last executing test programs: 2m59.856989966s ago: executing program 3 (id=1287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 2m59.544022332s ago: executing program 3 (id=1290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) write(r0, &(0x7f00000006c0)="91", 0x1) 2m58.767837342s ago: executing program 1 (id=1294): ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 2m58.45322575s ago: executing program 3 (id=1295): socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m48.269524306s ago: executing program 1 (id=1296): socket$kcm(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x10000000368}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 2m48.241941762s ago: executing program 3 (id=1298): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)=""/115, 0x73}], 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) 2m48.211107592s ago: executing program 4 (id=1299): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x810) 2m48.02517562s ago: executing program 4 (id=1300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 2m47.887914451s ago: executing program 4 (id=1301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 2m47.438225516s ago: executing program 4 (id=1302): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 2m47.221461493s ago: executing program 1 (id=1304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) write(r0, &(0x7f00000006c0)="91", 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) 2m47.131720088s ago: executing program 1 (id=1305): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600), 0x0) 2m47.081071642s ago: executing program 3 (id=1307): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) socket(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 2m46.988594984s ago: executing program 1 (id=1309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000006c0)="89e7ee2c21fe62a3b47380c988ca4b5e11281ad251f9f989d3ec4e52915652d8796bc371b80a26e5100821f63bb54b9a0ebbc94028bb", 0x36}], 0x1) 2m46.937578603s ago: executing program 4 (id=1310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(0x0, r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 2m46.769608779s ago: executing program 3 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m46.337449487s ago: executing program 4 (id=1313): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket(0x8, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 2m35.556955554s ago: executing program 1 (id=1315): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0xffffffffffffff13) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000003740)=ANY=[@ANYBLOB="4c2c1353283ba36c91f42ea2d857a238708ed5d7114743ff0ddf920ab9fd3dbcafcc87a6bc5a5789d7e6a2bda8ed0326271c95463cb47fe76450878360ca3e04cba46cfc28338434bb11da95f91e7e6a5ae8ddf8", @ANYRES16=r2, @ANYBLOB="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"], 0x2c4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2m31.319510286s ago: executing program 32 (id=1312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m30.82519745s ago: executing program 33 (id=1313): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x80800) shutdown(r0, 0x0) r1 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket(0x8, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 2m20.30313877s ago: executing program 34 (id=1315): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0xffffffffffffff13) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000003740)=ANY=[@ANYBLOB="4c2c1353283ba36c91f42ea2d857a238708ed5d7114743ff0ddf920ab9fd3dbcafcc87a6bc5a5789d7e6a2bda8ed0326271c95463cb47fe76450878360ca3e04cba46cfc28338434bb11da95f91e7e6a5ae8ddf8", @ANYRES16=r2, @ANYBLOB="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"], 0x2c4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 3.72395416s ago: executing program 7 (id=1928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 2.90572218s ago: executing program 7 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d304181800010000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 2.126384276s ago: executing program 5 (id=1945): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e00"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1.890555215s ago: executing program 5 (id=1950): listen(0xffffffffffffffff, 0x20) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x6102}, {0xffffffffffffffff, 0xc33c}], 0x2, 0x11fb) shutdown(0xffffffffffffffff, 0x0) 1.890257459s ago: executing program 6 (id=1951): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0xd8, 0x76, 0xfffff024}, {0x6, 0x26, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) connect$qrtr(0xffffffffffffffff, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x2}, 0xc) socket(0x848000000015, 0x805, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$inet(0x2, 0x3, 0x104) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.601277102s ago: executing program 6 (id=1955): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendmmsg$alg(r0, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40880}], 0x1, 0x40804) 1.56398149s ago: executing program 6 (id=1956): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb781", 0x4f}, {&(0x7f0000000900)="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", 0x1f9}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r2, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x14, 0x0, 0x8d61ddcfedb48df, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="f1f9e323652233860efcdf6b12a8c327", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 1.30294559s ago: executing program 2 (id=1960): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) 1.221275593s ago: executing program 7 (id=1961): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x40, r0, 0x1, 0x70bd27, 0x25dfd3ff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.153335516s ago: executing program 2 (id=1962): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.148937815s ago: executing program 7 (id=1963): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062"], 0x104}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000180)={0xa, 0x4e20, 0xfffffffc, @mcast1}, 0x1c) 965.849456ms ago: executing program 2 (id=1965): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0xd8, 0x76, 0xfffff024}, {0x6, 0x26, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) connect$qrtr(0xffffffffffffffff, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x2}, 0xc) socket(0x848000000015, 0x805, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$inet(0x2, 0x3, 0x104) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 895.902481ms ago: executing program 0 (id=1966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f0000001bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) recvmmsg$unix(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) 895.553712ms ago: executing program 5 (id=1967): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendmmsg$alg(r0, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40880}], 0x1, 0x40804) 895.135081ms ago: executing program 7 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r1, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 741.264443ms ago: executing program 5 (id=1969): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x48080) 694.534666ms ago: executing program 0 (id=1970): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, 0x1410, 0x1, 0x70bd30, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 671.310711ms ago: executing program 7 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d304181800010000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) 615.494325ms ago: executing program 2 (id=1972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x30}, 0x0) 588.326275ms ago: executing program 6 (id=1973): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) 574.720175ms ago: executing program 5 (id=1974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 506.165647ms ago: executing program 2 (id=1975): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000500)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}]}]}]}, 0x34}}, 0x4) 475.603059ms ago: executing program 0 (id=1976): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0xd8, 0x76, 0xfffff024}, {0x6, 0x26, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) connect$qrtr(0xffffffffffffffff, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x2}, 0xc) socket(0x848000000015, 0x805, 0x0) r2 = socket$inet(0x2, 0x3, 0x104) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, 0x0, 0x0) 438.108971ms ago: executing program 6 (id=1977): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x84}, 0x300) 277.277248ms ago: executing program 2 (id=1978): listen(0xffffffffffffffff, 0x20) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x6102}, {0xffffffffffffffff, 0xc33c}], 0x2, 0x11fb) shutdown(0xffffffffffffffff, 0x0) 276.684052ms ago: executing program 6 (id=1979): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) 178.251547ms ago: executing program 0 (id=1980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f0000001bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) recvmmsg$unix(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) 79.411815ms ago: executing program 5 (id=1981): r0 = socket(0x18, 0x4, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendmmsg$alg(r0, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40880}], 0x1, 0x40804) 76.033478ms ago: executing program 0 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r1, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 0 (id=1983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) kernel console output (not intermixed with test programs): ][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.087321][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.138029][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.171689][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.171803][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.279803][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.338836][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.340017][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.388212][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.388384][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.421794][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.557816][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.715877][ T5801] veth0_vlan: entered promiscuous mode [ 96.772385][ T5801] veth1_vlan: entered promiscuous mode [ 96.821389][ T5807] veth0_vlan: entered promiscuous mode [ 96.835683][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.919340][ T5807] veth1_vlan: entered promiscuous mode [ 97.013355][ T5801] veth0_macvtap: entered promiscuous mode [ 97.069940][ T5801] veth1_macvtap: entered promiscuous mode [ 97.128078][ T5807] veth0_macvtap: entered promiscuous mode [ 97.160939][ T5807] veth1_macvtap: entered promiscuous mode [ 97.171471][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.175692][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.215878][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.240940][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.270569][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.280889][ T1320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.289600][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.291555][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.308373][ T1399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327836][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.436033][ T1482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.447530][ T1482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.462817][ T1458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507275][ T1458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.661413][ T5812] veth0_vlan: entered promiscuous mode [ 97.717626][ T1458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.717649][ T1458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.790717][ T5815] veth0_vlan: entered promiscuous mode [ 97.811469][ T5812] veth1_vlan: entered promiscuous mode [ 97.866554][ T5815] veth1_vlan: entered promiscuous mode [ 97.868448][ T1458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.868465][ T1458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.872230][ T5811] veth0_vlan: entered promiscuous mode [ 97.961250][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.961269][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.970281][ T5811] veth1_vlan: entered promiscuous mode [ 98.059313][ T5812] veth0_macvtap: entered promiscuous mode [ 98.082466][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.082483][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.121755][ T5812] veth1_macvtap: entered promiscuous mode [ 98.139518][ T5815] veth0_macvtap: entered promiscuous mode [ 98.224703][ T5815] veth1_macvtap: entered promiscuous mode [ 98.279093][ T5811] veth0_macvtap: entered promiscuous mode [ 98.311950][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.366863][ T5811] veth1_macvtap: entered promiscuous mode [ 98.382250][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.395913][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.478765][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.479077][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.502456][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.527966][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.547985][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.580645][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.593715][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.623081][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.632132][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.670166][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.763413][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.927370][ T1458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.928187][ T1458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.935150][ T1458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.983082][ T1458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.009514][ T5922] syzkaller0: entered promiscuous mode [ 99.009541][ T5922] syzkaller0: entered allmulticast mode [ 99.027264][ T5921] tipc: Started in network mode [ 99.027297][ T5921] tipc: Node identity da15b322ac06, cluster identity 4711 [ 99.028845][ T5921] tipc: Enabled bearer , priority 0 [ 99.071012][ T5921] tipc: Resetting bearer [ 99.145091][ T5919] tipc: Resetting bearer [ 99.298099][ T5919] tipc: Disabling bearer [ 99.550404][ T1482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.550423][ T1482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.820967][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.820996][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.949152][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.949171][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.040176][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.040197][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.064968][ T9] IPVS: starting estimator thread 0... [ 100.113837][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.113858][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.155459][ T5943] IPVS: using max 10 ests per chain, 24000 per kthread [ 100.365374][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.365392][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.665020][ T5971] veth0_to_team: entered promiscuous mode [ 101.688805][ T5974] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 102.025809][ T5981] Bluetooth: MGMT ver 1.23 [ 102.306498][ T5992] Bluetooth: hci0: service_discovery: expected 4 bytes, got 70 bytes [ 102.412724][ T5987] geneve2: entered promiscuous mode [ 102.684781][ T5998] Zero length message leads to an empty skb [ 103.103833][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 103.677535][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 104.094055][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.094214][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 104.656250][ T6028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 104.761696][ T6028] ip6tnl0: entered promiscuous mode [ 104.761722][ T6028] ip6tnl0: entered allmulticast mode [ 104.925298][ T6030] gretap1: entered promiscuous mode [ 105.743865][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42'. [ 107.125085][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 107.503311][ T6082] veth0_to_bond: entered promiscuous mode [ 107.503339][ T6082] veth0_to_bond: entered allmulticast mode [ 107.551645][ T6084] gretap1: entered promiscuous mode [ 107.683558][ T6087] macvlan2: entered promiscuous mode [ 107.683584][ T6087] macvlan2: entered allmulticast mode [ 107.773859][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.774025][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.319068][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 108.326183][ T6099] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 108.403235][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 108.834557][ T6109] netlink: 14 bytes leftover after parsing attributes in process `syz.2.58'. [ 109.026041][ T6101] veth0_to_team: entered promiscuous mode [ 109.026068][ T6101] veth0_to_team: entered allmulticast mode [ 109.232394][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 109.255733][ T6104] gretap1: entered promiscuous mode [ 109.482259][ T6105] macvlan2: entered promiscuous mode [ 109.482285][ T6105] macvlan2: entered allmulticast mode [ 109.594529][ T6108] warning: `syz.2.