last executing test programs: 1.976926158s ago: executing program 2 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250a00000008000300", @ANYRES32=r2, @ANYBLOB="180050800400050008000880ffffffff050002"], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) 1.847531925s ago: executing program 2 (id=1402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a30000000000500040001000000140002"], 0x48}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x4000880) 1.638275322s ago: executing program 2 (id=1406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="578d2cbd7000fddbdf2502000000140001800800020008000000080004"], 0xc4}, 0x1, 0x0, 0x0, 0x28040000}, 0x90) 1.572627234s ago: executing program 2 (id=1408): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x4, &(0x7f0000000000)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.342695803s ago: executing program 2 (id=1413): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000300)={0xa}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 1.213328716s ago: executing program 1 (id=1416): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xfc, 0x9, 0x4b, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0x85e, 0x7}}) 1.048563572s ago: executing program 0 (id=1420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 990.861191ms ago: executing program 1 (id=1422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58010000100013070000000000000000fe80000000000000000000000000001e00000000000000000000ffff0a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d533000000e0000001000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000020000000000000000000000000000000000000000000000000000002000000000000000000000000000000002000000000000000000000067001400636d61632861657329"], 0x158}}, 0x0) 917.201198ms ago: executing program 1 (id=1423): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000002c0)=0x3, 0x4) 910.184649ms ago: executing program 0 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 910.093228ms ago: executing program 4 (id=1425): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x9, 0x1, 0x2}, 0x10) 838.78629ms ago: executing program 3 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 779.90898ms ago: executing program 1 (id=1427): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="dee6", 0x2, 0x44001, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @local, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f000000b9c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xffffab71, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x14002051) 776.016758ms ago: executing program 3 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000201, 0x4) sendmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="d0a42f46b1def4c9f7a84b5cee0ba9dbaebd9ae5914239a4dec1e0cca6b0b8c290ca654d7de092d6b1218eeb18fc4e09eba0a2813f526675e1babad0c7f046ed7c29c6a8d2daf216a2717ed4", 0x4c}, {&(0x7f00000005c0)="0ea461c720cfdb9bf1647f", 0xb}, {&(0x7f00000007c0)="8f5b5e772d791c9c5309a82ea8aa66a9cda5dc3446f50a45bcb055287a35e17b70db89f9de908aaaafb8f23aa327c171f520587ef9d8f9710da41fcd2f4f222206ab33568bc10a35ae9846eaf9b8836fdb61e9f68f731a4b863261eb28980d2759fccf4ef62052675e984d88dcda2a905e521bc68d62252b0c4da1b790a401d91529a114304c50340e16b74515ba945b6d27512801e4fbfd554aa884708d9b948c62ab0831a24a1ea0322f164d6cd77ab48d607f33245f3e", 0xb8}, {&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="a33513ec74357338e8177ccc1554159d8633ec2f912c7e7f65ad6ad0e56a93a751cc77b0bd24149c851c67635aec3ded744f19fe9a21", 0x36}], 0x5}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)="c998a7", 0x3}], 0x1}}], 0x2, 0x4800) 726.652879ms ago: executing program 4 (id=1429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "c69646", 0x4d, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1100, 0x0, 0x9}, {"b6326d4637a97cb43603aefcd3315cb1f7ec4a861d1dc0eaf8c43617930d1e481b7baaa04b84504d8c0b8f41431f3b1d946b9918d45f56812f"}}}}}}}, 0x0) 726.320763ms ago: executing program 0 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000000) 653.146071ms ago: executing program 3 (id=1431): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)='7\x00', 0x2}], 0x1) 643.080222ms ago: executing program 0 (id=1432): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110013004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) 582.770941ms ago: executing program 4 (id=1433): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03000500"], 0x50}}, 0x0) 547.309135ms ago: executing program 1 (id=1434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440", 0x21) 530.054153ms ago: executing program 3 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0xffffffff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 446.849922ms ago: executing program 4 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYBLOB], 0x38}}, 0x0) 446.672449ms ago: executing program 0 (id=1437): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000340)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000040)='GPL\x00', 0x4, 0x76, &(0x7f0000000280)=""/118, 0x41000, 0x10, '\x00', 0x0, 0x5c50eaef8b0ea57b, r1, 0x8, &(0x7f0000000500)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x0, 0x10}, 0x10, 0x30109, r3, 0x9, 0x0, &(0x7f0000000580)=[{0x5, 0x3, 0x7, 0x9}, {0x4, 0x5, 0xd, 0xc}, {0x2, 0x2, 0x7, 0x7}, {0x4, 0x1, 0x10, 0xc}, {0x4, 0x5, 0x9, 0xb}, {0x5, 0x3, 0xa, 0x8}, {0x5, 0x4, 0xe, 0x3}, {0x3, 0x3, 0x2, 0xb}, {0x3, 0x1, 0x4, 0xb}], 0x10, 0x8}, 0x94) unshare(0x6a040000) 432.959857ms ago: executing program 1 (id=1438): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000004840)=""/215, 0xd7}], 0x2}}], 0x1, 0x2000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000300)="11659a431d82681d9b99675b9e580e21", 0x10}], 0x3, 0x0, 0xd8}}], 0x1, 0x8000) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000b7b410c598dd2f76f58e6a6a235f1306f1d4f35eaa6ba7f19d999d0e5948eef14fda1bb7b02816bc55411fd9d447a8d5321b7130cfa66d7d0248eac61336a05a3ab18e73e024a9bfa6309c72735dfb8b1e370433955073b3a13d370ad262caa4a3a4b01dfe563b4e9127b128b74969e7575e015a9574758859d8ce108442bae4fb886558b96be3dbf85d820b09b9854d21330038d9c356118dfd143aca7f3b8ed8530b37c7f984d0d559e5f47b8de37d575e50cd96cac357e6c4270f356c8287e2ba0a8e879d810be493b7fc92dc94744afb5e7ec9d564d46fb91261b03e78baf8389999a898f329485d6ea47ac762afc050e0667282868355", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 405.073126ms ago: executing program 2 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000010101030000000000000000020000000c00198008000100c6040000240001800c000280050001003a000000140001"], 0x44}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0xe, 0x80, 0x4, 0x8001, {{0x37, 0x4, 0x0, 0x5, 0xdc, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast2, @broadcast, {[@generic={0x82, 0x3, "ee"}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xfd, [@rand_addr=0x64010102, @empty, @empty, @rand_addr=0x64010101, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x65, 0x3, 0x6, [{@local, 0xc6a8}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}, {@local, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xa3, 