last executing test programs: 2.066699335s ago: executing program 2 (id=6521): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.717252978s ago: executing program 4 (id=6526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef010101000000000000000000"], 0x38}}, 0x0) 1.647161518s ago: executing program 2 (id=6527): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.450163878s ago: executing program 4 (id=6530): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000054c0)=""/29, 0x1d}, 0x698}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xfe, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.409082603s ago: executing program 2 (id=6531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000540), &(0x7f0000000740)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000eb40000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r0}, 0xc) 1.252662624s ago: executing program 0 (id=6533): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f00000002c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 1.245217623s ago: executing program 4 (id=6534): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000b80)=0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x10001) write(r0, 0x0, 0x0) 1.208350289s ago: executing program 2 (id=6535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in6=@private2, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) 1.008492807s ago: executing program 2 (id=6538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 926.575348ms ago: executing program 1 (id=6539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x366, 0x10, &(0x7f00000003c0), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b40)={0x4, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) 921.786056ms ago: executing program 3 (id=6540): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r0, &(0x7f0000000240)={0x2, 0x0, @empty, 0x5}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r1, 0x0) 833.945866ms ago: executing program 2 (id=6541): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_hsr\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 826.329261ms ago: executing program 4 (id=6542): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='S', 0x1}], 0x1}, 0x0) 726.839789ms ago: executing program 3 (id=6543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) 725.576265ms ago: executing program 1 (id=6544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 719.617075ms ago: executing program 0 (id=6545): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0xffffffffffffffff) 700.956221ms ago: executing program 3 (id=6546): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000700)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r0, &(0x7f0000000c80)=""/4038, 0xfc6, 0x40020100, 0x0, 0x0) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001cc0)='x', 0x1}], 0x1) 591.996599ms ago: executing program 4 (id=6547): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) close(0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 591.767437ms ago: executing program 1 (id=6548): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) 537.193646ms ago: executing program 3 (id=6549): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000076c0)={0x11, 0x13, &(0x7f0000007780)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000007840)='GPL\x00', 0xa, 0xff5c, &(0x7f0000007880)=""/222, 0x0, 0x8}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007980)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000079c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_ifreq(r0, 0x8971, &(0x7f0000000440)={'dummy0\x00', @ifru_mtu=0xe897}) 536.449232ms ago: executing program 0 (id=6559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 306.211107ms ago: executing program 0 (id=6550): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 281.492609ms ago: executing program 1 (id=6551): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="b70200000e000000b703000000000000850000002b000000b70000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)={@map=r2, r3, 0x26, 0x0, 0x0, @void, @value=0x0}, 0x30) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r2, &(0x7f00000014c0), &(0x7f0000001500)=@tcp=r0}, 0x20) write(r1, &(0x7f0000001540)='abcdefgh', 0x34000) 170.498258ms ago: executing program 1 (id=6552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 169.723993ms ago: executing program 0 (id=6553): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0xfc, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa0}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000500)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 169.58535ms ago: executing program 4 (id=6554): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xfb, 0xa4, 0xfd, 0x0, 0x0, 0x1, 0x28, 0x0, 0x0, 0x7, 0xf7}, 0xe) 71.387044ms ago: executing program 3 (id=6555): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000280)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/17, 0x11}, 0x2}], 0x1, 0x10102, 0x0) 47.512971ms ago: executing program 1 (id=6556): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x44434241, r1, 0x0, 0x0, 0x5, 0x12, 0x1000}}}}}}, 0x0) 17.928262ms ago: executing program 0 (id=6557): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001180)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000011c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/47, 0x2f}, {&(0x7f00000012c0)=""/99, 0x63}], 0x2}, 0x2}], 0x1, 0x100, 0x0) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f0000001500), 0x4ff, 0x0) 0s ago: executing program 3 (id=6558): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0xa, 0xa, 0x1, @mcast1}, 0x1c, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_int(r1, 0x1, 0x3c, 0x0, &(0x7f0000000640)) kernel console output (not intermixed with test programs): 98.977441][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.286'. [ 99.319868][ T6541] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 99.614777][ T6550] netlink: 84 bytes leftover after parsing attributes in process `syz.4.300'. [ 99.865934][ T6569] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 100.582043][ T6618] xt_hashlimit: size too large, truncated to 1048576 [ 100.582221][ T6618] xt_hashlimit: max too large, truncated to 1048576 [ 100.582302][ T6618] xt_hashlimit: Unknown mode mask 310A303D, kernel too old? [ 100.898137][ T1126] IPVS: starting estimator thread 0... [ 100.936582][ T6636] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.989579][ T6638] IPVS: using max 34 ests per chain, 81600 per kthread [ 101.142261][ T6653] netlink: 'syz.3.344': attribute type 8 has an invalid length. [ 101.295442][ T6661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.242422][ T6728] xt_hashlimit: size too large, truncated to 1048576 [ 102.317146][ T6729] xt_hashlimit: size too large, truncated to 1048576 [ 102.317311][ T6729] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.423409][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.923725][ T13] IPVS: starting estimator thread 0... [ 102.923839][ T6765] __nla_validate_parse: 7 callbacks suppressed [ 102.923852][ T6765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.397'. [ 103.018437][ T6766] IPVS: using max 31 ests per chain, 74400 per kthread [ 104.013736][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 104.017194][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 104.262307][ T6842] sctp: [Deprecated]: syz.4.432 (pid 6842) Use of int in max_burst socket option. [ 104.262307][ T6842] Use struct sctp_assoc_value instead [ 104.264377][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 104.573657][ T6862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.442'. [ 105.012451][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 105.012480][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 105.576808][ T6918] tun0: tun_chr_ioctl cmd 1074812118 [ 105.722571][ T6930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.474'. [ 105.822961][ T6934] netlink: 1 bytes leftover after parsing attributes in process `syz.4.479'. [ 106.225197][ T6965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.844443][ T7002] netlink: 'syz.0.509': attribute type 12 has an invalid length. [ 107.023359][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 107.472154][ T7035] tun0: tun_chr_ioctl cmd 1074812117 [ 107.752025][ T7053] sctp: [Deprecated]: syz.2.530 (pid 7053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.752025][ T7053] Use struct sctp_sack_info instead [ 108.250493][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 108.496590][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 108.527312][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 108.576860][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 108.968413][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.560'. [ 108.972112][ T7118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.560'. [ 109.112130][ T7125] pim6reg: entered allmulticast mode [ 109.143887][ T7120] pim6reg: left allmulticast mode [ 109.159080][ T5648] block nbd0: Receive control failed (result -107) [ 109.526382][ T7153] netlink: 88 bytes leftover after parsing attributes in process `syz.3.574'. [ 109.526617][ T7153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.574'. [ 110.117084][ T7185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.590'. [ 110.172809][ T7191] blkio.reset_stats is deprecated [ 110.323595][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.596'. [ 110.901348][ T7242] pimreg0: tun_chr_ioctl cmd 1074025677 [ 110.901440][ T7242] pimreg0: linktype set to 823 [ 111.485304][ T7278] netlink: 'syz.0.631': attribute type 3 has an invalid length. [ 111.485325][ T7278] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 112.009978][ T30] audit: type=1804 audit(1794473402.825:2): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.650" name="/newroot/123/cgroup.controllers" dev="tmpfs" ino=641 res=1 errno=0 [ 112.012389][ T30] audit: type=1800 audit(1794473402.825:3): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.650" name="cgroup.controllers" dev="tmpfs" ino=641 res=0 errno=-22 [ 112.016556][ T30] audit: type=1800 audit(1794473402.825:4): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.650" name="cgroup.controllers" dev="tmpfs" ino=641 res=0 errno=-22 [ 112.788259][ T7355] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.345568][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.645395][ T7441] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 114.645417][ T7441] __nla_validate_parse: 10 callbacks suppressed [ 114.645427][ T7441] netlink: 4264 bytes leftover after parsing attributes in process `syz.4.707'. [ 114.645440][ T7441] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 115.061670][ T7463] netlink: 84 bytes leftover after parsing attributes in process `syz.1.717'. [ 115.356576][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 115.886020][ T30] audit: type=1804 audit(1794473406.695:5): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.737" name="/newroot/157/cgroup.controllers" dev="tmpfs" ino=810 res=1 errno=0 [ 115.912201][ T30] audit: type=1800 audit(1794473406.725:6): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.737" name="cgroup.controllers" dev="tmpfs" ino=810 res=0 errno=-22 [ 116.082073][ T7508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.093253][ T7508] bond0: (slave bond1): Enslaving as an active interface with an up link [ 120.235657][ T7620] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 120.401667][ T7635] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 120.401688][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.797'. [ 121.795641][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 121.795676][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 121.795724][ T7691] netlink: 780 bytes leftover after parsing attributes in process `syz.0.821'. [ 122.012502][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 123.542495][ T7752] netlink: 'syz.3.848': attribute type 3 has an invalid length. [ 123.542518][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 123.800374][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.800417][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.800446][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.800472][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.805019][ T7768] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.700842][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 124.700868][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 124.700931][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 125.049834][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 125.057687][ T7833] ipvlan2: entered allmulticast mode [ 125.057707][ T7833] virt_wifi0: entered allmulticast mode [ 125.060419][ T7833] batman_adv: batadv0: Adding interface: ipvlan2 [ 125.060433][ T7833] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.060458][ T7833] batman_adv: batadv0: Interface activated: ipvlan2 [ 125.507112][ T7852] __nla_validate_parse: 1 callbacks suppressed [ 125.507130][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 125.507156][ T7852] netlink: 'syz.2.898': attribute type 30 has an invalid length. [ 125.514309][ T7852] vxlan1: entered promiscuous mode [ 125.514330][ T7852] vxlan1: entered allmulticast mode [ 125.560308][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'. [ 125.560339][ T7855] netlink: 'syz.2.898': attribute type 30 has an invalid length. [ 125.603168][ T7855] vxlan1: entered promiscuous mode [ 125.603198][ T7855] vxlan1: entered allmulticast mode [ 126.277685][ T7890] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.294458][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 126.370683][ T7895] netlink: 'syz.3.919': attribute type 12 has an invalid length. [ 126.976221][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 126.976243][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 126.976266][ T7927] netlink: 'syz.3.933': attribute type 18 has an invalid length. [ 127.026977][ T1126] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 127.027288][ T1126] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 127.027340][ T1126] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 127.027368][ T1126] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 127.767463][ T7972] sctp: [Deprecated]: syz.1.955 (pid 7972) Use of int in maxseg socket option. [ 127.767463][ T7972] Use struct sctp_assoc_value instead [ 128.224199][ T8002] IPv6: addrconf: prefix option has invalid lifetime [ 128.440903][ T8010] netlink: 104 bytes leftover after parsing attributes in process `syz.0.973'. [ 128.535586][ T8012] sctp: [Deprecated]: syz.1.974 (pid 8012) Use of int in max_burst socket option. [ 128.535586][ T8012] Use struct sctp_assoc_value instead [ 129.041367][ T8033] netlink: 'syz.3.984': attribute type 1 has an invalid length. [ 129.205028][ T8037] bond1 (unregistering): Released all slaves [ 129.611433][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'. [ 129.821598][ T8069] pimreg0: tun_chr_ioctl cmd 1074025677 [ 129.821703][ T8069] pimreg0: linktype set to 776 [ 129.917443][ T8075] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1005'. [ 129.917521][ T8075] netlink: 'syz.4.1005': attribute type 9 has an invalid length. [ 129.917534][ T8075] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 130.429187][ T8107] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 130.429210][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'. [ 130.844586][ T8133] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1031'. [ 130.844610][ T8133] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1031'. [ 131.484628][ T8170] pim6reg: entered allmulticast mode [ 131.499555][ T8170] pim6reg: left allmulticast mode [ 131.567209][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 131.597071][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 131.748499][ T8179] sctp: [Deprecated]: syz.2.1057 (pid 8179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.748499][ T8179] Use struct sctp_sack_info instead [ 131.862130][ T8185] pimreg1: tun_chr_ioctl cmd 1074025677 [ 131.862235][ T8185] pimreg1: linktype set to 270 [ 132.170512][ T8211] netlink: 'syz.3.1066': attribute type 11 has an invalid length. [ 132.332984][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 132.457482][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'. [ 132.457507][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'. [ 132.473707][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1071'. [ 132.473730][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'. [ 132.940667][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940721][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.425075][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 133.795264][ T30] audit: type=1804 audit(1794473424.605:7): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1104" name="/newroot/235/cgroup.controllers" dev="tmpfs" ino=1206 res=1 errno=0 [ 133.796458][ T30] audit: type=1800 audit(1794473424.605:8): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1104" name="cgroup.controllers" dev="tmpfs" ino=1206 res=0 errno=-22 [ 133.801137][ T30] audit: type=1804 audit(1794473424.605:9): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1104" name="/newroot/235/cgroup.controllers" dev="tmpfs" ino=1206 res=1 errno=0 [ 134.100454][ T8309] netlink: 'syz.0.1112': attribute type 2 has an invalid length. [ 134.102065][ T8309] sctp: [Deprecated]: syz.0.1112 (pid 8309) Use of int in max_burst socket option. [ 134.102065][ T8309] Use struct sctp_assoc_value instead [ 134.647102][ T8339] ip_tables: iptables: counters copy to user failed while replacing table [ 134.762404][ T8191] udevd[8191]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 134.799451][ T8191] udevd[8191]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 136.111501][ T8418] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 136.111524][ T8418] __nla_validate_parse: 7 callbacks suppressed [ 136.111534][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 136.352167][ T30] audit: type=1804 audit(1794473427.165:10): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1170" name="/newroot/227/cgroup.controllers" dev="tmpfs" ino=1161 res=1 errno=0 [ 136.352390][ T30] audit: type=1800 audit(1794473427.165:11): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1170" name="cgroup.controllers" dev="tmpfs" ino=1161 res=0 errno=-22 [ 136.354539][ T30] audit: type=1800 audit(1794473427.165:12): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1170" name="cgroup.controllers" dev="tmpfs" ino=1161 res=0 errno=-22 [ 136.547113][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 136.703166][ T8447] batman_adv: batadv0: Adding interface: ipvlan2 [ 136.703183][ T8447] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.703206][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.703221][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.703232][ T8447] batman_adv: batadv0: Interface activated: ipvlan2 [ 137.184656][ T8472] tun0: tun_chr_ioctl cmd 2148553947 [ 137.694408][ T8476] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 138.263623][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1207'. [ 138.263647][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1207'. [ 138.263660][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1207'. [ 138.535507][ T8536] netpci0: tun_chr_ioctl cmd 1074025678 [ 138.535530][ T8536] netpci0: group set to 0 [ 139.031181][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1230'. [ 139.031215][ T8567] netlink: 'syz.1.1230': attribute type 7 has an invalid length. [ 139.031227][ T8567] netlink: 'syz.1.1230': attribute type 8 has an invalid length. [ 139.031237][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 139.127802][ T8570] Bluetooth: MGMT ver 1.23 [ 139.350397][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1238'. [ 139.467166][ T8592] netlink: 'syz.1.1242': attribute type 4 has an invalid length. [ 139.467628][ T8592] netlink: 'syz.1.1242': attribute type 4 has an invalid length. [ 139.914308][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1258'. [ 140.027088][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'. [ 141.079691][ T8689] batman_adv: batadv0: Adding interface: macvtap1 [ 141.079709][ T8689] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.079731][ T8689] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 141.416257][ T8703] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 141.416280][ T8703] __nla_validate_parse: 2 callbacks suppressed [ 141.416291][ T8703] netlink: 4264 bytes leftover after parsing attributes in process `syz.0.1293'. [ 141.416304][ T8703] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 141.490522][ T8706] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 141.490543][ T8706] nbd: error processing sock list [ 141.490907][ T8706] block nbd1: shutting down sockets [ 142.062882][ T8737] sctp: [Deprecated]: syz.0.1308 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.062882][ T8737] Use struct sctp_sack_info instead [ 142.106127][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1309'. [ 142.285538][ T8747] netlink: 'syz.1.1313': attribute type 11 has an invalid length. [ 143.068555][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 143.147172][ T8800] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1337'. [ 143.249133][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 143.503493][ T8815] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.1345'. [ 144.122446][ T8849] veth0_to_bridge: entered promiscuous mode [ 144.122576][ T8849] macsec1: entered allmulticast mode [ 144.122589][ T8849] veth0_to_bridge: entered allmulticast mode [ 144.151947][ T8849] veth0_to_bridge: left allmulticast mode [ 144.151975][ T8849] veth0_to_bridge: left promiscuous mode [ 144.952238][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.136310][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1387'. [ 146.257770][ T8970] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1418'. [ 146.513401][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 147.162080][ T9011] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1436'. [ 147.615241][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 148.055292][ T9051] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.056245][ T9051] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.238712][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1457'. [ 149.210541][ T9105] 8021q: VLANs not supported on gre0 [ 149.527631][ T13] IPVS: starting estimator thread 0... [ 149.608176][ T9120] IPVS: using max 31 ests per chain, 74400 per kthread [ 149.791985][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 150.137950][ T9154] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1501'. [ 150.774162][ T9195] tipc: Started in network mode [ 150.774192][ T9195] tipc: Node identity ac14140f, cluster identity 4711 [ 150.774435][ T9195] tipc: New replicast peer: 255.255.255.255 [ 150.775237][ T9195] tipc: Enabled bearer , priority 10 [ 150.899263][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 150.929005][ T30] audit: type=1804 audit(1794473441.745:13): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1524" name="/newroot/306/cgroup.controllers" dev="tmpfs" ino=1560 res=1 errno=0 [ 150.929051][ T30] audit: type=1800 audit(1794473441.745:14): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1524" name="cgroup.controllers" dev="tmpfs" ino=1560 res=0 errno=-22 [ 151.251905][ T9228] pimreg0: tun_chr_ioctl cmd 1074025677 [ 151.252005][ T9228] pimreg0: linktype set to 768 [ 151.709823][ T9250] : option downdelay: invalid value (18446744073709547007) [ 151.709840][ T9250] : option downdelay: allowed values 0 - 2147483647 [ 151.715612][ T9250]  (unregistering): Released all slaves [ 151.889309][ T5777] tipc: Node number set to 2886997007 [ 152.522706][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 153.169396][ T9352] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 153.257944][ T5787] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 153.262134][ T9360] macsec1: entered allmulticast mode [ 153.262159][ T9360] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 153.265413][ T9360] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 153.271066][ T9360] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 153.310494][ T5787] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 153.722508][ T9386] : renamed from bond0 (while UP) [ 153.936446][ T9402] sctp: [Deprecated]: syz.2.1615 (pid 9402) Use of int in max_burst socket option. [ 153.936446][ T9402] Use struct sctp_assoc_value instead [ 154.793887][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 154.793913][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 155.036644][ T9474] tipc: Enabling of bearer rejected, already enabled [ 155.190968][ T9486] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1655'. [ 155.387034][ T9500] IPVS: ip_vs_add_dest(): tunnel port is zero [ 155.387189][ T9492] pimreg1: tun_chr_ioctl cmd 1074025677 [ 155.387295][ T9492] pimreg1: linktype set to 6 [ 155.627529][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 155.930031][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 155.930648][ T9535] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1678'. [ 156.023604][ T5648] Bluetooth: hci2: ISO packet for unknown connection handle 3684 [ 156.431743][ T9561] erspan0: entered promiscuous mode [ 156.865272][ T9580] bond1: ARP target 9.0.0.0 is already present [ 156.865296][ T9580] bond1: option arp_ip_target: invalid value (9) [ 156.943011][ T9580] bond1 (unregistering): Released all slaves [ 157.246705][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1704'. [ 157.627664][ T9603] sctp: [Deprecated]: syz.4.1708 (pid 9603) Use of int in max_burst socket option. [ 157.627664][ T9603] Use struct sctp_assoc_value instead [ 157.642110][ T9606] pimreg0: tun_chr_ioctl cmd 1074025677 [ 157.642208][ T9606] pimreg0: linktype set to 774 [ 157.883488][ T9620] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1718'. [ 160.665601][ T9798] netlink: 'syz.2.1801': attribute type 1 has an invalid length. [ 160.665622][ T9798] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1801'. [ 160.841775][ T9811] ip_tables: iptables: counters copy to user failed while replacing table [ 160.904617][ T9816] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1809'. [ 161.211218][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 161.243441][ T9832] vlan0: entered allmulticast mode [ 161.243464][ T9832] macsec0: entered allmulticast mode [ 161.243475][ T9832] veth1_macvtap: entered allmulticast mode [ 161.246246][ T9832] batman_adv: batadv0: Adding interface: vlan0 [ 161.246261][ T9832] batman_adv: batadv0: The MTU of interface vlan0 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.246284][ T9832] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 161.611111][ T9848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1824'. [ 162.606985][ T9905] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 162.607008][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 164.106821][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 164.308598][ T9996] xt_hashlimit: size too large, truncated to 1048576 [ 164.367040][T10000] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1880'. [ 164.367208][T10000] 0猉功D龌: renamed from gretap0 (while UP) [ 164.400204][T10000] 0猉功D龌: entered allmulticast mode [ 164.542804][ T43] IPVS: starting estimator thread 0... [ 164.648139][T10012] IPVS: using max 30 ests per chain, 72000 per kthread [ 164.695462][T10021] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 164.908514][T10035] ip6gre1: entered promiscuous mode [ 164.908529][T10035] ip6gre1: entered allmulticast mode [ 164.911634][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.911780][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.938601][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 164.976572][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 164.976586][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 164.976602][T10037] netlink: 'syz.3.1897': attribute type 19 has an invalid length. [ 164.976613][T10037] netlink: 'syz.3.1897': attribute type 20 has an invalid length. [ 164.987320][ T43] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 164.989756][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 164.989774][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 164.989797][T10037] netlink: 'syz.3.1897': attribute type 19 has an invalid length. [ 164.989808][T10037] netlink: 'syz.3.1897': attribute type 20 has an invalid length. [ 165.001022][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.001625][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.001655][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.207078][T10047] block nbd1: Unsupported socket: should be TCP or UNIX. [ 165.348254][ T3111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.540470][T10063] netlink: 'syz.4.1907': attribute type 14 has an invalid length. [ 165.738610][ T3111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.842769][T10081] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1916'. [ 165.847712][T10083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 165.847776][T10083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 165.877461][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'. [ 165.878153][ T5648] block nbd1: Receive control failed (result -32) [ 166.131732][T10099] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1922'. [ 