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.746621][ T6119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'. [ 110.041895][ T5986] Set syz1 is full, maxelem 65536 reached [ 110.546851][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 110.762813][ T6126] netlink: 'syz.0.64': attribute type 5 has an invalid length. [ 110.762828][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 110.853779][ T6109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.923708][ T6109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.968015][ T6109] bond0 (unregistering): Released all slaves [ 111.185264][ T6133] veth0_to_team: entered promiscuous mode [ 111.185290][ T6133] veth0_to_team: entered allmulticast mode [ 111.213853][ T6135] gretap1: entered promiscuous mode [ 111.301724][ T6137] macvlan2: entered promiscuous mode [ 111.301742][ T6137] macvlan2: entered allmulticast mode [ 111.666998][ T6146] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 112.043401][ T6154] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 112.043424][ T6154] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.72'. [ 112.259153][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.282752][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.286339][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.318118][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.541500][ T6168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.774280][ T6172] netlink: 14 bytes leftover after parsing attributes in process `syz.4.77'. [ 113.311546][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 113.680231][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 113.854220][ T6172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.914561][ T6172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.938822][ T6172] bond0 (unregistering): Released all slaves [ 114.164793][ T6205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.88'. [ 114.398636][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.90'. [ 114.651688][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.668424][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.125277][ T6196] veth0_to_bond: left promiscuous mode [ 115.125296][ T6196] veth0_to_bond: left allmulticast mode [ 115.139923][ T6196] veth0_to_team: left promiscuous mode [ 115.168323][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.177171][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.163118][ T6198] hsr_slave_0: left promiscuous mode [ 116.203822][ T6198] hsr_slave_1: left promiscuous mode [ 116.308692][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.88'. [ 116.323446][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.343088][ T156] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.400940][ T156] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.414180][ T156] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.414446][ T156] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.503413][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 117.116235][ T6240] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 117.116255][ T6240] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.102'. [ 117.187639][ T6239] netlink: 14 bytes leftover after parsing attributes in process `syz.3.100'. [ 117.211969][ T6245] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 117.234576][ T6246] netlink: 'syz.4.104': attribute type 3 has an invalid length. [ 117.234595][ T6246] netlink: 64 bytes leftover after parsing attributes in process `syz.4.104'. [ 117.234743][ T6246] block nbd0: not configured, cannot reconfigure [ 118.185507][ T6239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.243716][ T6239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.284346][ T6239] bond0 (unregistering): Released all slaves [ 118.415094][ T6250] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 118.416321][ T6250] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 118.622400][ T6267] vlan2: entered allmulticast mode [ 118.622421][ T6267] bridge0: entered allmulticast mode [ 118.632432][ T6267] bridge0: entered promiscuous mode [ 118.633723][ T6267] bridge0: left promiscuous mode [ 118.636516][ T6267] bond0: (slave vlan2): making interface the new active one [ 118.637017][ T6267] bridge0: entered promiscuous mode [ 118.638132][ T6267] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 118.649721][ T6268] syzkaller0: entered promiscuous mode [ 118.649745][ T6268] syzkaller0: entered allmulticast mode [ 118.711318][ T6282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 119.166898][ T6293] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 119.166924][ T6293] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.115'. [ 119.790516][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 120.258721][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 120.882050][ T6335] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 120.936468][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 121.120962][ T6348] gretap1: entered promiscuous mode [ 121.148605][ T6348] bond1: (slave gretap1): making interface the new active one [ 121.157543][ T6348] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.202035][ T6335] macvlan2: entered promiscuous mode [ 121.202067][ T6335] macvlan2: entered allmulticast mode [ 121.215014][ T6335] bond1: entered promiscuous mode [ 121.218081][ T6335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.219132][ T6335] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 121.221570][ T6335] bond1: left promiscuous mode [ 122.090206][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 122.322155][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 122.400763][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.506987][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.144'. [ 122.860765][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 123.056011][ T6384] macsec0: entered promiscuous mode [ 123.056269][ T6384] macsec0: entered allmulticast mode [ 123.056283][ T6384] veth1_macvtap: entered allmulticast mode [ 123.074514][ T6378] gretap1: entered promiscuous mode [ 123.162403][ T6386] macvlan2: entered promiscuous mode [ 123.162420][ T6386] macvlan2: entered allmulticast mode [ 123.352125][ T6402] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 123.539578][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.539652][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.570498][ T6410] gretap1: entered promiscuous mode [ 123.588214][ T6410] bond0: (slave gretap1): making interface the new active one [ 123.589238][ T6410] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 123.659962][ T6402] macvlan2: entered promiscuous mode [ 123.659987][ T6402] macvlan2: entered allmulticast mode [ 123.660592][ T6402] bond0: entered promiscuous mode [ 123.661193][ T6402] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.661819][ T6402] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 123.702864][ T6402] bond0: left promiscuous mode [ 123.747744][ T6414] __nla_validate_parse: 1 callbacks suppressed [ 123.747763][ T6414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.151'. [ 124.220081][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'. [ 124.654989][ T6443] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 124.734967][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.162'. [ 124.854934][ T6450] gretap1: entered promiscuous mode [ 124.875604][ T6450] bond0: (slave gretap1): making interface the new active one [ 124.876696][ T6450] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 124.910834][ T6443] macvlan2: entered promiscuous mode [ 124.910860][ T6443] macvlan2: entered allmulticast mode [ 124.914057][ T6443] bond0: entered promiscuous mode [ 124.914994][ T6443] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.915893][ T6443] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 124.916417][ T6443] bond0: left promiscuous mode [ 125.773234][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.774952][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.010994][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 127.129528][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 127.273604][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.182'. [ 128.798203][ T6545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.197'. [ 129.494914][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 129.657370][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 129.968285][ T6557] syz.4.201 (6557) used greatest stack depth: 17272 bytes left [ 130.173514][ T6577] netlink: 14 bytes leftover after parsing attributes in process `syz.1.207'. [ 130.206899][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.210'. [ 130.813261][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.815259][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.145099][ T6577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.203598][ T6577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.228184][ T6577] bond0 (unregistering): Released all slaves [ 131.568662][ T6598] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 131.833756][ T6604] gretap1: entered promiscuous mode [ 131.840460][ T6604] bond0: (slave gretap1): making interface the new active one [ 131.846392][ T6604] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 131.860234][ T6606] macvlan2: entered promiscuous mode [ 131.860260][ T6606] macvlan2: entered allmulticast mode [ 131.864605][ T6606] bond0: entered promiscuous mode [ 131.867367][ T6606] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.869590][ T6606] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 131.872250][ T6606] bond0: left promiscuous mode [ 132.914039][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.914138][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.143483][ T6630] geneve2: entered promiscuous mode [ 133.311677][ T6632] netlink: 14 bytes leftover after parsing attributes in process `syz.1.224'. [ 133.491979][ T6640] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 133.605129][ T6640] macvlan2: entered promiscuous mode [ 133.605154][ T6640] macvlan2: entered allmulticast mode [ 133.608332][ T6640] bond2: entered promiscuous mode [ 133.609342][ T6640] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.715867][ T6640] bond2: left promiscuous mode [ 133.773108][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.773282][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.626145][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 134.654935][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.241'. [ 134.752824][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 134.959644][ T6691] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 135.168708][ T6692] gretap1: entered promiscuous mode [ 135.174278][ T6692] bond1: (slave gretap1): making interface the new active one [ 135.175344][ T6692] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.193376][ T6694] macvlan2: entered promiscuous mode [ 135.193401][ T6694] macvlan2: entered allmulticast mode [ 135.194391][ T6694] bond1: entered promiscuous mode [ 135.195500][ T6694] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.196570][ T6694] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 135.198990][ T6694] bond1: left promiscuous mode [ 135.526401][ T6708] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 135.666835][ T6712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.255'. [ 135.787542][ T6716] netlink: 64 bytes leftover after parsing attributes in process `syz.4.257'. [ 135.787576][ T6716] block nbd0: not configured, cannot reconfigure [ 135.901806][ T6720] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 135.940198][ T6721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.258'. [ 135.957258][ T6722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.259'. [ 136.016473][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.021218][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.033650][ T1020] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.232128][ T1020] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.237987][ T1482] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.306100][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 136.481426][ T6737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 136.514191][ T1482] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.573748][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.262'. [ 138.001044][ T6778] block nbd0: not configured, cannot reconfigure [ 138.227913][ T6783] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 138.539473][ T6787] bond1: entered promiscuous mode [ 138.539502][ T6787] bond1: entered allmulticast mode [ 138.540056][ T6787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.601884][ T6791] macvlan2: entered promiscuous mode [ 138.601911][ T6791] macvlan2: entered allmulticast mode [ 138.610434][ T6791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.263695][ T6823] __nla_validate_parse: 7 callbacks suppressed [ 140.263713][ T6823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.296'. [ 140.913644][ T6857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.309'. [ 141.283076][ T6869] netlink: 14 bytes leftover after parsing attributes in process `syz.2.313'. [ 142.326676][ T6887] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 142.615397][ T6913] netlink: 'syz.4.329': attribute type 1 has an invalid length. [ 142.706004][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 143.089990][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 143.109155][ T6925] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 143.173820][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.333'. [ 143.380266][ T6930] bond1: entered promiscuous mode [ 143.380297][ T6930] bond1: entered allmulticast mode [ 143.380831][ T6930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.501575][ T6935] macvlan2: entered promiscuous mode [ 143.501600][ T6935] macvlan2: entered allmulticast mode [ 143.515380][ T6935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.955481][ T6956] netlink: 14 bytes leftover after parsing attributes in process `syz.2.337'. [ 143.966055][ T6940] tipc: Enabling of bearer rejected, failed to enable media [ 145.163023][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 145.714765][ T6994] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 145.786367][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 145.793625][ T6996] bond2: entered promiscuous mode [ 145.793653][ T6996] bond2: entered allmulticast mode [ 145.794103][ T6996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.809822][ T6994] macvlan2: entered promiscuous mode [ 145.809857][ T6994] macvlan2: entered allmulticast mode [ 145.811945][ T6994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.292170][ T1482] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.294435][ T1482] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.294481][ T1482] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.294515][ T1482] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.792063][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.359'. [ 147.168524][ T7028] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 147.224581][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.365'. [ 147.344886][ T7029] bond3: entered promiscuous mode [ 147.344913][ T7029] bond3: entered allmulticast mode [ 147.365999][ T7029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.429135][ T7028] macvlan2: entered promiscuous mode [ 147.429161][ T7028] macvlan2: entered allmulticast mode [ 147.433669][ T7028] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.495566][ T7038] netlink: 'syz.4.368': attribute type 1 has an invalid length. [ 147.887728][ T7042] macvlan2: entered promiscuous mode [ 147.887754][ T7042] macvlan2: entered allmulticast mode [ 147.889130][ T7042] bond2: entered promiscuous mode [ 147.891316][ T7042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.895393][ T7047] netlink: 14 bytes leftover after parsing attributes in process `syz.2.370'. [ 148.023889][ T7042] bond2: left promiscuous mode [ 149.144586][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 149.249994][ T7082] netlink: 'syz.2.384': attribute type 21 has an invalid length. [ 149.250017][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 149.310384][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 149.439321][ T7082] netlink: 'syz.2.384': attribute type 21 has an invalid length. [ 149.439344][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 149.593211][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.594159][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.594202][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.594237][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.905011][ T7068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.379'. [ 150.090877][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 151.120940][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 151.276017][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 152.432848][ T7163] tipc: Enabling of bearer rejected, failed to enable media [ 153.035188][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 153.251848][ T156] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.287897][ T156] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.287945][ T156] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.287980][ T156] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.693241][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.693307][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 154.194710][ T7218] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.210113][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.212474][ T7218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.818618][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 154.969102][ T7240] netlink: 64 bytes leftover after parsing attributes in process `syz.4.436'. [ 154.969132][ T7240] block nbd0: not configured, cannot reconfigure [ 155.202616][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.437'. [ 156.433768][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 157.150973][ T7281] syz.0.454 (7281) used greatest stack depth: 17136 bytes left [ 157.183739][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 157.433318][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 159.418429][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 159.548021][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 160.615778][ T7374] bpq0: entered promiscuous mode [ 160.966366][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 161.730542][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 162.386660][ T7416] netlink: 120 bytes leftover after parsing attributes in process `syz.2.498'. [ 162.445044][ T7418] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 162.516858][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 162.600489][ T7418] macvlan2: entered promiscuous mode [ 162.600514][ T7418] macvlan2: entered allmulticast mode [ 162.601693][ T7418] bond2: entered promiscuous mode [ 162.602505][ T7418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.723657][ T7418] bond2: left promiscuous mode [ 163.753749][ T7447] netlink: 120 bytes leftover after parsing attributes in process `syz.2.510'. [ 164.908632][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 165.522694][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 165.923529][ T7494] geneve2: entered promiscuous mode [ 166.142748][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 166.684149][ T7514] netlink: 48 bytes leftover after parsing attributes in process `syz.2.533'. [ 167.388094][ T7529] netlink: 'syz.4.539': attribute type 3 has an invalid length. [ 167.910968][ T7543] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 168.050676][ T7543] macvlan2: entered promiscuous mode [ 168.051946][ T7543] macvlan2: entered allmulticast mode [ 168.074116][ T7543] bond3: entered promiscuous mode [ 168.074863][ T7543] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.196135][ T7543] bond3: left promiscuous mode [ 168.810942][ T7558] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 168.877766][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 169.271218][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 169.783285][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 169.894123][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'. [ 170.224907][ T7590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.561'. [ 170.224927][ T7590] netlink: 52 bytes leftover after parsing attributes in process `syz.4.561'. [ 170.354256][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.504030][ T7599] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 170.565007][ T7603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'. [ 171.099669][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 171.537148][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 171.814073][ T7637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.576'. [ 171.895423][ T7639] netlink: 'syz.3.578': attribute type 3 has an invalid length. [ 173.611797][ T7686] tipc: Started in network mode [ 173.611828][ T7686] tipc: Node identity 32eefeb7c8ac, cluster identity 4711 [ 173.612209][ T7686] tipc: Enabled bearer , priority 0 [ 173.686076][ T7683] tipc: Resetting bearer [ 173.784565][ T7682] tipc: Disabling bearer [ 174.825966][ T7730] geneve2: entered promiscuous mode [ 174.912877][ T1482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.973129][ T1482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.038884][ T1482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.042189][ T7739] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 175.062564][ T1482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.097838][ T7744] __nla_validate_parse: 7 callbacks suppressed [ 175.097856][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 175.169195][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 175.172563][ T7739] bond3: entered promiscuous mode [ 175.172589][ T7739] bond3: entered allmulticast mode [ 175.175483][ T7739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.189429][ T7739] macvlan2: entered promiscuous mode [ 175.189452][ T7739] macvlan2: entered allmulticast mode [ 175.191620][ T7739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.324764][ T7747] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 175.348527][ T7749] netlink: 116 bytes leftover after parsing attributes in process `syz.0.619'. [ 175.348546][ T7749] nbd: couldn't find a device at index 196608 [ 175.404531][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 176.464998][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 177.082579][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 177.173204][ T7800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.637'. [ 177.173226][ T7800] netlink: 52 bytes leftover after parsing attributes in process `syz.3.637'. [ 177.325762][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 177.487762][ T7812] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 177.576912][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.643'. [ 178.420387][ T7846] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 178.612115][ T7846] macvlan2: entered promiscuous mode [ 178.612141][ T7846] macvlan2: entered allmulticast mode [ 178.628335][ T7846] bond4: entered promiscuous mode [ 178.629130][ T7846] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.827064][ T7846] bond4: left promiscuous mode [ 180.138335][ T7891] __nla_validate_parse: 2 callbacks suppressed [ 180.138354][ T7891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.668'. [ 180.323844][ T7897] netlink: 116 bytes leftover after parsing attributes in process `syz.0.670'. [ 180.323878][ T7897] block nbd0: not configured, cannot reconfigure [ 180.456205][ T7891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.668'. [ 180.820819][ T7907] tipc: Enabled bearer , priority 0 [ 181.001393][ T7908] syzkaller0: entered promiscuous mode [ 181.001421][ T7908] syzkaller0: entered allmulticast mode [ 181.002264][ T7908] tipc: Resetting bearer [ 181.196623][ T7905] tipc: Resetting bearer [ 181.236687][ T7927] netlink: 116 bytes leftover after parsing attributes in process `syz.0.683'. [ 181.236719][ T7927] block nbd0: not configured, cannot reconfigure [ 181.406797][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.685'. [ 181.894566][ T6060] tipc: Node number set to 4198694583 [ 183.693067][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.693234][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 192.071631][ T7905] tipc: Disabling bearer [ 192.198281][ T7932] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'. [ 192.201225][ T7932] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.418368][ T7968] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 192.507679][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'. [ 192.628959][ T7968] macvlan2: entered promiscuous mode [ 192.628976][ T7968] macvlan2: entered allmulticast mode [ 192.629829][ T7968] bond3: entered promiscuous mode [ 192.630382][ T7968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.743529][ T7968] bond3: left promiscuous mode [ 193.176637][ T7979] netlink: 'syz.4.696': attribute type 1 has an invalid length. [ 193.266183][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.696'. [ 193.289880][ T7985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.696'. [ 193.305708][ T7985] bond4: entered promiscuous mode [ 193.305728][ T7985] bond4: entered allmulticast mode [ 193.306013][ T7985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.467010][ T7979] macvlan2: entered promiscuous mode [ 193.467035][ T7979] macvlan2: entered allmulticast mode [ 193.472696][ T7979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.845202][ T7997] syzkaller0: entered promiscuous mode [ 193.845229][ T7997] syzkaller0: entered allmulticast mode [ 194.187819][ T8017] bpq0: left promiscuous mode [ 194.327202][ T8020] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 194.339049][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339125][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.390261][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 194.550563][ T8020] macvlan2: entered promiscuous mode [ 194.550589][ T8020] macvlan2: entered allmulticast mode [ 194.551876][ T8020] bond5: entered promiscuous mode [ 194.573379][ T8020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.650351][ T8031] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 194.695417][ T8020] bond5: left promiscuous mode [ 194.712046][ T8036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.710'. [ 194.906627][ T8036] bond5: entered promiscuous mode [ 194.906658][ T8036] bond5: entered allmulticast mode [ 194.907244][ T8036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.624501][ T8069] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 195.698820][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.723'. [ 195.929562][ T8078] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 196.005499][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 196.029901][ T8073] bond6: entered promiscuous mode [ 196.029931][ T8073] bond6: entered allmulticast mode [ 196.030491][ T8073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.093431][ T61] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 196.093756][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.192659][ T8089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.728'. [ 196.212426][ T8084] macvlan2: entered promiscuous mode [ 196.212451][ T8084] macvlan2: entered allmulticast mode [ 196.236074][ T8084] bond5: entered promiscuous mode [ 196.240158][ T8084] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.365231][ T8084] bond5: left promiscuous mode [ 196.543409][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'. [ 197.201711][ T8115] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 197.281012][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 197.281034][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 197.345373][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.737'. [ 197.346757][ T8115] bond6: entered promiscuous mode [ 197.346782][ T8115] bond6: entered allmulticast mode [ 197.347242][ T8115] 8021q: adding VLAN 0 to HW filter on device bond6 [ 197.436048][ T8115] macvlan2: entered promiscuous mode [ 197.436073][ T8115] macvlan2: entered allmulticast mode [ 197.441463][ T8115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.595041][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.742'. [ 198.404616][ T8154] netlink: 14 bytes leftover after parsing attributes in process `syz.0.747'. [ 198.851705][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 198.851740][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 198.987498][ T8175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.756'. [ 199.000392][ T8177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.757'. [ 199.383609][ T8154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.444273][ T8154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.468177][ T8154] bond0 (unregistering): Released all slaves [ 199.552116][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.757'. [ 199.773158][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.773221][ T5805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 199.789561][ T8186] netlink: 'syz.0.760': attribute type 1 has an invalid length. [ 199.789580][ T8186] netlink: 'syz.0.760': attribute type 2 has an invalid length. [ 201.331420][ T8237] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 201.360238][ T8237] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 201.360711][ T8237] batadv0: entered promiscuous mode [ 201.360732][ T8237] batadv0: entered allmulticast mode [ 201.361126][ T8237] bridge0: port 3(batadv0) entered blocking state [ 201.361392][ T8237] bridge0: port 3(batadv0) entered disabled state [ 201.743336][ T1482] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 201.743354][ T1482] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 201.943133][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.943198][ T5805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 202.639653][ T8274] __nla_validate_parse: 17 callbacks suppressed [ 202.639672][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 202.796041][ T8280] netlink: 40 bytes leftover after parsing attributes in process `syz.3.793'. [ 202.947042][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 203.212425][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 203.212458][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 203.279310][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 203.279342][ T8292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.797'. [ 203.657794][ T8294] syzkaller0: entered promiscuous mode [ 203.657821][ T8294] syzkaller0: entered allmulticast mode [ 204.049786][ T8318] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 204.103549][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.806'. [ 204.105191][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 204.291693][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 204.371692][ T8318] macvlan2: entered promiscuous mode [ 204.371719][ T8318] macvlan2: entered allmulticast mode [ 204.388279][ T8318] bond7: entered promiscuous mode [ 204.389276][ T8318] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 204.514708][ T8318] bond7: left promiscuous mode [ 205.363459][ T8338] bridge2: entered promiscuous mode [ 205.363486][ T8338] bridge2: entered allmulticast mode [ 205.429672][ T8338] team0: Port device bridge2 added [ 205.448001][ T8339] bridge0: port 3(team0) entered blocking state [ 205.465993][ T8339] bridge0: port 3(team0) entered disabled state [ 205.466620][ T8339] team0: entered allmulticast mode [ 205.466638][ T8339] team_slave_0: entered allmulticast mode [ 205.466759][ T8339] team_slave_1: entered allmulticast mode [ 205.510643][ T8339] team0: entered promiscuous mode [ 205.510665][ T8339] team_slave_0: entered promiscuous mode [ 205.511132][ T8339] team_slave_1: entered promiscuous mode [ 205.545966][ T8339] bridge0: port 3(team0) entered blocking state [ 205.546046][ T8339] bridge0: port 3(team0) entered forwarding state [ 205.845463][ T8360] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 206.090847][ T8362] bond4: entered promiscuous mode [ 206.090877][ T8362] bond4: entered allmulticast mode [ 206.091321][ T8362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.438364][ T8383] netlink: 'syz.1.822': attribute type 1 has an invalid length. [ 206.529439][ T8386] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 206.729115][ T8383] macvlan2: entered promiscuous mode [ 206.729139][ T8383] macvlan2: entered allmulticast mode [ 206.730414][ T8383] bond6: entered promiscuous mode [ 206.731285][ T8383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.823596][ T8383] bond6: left promiscuous mode [ 207.434411][ T8386] bond5: entered promiscuous mode [ 207.434437][ T8386] bond5: entered allmulticast mode [ 207.434836][ T8386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.496764][ T8396] macvlan2: entered promiscuous mode [ 207.496789][ T8396] macvlan2: entered allmulticast mode [ 207.498878][ T8396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.819883][ T8405] syzkaller0: entered promiscuous mode [ 207.819909][ T8405] syzkaller0: entered allmulticast mode [ 208.219317][ T8445] netlink: 'syz.2.833': attribute type 5 has an invalid length. [ 208.442488][ T8451] __nla_validate_parse: 12 callbacks suppressed [ 208.442507][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 208.503085][ T5805] Bluetooth: hci4: command tx timeout [ 208.737606][ T8463] netlink: 'syz.1.838': attribute type 1 has an invalid length. [ 208.793379][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 209.043495][ T8477] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 209.095468][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 209.150994][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 209.201143][ T8465] bond7: entered promiscuous mode [ 209.201169][ T8465] bond7: entered allmulticast mode [ 209.201730][ T8465] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.639784][ T8481] bond8: entered promiscuous mode [ 209.639811][ T8481] bond8: entered allmulticast mode [ 209.640268][ T8481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.730950][ T8473] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.779626][ T8477] macvlan2: entered promiscuous mode [ 209.779651][ T8477] macvlan2: entered allmulticast mode [ 209.781797][ T8477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.988777][ T8511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'. [ 210.046217][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.846'. [ 210.664625][ T8527] syzkaller0: entered promiscuous mode [ 210.664651][ T8527] syzkaller0: entered allmulticast mode [ 211.371142][ T8550] netlink: 14 bytes leftover after parsing attributes in process `syz.4.851'. [ 211.508755][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 211.773058][ T8500] Bluetooth: hci2: command 0x0406 tx timeout [ 211.773797][ T8500] Bluetooth: hci1: command 0x0406 tx timeout [ 211.774063][ T8500] Bluetooth: hci3: command 0x0406 tx timeout [ 212.092552][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 212.092588][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 213.827583][ T8615] __nla_validate_parse: 3 callbacks suppressed [ 213.827610][ T8615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.864'. [ 214.188085][ T8628] netlink: 168 bytes leftover after parsing attributes in process `syz.4.868'. [ 214.600184][ T8641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.869'. [ 215.647514][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 215.846356][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 215.862706][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 215.972880][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 215.978711][ T8677] IPv6: Can't replace route, no match found [ 216.813874][ T8712] netlink: 'syz.3.895': attribute type 4 has an invalid length. [ 217.450402][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 217.674915][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 217.677905][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.900'. [ 217.811200][ T8741] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 218.400579][ T8747] bond9: entered promiscuous mode [ 218.400607][ T8747] bond9: entered allmulticast mode [ 218.411347][ T8747] 8021q: adding VLAN 0 to HW filter on device bond9 [ 218.507421][ T8752] macvlan2: entered promiscuous mode [ 218.507445][ T8752] macvlan2: entered allmulticast mode [ 218.521390][ T8752] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.043423][ T8761] syzkaller1: entered promiscuous mode [ 219.043448][ T8761] syzkaller1: entered allmulticast mode [ 219.484109][ T8778] netlink: 'syz.2.914': attribute type 19 has an invalid length. [ 219.484129][ T8778] __nla_validate_parse: 4 callbacks suppressed [ 219.484139][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 219.520948][ T8780] netlink: 14 bytes leftover after parsing attributes in process `syz.3.915'. [ 219.541977][ T8778] netlink: 'syz.2.914': attribute type 19 has an invalid length. [ 219.542000][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 219.872603][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 220.240854][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 220.388236][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 220.388270][ T8803] netlink: 'syz.0.922': attribute type 21 has an invalid length. [ 220.388283][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 220.479610][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.923'. [ 220.531850][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 220.531885][ T8803] netlink: 'syz.0.922': attribute type 21 has an invalid length. [ 220.531898][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 221.896414][ T8847] netlink: 'syz.1.937': attribute type 1 has an invalid length. [ 222.092074][ T8853] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 222.386865][ T8857] bond7: entered promiscuous mode [ 222.386898][ T8857] bond7: entered allmulticast mode [ 222.403340][ T8857] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.452577][ T8861] macvlan2: entered promiscuous mode [ 222.452601][ T8861] macvlan2: entered allmulticast mode [ 222.460171][ T8861] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.527471][ T8915] __nla_validate_parse: 8 callbacks suppressed [ 224.527491][ T8915] netlink: 168 bytes leftover after parsing attributes in process `syz.2.958'. [ 224.807906][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 226.748706][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 227.498139][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.985'. [ 227.546593][ T8988] : renamed from bond_slave_0 [ 227.591616][ T8991] erspan0: entered promiscuous mode [ 227.909824][ T9002] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 227.970446][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.989'. [ 228.239904][ T9004] bond8: entered promiscuous mode [ 228.239933][ T9004] bond8: entered allmulticast mode [ 228.241603][ T9004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.296174][ T9002] macvlan2: entered promiscuous mode [ 228.296197][ T9002] macvlan2: entered allmulticast mode [ 228.324866][ T9002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.329955][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'. [ 230.676844][ T9074] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 230.739981][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 230.854823][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 230.875066][ T9080] bond6: entered promiscuous mode [ 230.875097][ T9080] bond6: entered allmulticast mode [ 230.875585][ T9080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.992849][ T9078] macvlan2: entered promiscuous mode [ 230.992874][ T9078] macvlan2: entered allmulticast mode [ 231.019205][ T9078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.282743][ T9092] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1019'. [ 231.302835][ T9094] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1018'. [ 231.448052][ T9098] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 231.505176][ T9099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1021'. [ 231.561660][ T9099] bond0: entered promiscuous mode [ 231.561690][ T9099] bond0: entered allmulticast mode [ 231.562606][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.616204][ T9098] macvlan2: entered promiscuous mode [ 231.616231][ T9098] macvlan2: entered allmulticast mode [ 231.618317][ T9098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.937725][ T9102] batadv1: entered promiscuous mode [ 232.263097][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 232.263273][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 232.871368][ T9135] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1032'. [ 233.095037][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1036'. [ 233.985112][ T9169] tipc: Enabling of bearer rejected, failed to enable media [ 234.008564][ T9169] syzkaller0: entered promiscuous mode [ 234.008590][ T9169] syzkaller0: entered allmulticast mode [ 234.756201][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 235.923098][ T9238] tipc: Enabling of bearer rejected, failed to enable media [ 235.935941][ T9235] syzkaller0: entered promiscuous mode [ 235.935965][ T9235] syzkaller0: entered allmulticast mode [ 236.617778][ T9259] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 236.670849][ T9263] __nla_validate_parse: 1 callbacks suppressed [ 236.670869][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'. [ 237.137196][ T9263] bond6: entered promiscuous mode [ 237.137225][ T9263] bond6: entered allmulticast mode [ 237.138186][ T9263] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.289546][ T9269] macvlan2: entered promiscuous mode [ 237.289572][ T9269] macvlan2: entered allmulticast mode [ 237.291758][ T9269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.946796][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1086'. [ 238.162410][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'. [ 238.354565][ T9305] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1091'. [ 241.346478][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 241.569176][ T9422] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 241.649288][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 241.762375][ T9425] bond10: entered promiscuous mode [ 241.762402][ T9425] bond10: entered allmulticast mode [ 241.779062][ T9425] 8021q: adding VLAN 0 to HW filter on device bond10 [ 241.840193][ T9422] macvlan2: entered promiscuous mode [ 241.840219][ T9422] macvlan2: entered allmulticast mode [ 241.842534][ T9422] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.345265][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 243.578937][ T9490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 243.773105][ T5805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.338014][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1177'. [ 244.705315][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1180'. [ 245.656509][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 245.656541][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1188'. [ 245.708745][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 245.708778][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1188'. [ 245.905338][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 245.905660][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 246.412705][ T9588] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 246.505894][ T9588] bond9: entered promiscuous mode [ 246.505922][ T9588] bond9: entered allmulticast mode [ 246.506385][ T9588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.524505][ T9588] macvlan2: entered promiscuous mode [ 246.524540][ T9588] macvlan2: entered allmulticast mode [ 246.532729][ T9588] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.648376][ T9568] syz.4.1191 (9568) used greatest stack depth: 16952 bytes left [ 248.522706][ T9656] __nla_validate_parse: 9 callbacks suppressed [ 248.522727][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 248.522741][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 248.667178][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 248.878585][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'. [ 248.878848][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'. [ 249.066287][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'. [ 250.489150][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1243'. [ 250.489170][ T9737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1243'. [ 250.654432][ T5805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 251.437282][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 251.680653][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 