0x3, 0xa, [{@broadcast, 0x2}, {@rand_addr=0x64010100, 0x8}]}, @ssrr={0x89, 0xb, 0x9, [@rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0xb, 0x5c, [@private=0xa010100, @multicast2]}, @cipso={0x86, 0x44, 0x3, [{0x6, 0x5, "94a607"}, {0x0, 0xd, "1f5240796db2db98facc27"}, {0x0, 0xb, "a4c01bf080bd52649a"}, {0x0, 0x2}, {0x0, 0x3, 'B'}, {0x0, 0x11, "e1703ac294356d635ef04deefb0217"}, {0x0, 0xb, "b15e29b9fbb96a45e1"}]}, @generic={0x89, 0x10, "86c0173f79ea7a3b7273bf028a2a"}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x2}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r8, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) sendfile(r1, r0, 0x0, 0xf03a0005) 346.638311ms ago: executing program 3 (id=1440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000008408000000000000180000000000000000000000000000059500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) 328.224895ms ago: executing program 4 (id=1441): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmsg$sock(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="174526561949576491e1ef5c641aec5ad0bab757ca63212d109ac1d255b6fbe05992c436a07e3cdd8101c27d12f396a65c68", 0x32}, {&(0x7f0000000080)="ec4b4630f3d6b163d9214e82380f72e4121e799ac3a281ed0ecbed769bfc6ff662a49988b9310689c0bd08e3be77331162230810fadcac9a4d6e2e2693478d79ff62b63861099b3aa07f324f5d77319146524a4cc6a30ff3a72982bfec55ac7c0b67840910e6815ca51921b98a0c76644b0432148f5cb51a99785d4e0758ec925375fe21731a9220474d4cd9db4910b76b3c36f963ba859192cbe5e89869dbaaf779462446631e779009d836077c99eb78c05643a2", 0xb5}, {&(0x7f0000000140)="e672e8d1d7351593e3f836339397247bd380e67e09643b247ab4e75037b0cf9afdac341de0113598ae7a08aeedbc647324cf167ea15a70a1baafcb659140c0468800cc8340226a9936601913a444de3ac99b128050dde8ff79d36d984c79b50624f19466f54d951a19904ecadcfb5bb195a6ab5b33825d6bce02823661082473f301ce7096d8e565a7000292f4a79e3ad158256b4513a326d56a40bfb0bb8b83c9a3aa4dba996ae739a02c99167a196757222b23b23fc3ec1dd65c50ba81dda471f0e30ccfbae690144aa737c077721bae887717316938cdc9ee59a92be547c0e4216169a9d8c40f", 0xe8}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="4e5869d2db0bff228b32a1bad9d2d471485c5531eeb5d6a498173978b7a9a5ba5fd781d507", 0x25}], 0x5, &(0x7f0000001300)=[@timestamping={{0x14, 0x1, 0x25, 0x97eb}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x78}, 0x48001) connect$unix(0xffffffffffffffff, &(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001440)={{r0}, "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"}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000002440)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f00000024c0)={{0x3, @netrom}, [@default, @bcast, @default, @default, @remote, @rose, @bcast, @netrom]}, &(0x7f0000002540)=0x48, 0x80000) ioctl$SIOCNRDECOBS(r1, 0x89e2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002580)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000003680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000036c0)=0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000039c0)={0x6, 0xe, &(0x7f0000003780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x191, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xb1}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000003800)='syzkaller\x00', 0x4, 0xe2, &(0x7f0000003840)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003940)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000003980)=[{0x2, 0x4, 0x1, 0x9}, {0x4, 0x2, 0xf, 0x3}], 0x10, 0x833}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x1a, 0x4, &(0x7f0000002600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x87f1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000002640)='GPL\x00', 0xffffff7f, 0x1000, &(0x7f0000002680)=""/4096, 0x41000, 0x2, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000003700)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000003740)={0x5, 0xb, 0x6, 0x5}, 0x10, 0x0, r4, 0x6, 0x0, &(0x7f0000003a80)=[{0x1, 0x4, 0x8, 0x8}, {0x0, 0x2, 0xe, 0x2}, {0x5, 0x3, 0x1, 0xc}, {0x2, 0x4, 0x2, 0xc}, {0x3, 0x4, 0x0, 0xc}, {0x1, 0x5, 0x9, 0xa}], 0x10, 0xc6b2}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000003bc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000003f00)={'nat\x00', 0x0, 0x3, 0xad, [0x10001, 0x4, 0x22, 0x6, 0x7, 0x3ef], 0x3, &(0x7f0000003e00)=[{}, {}, {}], &(0x7f0000003e40)=""/173}, &(0x7f0000003f80)=0x78) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000003fc0)=0x1ff, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r7, &(0x7f0000004080)=@in={0x2, 0x0, @broadcast}, &(0x7f0000004100)=0x80) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000004180)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000004140)='rose0\x00', 0xa, 0x5, 0x100}) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000004240)=@generic={&(0x7f0000004200)='./file0\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004280)={'team0\x00', 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004480)={&(0x7f00000042c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @var={0xa, 0x0, 0x0, 0xe, 0x5, 0x2}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @enum64={0x10, 0x3, 0x0, 0x13, 0x0, 0x9, [{0x5, 0xb, 0x3}, {0xf, 0x10, 0xe}, {0x2, 0x5, 0x2}]}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @typedef]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000004380)=""/254, 0x9c, 0xfe, 0x1, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000044c0)=@base={0xc, 0x5, 0x86, 0x4, 0x2041a, r8, 0xd58, '\x00', r9, r10, 0x4, 0x5, 0x1}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004580)=@security={'security\x00', 0xe, 0x4, 0x300, 0xffffffff, 0x1a0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000004540), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffff00, 'team_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0x33, 0x2, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x4, 0x4, 0x1, 0x5], 0x3, 0x3}, {0x4, [0x1, 0x1, 0x4, 0x4, 0x1, 0x5], 0x4, 0x5}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffffff, 'nicvf0\x00', 'vlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xf2, 0x8, [0x4, 0x3d, 0x35, 0x1c, 0x3a, 0x25, 0x7, 0x15, 0x24, 0x34, 0x31, 0x1c, 0xe, 0x21, 0x1, 0x16], 0x1, 0x3, 0xfffffffffffff000}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "c527", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2e85, 0x80000000, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000004900)={0x0, 0x223e, 0x5}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000004a00)={{r6}, 0x0, 0x4, @inherit={0x88, &(0x7f0000004940)={0x1, 0x8, 0x8, 0xf126, {0xb, 0x0, 0x401, 0x6, 0xfffffffffffffffe}, [0x7, 0x7, 0x8, 0x7, 0x9, 0x5, 0x101, 0x7]}}, @name="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"}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000005b40)={0x0, 0x9}, &(0x7f0000005b80)=0x8) 250.864499ms ago: executing program 3 (id=1442): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x3, 0xb, 0x13, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x710, 0x8, 0x3, 