166.202018][T10104] netlink: 'syz.4.1927': attribute type 12 has an invalid length. [ 166.202039][T10104] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 166.202050][T10104] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1927'. [ 166.632622][T10124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.635322][T10124] bond0: (slave bond1): Enslaving as an active interface with an up link [ 166.939143][ T13] wlan1: Trigger new scan to find an IBSS to join [ 168.219928][T10224] netlink: 'syz.0.1982': attribute type 39 has an invalid length. [ 168.707397][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.708245][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.938302][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.212787][T10264] __nla_validate_parse: 3 callbacks suppressed [ 169.212807][T10264] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2002'. [ 169.412541][T10274] netlink: 'syz.3.2006': attribute type 9 has an invalid length. [ 169.412563][T10274] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2006'. [ 169.826718][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 169.983075][ T51] wlan1: Trigger new scan to find an IBSS to join [ 170.864558][T10371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2050'. [ 171.034101][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 171.050308][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2055'. [ 171.626542][T10422] nbd2: detected capacity change from 0 to 63 [ 171.636850][ T5648] block nbd2: Receive control failed (result -104) [ 171.873896][T10439] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2081'. [ 172.930292][T10509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.018435][ T51] wlan1: Trigger new scan to find an IBSS to join [ 173.725376][T10532] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2121'. [ 173.752913][T10532] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2121'. [ 173.865913][T10534] sctp: [Deprecated]: syz.3.2122 (pid 10534) Use of int in maxseg socket option. [ 173.865913][T10534] Use struct sctp_assoc_value instead [ 173.896322][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'. [ 173.954503][ T189] wlan1: Creating new IBSS network, BSSID f2:b2:4f:f2:24:27 [ 174.107068][T10559] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.121294][T10559] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.395982][T10644] __nla_validate_parse: 1 callbacks suppressed [ 175.396003][T10644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2168'. [ 177.098261][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.990248][T10797] netlink: 'syz.1.2230': attribute type 11 has an invalid length. [ 178.033153][T10795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 178.379774][ T1999] block nbd2: Connection timed out, retrying (0/1 alive) [ 178.380093][ T1999] block nbd2: Connection timed out, retrying (0/1 alive) [ 178.380141][ T1999] block nbd2: Connection timed out, retrying (0/1 alive) [ 178.380180][ T1999] block nbd2: Connection timed out, retrying (0/1 alive) [ 178.380435][ T1999] block nbd2: Dead connection, failed to find a fallback [ 178.380448][ T1999] block nbd2: shutting down sockets [ 178.380510][ T1999] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.380584][ T1999] Buffer I/O error on dev nbd2, logical block 3, async page read [ 178.381739][ T1999] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.381766][ T1999] Buffer I/O error on dev nbd2, logical block 2, async page read [ 178.381788][ T1999] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.381807][ T1999] Buffer I/O error on dev nbd2, logical block 1, async page read [ 178.381826][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 178.381845][ T1999] Buffer I/O error on dev nbd2, logical block 0, async page read [ 178.382601][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.382626][ T1999] Buffer I/O error on dev nbd2, logical block 0, async page read [ 178.382649][ T1999] Buffer I/O error on dev nbd2, logical block 1, async page read [ 178.382662][ T1999] Buffer I/O error on dev nbd2, logical block 2, async page read [ 178.382675][ T1999] Buffer I/O error on dev nbd2, logical block 3, async page read [ 178.383897][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.383921][ T1999] Buffer I/O error on dev nbd2, logical block 0, async page read [ 178.383935][ T1999] Buffer I/O error on dev nbd2, logical block 1, async page read [ 178.385180][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.385380][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.385598][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.386197][ T1999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 178.386817][T10292] ldm_validate_partition_table(): Disk read failed. [ 178.391945][T10292] Dev nbd2: unable to read RDB block 0 [ 178.400612][T10292] nbd2: unable to read partition table [ 178.468756][T10292] ldm_validate_partition_table(): Disk read failed. [ 178.478155][T10292] Dev nbd2: unable to read RDB block 0 [ 178.481579][T10292] nbd2: unable to read partition table [ 179.633458][T10858] netlink: 'syz.2.2258': attribute type 9 has an invalid length. [ 179.725348][T10860] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 180.305443][T10888] ip_tables: iptables: counters copy to user failed while replacing table [ 180.317426][T10888] xt_TCPMSS: Only works on TCP SYN packets [ 180.627262][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2277'. [ 180.713845][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 180.713872][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 180.716304][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 180.716327][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 180.716501][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 180.716599][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2278'. [ 181.353740][ T5648] block nbd3: Receive control failed (result -32) [ 182.756414][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2328'. [ 183.982166][T11076] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2357'. [ 184.065321][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2358'. [ 185.102087][T11126] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 185.348985][T11142] ipvlan3: entered allmulticast mode [ 185.349006][T11142] batadv_slave_0: entered allmulticast mode [ 185.351395][T11142] batman_adv: batadv0: Adding interface: ipvlan3 [ 185.351409][T11142] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.351430][T11142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.351443][T11142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.351455][T11142] batman_adv: batadv0: Interface activated: ipvlan3 [ 186.373477][T11209] netlink: 'syz.0.2421': attribute type 2 has an invalid length. [ 186.390704][T11209] !: entered promiscuous mode [ 186.396824][T11209] __nla_validate_parse: 1 callbacks suppressed [ 186.396843][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 186.396915][T11209] !: left promiscuous mode [ 187.207159][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2445'. [ 187.267417][T11262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2446'. [ 187.313038][T11266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.547690][T11282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2455'. [ 188.330524][T11323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2474'. [ 188.330551][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 188.476069][T11331] netlink: 'syz.1.2480': attribute type 6 has an invalid length. [ 188.850927][T11353] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 188.881750][T11354] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2487'. [ 189.035522][T11365] netlink: 'syz.1.2494': attribute type 8 has an invalid length. [ 189.094033][T11370] netlink: 'syz.0.2496': attribute type 5 has an invalid length. [ 189.442593][T11391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.485601][T11393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2507'. [ 190.725397][T11473] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2542'. [ 190.816289][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 191.012898][T11494] Cannot find set identified by id 0 to match [ 191.135065][T11505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.098231][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.180348][T11591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.376291][T11591] xt_CT: No such helper "syz0" [ 194.030457][T11629] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 194.078143][T11631] block nbd4: not configured, cannot reconfigure [ 194.382332][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.382386][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.841546][T11681] __nla_validate_parse: 1 callbacks suppressed [ 194.841574][T11681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2634'. [ 194.893218][T11683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2635'. [ 194.897697][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 194.897741][T11683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2635'. [ 195.196651][T11700] bond0: entered promiscuous mode [ 195.196672][T11700] bond_slave_0: entered promiscuous mode [ 195.196881][T11700] bond_slave_1: entered promiscuous mode [ 195.197067][T11700] bond1: entered promiscuous mode [ 195.229498][T11700] batadv0: entered promiscuous mode [ 195.243909][T11700] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 196.034142][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.035406][T11753] bridge0: entered allmulticast mode [ 196.077217][T11753] bridge_slave_1: left allmulticast mode [ 196.077257][T11753] bridge_slave_1: left promiscuous mode [ 196.078429][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.126804][T11753] bridge_slave_0: left allmulticast mode [ 196.126834][T11753] bridge_slave_0: left promiscuous mode [ 196.127070][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.368715][T11829] netlink: 'syz.0.2700': attribute type 49 has an invalid length. [ 200.136818][T11938] syzkaller1: entered promiscuous mode [ 200.136846][T11938] syzkaller1: entered allmulticast mode [ 201.266187][T11981] sctp: [Deprecated]: syz.0.2764 (pid 11981) Use of int in maxseg socket option. [ 201.266187][T11981] Use struct sctp_assoc_value instead [ 201.391526][T11993] ip_tables: iptables: counters copy to user failed while replacing table [ 201.584970][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 201.584991][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 201.585018][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 201.585057][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 201.710503][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2777'. [ 201.830470][T12018] ip6tnl1: entered allmulticast mode [ 201.942181][T12022] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2784'. [ 202.003438][T12026] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2783'. [ 202.436607][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 202.515544][T12057] bond0: Invalid ad_actor_system MAC address. [ 202.515566][T12057] bond0: option ad_actor_system: invalid value (7) [ 202.519460][T12057] bond0 (unregistering): Released all slaves [ 202.936498][T12091] netlink: 'syz.3.2814': attribute type 4 has an invalid length. [ 203.082697][T12100] syzkaller1: entered promiscuous mode [ 203.082719][T12100] syzkaller1: entered allmulticast mode [ 203.765624][T12129] sctp: [Deprecated]: syz.0.2829 (pid 12129) Use of int in max_burst socket option. [ 203.765624][T12129] Use struct sctp_assoc_value instead [ 203.797646][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 203.799906][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 203.880004][T12136] syzkaller1: entered promiscuous mode [ 203.880025][T12136] syzkaller1: entered allmulticast mode [ 204.234690][T12155] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 204.927575][T12185] vlan1: entered promiscuous mode [ 204.927596][T12185] bridge0: entered promiscuous mode [ 205.495159][T12213] sctp: [Deprecated]: syz.2.2867 (pid 12213) Use of int in max_burst socket option. [ 205.495159][T12213] Use struct sctp_assoc_value instead [ 205.552542][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2871'. [ 205.686185][T12222] syzkaller1: entered promiscuous mode [ 205.686206][T12222] syzkaller1: entered allmulticast mode [ 205.960899][T12237] tap0: tun_chr_ioctl cmd 1074025677 [ 205.961002][T12237] tap0: linktype set to 780 [ 205.962085][T12237] tap0: tun_chr_ioctl cmd 35108 [ 206.694786][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'. [ 206.731814][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'. [ 206.731841][T12284] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2902'. [ 206.864415][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 206.864449][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 206.899128][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 206.899159][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 206.928220][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 206.928263][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 206.928292][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 206.928320][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 207.441243][T12324] ip_tables: iptables: counters copy to user failed while replacing table [ 209.126871][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 209.126906][T12420] netlink: 'syz.0.2964': attribute type 30 has an invalid length. [ 209.140610][T12420] vxlan1: entered promiscuous mode [ 209.140642][T12420] vxlan1: entered allmulticast mode [ 209.151434][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 209.151481][T12420] netlink: 'syz.0.2964': attribute type 30 has an invalid length. [ 209.165202][T12420] vxlan2: entered promiscuous mode [ 209.165223][T12420] vxlan2: entered allmulticast mode [ 209.178380][ T1126] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.178421][ T1126] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.178450][ T1126] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.178478][ T1126] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.165997][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 210.237190][T12461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2984'. [ 210.315088][T12470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.313161][T12527] bridge0: entered allmulticast mode [ 211.341091][T12527] pim6reg: entered allmulticast mode [ 211.561048][T12541] netlink: 'syz.3.3020': attribute type 5 has an invalid length. [ 212.046037][T12572] __nla_validate_parse: 2 callbacks suppressed [ 212.046057][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3035'. [ 