254.569017][ T9869] __nla_validate_parse: 6 callbacks suppressed [ 254.569036][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1282'. [ 254.789119][ T9874] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1283'. [ 254.973092][ T5805] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.150266][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1287'. [ 255.150425][ T9884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1287'. [ 255.491486][ T9886] syzkaller0: entered promiscuous mode [ 255.491514][ T9886] syzkaller0: entered allmulticast mode [ 255.779248][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779322][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.804391][ T9924] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1297'. [ 266.829552][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1300'. [ 266.937739][ T9926] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1300'. [ 267.004396][ T9930] netlink: 'syz.4.1301': attribute type 1 has an invalid length. [ 267.063029][ T9932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 267.087740][ T9932] bond11: entered promiscuous mode [ 267.087759][ T9932] bond11: entered allmulticast mode [ 267.088276][ T9932] 8021q: adding VLAN 0 to HW filter on device bond11 [ 267.155034][ T9930] macvlan2: entered promiscuous mode [ 267.155051][ T9930] macvlan2: entered allmulticast mode [ 267.158276][ T9930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.874121][ T9946] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1306'. [ 267.965548][ T9955] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 268.098470][ T9960] bond12: (slave vxcan7): The slave device specified does not support setting the MAC address [ 268.099550][ T9960] bond12: (slave vxcan7): Error -95 calling set_mac_address [ 268.155377][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1310'. [ 268.317372][ T9954] syzkaller0: entered promiscuous mode [ 268.317400][ T9954] syzkaller0: entered allmulticast mode [ 279.299815][ T9969] syzkaller0: entered promiscuous mode [ 279.299847][ T9969] syzkaller0: entered allmulticast mode [ 279.609896][ T9992] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1317'. [ 279.624717][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 279.624743][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 279.624781][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 279.628650][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 279.628676][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 283.811179][ T5122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.821415][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.847653][ T5122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.848705][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.849383][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.300820][ T5122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 284.319113][ T5122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 284.327213][ T5122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 284.328297][ T5122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.329326][ T5122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 285.933192][ T5122] Bluetooth: hci5: command tx timeout [ 286.413163][ T5122] Bluetooth: hci6: command tx timeout [ 288.013186][ T5122] Bluetooth: hci5: command tx timeout [ 288.494764][ T5122] Bluetooth: hci6: command tx timeout [ 290.093078][ T5122] Bluetooth: hci5: command tx timeout [ 290.549385][T10011] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 290.573229][ T5122] Bluetooth: hci6: command tx timeout [ 290.598945][T10013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'. [ 290.705971][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1323'. [ 290.712735][T10015] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 290.714042][T10015] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 290.993674][T10018] syzkaller0: entered promiscuous mode [ 290.993702][T10018] syzkaller0: entered allmulticast mode [ 292.173196][ T5122] Bluetooth: hci5: command tx timeout [ 292.653114][ T5122] Bluetooth: hci6: command tx timeout [ 292.968837][T10038] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1331'. [ 294.735119][ T5122] Bluetooth: hci6: command tx timeout [ 294.855851][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.859107][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.860599][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.862023][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.862825][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.893179][ T5122] Bluetooth: hci2: command tx timeout [ 298.973231][ T5122] Bluetooth: hci2: command tx timeout [ 301.053227][ T5122] Bluetooth: hci2: command tx timeout [ 302.309672][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 302.336103][ T1482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.336138][ T1482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.535897][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 302.810375][ T1482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.810397][ T1482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.139595][ T5122] Bluetooth: hci2: command tx timeout [ 303.188659][ T1482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.188680][ T1482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.577881][ T1482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.578716][ T1482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.961945][T10002] chnl_net:caif_netlink_parms(): no params data found [ 304.104015][T10090] netlink: 'syz.2.1341': attribute type 12 has an invalid length. [ 304.105173][T10006] chnl_net:caif_netlink_parms(): no params data found [ 304.200519][T10091] netlink: 'syz.2.1341': attribute type 4 has an invalid length. [ 304.942439][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.942577][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.942824][T10002] bridge_slave_0: entered allmulticast mode [ 304.970214][T10002] bridge_slave_0: entered promiscuous mode [ 305.181075][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.181279][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.181474][T10002] bridge_slave_1: entered allmulticast mode [ 305.187636][T10002] bridge_slave_1: entered promiscuous mode [ 305.213044][ T5122] Bluetooth: hci2: command tx timeout [ 305.604580][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.604730][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.605010][T10006] bridge_slave_0: entered allmulticast mode [ 305.606810][T10006] bridge_slave_0: entered promiscuous mode [ 305.644140][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.714104][ T1482] bridge_slave_0: left allmulticast mode [ 305.714295][ T1482] bridge_slave_0: left promiscuous mode [ 305.714457][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.583577][ T1482] bond0 (unregistering): (slave gretap1): Releasing active interface [ 307.035449][ T1482] bond0 (unregistering): Released all slaves [ 307.113659][T10131] netlink: 'syz.2.1352': attribute type 30 has an invalid length. [ 307.716595][ T1482] bond1 (unregistering): Released all slaves [ 308.350786][ T1482] bond2 (unregistering): Released all slaves [ 309.026781][ T1482] bond3 (unregistering): Released all slaves [ 309.039037][ T1482] bond4 (unregistering): Released all slaves [ 309.051975][ T1482] bond5 (unregistering): Released all slaves [ 309.725657][ T1482] bond6 (unregistering): Released all slaves [ 310.365598][ T1482] bond7 (unregistering): Released all slaves [ 311.006122][ T1482] bond8 (unregistering): Released all slaves [ 311.627523][ T1482] bond9 (unregistering): Released all slaves [ 311.734920][T10006] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.735043][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.735230][T10006] bridge_slave_1: entered allmulticast mode [ 311.737024][T10006] bridge_slave_1: entered promiscuous mode [ 311.741556][T10131] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 311.756980][T10002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.760503][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.878779][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.892778][T10002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.011154][T10041] chnl_net:caif_netlink_parms(): no params data found [ 312.028996][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.082621][T10132] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 312.101642][T10132] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 312.347126][T10006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.435940][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.441360][T10006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.519274][T10002] team0: Port device team_slave_0 added [ 312.532390][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 312.696920][T10002] team0: Port device team_slave_1 added [ 312.697451][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.001110][T10150] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1359'. [ 313.015253][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.170917][T10006] team0: Port device team_slave_0 added [ 313.278666][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.296167][T10006] team0: Port device team_slave_1 added [ 313.307781][T10002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.307797][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.307820][T10002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.309489][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.515299][T10002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.515316][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.515346][T10002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.516249][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.734861][T10132] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.737294][T10006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.737308][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.737327][T10006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.738974][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.739103][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.739289][T10041] bridge_slave_0: entered allmulticast mode [ 313.746616][T10041] bridge_slave_0: entered promiscuous mode [ 313.762506][T10006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.762522][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.762546][T10006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.766048][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.766477][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.766686][T10041] bridge_slave_1: entered allmulticast mode [ 313.769350][T10041] bridge_slave_1: entered promiscuous mode [ 314.386285][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.406796][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.700994][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 316.303843][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 316.494241][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 317.222010][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.222079][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.638174][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.644300][T10002] hsr_slave_0: entered promiscuous mode [ 318.645624][T10002] hsr_slave_1: entered promiscuous mode [ 318.646546][T10002] debugfs: 'hsr0' already exists in 'hsr' [ 318.646585][T10002] Cannot create hsr debugfs directory [ 318.851238][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.254066][T10188] netlink: 'syz.0.1370': attribute type 12 has an invalid length. [ 319.278151][T10006] hsr_slave_0: entered promiscuous mode [ 319.285342][T10006] hsr_slave_1: entered promiscuous mode [ 319.286367][T10006] debugfs: 'hsr0' already exists in 'hsr' [ 319.286390][T10006] Cannot create hsr debugfs directory [ 319.570504][T10041] team0: Port device team_slave_0 added [ 319.887292][T10041] team0: Port device team_slave_1 added [ 320.446840][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 320.696269][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.696286][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.696650][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.759465][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.759482][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.759507][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.615626][T10041] hsr_slave_0: entered promiscuous mode [ 321.617146][T10041] hsr_slave_1: entered promiscuous mode [ 321.618152][T10041] debugfs: 'hsr0' already exists in 'hsr' [ 321.618175][T10041] Cannot create hsr debugfs directory [ 322.862532][ T1482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.862554][ T1482] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.218260][ T1482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.218295][ T1482] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.542578][ T1482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.542610][ T1482] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.764789][T10002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.015806][ T1482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.015840][ T1482] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.055317][T10002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.133134][T10002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.342469][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'. [ 324.380257][T10002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 324.574557][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1404'. [ 324.574580][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 324.574595][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 324.778151][T10006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.834971][T10006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.906516][T10006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.049256][T10006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.320403][ T1482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.320425][ T1482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.483254][T10041] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.735472][ T1482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.735493][ T1482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.803463][T10041] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.839748][T10041] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.905418][T10041] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.098404][ T1482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.098439][ T1482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.153040][T10331] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.396452][ T1482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.396486][ T1482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.128791][T10002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.338828][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.418018][ T1482] bridge_slave_0: left allmulticast mode [ 327.418045][ T1482] bridge_slave_0: left promiscuous mode [ 327.418305][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.523017][ T1482] bridge0: port 3(batadv0) entered disabled state [ 327.657098][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.767788][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 327.794526][ T1482] bridge_slave_0: left allmulticast mode [ 327.794554][ T1482] bridge_slave_0: left promiscuous mode [ 327.794807][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.543652][ T1482] bond0 (unregistering): (slave gretap1): Releasing active interface [ 330.009614][ T1482] bond0 (unregistering): Released all slaves [ 330.656287][ T1482] bond1 (unregistering): Released all slaves [ 330.668096][ T1482] bond2 (unregistering): Released all slaves [ 330.681461][ T1482] bond3 (unregistering): Released all slaves [ 330.695712][ T1482] bond4 (unregistering): Released all slaves [ 330.711159][ T1482] bond5 (unregistering): Released all slaves [ 330.731897][ T1482] bond6 (unregistering): Released all slaves [ 331.416739][ T1482] bond7 (unregistering): Released all slaves [ 331.873588][ T1482] bond0 (unregistering): (slave gretap1): Releasing active interface [ 332.287853][ T1482] bond0 (unregistering): Released all slaves [ 332.299972][ T1482] bond1 (unregistering): Released all slaves [ 332.312131][ T1482] bond2 (unregistering): Released all slaves [ 332.325206][ T1482] bond3 (unregistering): Released all slaves [ 333.017662][ T1482] bond4 (unregistering): Released all slaves [ 333.030877][ T1482] bond5 (unregistering): Released all slaves [ 333.669189][ T1482] bond6 (unregistering): Released all slaves [ 333.681870][ T1482] bond7 (unregistering): Released all slaves [ 334.349540][ T1482] bond8 (unregistering): Released all slaves [ 335.008771][ T1482] bond9 (unregistering): Released all slaves [ 335.685665][ T1482] bond10 (unregistering): Released all slaves [ 336.418957][ T1482] bond11 (unregistering): Released all slaves [ 336.431571][ T1482] bond12 (unregistering): Released all slaves [ 336.584034][T10381] kthread_run failed with err -4 [ 336.584183][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 336.655392][T10002] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.727389][T10006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.737011][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.737152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.782726][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.785449][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.896736][T10397] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 336.896978][T10006] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.965642][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.997336][T10397] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 336.998565][T10397] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 337.133952][T10400] macvlan2: entered promiscuous mode [ 337.133978][T10400] macvlan2: entered allmulticast mode [ 337.136041][T10400] bond7: entered promiscuous mode [ 337.136854][T10400] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.263982][T10400] bond7: left promiscuous mode [ 337.486717][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.487302][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.660000][T10418] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1421'. [ 337.812249][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.815864][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.911168][T10408] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.000311][T10041] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.347987][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.348913][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.767755][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.767923][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.464632][ T1482] hsr_slave_0: left promiscuous mode [ 339.503125][ T1482] hsr_slave_1: left promiscuous mode [ 339.504001][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.504133][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.554614][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.554646][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.762138][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 339.763037][ T1482] hsr_slave_0: left promiscuous mode [ 339.783141][ T1482] hsr_slave_1: left promiscuous mode [ 339.784090][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.784114][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.833823][ T1482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.833851][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.955685][ T1482] veth1_macvtap: left allmulticast mode [ 339.955926][ T1482] veth1_macvtap: left promiscuous mode [ 339.956067][ T1482] veth0_macvtap: left promiscuous mode [ 339.956214][ T1482] veth1_vlan: left promiscuous mode [ 339.956436][ T1482] veth0_vlan: left promiscuous mode [ 340.063612][ T1482] veth1_macvtap: left promiscuous mode [ 340.063678][ T1482] veth0_macvtap: left promiscuous mode [ 340.063833][ T1482] veth1_vlan: left promiscuous mode [ 340.063940][ T1482] veth0_vlan: left promiscuous mode [ 342.343837][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 342.533974][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 344.584386][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.599283][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.605302][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.629928][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.632757][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.636641][ T8566] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.636906][ T8566] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.638326][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.639467][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.640188][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.733226][ T5805] Bluetooth: hci4: command tx timeout [ 346.733236][ T5122] Bluetooth: hci3: command tx timeout [ 346.734605][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 346.953682][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 348.813115][ T5122] Bluetooth: hci3: command tx timeout [ 348.813146][ T5122] Bluetooth: hci4: command tx timeout [ 349.182548][T10448] kthread_run failed with err -4 [ 349.182702][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 349.532930][T10457] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.612962][T10455] virt_wifi0 speed is unknown, defaulting to 1000 [ 350.236170][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1432'. [ 350.888348][T10500] netlink: 'syz.2.1435': attribute type 12 has an invalid length. [ 350.893145][ T5805] Bluetooth: hci4: command tx timeout [ 350.893175][ T5805] Bluetooth: hci3: command tx timeout [ 350.971965][T10500] netlink: 'syz.2.1435': attribute type 4 has an invalid length. [ 351.341923][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.478097][T10457] chnl_net:caif_netlink_parms(): no params data found [ 351.670243][T10455] chnl_net:caif_netlink_parms(): no params data found [ 351.694256][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 351.896082][T10511] vlan2: entered promiscuous mode [ 351.896106][T10511] dummy0: entered promiscuous mode [ 352.368458][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 352.575162][T10544] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 352.686436][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1442'. [ 352.931860][T10548] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 352.935682][T10548] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 352.973210][ T5122] Bluetooth: hci3: command tx timeout [ 352.973242][ T5122] Bluetooth: hci4: command tx timeout [ 353.037395][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.037523][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.037760][T10457] bridge_slave_0: entered allmulticast mode [ 353.040563][T10457] bridge_slave_0: entered promiscuous mode [ 353.060729][T10553] macvlan2: entered promiscuous mode [ 353.060755][T10553] macvlan2: entered allmulticast mode [ 353.061685][T10553] bond8: entered promiscuous mode [ 353.062579][T10553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 353.136937][T10553] bond8: left promiscuous mode [ 353.404801][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.405012][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.405207][T10457] bridge_slave_1: entered allmulticast mode [ 353.408266][T10457] bridge_slave_1: entered promiscuous mode [ 353.666464][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.666698][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.666931][T10455] bridge_slave_0: entered allmulticast mode [ 353.671030][T10455] bridge_slave_0: entered promiscuous mode [ 353.814036][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.814262][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.814515][T10455] bridge_slave_1: entered allmulticast mode [ 353.817337][T10455] bridge_slave_1: entered promiscuous mode [ 353.830471][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.941437][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.156043][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.370305][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.386666][T10457] team0: Port device team_slave_0 added [ 354.487833][T10457] team0: Port device team_slave_1 added [ 354.603519][T10580] tipc: Enabled bearer , priority 0 [ 354.715225][T10590] nbd: must specify a size in bytes for the device [ 354.825211][T10577] syzkaller0: entered promiscuous mode [ 354.825239][T10577] syzkaller0: entered allmulticast mode [ 354.972801][ T5122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.973158][T10587] tipc: Resetting bearer [ 354.976916][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.978470][T10455] team0: Port device team_slave_0 added [ 355.009846][ T5122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.017783][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.022650][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.056526][ T5805] Bluetooth: hci4: command tx timeout [ 355.176912][T10576] tipc: Resetting bearer [ 355.304822][T10576] tipc: Disabling bearer [ 355.451468][T10455] team0: Port device team_slave_1 added [ 355.668199][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.668215][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.668235][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.205324][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.205339][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.205354][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.480060][T10606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1455'. [ 356.550918][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.550935][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.550952][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.594070][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.594086][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.594110][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.084085][T10612] tipc: Enabled bearer , priority 0 [ 357.098050][T10457] hsr_slave_0: entered promiscuous mode [ 357.099418][T10457] hsr_slave_1: entered promiscuous mode [ 357.100395][T10457] debugfs: 'hsr0' already exists in 'hsr' [ 357.100417][T10457] Cannot create hsr debugfs directory [ 357.133332][ T5122] Bluetooth: hci5: command tx timeout [ 357.195048][T10591] virt_wifi0 speed is unknown, defaulting to 1000 [ 357.275875][T10611] tipc: Disabling bearer [ 357.945534][T10455] hsr_slave_0: entered promiscuous mode [ 357.947461][T10455] hsr_slave_1: entered promiscuous mode [ 357.948575][T10455] debugfs: 'hsr0' already exists in 'hsr' [ 357.948599][T10455] Cannot create hsr debugfs directory [ 358.187818][T10640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.805988][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 359.043414][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 359.213285][ T5122] Bluetooth: hci5: command tx timeout [ 360.060511][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 360.203676][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 360.457091][T10591] chnl_net:caif_netlink_parms(): no params data found [ 360.963808][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.964208][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.964393][T10591] bridge_slave_0: entered allmulticast mode [ 360.966289][T10591] bridge_slave_0: entered promiscuous mode [ 360.977252][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.977599][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.977839][T10591] bridge_slave_1: entered allmulticast mode [ 360.980523][T10591] bridge_slave_1: entered promiscuous mode [ 361.182096][T10698] openvswitch: netlink: Key type 70 is out of range max 32 [ 361.251468][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.294249][ T5122] Bluetooth: hci5: command tx timeout [ 361.320722][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.660023][T10591] team0: Port device team_slave_0 added [ 361.696101][T10591] team0: Port device team_slave_1 added [ 362.093818][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.093835][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.093859][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.099837][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.099852][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.099873][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.220939][ T1482] bridge_slave_1: left allmulticast mode [ 362.220964][ T1482] bridge_slave_1: left promiscuous mode [ 362.221228][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.305397][ T1482] bridge_slave_0: left allmulticast mode [ 362.305425][ T1482] bridge_slave_0: left promiscuous mode [ 362.305684][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.408287][ T1482] bridge_slave_1: left allmulticast mode [ 362.408308][ T1482] bridge_slave_1: left promiscuous mode [ 362.408459][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.494775][ T1482] bridge_slave_0: left allmulticast mode [ 362.494805][ T1482] bridge_slave_0: left promiscuous mode [ 362.494987][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.385913][ T5122] Bluetooth: hci5: command tx timeout [ 363.488008][T10743] netlink: 'syz.2.1485': attribute type 1 has an invalid length. [ 364.313838][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.373888][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.396140][ T1482] bond0 (unregistering): Released all slaves [ 365.453443][ T5122] Bluetooth: hci5: command tx timeout [ 365.734416][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.793567][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.815185][ T1482] bond0 (unregistering): Released all slaves [ 366.088845][T10743] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 366.351501][T10591] hsr_slave_0: entered promiscuous mode [ 366.374317][T10591] hsr_slave_1: entered promiscuous mode [ 366.375408][T10591] debugfs: 'hsr0' already exists in 'hsr' [ 366.375432][T10591] Cannot create hsr debugfs directory [ 366.613061][ T1482] hsr_slave_0: left promiscuous mode [ 366.653203][ T1482] hsr_slave_1: left promiscuous mode [ 366.654412][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.683645][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.853127][ T1482] hsr_slave_0: left promiscuous mode [ 366.893578][ T1482] hsr_slave_1: left promiscuous mode [ 366.895930][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.916125][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.893659][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 368.083725][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 370.795172][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 370.994048][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 374.801887][T10801] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 374.801927][T10801] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 374.801945][T10801] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 374.856059][T10800] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 