0x9aea}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x3, 0xb, 0x13, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x710, 0x8, 0x3, 0x9aea}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x435, 0x6ae, 0xff3e, 0x400, 0x1c57, 0x8384010a, r3}) shutdown(r0, 0x1) 30.523022ms ago: executing program 4 (id=1443): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x601, 0x70bd26, 0x0, "", [{{0x8}, {0x8, 0x3, 0x100}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x4040084) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 0s ago: executing program 0 (id=1444): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffa}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x140240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x808}, 0x24008805) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x44070) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 82.873665][ T5852] cgroup: Unknown subsys name 'net' [ 83.051225][ T5852] cgroup: Unknown subsys name 'cpuset' [ 83.060220][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.816157][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.621239][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.629166][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.632454][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.637331][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.646108][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.651751][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.666600][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.666840][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.674605][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.681783][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.695572][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.703461][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.712653][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.715963][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.726220][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.728128][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.741284][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.742414][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.756916][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.757087][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.767465][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.771892][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.788551][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.789097][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.824131][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.652085][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 88.690103][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 88.719396][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 88.761896][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 88.889997][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 89.062923][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.070834][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.078622][ T5875] bridge_slave_0: entered allmulticast mode [ 89.085961][ T5875] bridge_slave_0: entered promiscuous mode [ 89.104732][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.111974][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.120088][ T5863] bridge_slave_0: entered allmulticast mode [ 89.127317][ T5863] bridge_slave_0: entered promiscuous mode [ 89.151529][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.158797][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.166031][ T5875] bridge_slave_1: entered allmulticast mode [ 89.173376][ T5875] bridge_slave_1: entered promiscuous mode [ 89.181030][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.188359][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.195544][ T5864] bridge_slave_0: entered allmulticast mode [ 89.203114][ T5864] bridge_slave_0: entered promiscuous mode [ 89.210453][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.217791][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.224966][ T5863] bridge_slave_1: entered allmulticast mode [ 89.232662][ T5863] bridge_slave_1: entered promiscuous mode [ 89.240184][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.247469][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.254871][ T5862] bridge_slave_0: entered allmulticast mode [ 89.262479][ T5862] bridge_slave_0: entered promiscuous mode [ 89.314474][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.321964][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.329733][ T5864] bridge_slave_1: entered allmulticast mode [ 89.337305][ T5864] bridge_slave_1: entered promiscuous mode [ 89.355490][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.363153][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.371260][ T5862] bridge_slave_1: entered allmulticast mode [ 89.378598][ T5862] bridge_slave_1: entered promiscuous mode [ 89.398911][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.444599][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.452451][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.460371][ T5866] bridge_slave_0: entered allmulticast mode [ 89.467989][ T5866] bridge_slave_0: entered promiscuous mode [ 89.478294][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.503010][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.528125][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.535263][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.542969][ T5866] bridge_slave_1: entered allmulticast mode [ 89.550291][ T5866] bridge_slave_1: entered promiscuous mode [ 89.571417][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.583864][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.610212][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.621914][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.671460][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.734357][ T5875] team0: Port device team_slave_0 added [ 89.759647][ T5863] team0: Port device team_slave_0 added [ 89.769673][ T5862] team0: Port device team_slave_0 added [ 89.779522][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.790540][ T5875] team0: Port device team_slave_1 added [ 89.814185][ T5864] team0: Port device team_slave_0 added [ 89.822032][ T5863] team0: Port device team_slave_1 added [ 89.829882][ T5862] team0: Port device team_slave_1 added [ 89.838023][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.848143][ T5882] Bluetooth: hci1: command tx timeout [ 89.848151][ T5183] Bluetooth: hci3: command tx timeout [ 89.848347][ T5183] Bluetooth: hci4: command tx timeout [ 89.883411][ T5864] team0: Port device team_slave_1 added [ 89.926026][ T5183] Bluetooth: hci0: command tx timeout [ 89.926769][ T5868] Bluetooth: hci2: command tx timeout [ 89.937636][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.944611][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.971450][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.021394][ T5866] team0: Port device team_slave_0 added [ 90.028287][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.035247][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.061589][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.085191][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.092561][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.118985][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.131033][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.138345][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.164799][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.178569][ T5866] team0: Port device team_slave_1 added [ 90.191630][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.198751][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.226527][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.238207][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.245209][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.271407][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.283438][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.290590][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.316968][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.353721][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.361004][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.387306][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.411484][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.418560][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.445382][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.515166][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.522450][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.548780][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.598916][ T5875] hsr_slave_0: entered promiscuous mode [ 90.605355][ T5875] hsr_slave_1: entered promiscuous mode [ 90.663542][ T5863] hsr_slave_0: entered promiscuous mode [ 90.670292][ T5863] hsr_slave_1: entered promiscuous mode [ 90.677457][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 90.683458][ T5863] Cannot create hsr debugfs directory [ 90.718723][ T5862] hsr_slave_0: entered promiscuous mode [ 90.725295][ T5862] hsr_slave_1: entered promiscuous mode [ 90.731822][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 90.737613][ T5862] Cannot create hsr debugfs directory [ 90.748204][ T5864] hsr_slave_0: entered promiscuous mode [ 90.754517][ T5864] hsr_slave_1: entered promiscuous mode [ 90.760966][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 90.766977][ T5864] Cannot create hsr debugfs directory [ 90.866106][ T5866] hsr_slave_0: entered promiscuous mode [ 90.872694][ T5866] hsr_slave_1: entered promiscuous mode [ 90.879119][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 90.884950][ T5866] Cannot create hsr debugfs directory [ 91.449750][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.470805][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.481631][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.502126][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.554233][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.580981][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.591949][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.603151][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.674632][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.696854][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.709605][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.746892][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.837127][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.873203][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.883705][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.896349][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.926069][ T5868] Bluetooth: hci4: command tx timeout [ 91.926105][ T5183] Bluetooth: hci1: command tx timeout [ 91.931771][ T5868] Bluetooth: hci3: command tx timeout [ 92.007107][ T5868] Bluetooth: hci0: command tx timeout [ 92.012566][ T5868] Bluetooth: hci2: command tx timeout [ 92.051501][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.074435][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.088499][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.104455][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.115011][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.169284][ T887] cfg80211: failed to load regulatory.db [ 92.199843][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.223285][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.230630][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.244856][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.271842][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.282392][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.289855][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.320519][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.358007][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.365136][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.374337][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.381462][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.394570][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.443479][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.450925][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.504193][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.511543][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.540501][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.673602][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.734682][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.754441][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.761899][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.818800][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.826027][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.899771][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.930566][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.937786][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.033370][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.066937][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.074133][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.281313][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.311518][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.407850][ T5875] veth0_vlan: entered promiscuous mode [ 93.490819][ T5875] veth1_vlan: entered promiscuous mode [ 93.537627][ T5864] veth0_vlan: entered promiscuous mode [ 93.549937][ T5862] veth0_vlan: entered promiscuous mode [ 93.617672][ T5862] veth1_vlan: entered promiscuous mode [ 93.638944][ T5864] veth1_vlan: entered promiscuous mode [ 93.651287][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.697983][ T5875] veth0_macvtap: entered promiscuous mode [ 93.722061][ T5864] veth0_macvtap: entered