212.272758][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.273421][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.274594][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.277451][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.277812][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.322732][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.333652][T12585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.471172][T12596] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3047'. [ 212.550982][T12601] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 212.661363][T12606] syzkaller1: entered promiscuous mode [ 212.661395][T12606] syzkaller1: entered allmulticast mode [ 212.789471][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.339856][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.384872][T12650] syzkaller1: entered promiscuous mode [ 213.384895][T12650] syzkaller1: entered allmulticast mode [ 213.487586][ T30] audit: type=1800 audit(1794473504.295:15): pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3064" name="memory.events" dev="tmpfs" ino=3036 res=0 errno=-22 [ 213.685762][T12656] IPVS: Scheduler module ip_vs_sip not found [ 214.298410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.378909][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.589720][T12709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3099'. [ 214.670678][T12713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 214.778187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.136382][T12739] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3110'. [ 215.163770][T12739] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3110'. [ 215.418534][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.606041][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'. [ 215.606067][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'. [ 215.606282][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'. [ 215.606300][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3124'. [ 215.818060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.818854][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.224719][T12803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.331068][T12812] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3144'. [ 216.458657][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.427123][T12870] __nla_validate_parse: 2 callbacks suppressed [ 217.427143][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3169'. [ 217.427172][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3169'. [ 217.834590][T12881] syzkaller1: entered promiscuous mode [ 217.834612][T12881] syzkaller1: entered allmulticast mode [ 217.853617][T12881] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 218.538267][ T5777] net_ratelimit: 2 callbacks suppressed [ 218.538285][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.963551][T12936] tun0: tun_chr_ioctl cmd 1074025677 [ 218.963650][T12936] tun0: linktype set to 778 [ 218.964187][T12936] tun0: tun_chr_ioctl cmd 1074025676 [ 218.964202][T12936] tun0: owner set to 60929 [ 219.339177][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.339976][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.702853][T12983] xt_hashlimit: size too large, truncated to 1048576 [ 220.378062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.489351][T13026] sctp: [Deprecated]: syz.2.3240 (pid 13026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.489351][T13026] Use struct sctp_sack_info instead [ 220.489542][T13026] sctp: [Deprecated]: syz.2.3240 (pid 13026) Use of int in maxseg socket option. [ 220.489542][T13026] Use struct sctp_assoc_value instead [ 220.619483][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.972141][T13057] netlink: 'syz.1.3254': attribute type 11 has an invalid length. [ 221.416375][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3265'. [ 221.418054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.426226][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3265'. [ 221.457395][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3268'. [ 221.636885][T13098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3272'. [ 221.636922][T13098] bond0: ARP target 0.0.0.2 is already present [ 221.636940][T13098] bond0: option arp_ip_target: invalid value (33554432) [ 221.660977][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.909663][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.154208][T13110] syz.0.3278 (13110) used greatest stack depth: 15648 bytes left [ 222.266881][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3286'. [ 222.458349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.702693][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.962543][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 223.041166][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041203][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041228][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041251][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041275][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041298][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041322][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041345][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041369][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.041392][ T3111] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 223.049480][ T3111] hid-generic 0005:4C4A:4155.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 223.498031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.739135][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.779680][T13191] erspan0: entered promiscuous mode [ 223.801057][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3314'. [ 223.818200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.419639][ T5644] Bluetooth: hci1: unexpected event 0x05 length: 0 < 4 [ 224.538026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.780724][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.826395][T13249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.826657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.938652][ T5787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.016692][T13254] netlink: 63 bytes leftover after parsing attributes in process `syz.3.3342'. [ 225.139821][T13264] syzkaller1: entered promiscuous mode [ 225.139841][T13264] syzkaller1: entered allmulticast mode [ 225.224523][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 225.224557][T13271] netlink: 'syz.3.3350': attribute type 21 has an invalid length. [ 225.327319][T13275] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.737745][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 226.028235][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3369'. [ 226.028262][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3369'. [ 226.198629][T13322] IPVS: rr: UDP 127.0.0.1:20000 - no destination available [ 226.269542][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3376'. [ 226.443738][T13335] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3379'. [ 226.743442][T13357] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 226.743464][T13357] netlink: 'syz.4.3390': attribute type 2 has an invalid length. [ 226.936002][T13367] syzkaller1: entered promiscuous mode [ 226.936023][T13367] syzkaller1: entered allmulticast mode [ 227.208920][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 227.208954][T13378] netlink: 'syz.1.3401': attribute type 5 has an invalid length. [ 227.227872][T13378] netlink: 'syz.1.3401': attribute type 5 has an invalid length. [ 227.248124][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.248171][ T43] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.248198][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.248305][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.651181][T13467] __nla_validate_parse: 3 callbacks suppressed [ 228.651200][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3439'. [ 228.829265][T13478] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3443'. [ 228.829293][T13478] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3443'. [ 229.441044][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3463'. [ 229.442385][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3463'. [ 229.442703][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3463'. [ 229.556880][T13523] ip_tables: iptables: counters copy to user failed while replacing table [ 229.677325][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 230.683034][T13575] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.790971][T13583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 230.797415][T13583] ifb0: entered allmulticast mode [ 230.869706][T13587] netlink: 37 bytes leftover after parsing attributes in process `syz.0.3496'. [ 230.869746][T13587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.871747][T13587] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3496'. [ 230.872045][T13587] xt_IDLETIMER: label is empty or not nul-terminated [ 233.904851][T13634] syzkaller1: entered promiscuous mode [ 233.904874][T13634] syzkaller1: entered allmulticast mode [ 234.134631][T13653] Bluetooth: MGMT ver 1.23 [ 234.460349][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 234.526146][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 234.534801][T13675] syzkaller1: entered promiscuous mode [ 234.534822][T13675] syzkaller1: entered allmulticast mode [ 234.582625][T13681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.683563][T13685] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 235.273250][T13723] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 235.273270][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 235.422485][T13732] xt_hashlimit: size too large, truncated to 1048576 [ 235.514908][T13734] tun0: tun_chr_ioctl cmd 1074025681 [ 235.515308][T13734] tun0: tun_chr_ioctl cmd 1074025677 [ 235.515410][T13734] tun0: linktype set to 65535 [ 235.806605][T13754] sctp: [Deprecated]: syz.3.3567 (pid 13754) Use of int in max_burst socket option. [ 235.806605][T13754] Use struct sctp_assoc_value instead [ 237.822479][ T5648] Bluetooth: hci0: command 0x0406 tx timeout [ 237.822542][ T5644] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 238.982363][T13935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3646'. [ 239.382756][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'. [ 239.382789][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'. [ 239.411555][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3647'. [ 239.411587][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3647'. [ 239.449988][ T43] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 239.451128][ T189] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 239.451229][ T189] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 239.451259][ T189] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 239.810958][T13952] veth0_to_team: entered promiscuous mode [ 239.855638][T13960] netlink: 'syz.0.3657': attribute type 4 has an invalid length. [ 239.931029][T13962] netlink: 'syz.0.3657': attribute type 17 has an invalid length. [ 240.423294][T13995] tap0: tun_chr_ioctl cmd 21731 [ 240.423926][T13995] tap0: tun_chr_ioctl cmd 1074025672 [ 240.423942][T13995] tap0: ignored: set checksum enabled [ 240.750473][T14014] batadv_slave_1: entered promiscuous mode [ 240.751870][T14013] batadv_slave_1: left promiscuous mode [ 242.044002][T14088] syzkaller1: entered promiscuous mode [ 242.044023][T14088] syzkaller1: entered allmulticast mode [ 242.468881][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 242.468902][T14106] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3720'. [ 242.468918][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 242.468929][T14106] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3720'. [ 242.468942][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3720'. [ 242.858682][T14124] netlink: 'syz.3.3726': attribute type 11 has an invalid length. [ 242.858703][T14124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3726'. [ 243.308801][T14134] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.308961][T14134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.309353][T14134] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.309481][T14134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.411769][T14134] erspan0: entered promiscuous mode [ 243.416049][T14134] gretap0: entered promiscuous mode [ 243.434476][T14134] batman_adv: batadv0: Interface activated: vlan0 [ 243.435066][T14134] ip6gre1: left promiscuous mode [ 243.456234][T14134] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 243.476802][ T5786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.876988][T14164] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3734'. [ 244.392889][T14190] vcan0: tx address claim with dest, not broadcast [ 244.460224][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.050340][T14229] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 245.475823][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3775'. [ 246.252412][T14303] sock: sock_set_timeout: `syz.4.3796' (pid 14303) tries to set negative timeout [ 246.469600][T14318] syzkaller1: entered promiscuous mode [ 246.469621][T14318] syzkaller1: entered allmulticast mode [ 247.069192][T14355] netlink: 'syz.2.3822': attribute type 4 has an invalid length. [ 247.697411][T14391] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.501861][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3849'. [ 248.501885][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3849'. [ 248.537629][T14439] trusted_key: syz.0.3850 sent an empty control message without MSG_MORE. [ 248.779686][T14453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.032886][T14470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3863'. [ 249.434278][T14492] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3876'. [ 249.550706][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 249.550726][T14502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3880'. [ 249.922903][ T30] audit: type=1800 audit(1794473540.735:16): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3900" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3835 res=0 errno=-22 [ 249.939502][T14528] sctp: [Deprecated]: syz.0.3889 (pid 14528) Use of int in max_burst socket option. [ 249.939502][T14528] Use struct sctp_assoc_value instead [ 250.481406][T14558] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 250.516314][T14562] netlink: 'syz.4.3906': attribute type 83 has an invalid length. [ 251.341698][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.443059][T14680] gretap0: entered promiscuous mode [ 252.687282][T14694] netlink: 'syz.4.3960': attribute type 1 has an invalid length. [ 