375.554526][T10823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1501'. [ 375.554785][T10823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1501'. [ 376.126342][ T1482] bridge_slave_1: left allmulticast mode [ 376.126370][ T1482] bridge_slave_1: left promiscuous mode [ 376.126615][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.185173][ T1482] bridge_slave_0: left allmulticast mode [ 376.185200][ T1482] bridge_slave_0: left promiscuous mode [ 376.187219][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.400894][T10859] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1507'. [ 377.753895][ T1482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.824836][ T1482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.847661][ T1482] bond0 (unregistering): Released all slaves [ 378.233085][ T1482] hsr_slave_0: left promiscuous mode [ 378.255825][ T1482] hsr_slave_1: left promiscuous mode [ 378.256802][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.303936][ T1482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.659143][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.659207][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.533845][ T1482] team0 (unregistering): Port device team_slave_1 removed [ 379.713586][ T1482] team0 (unregistering): Port device team_slave_0 removed [ 381.663617][T10457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.729387][T10457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 381.787049][T10457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.862483][T10457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.071272][T10455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.101591][T10907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1518'. [ 382.150151][T10455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.233369][T10455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.370390][T10455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 382.638568][T10591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 382.676317][T10591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 382.776384][T10591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 382.860506][T10591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 383.357564][T10457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.529249][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.596732][T10455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.607107][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.607313][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.651049][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.651220][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.750614][T10455] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.830885][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.831114][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.850418][T10591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.869275][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.869374][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.940217][T10591] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.978225][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.978348][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.214675][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.214837][ T1458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.514818][T10980] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1527'. [ 384.776973][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.115951][T10455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.355550][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.839646][T10457] veth0_vlan: entered promiscuous mode [ 385.880689][T10457] veth1_vlan: entered promiscuous mode [ 386.115218][T10457] veth0_macvtap: entered promiscuous mode [ 386.147986][T10457] veth1_macvtap: entered promiscuous mode [ 386.216720][T10455] veth0_vlan: entered promiscuous mode [ 386.286083][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.301048][T10455] veth1_vlan: entered promiscuous mode [ 386.349835][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.408738][ T1399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.418052][ T1399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.427901][ T1399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.432994][ T1399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.656625][T10591] veth0_vlan: entered promiscuous mode [ 386.877738][T11045] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1537'. [ 386.930332][T10455] veth0_macvtap: entered promiscuous mode [ 386.980560][T10591] veth1_vlan: entered promiscuous mode [ 387.009897][T10455] veth1_macvtap: entered promiscuous mode [ 387.244260][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.244280][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.345138][T10455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.460931][T10455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.497523][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.497543][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.514954][T10591] veth0_macvtap: entered promiscuous mode [ 387.520990][ T1020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.527989][ T1020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.544028][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.557514][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.582450][T10591] veth1_macvtap: entered promiscuous mode [ 387.894062][T10591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.961386][T10591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.997585][ T1020] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.017517][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.017537][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.020398][ T1020] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.047117][ T1020] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.086489][ T1020] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.219469][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.219488][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.766645][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.766663][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.995745][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.995765][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.229679][T11089] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1547'. [ 390.273312][T11111] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1553'. [ 391.042943][T11122] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 391.632238][T11154] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1564'. [ 392.416473][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1573'. [ 392.525225][T11154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.583673][T11154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.625682][T11154] bond0 (unregistering): Released all slaves [ 392.691495][T11159] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1568'. [ 392.962348][T11180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1574'. [ 393.403295][T11199] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 393.505967][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 393.522485][T11209] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1585'. [ 393.719087][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1590'. [ 393.806045][T11218] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 393.906610][T11214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1589'. [ 394.087299][T11223] bond_slave_0: entered promiscuous mode [ 394.087379][T11223] bond_slave_1: entered promiscuous mode [ 394.091329][T11223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.117408][T11223] bond_slave_0: left promiscuous mode [ 394.117491][T11223] bond_slave_1: left promiscuous mode [ 394.383556][T11234] netlink: 'syz.0.1592': attribute type 4 has an invalid length. [ 394.479359][T11232] netlink: 'syz.0.1592': attribute type 12 has an invalid length. [ 395.053677][ T5122] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 395.081997][T11255] __nla_validate_parse: 1 callbacks suppressed [ 395.082016][T11255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1599'. [ 395.145068][T11262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'. [ 395.258772][T11255] vlan3: entered promiscuous mode [ 395.461310][T11262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1601'. [ 396.849171][T11329] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1626'. [ 397.659365][T11351] tipc: Started in network mode [ 397.659408][T11351] tipc: Node identity 160d4f142012, cluster identity 4711 [ 397.662516][T11351] tipc: Enabled bearer , priority 0 [ 397.682465][T11351] syzkaller0: entered promiscuous mode [ 397.682489][T11351] syzkaller0: entered allmulticast mode [ 397.699755][T11351] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 397.910788][T11357] tipc: Resetting bearer [ 398.148489][T11348] tipc: Resetting bearer [ 398.307708][T11375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1641'. [ 398.338704][T11348] tipc: Disabling bearer [ 398.538497][T11375] bond_slave_0: entered promiscuous mode [ 398.538532][T11375] bond_slave_1: entered promiscuous mode [ 398.539717][T11375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 398.551337][T11375] bond_slave_0: left promiscuous mode [ 398.551413][T11375] bond_slave_1: left promiscuous mode [ 398.865670][T11383] netlink: 'syz.0.1643': attribute type 25 has an invalid length. [ 398.996900][T11395] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 399.586046][T11413] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1651'. [ 400.083361][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 400.476994][T11443] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1658'. [ 400.479772][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.480747][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.120645][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.142419][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.044454][T11443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.103869][T11443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.146490][T11443] bond0 (unregistering): Released all slaves [ 403.198488][T11455] geneve2: entered promiscuous mode [ 403.201306][ T68] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.242342][ T68] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.254698][ T68] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.254744][ T68] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.563013][T11510] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1678'. [ 404.784942][T11517] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1683'. [ 405.214848][T11535] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 405.544142][T11510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.623900][T11510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.644298][T11510] bond0 (unregistering): Released all slaves [ 406.018472][T11546] netlink: 'syz.7.1691': attribute type 1 has an invalid length. [ 406.148238][T11546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1691'. [ 406.182319][T11554] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.194150][T11554] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 406.381194][T11564] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1696'. [ 406.385734][T11555] gretap1: entered promiscuous mode [ 406.396195][T11555] bond0: (slave gretap1): making interface the new active one [ 406.396761][T11555] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 406.415957][T11564] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 406.433172][T11561] macvlan2: entered promiscuous mode [ 406.433195][T11561] macvlan2: entered allmulticast mode [ 406.438219][T11561] bond0: entered promiscuous mode [ 406.439343][T11561] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 406.492137][T11561] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 406.583871][T11561] bond0: left promiscuous mode [ 406.981052][T11585] syzkaller0: entered promiscuous mode [ 406.981079][T11585] syzkaller0: entered allmulticast mode [ 407.327564][T11601] netlink: 'syz.7.1703': attribute type 4 has an invalid length. [ 408.120239][T11619] nbd: must specify an index to disconnect [ 409.316012][T11663] netlink: 'syz.0.1722': attribute type 4 has an invalid length. [ 410.047739][T11680] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1725'. [ 410.048500][T11680] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 411.107082][T11717] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.151842][T11712] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.162111][ T31] syz2: Port: 1 Link DOWN [ 411.181964][T11719] geneve3: entered promiscuous mode [ 411.198282][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.214555][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.214603][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.214639][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.732095][T11740] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 412.445694][T11753] tipc: Started in network mode [ 412.445955][T11753] tipc: Node identity 7a0fdd5325a7, cluster identity 4711 [ 412.448085][T11753] tipc: Enabled bearer , priority 0 [ 412.455234][T11753] syzkaller0: entered promiscuous mode [ 412.455257][T11753] syzkaller0: entered allmulticast mode [ 412.521835][T11753] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 412.724695][T11768] netlink: 'syz.6.1748': attribute type 4 has an invalid length. [ 413.493305][T11764] netlink: 'syz.6.1748': attribute type 12 has an invalid length. [ 413.497391][T11766] tipc: Resetting bearer [ 413.633342][ T10] tipc: Node number set to 1604902227 [ 413.843356][T11751] tipc: Resetting bearer [ 413.973898][T11751] tipc: Disabling bearer [ 414.313672][T11797] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.054771][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1769'. [ 415.396027][T11846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1773'. [ 416.373843][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1784'. [ 416.563326][T11888] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1786'. [ 416.666053][T11891] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1789'. [ 416.763567][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1791'. [ 417.125110][T11905] virt_wifi0 speed is unknown, defaulting to 1000 [ 417.841805][T11944] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1804'. [ 418.211090][T11959] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1808'. [ 418.578436][T11972] netlink: 'syz.0.1810': attribute type 4 has an invalid length. [ 419.118790][T11969] netlink: 'syz.0.1810': attribute type 12 has an invalid length. [ 419.914099][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 420.069806][T12011] virt_wifi0 speed is unknown, defaulting to 1000 [ 420.239725][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 420.714235][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1830'. [ 420.813177][T12038] vlan2: entered promiscuous mode [ 420.813199][T12038] team0: entered promiscuous mode [ 420.813212][T12038] team_slave_0: entered promiscuous mode [ 420.813573][T12038] team_slave_1: entered promiscuous mode [ 421.570224][T12065] netlink: 'syz.5.1838': attribute type 1 has an invalid length. [ 421.684186][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1838'. [ 422.019893][T12069] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 422.020885][T12069] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 422.118714][T12072] bond0: entered promiscuous