promiscuous mode [ 93.734668][ T5864] veth1_macvtap: entered promiscuous mode [ 93.771199][ T5875] veth1_macvtap: entered promiscuous mode [ 93.780736][ T5862] veth0_macvtap: entered promiscuous mode [ 93.805066][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.824409][ T5862] veth1_macvtap: entered promiscuous mode [ 93.837466][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.870344][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.893970][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.921398][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.934761][ T5863] veth0_vlan: entered promiscuous mode [ 93.962039][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.999498][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.006472][ T5868] Bluetooth: hci3: command tx timeout [ 94.010504][ T5183] Bluetooth: hci4: command tx timeout [ 94.017411][ T5882] Bluetooth: hci1: command tx timeout [ 94.029852][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.059176][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.086082][ T5882] Bluetooth: hci2: command tx timeout [ 94.087625][ T5183] Bluetooth: hci0: command tx timeout [ 94.109566][ T5863] veth1_vlan: entered promiscuous mode [ 94.117508][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.148665][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.162186][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.173771][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.213733][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.235024][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.287261][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.298812][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.334457][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.347546][ T150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364302][ T5863] veth0_macvtap: entered promiscuous mode [ 94.381942][ T5863] veth1_macvtap: entered promiscuous mode [ 94.413276][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.426336][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.446788][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.461375][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.480678][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.517519][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.528014][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.533326][ T5866] veth0_vlan: entered promiscuous mode [ 94.547465][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.575658][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.602076][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.612336][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623821][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.650112][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.658986][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.683880][ T5866] veth1_vlan: entered promiscuous mode [ 94.690369][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.699063][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.782681][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.784406][ T5866] veth0_macvtap: entered promiscuous mode [ 94.799171][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.858302][ T5866] veth1_macvtap: entered promiscuous mode [ 94.868752][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.886305][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.894371][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.004362][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.009426][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.026637][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.052884][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.156828][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.178025][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.235491][ T5990] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 95.245636][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.331442][ T5995] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 95.374868][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.086369][ T5183] Bluetooth: hci1: command tx timeout [ 96.091925][ T5183] Bluetooth: hci3: command tx timeout [ 96.092324][ T5882] Bluetooth: hci4: command tx timeout [ 96.166213][ T5882] Bluetooth: hci0: command tx timeout [ 96.171801][ T5868] Bluetooth: hci2: command tx timeout [ 96.299846][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.334125][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.556408][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.573817][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.590467][ T5992] Zero length message leads to an empty skb [ 97.143627][ T6018] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 97.381925][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.405884][ T24] IPVS: starting estimator thread 0... [ 97.415780][ T6026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.515843][ T6027] IPVS: using max 26 ests per chain, 62400 per kthread [ 97.984143][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 98.117906][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.318209][ T6046] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.330299][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'. [ 98.453938][ T6046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.668158][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 98.686760][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 98.694885][ T6059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.962547][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19'. [ 99.242837][ T6079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.542927][ T6092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.663885][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 99.674098][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 99.891893][ T6101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 100.397106][ T6118] netlink: 'syz.1.31': attribute type 16 has an invalid length. [ 100.413742][ T6120] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 100.422220][ T6118] netlink: 'syz.1.31': attribute type 17 has an invalid length. [ 100.830998][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.839644][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.983793][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.998591][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.168750][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.178746][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.192199][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.202098][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.724857][ T6158] IPVS: set_ctl: invalid protocol: 52 224.0.0.2:2861 [ 101.941355][ T6169] netlink: 'syz.0.42': attribute type 3 has an invalid length. [ 102.176132][ T6170] IPv6: sit1: Disabled Multicast RS [ 102.207579][ T6170] sit1: entered allmulticast mode [ 102.493783][ T6186] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 102.555941][ T6186] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 102.569021][ T6186] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 103.063029][ T6215] tipc: Started in network mode [ 103.071450][ T6215] tipc: Node identity dabedf01cf18, cluster identity 4711 [ 103.080389][ T6215] tipc: Enabled bearer , priority 0 [ 103.174212][ T6215] tipc: Disabling bearer [ 103.626703][ T6238] __nla_validate_parse: 2 callbacks suppressed [ 103.626724][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 103.748555][ T6245] netlink: 'syz.4.63': attribute type 13 has an invalid length. [ 103.756633][ T6245] netlink: 'syz.4.63': attribute type 17 has an invalid length. [ 103.952549][ T6261] syz.4.63 uses obsolete (PF_INET,SOCK_PACKET) [ 104.212777][ T6273] trusted_key: syz.1.65 sent an empty control message without MSG_MORE. [ 104.255837][ T6273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.65'. [ 104.287247][ T6273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.65'. [ 104.378025][ T6245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.086781][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 105.389079][ T6313] netlink: 72 bytes leftover after parsing attributes in process `syz.2.73'. [ 105.523715][ T6310] bond1 (unregistering): Released all slaves [ 105.915153][ T6322] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 105.950475][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 106.793581][ T6362] tipc: Started in network mode [ 106.816319][ T6362] tipc: Node identity a26d00e87c99, cluster identity 4711 [ 106.824455][ T6362] tipc: Enabled bearer , priority 0 [ 106.847191][ T6365] netlink: 256 bytes leftover after parsing attributes in process `syz.4.82'. [ 106.891302][ T6362] syzkaller0: entered promiscuous mode [ 106.897332][ T6362] syzkaller0: entered allmulticast mode [ 106.917002][ T6365] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 106.949237][ T6365] netlink: 'syz.4.82': attribute type 4 has an invalid length. [ 106.961833][ T6362] tipc: Resetting bearer [ 106.986683][ T6365] netlink: 188 bytes leftover after parsing attributes in process `syz.4.82'. [ 106.995986][ T6359] tipc: Resetting bearer [ 107.010715][ T6371] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 107.053389][ T6371] netlink: 228 bytes leftover after parsing attributes in process `syz.1.86'. [ 107.064105][ T6359] tipc: Disabling bearer [ 107.261324][ T6386] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 107.452561][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.514850][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 108.400438][ T6428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.438954][ T6433] macvtap1: entered allmulticast mode [ 108.449212][ T6433] veth0_macvtap: entered allmulticast mode [ 108.461601][ T6448] tipc: Enabling of bearer rejected, failed to enable media [ 109.849634][ T6505] __nla_validate_parse: 2 callbacks suppressed [ 109.849653][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 110.370985][ T6524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.127'. [ 110.410286][ T6532] warning: `syz.2.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.734419][ T6549] tipc: Enabled bearer , priority 0 [ 110.769777][ T6549] syzkaller0: entered promiscuous mode [ 110.788944][ T6549] syzkaller0: entered allmulticast mode [ 110.877031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.885524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.905588][ T6549] tipc: Resetting bearer [ 110.926357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.934624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.956031][ T6548] tipc: Resetting bearer [ 111.000619][ T6548] tipc: Disabling bearer [ 111.039214][ T6556] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 111.283556][ T6561] tipc: Enabled bearer , priority 0 [ 111.298107][ T6561] syzkaller0: entered promiscuous mode [ 111.303735][ T6561] syzkaller0: entered allmulticast mode [ 111.392632][ T6559] tipc: Resetting bearer [ 111.415065][ T6559] tipc: Disabling bearer [ 111.443033][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 111.445533][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'. [ 111.650099][ T6588] IPVS: length: 1226159474 != 42612248280 [ 112.074004][ T6612] geneve2: entered promiscuous mode [ 112.320954][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 112.988356][ T6643] syzkaller0: entered promiscuous mode [ 112.993965][ T6643] syzkaller0: entered allmulticast mode [ 113.536061][ T6662] tc_dump_action: action bad kind [ 113.737223][ T6672] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 113.791724][ T6680] netlink: 'syz.1.167': attribute type 4 has an invalid length. [ 113.906592][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 113.992748][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.167'. [ 114.502855][ T5920] block nbd64: NBD_DISCONNECT [ 114.838794][ T6713] netlink: 248 bytes leftover after parsing attributes in process `syz.2.174'. [ 115.001540][ T6216] udevd[6216]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 115.028256][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806c73d400: rx timeout, send abort [ 115.038427][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806c73d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 115.527071][ T6728] xt_socket: unknown flags 0xd0 [ 115.648026][ T6738] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 115.804159][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.834924][ T6751] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 115.993227][ T6746] bond1: (slave veth3): Enslaving as an active interface with a down link [ 116.038843][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 116.412324][ T6775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.186'. [ 116.753661][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 117.079869][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.197'. [ 117.103776][ T6809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.198'. [ 117.118710][ T6809] netlink: 224 bytes leftover after parsing attributes in process `syz.3.198'. [ 117.306163][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 117.350755][ T6817] netlink: 3 bytes leftover after parsing attributes in process `syz.1.202'. [ 117.365115][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 117.391343][ T6817] 0ªX¹¦À: renamed from caif0 [ 117.423907][ T6817] 0ªX¹¦À: entered allmulticast mode [ 117.433443][ T6817] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 117.757713][ T6836] tipc: Started in network mode [ 117.785912][ T6836] tipc: Node identity 080211000001, cluster identity 4711 [ 117.804203][ T6836] tipc: Enabled bearer , priority 0 [ 117.835398][ T6839] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 117.854148][ T6839] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 118.225078][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 118.648813][ T6887] lo speed is unknown, defaulting