252.687303][T14694] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3960'. [ 252.991938][T14713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3968'. [ 253.182255][T14725] sctp: [Deprecated]: syz.2.3974 (pid 14725) Use of int in max_burst socket option. [ 253.182255][T14725] Use struct sctp_assoc_value instead [ 253.480997][T14731] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 253.490379][T14731] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 253.961461][T14764] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 254.009851][T14768] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3994'. [ 254.021605][T14758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.022018][T14758] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.117609][T14768] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3994'. [ 254.237893][T14758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.253207][T14758] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.526589][T14758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.526622][T14758] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.693415][T14758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.693449][T14758] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.739345][T14799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4006'. [ 254.868746][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.868776][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.881110][ T1126] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.881139][ T1126] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.888598][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.888627][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.983193][ T1126] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.983222][ T1126] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.020147][T14812] netlink: 'syz.4.4012': attribute type 21 has an invalid length. [ 255.020170][T14812] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4012'. [ 255.783931][T14857] syzkaller1: entered promiscuous mode [ 255.783953][T14857] syzkaller1: entered allmulticast mode [ 255.831623][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.831675][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864319][T14865] nbd: nbd1 already in use [ 255.864721][T14865] block nbd1: NBD_DISCONNECT [ 255.864763][T14865] block nbd1: Send disconnect failed -32 [ 255.864779][T14865] block nbd1: shutting down sockets [ 255.963489][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4040'. [ 256.059927][T14878] netlink: 'syz.0.4044': attribute type 12 has an invalid length. [ 256.059948][T14878] netlink: 'syz.0.4044': attribute type 29 has an invalid length. [ 256.059959][T14878] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4044'. [ 256.059975][T14878] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 256.059986][T14878] netlink: 'syz.0.4044': attribute type 2 has an invalid length. [ 256.059996][T14878] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4044'. [ 256.222418][T14885] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4049'. [ 256.585113][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4060'. [ 256.661771][T14914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4061'. [ 257.353605][T14954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.353638][T14954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.356448][T14954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.356468][T14954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.363853][T14954] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 257.363940][T14954] batman_adv: batadv0: Removing interface: ipvlan2 [ 257.410759][T14957] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 257.522267][T14964] ip_tables: iptables: counters copy to user failed while replacing table [ 257.973246][T14986] sctp: [Deprecated]: syz.0.4095 (pid 14986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.973246][T14986] Use struct sctp_sack_info instead [ 258.309117][T15008] batadv_slave_0: entered promiscuous mode [ 258.311969][T15006] batadv_slave_0: left promiscuous mode [ 258.996546][T15054] ip_tables: iptables: counters copy to user failed while replacing table [ 259.035059][T15056] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 259.043269][T15056] Cannot find del_set index 0 as target [ 259.464717][T15070] macvlan0: entered promiscuous mode [ 259.498649][ T747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.715481][T15079] netlink: 'syz.0.4139': attribute type 4 has an invalid length. [ 260.858379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.858748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.913822][T15138] syzkaller1: entered promiscuous mode [ 260.913844][T15138] syzkaller1: entered allmulticast mode [ 260.950912][ T30] audit: type=1804 audit(1794473551.765:17): pid=15137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4165" name="/newroot/859/memory.events" dev="tmpfs" ino=4368 res=1 errno=0 [ 261.395153][T15165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.396557][T15165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.397138][T15165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.619363][T15178] netlink: 'syz.3.4183': attribute type 1 has an invalid length. [ 261.950106][T15193] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.969753][T15196] __nla_validate_parse: 4 callbacks suppressed [ 261.969771][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4192'. [ 262.189775][T15211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4198'. [ 262.301279][T15219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4205'. [ 262.301303][T15219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4205'. [ 262.578218][T15237] caif0: tun_chr_ioctl cmd 2147767507 [ 262.579151][T15237] caif0: tun_chr_ioctl cmd 35111 [ 262.842189][T15253] vcan0: tx address claim with different name [ 263.808367][T15284] syzkaller1: entered promiscuous mode [ 263.808391][T15284] syzkaller1: entered allmulticast mode [ 264.007792][T15297] veth3: entered allmulticast mode [ 264.072666][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4234'. [ 264.072701][T15304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4234'. [ 264.206150][T15313] netlink: 'syz.3.4236': attribute type 2 has an invalid length. [ 264.206173][T15313] netlink: 'syz.3.4236': attribute type 2 has an invalid length. [ 264.367900][T15322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.457679][T15327] netlink: 'syz.2.4244': attribute type 1 has an invalid length. [ 264.564413][T15331] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.747834][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4253'. [ 264.780410][ T747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.821794][T15349] syzkaller1: entered promiscuous mode [ 264.821817][T15349] syzkaller1: entered allmulticast mode [ 264.829626][T15351] sit0: entered promiscuous mode [ 264.860404][T15351] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 264.860424][T15351] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4256'. [ 265.583773][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'. [ 266.320807][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4289'. [ 266.618419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.618762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.717640][T15441] sctp: [Deprecated]: syz.2.4305 (pid 15441) Use of int in max_burst socket option. [ 266.717640][T15441] Use struct sctp_assoc_value instead [ 267.089980][T15465] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.116577][T15465] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 267.274624][T15477] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 267.706483][T15502] __nla_validate_parse: 1 callbacks suppressed [ 267.706502][T15502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4323'. [ 268.405284][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4336'. [ 268.645343][T15542] sctp: [Deprecated]: syz.1.4341 (pid 15542) Use of int in max_burst socket option. [ 268.645343][T15542] Use struct sctp_assoc_value instead [ 269.319748][T15587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.856104][T15615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.004956][T15619] netlink: 'syz.0.4378': attribute type 2 has an invalid length. [ 270.406703][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057754800: rx timeout, send abort [ 270.907703][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057754800: abort rx timeout. Force session deactivation [ 271.212653][T15641] syzkaller1: entered promiscuous mode [ 271.212676][T15641] syzkaller1: entered allmulticast mode [ 274.890797][T15760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4442'. [ 275.295579][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 275.309507][T15785] hsr_slave_0: left promiscuous mode [ 275.311748][T15785] hsr_slave_1: left promiscuous mode [ 275.751772][ T5644] Bluetooth: hci4: link tx timeout [ 275.751790][ T5644] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 276.162855][T15841] ip_tables: iptables: counters copy to user failed while replacing table [ 276.718825][T15869] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4493'. [ 276.912256][T15884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.644415][T15911] netlink: 'syz.4.4513': attribute type 16 has an invalid length. [ 277.644436][T15911] netlink: 'syz.4.4513': attribute type 17 has an invalid length. [ 277.692217][T15911] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.692344][T15911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.692670][T15911] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.692789][T15911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.790316][T15911] veth0_to_team: left promiscuous mode [ 277.818565][ T5648] Bluetooth: hci4: command 0x0406 tx timeout [ 277.915572][T15911] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 277.943612][T15922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.889446][ T43] bond0: (slave bond1): link status definitely down, disabling slave [ 278.973571][T15957] syzkaller1: entered promiscuous mode [ 278.973593][T15957] syzkaller1: entered allmulticast mode [ 279.277540][T15965] sctp: [Deprecated]: syz.0.4532 (pid 15965) Use of int in max_burst socket option. [ 279.277540][T15965] Use struct sctp_assoc_value instead [ 279.850397][T15987] team0 (unregistering): Port device team_slave_0 removed [ 279.886936][T15987] team0 (unregistering): Port device team_slave_1 removed [ 280.258715][T16008] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 280.473448][T16021] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20000 [ 280.996711][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4574'. [ 280.996737][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4574'. [ 282.029544][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4599'. [ 282.739296][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 282.742249][T16154] hsr_slave_0: left promiscuous mode [ 282.745551][T16154] hsr_slave_1: left promiscuous mode [ 282.881124][T16160] nbd: socks must be embedded in a SOCK_ITEM attr [ 282.886962][T16160] block nbd1: shutting down sockets [ 283.094732][T16174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4629'. [ 283.155316][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4629'. [ 283.339483][ T1163] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.704084][T16242] tun1: tun_chr_ioctl cmd 1074025675 [ 284.704106][T16242] tun1: persist enabled [ 284.706110][T16242] tun1: tun_chr_ioctl cmd 1074025675 [ 284.706128][T16242] tun1: persist disabled [ 286.460385][T16354] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 286.460655][T16354] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 286.538219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 288.060197][ T5648] Bluetooth: hci4: command 0x0406 tx timeout [ 288.181225][T16454] netlink: 34 bytes leftover after parsing attributes in process `syz.0.4754'. [ 288.358644][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'. [ 288.424725][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4763'. [ 288.880475][T16444] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 288.964818][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 288.964838][T16488] vxlan: RTM_NEWNEIGH with invalid state 0x9 [ 289.609137][T16505] batadv_slave_0: entered promiscuous mode [ 289.611139][T16504] batadv_slave_0: left promiscuous mode [ 289.627335][ T30] audit: type=1804 audit(1794473580.435:18): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4780" name="/newroot/994/memory.events" dev="tmpfs" ino=5056 res=1 errno=0 [ 289.627557][ T30] audit: type=1800 audit(1794473580.435:19): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4780" name="memory.events" dev="tmpfs" ino=5056 res=0 errno=-22 [ 289.630629][ T30] audit: type=1804 audit(1794473580.445:20): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4780" name="/newroot/994/memory.events" dev="tmpfs" ino=5056 res=1 errno=0 [ 289.842170][T16520] batadv_slave_1: entered promiscuous mode [ 289.847742][T16517] batadv_slave_1: left promiscuous mode [ 290.289975][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4797'. [ 290.290002][T16546] block nbd1: Unsupported socket: should be TCP or UNIX. [ 290.465461][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4802'. [ 290.762450][T16577] sctp: [Deprecated]: syz.1.4812 (pid 16577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.762450][T16577] Use struct sctp_sack_info instead [ 290.765142][T16577] sctp: [Deprecated]: syz.1.4812 (pid 16577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.765142][T16577] Use struct sctp_sack_info instead [ 290.815521][T16581] sctp: [Deprecated]: syz.2.4814 (pid 16581) Use of int in maxseg socket option. [ 290.815521][T16581] Use struct sctp_assoc_value instead [ 291.421560][T16620] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4832'. [ 291.423534][T16620] gretap0: entered promiscuous mode [ 291.466641][T16620] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4832'. [ 291.466738][T16620] 0{X功: renamed from gretap0 [ 291.487046][T16620] 0{X功: left promiscuous mode [ 291.487067][T16620] 0{X功: entered allmulticast mode [ 291.501117][T16620] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 291.592491][T16625] tap0: tun_chr_ioctl cmd 2147767520 [ 291.593127][T16625] tap0: tun_chr_ioctl cmd 1074025675 [ 291.593143][T16625] tap0: persist disabled [ 292.012919][T16638] 8021q: adding VLAN 0 to HW filter on device team1 [ 292.017482][T16638] 8021q: adding VLAN 0 to HW filter on device team2 [ 292.039210][T16638] 8021q: adding VLAN 0 to HW filter on device eth0 [ 292.040885][T16638] 8021q: adding VLAN 0 to HW filter on device eth1 [ 292.042307][T16638] 8021q: adding VLAN 