mode [ 422.118736][T12072] bond0: entered allmulticast mode [ 422.119434][T12072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.121332][T12074] tipc: Enabled bearer , priority 0 [ 422.154914][T12075] gretap1: entered promiscuous mode [ 422.169229][T12081] macvlan2: entered promiscuous mode [ 422.169253][T12081] macvlan2: entered allmulticast mode [ 422.170718][T12081] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 422.182674][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1841'. [ 422.234966][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1841'. [ 422.524308][T12068] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 422.524642][T12078] syzkaller0: entered promiscuous mode [ 422.524664][T12078] syzkaller0: entered allmulticast mode [ 422.532073][T12089] tipc: Resetting bearer [ 422.624966][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.624997][T12091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.677232][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.677262][T12091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.880075][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1844'. [ 422.965709][T12066] tipc: Resetting bearer [ 423.153784][T12066] tipc: Disabling bearer [ 423.237642][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1847'. [ 423.396458][T12120] vlan2: entered promiscuous mode [ 423.396480][T12120] team0: entered promiscuous mode [ 423.396501][T12120] team_slave_0: entered promiscuous mode [ 423.396753][T12120] team_slave_1: entered promiscuous mode [ 424.041569][T12134] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.909944][T12176] tipc: Enabled bearer , priority 0 [ 424.916984][T12176] syzkaller0: entered promiscuous mode [ 424.917011][T12176] syzkaller0: entered allmulticast mode [ 424.929850][T12176] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 425.024229][T12179] tipc: Resetting bearer [ 425.111735][T12186] netlink: 'syz.6.1866': attribute type 1 has an invalid length. [ 425.173198][T12174] tipc: Resetting bearer [ 425.217111][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1866'. [ 425.277061][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1868'. [ 425.364576][T12174] tipc: Disabling bearer [ 425.614296][T12191] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 425.615384][T12191] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 425.737268][T12195] bond0: entered promiscuous mode [ 425.737299][T12195] bond0: entered allmulticast mode [ 425.750266][T12195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.788966][T12196] gretap1: entered promiscuous mode [ 425.808692][T12197] macvlan2: entered promiscuous mode [ 425.808717][T12197] macvlan2: entered allmulticast mode [ 425.810594][T12197] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.205183][T12207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.412407][T12230] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1877'. [ 426.809158][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 426.928109][T12243] vlan2: entered promiscuous mode [ 427.179691][T12255] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 427.211884][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1886'. [ 427.355151][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 427.445832][T12257] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 427.446873][T12257] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 427.609617][T12255] bond9: entered promiscuous mode [ 427.609648][T12255] bond9: entered allmulticast mode [ 427.612348][T12255] 8021q: adding VLAN 0 to HW filter on device bond9 [ 427.675559][T12270] macvlan2: entered promiscuous mode [ 427.675587][T12270] macvlan2: entered allmulticast mode [ 427.677570][T12270] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 428.075186][T12265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.242115][T12277] virt_wifi0 speed is unknown, defaulting to 1000 [ 428.448341][T12295] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1898'. [ 429.049099][T12307] geneve2: entered promiscuous mode [ 429.561101][T12322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1910'. [ 429.575776][T12322] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 429.605039][T12327] netlink: 'syz.5.1908': attribute type 12 has an invalid length. [ 429.609283][T12327] netlink: 'syz.5.1908': attribute type 4 has an invalid length. [ 429.831755][T12332] netlink: 'syz.7.1911': attribute type 12 has an invalid length. [ 429.834156][T12332] netlink: 'syz.7.1911': attribute type 4 has an invalid length. [ 430.159096][T12325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.595025][T12346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1916'. [ 430.860473][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1920'. [ 430.949190][T12360] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1923'. [ 430.965149][T12360] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 431.177124][T12371] tipc: Enabled bearer , priority 0 [ 431.177952][T12371] syzkaller0: entered promiscuous mode [ 431.177975][T12371] syzkaller0: entered allmulticast mode [ 431.237642][T12370] tipc: Resetting bearer [ 431.395506][T12370] tipc: Disabling bearer [ 431.904055][T12405] syzkaller0: entered promiscuous mode [ 431.906732][T12405] syzkaller0: entered allmulticast mode [ 432.115201][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 432.345588][T12415] vlan2: entered promiscuous mode [ 432.345609][T12415] team0: entered promiscuous mode [ 432.345622][T12415] team_slave_0: entered promiscuous mode [ 432.345862][T12415] team_slave_1: entered promiscuous mode [ 433.196723][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1953'. [ 434.687597][T12516] netlink: 'syz.6.1979': attribute type 12 has an invalid length. [ 434.689596][T12516] netlink: 'syz.6.1979': attribute type 4 has an invalid length. [ 434.953574][T12524] tipc: Enabled bearer , priority 0 [ 434.956063][T12524] syzkaller[ 434.956063][T12524] syzkaller0: entered promiscuous mode [ 434.956089][T12524] syzkaller0: entered allmulticast mode [ 434.961851][T12524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 434.973094][ C1] ================================================================== [ 434.973111][ C1] BUG: KASAN: slab-use-after-free in rose_send_frame+0x73/0x220 [ 434.973148][ C1] Read of size 8 at addr ffff88805b70f020 by task ktimers/1/29 [ 434.973164][ C1] [ 434.973186][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 434.973210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.973229][ C1] Call Trace: [ 434.973239][ C1] [ 434.973248][ C1] dump_stack_lvl+0x189/0x250 [ 434.973272][ C1] ? __kasan_check_byte+0x12/0x40 [ 434.973293][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.973309][ C1] ? lock_release+0x4b/0x3e0 [ 434.973329][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 434.973352][ C1] print_report+0xca/0x240 [ 434.973379][ C1] ? rose_send_frame+0x73/0x220 [ 434.973399][ C1] kasan_report+0x118/0x150 [ 434.973418][ C1] ? __alloc_skb+0x112/0x2d0 [ 434.973445][ C1] ? rose_send_frame+0x73/0x220 [ 434.973469][ C1] rose_send_frame+0x73/0x220 [ 434.973494][ C1] rose_t0timer_expiry+0x143/0x360 [ 434.973517][ C1] call_timer_fn+0x17e/0x5f0 [ 434.973538][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 434.973561][ C1] ? call_timer_fn+0xbe/0x5f0 [ 434.973581][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 434.973604][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.973633][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.973659][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 434.973680][ C1] __run_timer_base+0x648/0x970 [ 434.973716][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 434.973754][ C1] run_timer_softirq+0xb7/0x180 [ 434.973780][ C1] handle_softirqs+0x22f/0x710 [ 434.973815][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 434.973850][ C1] run_ktimerd+0xcf/0x190 [ 434.973870][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 434.973889][ C1] ? schedule+0x91/0x360 [ 434.973920][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 434.973938][ C1] smpboot_thread_fn+0x542/0xa60 [ 434.973957][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 434.973980][ C1] kthread+0x711/0x8a0 [ 434.974001][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 434.974020][ C1] ? __pfx_kthread+0x10/0x10 [ 434.974041][ C1] ? rt_spin_unlock+0x150/0x200 [ 434.974066][ C1] ? rt_spin_unlock+0x161/0x200 [ 434.974088][ C1] ? __pfx_kthread+0x10/0x10 [ 434.974111][ C1] ret_from_fork+0x4bc/0x870 [ 434.974138][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 434.974168][ C1] ? __switch_to_asm+0x39/0x70 [ 434.974193][ C1] ? __switch_to_asm+0x33/0x70 [ 434.974218][ C1] ? __pfx_kthread+0x10/0x10 [ 434.974242][ C1] ret_from_fork_asm+0x1a/0x30 [ 434.974276][ C1] [ 434.974284][ C1] [ 434.974296][ C1] Allocated by task 9690: [ 434.974308][ C1] kasan_save_track+0x3e/0x80 [ 434.974326][ C1] __kasan_kmalloc+0x93/0xb0 [ 434.974344][ C1] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 434.974364][ C1] rose_add_node+0x26f/0xf20 [ 434.974387][ C1] rose_rt_ioctl+0xd74/0x1300 [ 434.974409][ C1] rose_ioctl+0x3ce/0x8b0 [ 434.974426][ C1] sock_do_ioctl+0xdc/0x300 [ 434.974448][ C1] sock_ioctl+0x579/0x790 [ 434.974468][ C1] __se_sys_ioctl+0xff/0x170 [ 434.974494][ C1] do_syscall_64+0xfa/0xfa0 [ 434.974522][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.974542][ C1] [ 434.974547][ C1] Freed by task 16: [ 434.974557][ C1] kasan_save_track+0x3e/0x80 [ 434.974573][ C1] __kasan_save_free_info+0x46/0x50 [ 434.974598][ C1] __kasan_slab_free+0x5c/0x80 [ 434.974616][ C1] kfree+0x197/0x950 [ 434.974643][ C1] rose_timer_expiry+0x4cb/0x600 [ 434.974668][ C1] call_timer_fn+0x17e/0x5f0 [ 434.974687][ C1] __run_timer_base+0x648/0x970 [ 434.974714][ C1] run_timer_softirq+0xb7/0x180 [ 434.974729][ C1] handle_softirqs+0x22f/0x710 [ 434.974756][ C1] run_ktimerd+0xcf/0x190 [ 434.974780][ C1] smpboot_thread_fn+0x542/0xa60 [ 434.974795][ C1] kthread+0x711/0x8a0 [ 434.974813][ C1] ret_from_fork+0x4bc/0x870 [ 434.974838][ C1] ret_from_fork_asm+0x1a/0x30 [ 434.974863][ C1] [ 434.974867][ C1] The buggy address belongs to the object at ffff88805b70f000 [ 434.974867][ C1] which belongs to the cache kmalloc-512 of size 512 [ 434.974885][ C1] The buggy address is located 32 bytes inside of [ 434.974885][ C1] freed 512-byte region [ffff88805b70f000, ffff88805b70f200) [ 434.974908][ C1] [ 434.974913][ C1] The buggy address belongs to the physical page: [ 434.974932][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805b70f400 pfn:0x5b70c [ 434.974954][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.974972][ C1] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 434.974998][ C1] page_type: f5(slab) [ 434.975016][ C1] raw: 0080000000000240 ffff88813ff26c80 ffffea0001729b10 ffffea0000d83e10 [ 434.975035][ C1] raw: ffff88805b70f400 000000000010000a 00000000f5000000 0000000000000000 [ 434.975055][ C1] head: 0080000000000240 ffff88813ff26c80 ffffea0001729b10 ffffea0000d83e10 [ 434.975074][ C1] head: ffff88805b70f400 000000000010000a 00000000f5000000 0000000000000000 [ 434.975093][ C1] head: 0080000000000002 ffffea00016dc301 00000000ffffffff 00000000ffffffff [ 434.975111][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 434.975122][ C1] page dumped because: kasan: bad access detected [ 434.975137][ C1] page_owner tracks the page as allocated [ 434.975145][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5807, tgid 5807 (syz-executor), ts 95307203905, free_ts 0 [ 434.975184][ C1] post_alloc_hook+0x240/0x2a0 [ 434.975202][ C1] get_page_from_freelist+0x28c0/0x2960 [ 434.975226][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 434.975248][ C1] alloc_pages_mpol+0xd1/0x380 [ 434.975269][ C1] allocate_slab+0x96/0x3a0 [ 434.975293][ C1] ___slab_alloc+0xb12/0x13f0 [ 434.975313][ C1] __slab_alloc+0xc6/0x1f0 [ 434.975334][ C1] __kmalloc_cache_noprof+0xec/0x6c0 [ 434.975351][ C1] ____ip_mc_inc_group+0x528/0xdf0 [ 434.975377][ C1] ip_mc_up+0x125/0x300 [ 434.975401][ C1] inetdev_event+0xfb3/0x15b0 [ 434.975420][ C1] notifier_call_chain+0x1b6/0x3e0 [ 434.975438][ C1] __dev_notify_flags+0x18d/0x2e0 [ 434.975464][ C1] netif_change_flags+0xe8/0x1a0 [ 434.975491][ C1] do_setlink+0xc55/0x41c0 [ 434.975517][ C1] rtnl_newlink+0x1619/0x1c80 [ 434.975541][ C1] page_owner free stack trace missing [ 434.975549][ C1] [ 434.975554][ C1] Memory state around the buggy address: [ 434.975565][ C1] ffff88805b70ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 434.975578][ C1] ffff88805b70ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 434.975592][ C1] >ffff88805b70f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.975602][ C1] ^ [ 434.975613][ C1] ffff88805b70f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.975626][ C1] ffff88805b70f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.975636][ C1] ================================================================== [ 434.975659][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.975675][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 434.975700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.975714][ C1] Call Trace: [ 434.975722][ C1] [ 434.975731][ C1] dump_stack_lvl+0x99/0x250 [ 434.975756][ C1] ? __asan_memcpy+0x40/0x70 [ 434.975791][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.975817][ C1] ? __pfx__printk+0x10/0x10 [ 434.975847][ C1] vpanic+0x237/0x6d0 [ 434.975867][ C1] ? __pfx_vpanic+0x10/0x10 [ 434.975892][ C1] panic+0xb9/0xc0 [ 434.975911][ C1] ? __pfx_panic+0x10/0x10 [ 434.975930][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 434.975963][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.975998][ C1] ? rose_send_frame+0x73/0x220 [ 434.976020][ C1] check_panic_on_warn+0x89/0xb0 [ 434.976046][ C1] ? rose_send_frame+0x73/0x220 [ 434.976068][ C1] end_report+0x78/0x160 [ 434.976089][ C1] kasan_report+0x129/0x150 [ 434.976110][ C1] ? __alloc_skb+0x112/0x2d0 [ 434.976138][ C1] ? rose_send_frame+0x73/0x220 [ 434.976166][ C1] rose_send_frame+0x73/0x220 [ 434.976191][ C1] rose_t0timer_expiry+0x143/0x360 [ 434.976217][ C1] call_timer_fn+0x17e/0x5f0 [ 434.976237][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 434.976260][ C1] ? call_timer_fn+0xbe/0x5f0 [ 434.976282][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 434.976308][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 434.976337][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.976366][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 434.976391][ C1] __run_timer_base+0x648/0x970 [ 434.976430][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 434.976469][ C1] run_timer_softirq+0xb7/0x180 [ 434.976489][ C1] handle_softirqs+0x22f/0x710 [ 434.976525][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 434.976560][ C1] run_ktimerd+0xcf/0x190 [ 434.976581][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 434.976602][ C1] ? schedule+0x91/0x360 [ 434.976633][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 434.976652][ C1] smpboot_thread_fn+0x542/0xa60 [ 434.976672][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 434.976697][ C1] kthread+0x711/0x8a0 [ 434.976722][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 434.976742][ C1] ? __pfx_kthread+0x10/0x10 [ 434.976770][ C1] ? rt_spin_unlock+0x150/0x200 [ 434.976798][ C1] ? rt_spin_unlock+0x161/0x200 [ 434.976822][ C1] ? __pfx_kthread+0x10/0x10 [ 434.976846][ C1] ret_from_fork+0x4bc/0x870 [ 434.976877][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 434.976907][ C1] ? __switch_to_asm+0x39/0x70 [ 434.976933][ C1] ? __switch_to_asm+0x33/0x70 [ 434.976958][ C1] ? __pfx_kthread+0x10/0x10 [ 434.976982][ C1] ret_from_fork_asm+0x1a/0x30 [ 434.977018][ C1] [ 434.977292][ C1] Kernel Offset: disabled