to 1000 [ 118.718764][ T6887] lo speed is unknown, defaulting to 1000 [ 118.770957][ T6887] lo speed is unknown, defaulting to 1000 [ 118.784385][ T6894] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.797172][ T5884] tipc: Node number set to 134418688 [ 118.848705][ T6887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.940432][ T6887] lo speed is unknown, defaulting to 1000 [ 118.951090][ T6887] lo speed is unknown, defaulting to 1000 [ 118.962736][ T6887] lo speed is unknown, defaulting to 1000 [ 118.972606][ T6887] lo speed is unknown, defaulting to 1000 [ 118.989909][ T6887] lo speed is unknown, defaulting to 1000 [ 119.295409][ T6919] lo speed is unknown, defaulting to 1000 [ 119.718883][ T6941] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 119.729915][ T6940] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 120.002721][ T6952] netlink: 'syz.3.242': attribute type 1 has an invalid length. [ 120.670631][ T6973] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 120.685078][ T5921] IPVS: starting estimator thread 0... [ 120.806291][ T6978] IPVS: using max 24 ests per chain, 57600 per kthread [ 121.094548][ T6996] __nla_validate_parse: 18 callbacks suppressed [ 121.094568][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.253'. [ 121.144797][ T6996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.153088][ T6996] IPv6: NLM_F_CREATE should be set when creating new route [ 121.160467][ T6996] IPv6: NLM_F_CREATE should be set when creating new route [ 121.306500][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 121.338145][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 121.391027][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 121.739173][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 121.801664][ T7038] lo speed is unknown, defaulting to 1000 [ 122.170515][ T7060] lo speed is unknown, defaulting to 1000 [ 122.474106][ T7064] lo speed is unknown, defaulting to 1000 [ 122.654396][ T7069] tipc: Failed to remove unknown binding: 66,1,1/0:611477626/611477628 [ 122.672991][ T7069] tipc: Failed to remove unknown binding: 66,1,1/0:611477626/611477628 [ 122.693155][ T7069] tipc: Failed to remove unknown binding: 66,1,1/0:611477626/611477628 [ 122.715360][ T7069] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'. [ 122.827798][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 122.877092][ T7075] bridge_slave_1: left allmulticast mode [ 122.909484][ T7075] bridge_slave_1: left promiscuous mode [ 122.915771][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.956755][ T7075] bridge_slave_0: left allmulticast mode [ 122.975844][ T7075] bridge_slave_0: left promiscuous mode [ 122.981691][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.203255][ T7096] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 123.553533][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 123.867044][ T7109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.965191][ T7129] lo speed is unknown, defaulting to 1000 [ 124.152331][ T7146] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 124.603814][ T7160] lo speed is unknown, defaulting to 1000 [ 125.036038][ T7182] netlink: 'syz.2.303': attribute type 22 has an invalid length. [ 125.043829][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 125.087267][ T7173] lo speed is unknown, defaulting to 1000 [ 125.139872][ T3503] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.140113][ T7182] netlink: 'syz.2.303': attribute type 22 has an invalid length. [ 125.173974][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 125.235154][ T3503] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.256631][ T3503] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.265401][ T3503] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.288035][ T7190] tap0: tun_chr_ioctl cmd 1074025677 [ 125.293548][ T7190] tap0: linktype set to 0 [ 125.433515][ T7198] !: renamed from dummy0 (while UP) [ 125.703294][ T7212] lo speed is unknown, defaulting to 1000 [ 125.858498][ T7217] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 126.023789][ T7219] can: request_module (can-proto-5) failed. [ 126.212887][ T7231] __nla_validate_parse: 2 callbacks suppressed [ 126.212922][ T7231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.316'. [ 126.293826][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 126.333905][ T7233] dummy0: entered promiscuous mode [ 126.387866][ T7233] dummy0: left promiscuous mode [ 126.484574][ T7239] tipc: Enabling of bearer rejected, already enabled [ 126.509281][ T7242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.322'. [ 126.594320][ T7247] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 126.613585][ T7247] netlink: 'syz.2.323': attribute type 6 has an invalid length. [ 126.665477][ T7245] netlink: 'syz.2.323': attribute type 4 has an invalid length. [ 126.739844][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.324'. [ 126.841262][ T7260] lo speed is unknown, defaulting to 1000 [ 126.966539][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 127.602046][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.343'. [ 127.854302][ T7315] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 128.424557][ T7315] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 129.057526][ T7321] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 129.350821][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.347'. [ 129.485437][ T7315] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 129.809181][ T7327] ip6gre1: entered allmulticast mode [ 129.863174][ T7312] lo speed is unknown, defaulting to 1000 [ 129.871587][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.351'. [ 129.912316][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 129.924885][ T7327] netlink: 121300 bytes leftover after parsing attributes in process `syz.2.349'. [ 130.009301][ T7332] netlink: 'syz.3.350': attribute type 1 has an invalid length. [ 130.017776][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 130.360066][ T7359] netlink: 'syz.2.357': attribute type 12 has an invalid length. [ 130.380422][ T7359] netlink: 'syz.2.357': attribute type 29 has an invalid length. [ 130.449384][ T7349] lo speed is unknown, defaulting to 1000 [ 130.872535][ T7385] bond0: (slave bond_slave_0): Releasing backup interface [ 130.885480][ T7385] bond0: (slave bond_slave_1): Releasing backup interface [ 130.930944][ T7385] team0: Port device team_slave_0 removed [ 130.954697][ T7385] team0: Port device team_slave_1 removed [ 130.972796][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.008032][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.016655][ T7385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.070645][ T7385] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 131.257904][ T7398] ip6gretap0: entered promiscuous mode [ 131.268499][ T7398] syz_tun: entered promiscuous mode [ 131.304361][ T7393] lo speed is unknown, defaulting to 1000 [ 131.492780][ T7408] __nla_validate_parse: 5 callbacks