0 to HW filter on device eth2 [ 292.043835][T16638] 8021q: adding VLAN 0 to HW filter on device eth3 [ 292.050521][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.050631][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.351644][T16658] xt_hashlimit: size too large, truncated to 1048576 [ 293.182725][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'. [ 293.187159][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'. [ 293.218718][T16699] __nla_validate_parse: 1 callbacks suppressed [ 293.218738][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'. [ 293.219389][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'. [ 293.674268][T16726] veth0: entered promiscuous mode [ 293.680387][T16726] veth0: left promiscuous mode [ 293.957838][T16747] lo: entered allmulticast mode [ 293.960326][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4886'. [ 293.961100][T16746] lo: left allmulticast mode [ 294.162549][ T9] hid_parser_main: 22 callbacks suppressed [ 294.162570][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162596][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162620][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162642][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162664][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162685][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162707][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162728][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162749][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.162772][ T9] hid-generic 0005:0B57:4155.0002: unknown main item tag 0x0 [ 294.253410][ T9] hid-generic 0005:0B57:4155.0002: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 294.912590][T16798] bond2: invalid NS target :: specified for addition [ 294.912617][T16798] bond2: option ns_ip6_target: invalid value (18446744073709551615) [ 294.999675][T16798] bond2 (unregistering): Released all slaves [ 295.947005][T16836] netlink: 3576 bytes leftover after parsing attributes in process `syz.1.4913'. [ 296.036673][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4917'. [ 296.361269][T16860] tap0: tun_chr_ioctl cmd 1074025675 [ 296.361290][T16860] tap0: persist enabled [ 296.363883][T16860] tap0: tun_chr_ioctl cmd 1074025678 [ 296.363903][T16860] tap0: group set to 0 [ 296.935072][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4931'. [ 296.950367][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4931'. [ 296.950405][T16888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4931'. [ 296.950416][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4931'. [ 297.017284][T16892] syzkaller1: entered promiscuous mode [ 297.017306][T16892] syzkaller1: entered allmulticast mode [ 297.086017][T16898] netlink: 'syz.4.4936': attribute type 1 has an invalid length. [ 297.086040][T16898] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4936'. [ 297.338588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.578269][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.899318][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.899637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.177143][T16930] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 298.291494][ T30] audit: type=1800 audit(1794473589.105:21): pid=16932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4952" name=CB dev="tmpfs" ino=5236 res=0 errno=-22 [ 298.363126][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4953'. [ 298.363147][T16934] netlink: 468 bytes leftover after parsing attributes in process `syz.3.4953'. [ 298.378210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.618302][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.418301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.658224][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.241272][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4953'. [ 300.462050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.936964][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4984'. [ 302.044933][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4986'. [ 302.166383][T17013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4987'. [ 302.538517][ C1] net_ratelimit: 5 callbacks suppressed [ 302.538536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.752852][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5004'. [ 302.879578][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.083852][T17065] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.195314][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.579155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.670702][T17103] tap1: tun_chr_ioctl cmd 2152240185 [ 303.673358][T17103] tap1: tun_chr_ioctl cmd 1074025680 [ 303.826387][T17114] syzkaller1: entered promiscuous mode [ 303.826409][T17114] syzkaller1: entered allmulticast mode [ 303.902378][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.062994][T17127] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5041'. [ 304.138161][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.138363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.165772][T17133] ip_tables: iptables: counters copy to user failed while replacing table [ 304.167151][T17133] ip_tables: iptables: counters copy to user failed while replacing table [ 304.333966][T17143] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5049'. [ 305.478584][ T5636] cgroup: fork rejected by pids controller in /syz1 [ 306.494191][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.506807][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.515966][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.523893][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.536578][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.912139][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5102'. [ 306.975225][T17270] IPVS: Scheduler module ip_vs_sip not found [ 307.406261][T17299] syzkaller1: entered promiscuous mode [ 307.406283][T17299] syzkaller1: entered allmulticast mode [ 307.423178][T17250] rxe_eth0 speed is unknown, defaulting to 1000 [ 307.441182][T17302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5109'. [ 307.738300][ C1] net_ratelimit: 11 callbacks suppressed [ 307.738322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.058463][ T4964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.318878][ T4964] hid_parser_main: 22 callbacks suppressed [ 308.318900][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.318926][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.318948][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.318970][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.318994][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.319017][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.319041][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.319064][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.319088][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.319111][ T4964] hid-generic 0005:10CF:4155.0003: unknown main item tag 0x0 [ 308.327725][ T4964] hid-generic 0005:10CF:4155.0003: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 308.566743][T17250] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.570343][T17250] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.570513][T17250] bridge_slave_0: entered allmulticast mode [ 308.601840][T17250] bridge_slave_0: entered promiscuous mode [ 308.614831][T17250] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.614935][T17250] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.615079][T17250] bridge_slave_1: entered allmulticast mode [ 308.618544][ T5644] Bluetooth: hci3: command tx timeout [ 308.650507][T17250] bridge_slave_1: entered promiscuous mode [ 308.695920][T17250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.709985][T17250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.778273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.938733][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.005077][T17250] team0: Port device team_slave_0 added [ 309.014129][T17250] team0: Port device team_slave_1 added [ 309.103947][ T4964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.144732][T17250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.144748][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.144768][T17250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.146706][T17250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.146719][T17250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.146736][T17250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.406325][T17250] hsr_slave_0: entered promiscuous mode [ 309.407331][T17250] hsr_slave_1: entered promiscuous mode [ 309.415563][T17250] debugfs: 'hsr0' already exists in 'hsr' [ 309.415582][T17250] Cannot create hsr debugfs directory [ 309.699655][T17401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 309.818495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.001171][T17417] xt_hashlimit: size too large, truncated to 1048576 [ 310.076750][T17421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.101547][T17250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.105085][T17250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.138974][ T3111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.220452][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.323168][T17250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.323201][T17250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.481473][T17250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.481506][T17250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.634433][T17250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.634467][T17250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.698108][ T5644] Bluetooth: hci3: command tx timeout [ 310.909851][T17250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.925677][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.927259][T17250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.964205][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.966225][T17250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.997735][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.009063][T17250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.026286][T17250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.080109][T17469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5177'. [ 311.202524][T17250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.237839][T17250] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.271386][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.271493][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.284169][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.284272][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.187519][T17250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.362231][T17250] veth0_vlan: entered promiscuous mode [ 312.382275][T17250] veth1_vlan: entered promiscuous mode [ 312.486861][T17250] veth0_macvtap: entered promiscuous mode [ 312.512080][T17250] veth1_macvtap: entered promiscuous mode [ 312.570474][T17250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.594566][T17250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.629080][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.678458][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.679786][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.679826][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.780776][ T5644] Bluetooth: hci3: command tx timeout [ 312.979978][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.979998][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.048768][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.048791][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.116106][T17560] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5213'. [ 313.344578][T17574] net_ratelimit: 4 callbacks suppressed [ 313.344599][T17574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 314.004661][T17615] veth0: entered promiscuous mode [ 314.013296][T17614] veth0: left promiscuous mode [ 314.230618][T17628] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5242'. [ 314.309010][T17631] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.309724][T17631] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.423197][T17635] TCP: TCP_TX_DELAY enabled [ 314.860662][ T5644] Bluetooth: hci3: command tx timeout [ 315.389458][T17690] ip_tables: iptables: counters copy to user failed while replacing table [ 315.444622][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5270'. [ 315.979524][T14155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.153015][T17737] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.206499][T17739] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5292'. [ 316.206528][T17739] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5292'. [ 316.838378][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5313'. [ 316.838497][T17779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.890526][T17779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.952702][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5315'. [ 317.264328][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.264384][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.478915][T17809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5326'. [ 317.478957][T17809] netlink: 356 bytes leftover after parsing attributes in process `syz.0.5326'. [ 317.478970][T17809] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5326'. [ 317.478986][T17809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5326'. [ 318.181051][T17846] Bluetooth: MGMT ver 1.23 [ 318.491826][T17865] batadv_slave_1: entered promiscuous mode [ 318.494679][T17863] batadv_slave_1: left promiscuous mode [ 318.654872][T17871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.831663][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5355'. [ 318.998278][T17892] netlink: 566 bytes leftover after parsing attributes in process `syz.2.5357'. [ 319.094808][T17900] ip_tables: iptables: counters copy to user failed while replacing table [ 319.988158][ T5648] Bluetooth: hci3: command 0x0405 tx timeout [ 321.670653][T18038] __nla_validate_parse: 3 callbacks suppressed [ 321.670680][T18038] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5426'. [ 324.528621][T18044] batadv_slave_0: entered promiscuous mode [ 324.559988][T18052] batadv_slave_0: left promiscuous mode [ 325.083019][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5443'. [ 325.336670][T18093] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 325.851608][T18109] pim6reg1: entered promiscuous mode [ 325.851629][T18109] pim6reg1: entered allmulticast mode [ 