc_hook+0x240/0x2a0 [ 274.311646][T16131] get_page_from_freelist+0x21e4/0x22c0 [ 274.317189][T16131] __alloc_frozen_pages_noprof+0x181/0x370 [ 274.322994][T16131] alloc_pages_mpol+0x232/0x4a0 [ 274.327838][T16131] allocate_slab+0x8a/0x370 [ 274.332329][T16131] ___slab_alloc+0xbeb/0x1420 [ 274.337000][T16131] kmem_cache_alloc_noprof+0x283/0x3c0 [ 274.342455][T16131] xfrm_state_alloc+0x24/0x2f0 [ 274.347238][T16131] xfrm_add_sa+0x17d1/0x4070 [ 274.351835][T16131] xfrm_user_rcv_msg+0x7a0/0xab0 [ 274.356792][T16131] netlink_rcv_skb+0x208/0x470 [ 274.361570][T16131] xfrm_netlink_rcv+0x79/0x90 [ 274.366249][T16131] netlink_unicast+0x82c/0x9e0 [ 274.371038][T16131] netlink_sendmsg+0x805/0xb30 [ 274.375792][T16131] __sock_sendmsg+0x21c/0x270 [ 274.380464][T16131] ____sys_sendmsg+0x505/0x830 [ 274.385221][T16131] page last free pid 5876 tgid 5876 stack trace: [ 274.391541][T16131] __free_frozen_pages+0xbc4/0xd30 [ 274.396655][T16131] __slab_free+0x303/0x3c0 [ 274.401071][T16131] qlist_free_all+0x97/0x140 [ 274.405691][T16131] kasan_quarantine_reduce+0x148/0x160 [ 274.411143][T16131] __kasan_slab_alloc+0x22/0x80 [ 274.415988][T16131] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 274.421444][T16131] getname_flags+0xb8/0x540 [ 274.425944][T16131] __x64_sys_unlinkat+0xac/0xf0 [ 274.430791][T16131] do_syscall_64+0xfa/0x3b0 [ 274.435301][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.441210][T16131] [ 274.443538][T16131] Memory state around the buggy address: [ 274.449160][T16131] ffff88807542ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.457213][T16131] ffff88807542ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.465271][T16131] >ffff88807542ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.473324][T16131] ^ [ 274.478946][T16131] ffff88807542ee00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 274.487001][T16131] ffff88807542ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 274.495049][T16131] ================================================================== [ 274.582959][T16131] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 274.590283][T16131] CPU: 1 UID: 0 PID: 16131 Comm: syz.1.4423 Not tainted syzkaller #0 PREEMPT(full) [ 274.599666][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.609736][T16131] Call Trace: [ 274.613028][T16131] [ 274.615965][T16131] dump_stack_lvl+0x99/0x250 [ 274.620570][T16131] ? __asan_memcpy+0x40/0x70 [ 274.625167][T16131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.630377][T16131] ? __pfx__printk+0x10/0x10 [ 274.634987][T16131] vpanic+0x281/0x750 [ 274.638976][T16131] ? preempt_schedule+0xae/0xc0 [ 274.643844][T16131] ? __pfx_vpanic+0x10/0x10 [ 274.648361][T16131] ? preempt_schedule_common+0x83/0xd0 [ 274.653840][T16131] ? preempt_schedule+0xae/0xc0 [ 274.658707][T16131] ? __pfx_preempt_schedule+0x10/0x10 [ 274.664123][T16131] panic+0xb9/0xc0 [ 274.667858][T16131] ? __pfx_panic+0x10/0x10 [ 274.672287][T16131] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 274.678206][T16131] ? xfrm_state_find+0x2cf2/0x5400 [ 274.683350][T16131] check_panic_on_warn+0x89/0xb0 [ 274.688312][T16131] ? xfrm_state_find+0x2cf2/0x5400 [ 274.693437][T16131] end_report+0x78/0x160 [ 274.697696][T16131] kasan_report+0x129/0x150 [ 274.702233][T16131] ? xfrm_state_find+0x2cf2/0x5400 [ 274.707372][T16131] xfrm_state_find+0x2cf2/0x5400 [ 274.712311][T16131] ? unwind_get_return_address+0x4d/0x90 [ 274.717939][T16131] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.724102][T16131] ? xfrm_state_find+0x1da/0x5400 [ 274.729132][T16131] ? __pfx_xfrm_state_find+0x10/0x10 [ 274.734439][T16131] ? trace_fib_table_lookup+0x85/0x200 [ 274.739900][T16131] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 274.746063][T16131] ? fib_rules_lookup+0xc55/0xe90 [ 274.751085][T16131] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 274.757671][T16131] ? __lock_acquire+0xab9/0xd20 [ 274.762531][T16131] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 274.767908][T16131] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 274.773280][T16131] ? xfrm_expand_policies+0x41f/0x6a0 [ 274.778684][T16131] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 274.784065][T16131] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 274.789872][T16131] ? rcuref_put+0x1b7/0x210 [ 274.794376][T16131] ? __pfx_rcuref_put+0x10/0x10 [ 274.799233][T16131] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 274.804616][T16131] xfrm_lookup_route+0x3c/0x1c0 [ 274.809470][T16131] __ip4_datagram_connect+0x9a5/0x1270 [ 274.814937][T16131] __ip6_datagram_connect+0x9f0/0x1150 [ 274.820393][T16131] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 274.826283][T16131] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.831656][T16131] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.837376][T16131] ip6_datagram_connect_v6_only+0x63/0xa0 [ 274.843122][T16131] __sys_connect+0x316/0x440 [ 274.847719][T16131] ? __pfx___sys_connect+0x10/0x10 [ 274.852852][T16131] __x64_sys_connect+0x7a/0x90 [ 274.857608][T16131] do_syscall_64+0xfa/0x3b0 [ 274.862100][T16131] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.867300][T16131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.873359][T16131] ? clear_bhb_loop+0x60/0xb0 [ 274.878031][T16131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.883916][T16131] RIP: 0033:0x7f289e18eec9 [ 274.888343][T16131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.907963][T16131] RSP: 002b:00007f289f015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 274.916375][T16131] RAX: ffffffffffffffda RBX: 00007f289e3e5fa0 RCX: 00007f289e18eec9 [ 274.924365][T16131] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 274.932329][T16131] RBP: 00007f289e211f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.940292][T16131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.948255][T16131] R13: 00007f289e3e6038 R14: 00007f289e3e5fa0 R15: 00007fff88089928 [ 274.956237][T16131] [ 274.959618][T16131] Kernel Offset: disabled [ 274.963937][T16131] Rebooting in 86400 seconds..