328.603357][T18128] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5461'. [ 329.265556][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5474'. [ 329.283472][T18164] netlink: 83 bytes leftover after parsing attributes in process `syz.4.5475'. [ 329.550026][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'. [ 329.550053][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'. [ 329.719987][T18182] syzkaller1: entered promiscuous mode [ 329.720010][T18182] syzkaller1: entered allmulticast mode [ 330.185886][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5505'. [ 331.728856][T18265] syzkaller1: entered promiscuous mode [ 331.728880][T18265] syzkaller1: entered allmulticast mode [ 331.881867][T18273] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.325268][T18299] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 333.973072][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5557'. [ 336.392953][T18347] netlink: 'syz.4.5557': attribute type 1 has an invalid length. [ 336.392979][T18347] netlink: 'syz.4.5557': attribute type 2 has an invalid length. [ 337.090822][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 337.090958][T18388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.165362][T18388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.321359][T18394] netpci0: tun_chr_ioctl cmd 3223869504 [ 337.321913][T18394] netpci0: tun_chr_ioctl cmd 1074812118 [ 337.823273][T18423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5593'. [ 338.979167][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5610'. [ 338.979287][T18465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.618815][T18465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.886536][T18487] netlink: 'syz.1.5620': attribute type 11 has an invalid length. [ 342.067692][T18499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.228219][T18503] bond1: option tlb_dynamic_lb: invalid value (255) [ 342.229997][T18503] bond1 (unregistering): Released all slaves [ 342.972911][T18521] netlink: 'syz.0.5636': attribute type 6 has an invalid length. [ 343.128843][T18531] pim6reg1: entered promiscuous mode [ 343.128865][T18531] pim6reg1: entered allmulticast mode [ 343.149515][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5641'. [ 343.985420][T18541] smc: removing ib device rxe0 [ 344.064611][T18541] smbdirect: ib_dev[rxe0] removed [ 344.211542][T18554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5649'. [ 344.217505][T18554] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.218354][T18554] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.104260][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5661'. [ 346.124841][T18574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5655'. [ 346.496778][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5673'. [ 347.652036][T18625] netlink: 'syz.3.5680': attribute type 8 has an invalid length. [ 347.729870][T18629] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 347.780328][T18633] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5681'. [ 347.946356][T18648] netlink: 'syz.4.5688': attribute type 11 has an invalid length. [ 347.946377][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5688'. [ 348.331642][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5694'. [ 348.808821][T14155] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 349.107455][T18692] ip_tables: iptables: counters copy to user failed while replacing table [ 349.260152][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.055865][T18742] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5731'. [ 351.785214][ T30] audit: type=1800 audit(1794473642.595:22): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5760" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5949 res=0 errno=-22 [ 351.846229][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5761'. [ 351.846253][T18816] netlink: 'syz.3.5761': attribute type 9 has an invalid length. [ 352.188046][T18831] syz_tun: entered allmulticast mode [ 352.191453][T18830] syz_tun: left allmulticast mode [ 352.250891][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5770'. [ 352.277136][T18836] xt_IDLETIMER: label is empty or not nul-terminated [ 352.632474][T18855] sctp: [Deprecated]: syz.0.5777 (pid 18855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.632474][T18855] Use struct sctp_sack_info instead [ 352.875323][T18869] bond1: entered allmulticast mode [ 352.891375][T18869] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 352.892198][T18869] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 353.219934][T18887] netlink: 'syz.0.5789': attribute type 1 has an invalid length. [ 353.286750][T18887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.354512][T18889] bond2: (slave gretap0): making interface the new active one [ 353.368688][T18889] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 353.669654][T18903] netlink: 'syz.0.5796': attribute type 4 has an invalid length. [ 353.878345][ T30] audit: type=1800 audit(1794473644.695:23): pid=18913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5801" name="f" dev="tmpfs" ino=6289 res=0 errno=-22 [ 354.150858][ T30] audit: type=1800 audit(1794473644.965:24): pid=18924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5804" name="memory.events" dev="tmpfs" ino=6020 res=0 errno=-22 [ 354.494408][T18944] sit0: entered promiscuous mode [ 354.526603][T18944] netlink: 'syz.2.5815': attribute type 1 has an invalid length. [ 354.526627][T18944] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5815'. [ 354.661184][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5818'. [ 354.661208][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5818'. [ 354.664147][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5818'. [ 354.664174][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5818'. [ 354.687552][T18801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.325996][T18976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 355.515755][ T5648] Bluetooth: hci3: connection err: -111 [ 355.642912][T18996] netlink: 'syz.4.5837': attribute type 15 has an invalid length. [ 355.642936][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5837'. [ 355.686525][T18996] netlink: 'syz.4.5837': attribute type 15 has an invalid length. [ 355.686548][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5837'. [ 355.688214][ T12] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0 [ 355.698092][ T12] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0 [ 355.698135][ T12] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 355.698164][ T12] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 356.432619][T19026] netlink: 'syz.1.5848': attribute type 10 has an invalid length. [ 356.553966][T19031] ip_tables: iptables: counters copy to user failed while replacing table [ 357.115414][T19052] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 357.161557][T19052] bond1 (unregistering): Released all slaves [ 357.163430][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5862'. [ 358.083571][T19096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.183631][T19097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.208355][ T30] audit: type=1800 audit(1794473649.025:25): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5869" name="memory.events" dev="tmpfs" ino=681 res=0 errno=-22 [ 358.275733][T19096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.649530][T19109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5883'. [ 359.595980][ T30] audit: type=1800 audit(1794473650.405:26): pid=19143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5897" name="memory.events" dev="tmpfs" ino=6128 res=0 errno=-22 [ 360.014863][T19176] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.255760][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5912'. [ 360.295267][T19185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.751661][T19206] veth0: entered promiscuous mode [ 360.757936][T19205] netlink: 'syz.2.5923': attribute type 20 has an invalid length. [ 360.757957][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5923'. [ 360.852875][T19205] netlink: 'syz.2.5923': attribute type 20 has an invalid length. [ 360.853359][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5923'. [ 360.891937][T19202] veth0: left promiscuous mode [ 360.955974][T19213] syzkaller1: entered promiscuous mode [ 360.955996][T19213] syzkaller1: entered allmulticast mode [ 361.406735][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406755][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406767][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406777][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406789][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406800][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406812][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.406823][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5941'. [ 361.416770][T19245] pim6reg1: entered promiscuous mode [ 361.416791][T19245] pim6reg1: entered allmulticast mode [ 361.537656][T19248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.252711][T19281] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 362.253091][T19281] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 362.620829][T19302] netlink: 'syz.3.5967': attribute type 4 has an invalid length. [ 363.111402][T19331] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 363.117128][T19331] sch_tbf: peakrate 896 is lower than or equals to rate 3850 ! [ 363.205125][T19336] vlan2: entered allmulticast mode [ 363.205607][T19336] bridge0: port 3(vlan2) entered blocking state [ 363.205786][T19336] bridge0: port 3(vlan2) entered disabled state [ 363.220094][T19336] vlan2: entered promiscuous mode [ 365.088282][T19356] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.280860][T19408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.281016][T19408] IPv6: NLM_F_CREATE should be set when creating new route [ 367.281030][T19408] IPv6: NLM_F_CREATE should be set when creating new route [ 367.291592][T19408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.381400][T19412] __nla_validate_parse: 9 callbacks suppressed [ 367.381503][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6013'. [ 367.485253][T19412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.635602][T19428] ip_tables: iptables: counters copy to user failed while replacing table [ 367.723082][T19431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6019'. [ 367.741055][T19435] netlink: 'syz.2.6021': attribute type 1 has an invalid length. [ 367.745042][T19434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6030'. [ 367.843805][T19435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.906497][T19439] bond3: (slave gretap0): making interface the new active one [ 367.907530][T19439] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 368.136393][T19457] ipip0: entered allmulticast mode [ 368.226121][T19466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.300931][T19469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.523994][T19479] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6038'. [ 368.833741][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6043'. [ 368.931245][T19498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.305888][T19525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6057'. [ 371.407692][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6072'. [ 372.648215][T19566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 373.723374][T19593] xt_IDLETIMER: label is empty or not nul-terminated [ 374.232878][T19625] sit0: left promiscuous mode [ 374.250193][T19625] netlink: 'syz.2.6109': attribute type 3 has an invalid length. [ 374.250215][T19625] netlink: 646 bytes leftover after parsing attributes in process `syz.2.6109'. [ 374.572064][T19645] netlink: 'syz.1.6108': attribute type 1 has an invalid length. [ 374.616432][T19645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.622999][T19646] netlink: 'syz.3.6110': attribute type 4 has an invalid length. [ 374.623760][T19646] netlink: 'syz.3.6110': attribute type 4 has an invalid length. [ 374.689477][T19645] bond1: (slave gretap1): making interface the new active one [ 374.705905][T19645] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 374.740677][T19653] vcan0: tx address claim with broadcast sa [ 374.968085][ T30] audit: type=1800 audit(1794473665.775:27): pid=19662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6115" name="f" dev="tmpfs" ino=949 res=0 errno=-22 [ 375.179971][ T30] audit: type=1800 audit(1794473665.995:28): pid=19675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6120" name="blkio.bfq.time_recursive" dev="tmpfs" ino=960 res=0 errno=-22 [ 375.381242][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6127'. [ 375.381277][T19688] netlink: 'syz.2.6127': attribute type 9 has an invalid length. [ 375.727147][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6136'. [ 375.727171][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6136'. [ 375.748662][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6136'. [ 375.748686][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6136'. [ 376.265821][T19719] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6142'. [ 376.944264][T19748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6156'. [ 376.944303][T19748] netlink: 'syz.0.6156': attribute type 7 has an invalid length. [ 376.944315][T19748] netlink: 'syz.0.6156': attribute type 8 has an invalid length. [ 376.944325][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6156'. [ 377.773169][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6177'. [ 377.773252][T19794] nftables ruleset with unbound chain [ 378.023494][T19809] sit0: entered promiscuous mode [ 378.066638][T19809] netlink: 'syz.4.6183': attribute type 1 has an invalid length. [ 378.453882][T19832] geneve0: entered promiscuous mode [ 378.468771][ T189] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56396 - 0 [ 378.468814][ T189] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56396 - 0 [ 378.468843][ T189] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56396 - 0 [ 378.468872][ T189] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56396 - 0 [ 378.702819][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.702876][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.761469][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cefec00: rx timeout, send abort [ 378.761870][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cefec00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 378.936013][ T30] audit: type=1800 audit(1794473669.745:29): pid=19847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6202" name=680B20 dev="tmpfs" ino=1023 res=0 errno=-22 [ 379.391125][T19878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.453657][T19884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.570469][T19891] __nla_validate_parse: 4 callbacks suppressed [ 379.570490][T19891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6217'. [ 380.823216][T19931] Bluetooth: MGMT ver 1.23 [ 380.825068][T19931] Bluetooth: MGMT ver 1.23 [ 381.142219][T19941] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 381.221931][T19943] tun1: tun_chr_ioctl cmd 1074025677 [ 381.222983][T19943] tun1: linktype set to 778 [ 381.224230][T19943] tun1: tun_chr_ioctl cmd 1074025681 [ 381.369857][T19954] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6243'. [ 382.116110][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116132][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116143][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116155][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116166][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116177][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116187][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.116198][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6258'. [ 382.434904][T20006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.540570][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 382.691348][T19901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.447736][T20158] syzkaller1: entered allmulticast mode [ 385.886263][T20181] netlink: 'syz.4.6342': attribute type 1 has an invalid length. [ 385.932019][T20181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.989117][T20181] bond1: (slave gretap1): making interface the new active one [ 385.990120][T20181] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 386.249807][T20201] bridge0: port 3(syz_tun) entered blocking state [ 386.249922][T20201] bridge0: port 3(syz_tun) entered disabled state [ 386.250077][T20201] syz_tun: entered allmulticast mode [ 386.251070][T20201] syz_tun: entered promiscuous mode [ 386.519001][T20220] nbd: nbd0 already in use [ 386.861356][T20241] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 388.404793][T20319] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.872320][T20341] netlink: 'syz.4.6410': attribute type 4 has an invalid length. [ 391.723064][T20353] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.088310][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 392.133841][T20376] netlink: 'syz.3.6420': attribute type 6 has an invalid length. [ 392.255566][T20379] __nla_validate_parse: 13 callbacks suppressed [ 392.255587][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6422'. [ 392.255601][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6422'. [ 395.009692][T20400] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 395.011136][T20400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.012245][T20400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 395.043970][ T30] audit: type=1800 audit(1794473685.855:30): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6429" name=8001 dev="tmpfs" ino=6293 res=0 errno=-22 [ 395.198468][T20403] pim6reg1: entered promiscuous mode [ 395.198490][T20403] pim6reg1: entered allmulticast mode [ 395.388738][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'. [ 395.388764][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6440'. [ 395.585731][T20432] syzkaller1: entered promiscuous mode [ 395.585755][T20432] syzkaller1: entered allmulticast mode [ 395.677614][T20435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.746371][T20435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.463871][T20460] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.6456'. [ 396.592344][T20466] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6460'. [ 396.613861][T20467] netlink: 'syz.0.6458': attribute type 1 has an invalid length. [ 396.703462][T20467] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.980955][T20485] ip_tables: iptables: counters copy to user failed while replacing table [ 397.084353][T20489] geneve2: entered promiscuous mode [ 397.101851][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 45321 - 0 [ 397.105264][ T189] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 45321 - 0 [ 397.105394][ T189] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 45321 - 0 [ 397.105511][ T189] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 45321 - 0 [ 397.175501][T20495] nbd: nbd3 already in use [ 397.176912][T20495] block nbd3: NBD_DISCONNECT [ 397.176941][T20495] block nbd3: Send disconnect failed -32 [ 397.176958][T20495] block nbd3: shutting down sockets [ 397.305376][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6472'. [ 397.311982][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6472'. [ 397.366007][T20502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6472'. [ 397.366043][T20502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6472'. [ 397.373144][T20503] netlink: 'syz.3.6474': attribute type 1 has an invalid length. [ 397.693656][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.709768][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.712646][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 397.713409][ T12] bond0 (unregistering): Released all slaves [ 397.724328][ T12] bond1 (unregistering): Released all slaves [ 397.739695][ T12] bond2 (unregistering): Released all slaves [ 397.777188][T20498] gretap0: entered promiscuous mode [ 397.783665][T20498] gretap0: left promiscuous mode [ 397.827196][T20502] gretap0: entered promiscuous mode [ 397.835210][T20502] gretap0: left promiscuous mode [ 397.906345][T20503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.933063][T20506] bond0: (slave gretap1): making interface the new active one [ 397.934455][T20506] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 398.081421][ T12] tipc: Disabling bearer [ 398.095484][ T12] tipc: Left network mode [ 398.959920][ T30] audit: type=1800 audit(1794473689.775:31): pid=20544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6490" name=63633F206C6F6F705F6865616465723F2069646F6D20696E736E233A206C6976655F726567735F6265666F7265293A0A2020202020202020202D31202020303A202E312E2E2E2E2E2E2E2E2028313829207238203D2030783363333130303030300A2020202020202020202030202020323A202E312E2E2E2E2E2E382E20283835292063616C6C2070632B360A2020202020202020202032202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666 dev="tmpfs" ino=1292 res=0 errno=-22 [ 399.201202][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6495'. [ 399.990349][ T12] hsr_slave_0: left promiscuous mode [ 399.993665][ T12] hsr_slave_1: left promiscuous mode [ 399.994879][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.994922][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.009794][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.009817][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.046184][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 400.105652][ T12] veth1_macvtap: left promiscuous mode [ 400.105737][ T12] veth0_macvtap: left promiscuous mode [ 400.106069][ T12] veth1_vlan: left promiscuous mode [ 400.106463][ T12] veth0_vlan: left promiscuous mode [ 400.685823][ T12] team0 (unregistering): Port device team_slave_1 removed [ 400.713110][ T12] team0 (unregistering): Port device team_slave_0 removed [ 401.085717][T20603] netlink: 'syz.0.6511': attribute type 5 has an invalid length. [ 401.156263][T20604] netlink: 1404 bytes leftover after parsing attributes in process `syz.1.6512'. [ 401.359532][ T51] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa [ 401.413719][ T1163] IPVS: starting estimator thread 0... [ 401.502963][T20623] IPVS: using max 39 ests per chain, 93600 per kthread [ 401.511492][ T12] IPVS: stop unused estimator thread 0... [ 401.967611][T20638] netlink: 'syz.3.6536': attribute type 4 has an invalid length. [ 401.984916][T20638] netlink: 'syz.3.6536': attribute type 4 has an invalid length. [ 402.076921][T20640] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.077087][T20640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.077409][T20640] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.077516][T20640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.544620][T20706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.544661][T20706] IPv6: NLM_F_CREATE should be set when creating new route [ 403.544713][T20706] IPv6: NLM_F_CREATE should be set when creating new route [ 403.550243][T20706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.752173][ C0] ------------[ cut here ]------------ [ 403.752189][ C0] !rcu_read_lock_held() [ 403.752202][ C0] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#0: ksoftirqd/0/15 [ 403.772426][ C0] Modules linked in: [ 403.776372][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 403.785701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 403.795846][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 403.801997][ C0] Code: be b4 01 00 00 48 c7 c2 c0 f9 53 8d e8 a0 fd 06 f7 e9 aa fc ff ff e8 c6 ac 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 b8 ac 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 e7 08 52 fa 84 c0 0f 84 e1 00 [ 403.821679][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 403.827927][ C0] RAX: ffffffff8a9d6588 RBX: 0000000000000000 RCX: ffff88801f291f40 [ 403.836012][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 403.844057][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bed7 [ 403.852081][ C0] R10: dffffc0000000000 R11: fffffbfff237bed8 R12: dffffc0000000000 [ 403.860115][ C0] R13: ffff88804b3a77c8 R14: ffff8880549a3ed0 R15: ffff8880554e6180 [ 403.868138][ C0] FS: 0000000000000000(0000) GS:ffff888123409000(0000) knlGS:0000000000000000 [ 403.877142][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.883782][ C0] CR2: 0000200000002038 CR3: 0000000054702000 CR4: 00000000003526f0 [ 403.891836][ C0] Call Trace: [ 403.895223][ C0] [ 403.898259][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 403.903987][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 403.909381][ C0] ? __asan_memset+0x22/0x50 [ 403.914060][ C0] ? xfrm_output+0xa03/0x1ca0 [ 403.918997][ C0] iptfs_delay_timer+0x3803/0x4310 [ 403.924228][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 403.929905][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 403.935366][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 403.941026][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.947041][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 403.952579][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 403.957912][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 403.963058][ C0] handle_softirqs+0x265/0x8d0 [ 403.967946][ C0] run_ksoftirqd+0x36/0x60 [ 403.972407][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 403.977374][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 403.982473][ C0] kthread+0x38b/0x480 [ 403.986574][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 403.992092][ C0] ? __pfx_kthread+0x10/0x10 [ 403.996716][ C0] ret_from_fork+0x514/0xb70 [ 404.001414][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 404.006557][ C0] ? __switch_to+0xc78/0x1410 [ 404.011307][ C0] ? __pfx_kthread+0x10/0x10 [ 404.015931][ C0] ret_from_fork_asm+0x1a/0x30 [ 404.020824][ C0] [ 404.023886][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 404.031179][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 404.040393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 404.050475][ C0] Call Trace: [ 404.053770][ C0] [ 404.057041][ C0] vpanic+0x26f/0x710 [ 404.061187][ C0] panic+0xc5/0xd0 [ 404.064930][ C0] ? __pfx_panic+0x10/0x10 [ 404.069389][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 404.074360][ C0] __warn+0x315/0x4c0 [ 404.078367][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 404.083758][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 404.089145][ C0] __report_bug+0x276/0x570 [ 404.093799][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 404.099284][ C0] ? __pfx___report_bug+0x10/0x10 [ 404.104347][ C0] ? lock_acquire+0x115/0x350 [ 404.109055][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 404.114641][ C0] ? xfrm_aevent_is_on+0x18/0x230 [ 404.119887][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 404.125281][ C0] report_bug+0x16b/0x220 [ 404.129644][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 404.135475][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 404.140861][ C0] handle_bug+0x9c/0x200 [ 404.145596][ C0] exc_invalid_op+0x1a/0x50 [ 404.150326][ C0] asm_exc_invalid_op+0x1a/0x20 [ 404.155556][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 404.161560][ C0] Code: be b4 01 00 00 48 c7 c2 c0 f9 53 8d e8 a0 fd 06 f7 e9 aa fc ff ff e8 c6 ac 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 b8 ac 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 e7 08 52 fa 84 c0 0f 84 e1 00 [ 404.181706][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 404.187786][ C0] RAX: ffffffff8a9d6588 RBX: 0000000000000000 RCX: ffff88801f291f40 [ 404.195754][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 404.203739][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bed7 [ 404.211824][ C0] R10: dffffc0000000000 R11: fffffbfff237bed8 R12: dffffc0000000000 [ 404.219815][ C0] R13: ffff88804b3a77c8 R14: ffff8880549a3ed0 R15: ffff8880554e6180 [ 404.227819][ C0] ? xfrm_output_resume+0x41d8/0x64e0 [ 404.233523][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 404.239106][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 404.244337][ C0] ? __asan_memset+0x22/0x50 [ 404.248952][ C0] ? xfrm_output+0xa03/0x1ca0 [ 404.253681][ C0] iptfs_delay_timer+0x3803/0x4310 [ 404.258847][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 404.264349][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.269432][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 404.274857][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 404.280775][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 404.286642][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 404.291885][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 404.297062][ C0] handle_softirqs+0x265/0x8d0 [ 404.301861][ C0] run_ksoftirqd+0x36/0x60 [ 404.306300][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 404.311259][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 404.316394][ C0] kthread+0x38b/0x480 [ 404.320475][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 404.325934][ C0] ? __pfx_kthread+0x10/0x10 [ 404.330522][ C0] ret_from_fork+0x514/0xb70 [ 404.335461][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 404.340658][ C0] ? __switch_to+0xc78/0x1410 [ 404.345348][ C0] ? __pfx_kthread+0x10/0x10 [ 404.349959][ C0] ret_from_fork_asm+0x1a/0x30 [ 404.354752][ C0] [ 404.358098][ C0] Kernel Offset: disabled [ 404.362430][ C0] Rebooting in 86400 seconds..