suppressed [ 131.492801][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 132.236380][ T7423] lo speed is unknown, defaulting to 1000 [ 132.468682][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'. [ 132.478562][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 132.550517][ T7434] netlink: 'syz.0.375': attribute type 14 has an invalid length. [ 132.574730][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 132.701511][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 132.861449][ T7456] tipc: Cannot configure node identity twice [ 132.902783][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 132.917625][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.383'. [ 133.020897][ T7461] lo speed is unknown, defaulting to 1000 [ 133.141190][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148411][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.224628][ T7466] bridge: RTM_NEWNEIGH with invalid ether address [ 133.292944][ T7472] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 133.325461][ T7471] netlink: 14 bytes leftover after parsing attributes in process `syz.1.387'. [ 133.568638][ T7484] lo speed is unknown, defaulting to 1000 [ 133.729058][ T7489] Bluetooth: MGMT ver 1.23 [ 133.950312][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 134.014063][ T7499] netlink: 'syz.0.393': attribute type 13 has an invalid length. [ 134.023677][ T7499] netlink: 'syz.0.393': attribute type 17 has an invalid length. [ 134.181778][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.210314][ T5956] lo speed is unknown, defaulting to 1000 [ 134.217769][ T5956] syz2: Port: 1 Link ACTIVE [ 134.232741][ T7497] Bluetooth: MGMT ver 1.23 [ 134.327325][ T7499] lo speed is unknown, defaulting to 1000 [ 134.377972][ T7521] netlink: 'syz.1.400': attribute type 13 has an invalid length. [ 134.426176][ T7521] netlink: 'syz.1.400': attribute type 17 has an invalid length. [ 134.500109][ T7521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.510624][ T7521] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.531671][ T7521] 0ªX¹¦À: left allmulticast mode [ 134.537613][ T7521] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 134.637392][ T7524] lo speed is unknown, defaulting to 1000 [ 134.701262][ T7527] netlink: 'syz.3.401': attribute type 6 has an invalid length. [ 134.727698][ T7527] netlink: 176 bytes leftover after parsing attributes in process `syz.3.401'. [ 134.835436][ T7519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.890523][ T7535] netlink: 'syz.2.403': attribute type 5 has an invalid length. [ 135.274040][ T7555] lo speed is unknown, defaulting to 1000 [ 135.587073][ T7568] netlink: 'syz.2.413': attribute type 2 has an invalid length. [ 136.981053][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 137.079149][ T7640] netlink: 'syz.1.432': attribute type 4 has an invalid length. [ 137.094309][ T7640] netlink: 'syz.1.432': attribute type 4 has an invalid length. [ 137.251544][ T7650] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 137.308711][ T7653] netlink: 'syz.0.437': attribute type 3 has an invalid length. [ 137.327705][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 137.336877][ T7653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.437'. [ 137.349084][ T7650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.487002][ T7659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.439'. [ 137.692122][ T7676] tipc: Enabled bearer , priority 0 [ 137.700007][ T7676] syzkaller0: entered promiscuous mode [ 137.705640][ T7676] syzkaller0: entered allmulticast mode [ 137.744180][ T7676] tipc: Resetting bearer [ 137.759314][ T7674] tipc: Resetting bearer [ 137.780529][ T7674] tipc: Disabling bearer [ 138.179694][ T7694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.449'. [ 138.194097][ T7694] tipc: Enabling of bearer rejected, failed to enable media [ 138.336610][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 138.348645][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 138.408603][ T7704] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 138.424423][ T7704] netlink: 'syz.1.452': attribute type 4 has an invalid length. [ 138.589205][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 138.595138][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 138.675543][ T7712] bridge_slave_1: left allmulticast mode [ 138.695970][ T7712] bridge_slave_1: left promiscuous mode [ 138.701850][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.732297][ T7712] bridge_slave_0: left allmulticast mode [ 138.744809][ T7712] bridge_slave_0: left promiscuous mode [ 138.752922][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.243888][ T7737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.460'. [ 139.254262][ T7733] lo speed is unknown, defaulting to 1000 [ 140.775507][ T7806] Can't find ip_set type hash:net,poœÀ [ 140.816671][ T7811] netlink: 'syz.3.478': attribute type 6 has an invalid length. [ 141.128060][ T7822] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 141.313027][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.394368][ T7829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.778772][ T7849] lo speed is unknown, defaulting to 1000 [ 141.803009][ T7856] dvmrp11: entered allmulticast mode [ 142.231789][ T7872] __nla_validate_parse: 6 callbacks suppressed [ 142.231809][ T7872] netlink: 56 bytes leftover after parsing attributes in process `syz.1.499'. [ 142.490799][ T7880] batadv1: entered promiscuous mode [ 142.526661][ T7880] batadv1: entered allmulticast mode [ 142.609359][ T7886] netlink: 4928 bytes leftover after parsing attributes in process `syz.4.503'. [ 142.622249][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 142.794334][ T7896] macsec2: entered promiscuous mode [ 142.805805][ T7896] macsec0: entered promiscuous mode [ 142.816338][ T7896] macsec2: entered allmulticast mode [ 142.824581][ T7899] netlink: 248 bytes leftover after parsing attributes in process `syz.2.509'. [ 142.833808][ T7896] macsec0: entered allmulticast mode [ 142.846313][ T7896] veth1_macvtap: entered allmulticast mode [ 142.967631][ T7907] team0: Device macvtap1 is already an upper device of the team interface [ 143.072772][ T7915] xt_l2tp: unknown flags: 51 [ 143.222590][ T7918] lo speed is unknown, defaulting to 1000 [ 143.315647][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 143.592261][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 143.638436][ T7943] tun0: tun_chr_ioctl cmd 1074025675 [ 143.643896][ T7943] tun0: persist enabled [ 143.660347][ T7937] lo speed is unknown, defaulting to 1000 [ 143.666220][ T7943] tun0: tun_chr_ioctl cmd 1074025675 [ 143.671661][ T7943] tun0: persist enabled [ 143.702381][ T7939] netlink: 248 bytes leftover after parsing attributes in process `syz.3.519'. [ 143.771024][ T7943] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 144.269826][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 144.341954][ T7966] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 144.608104][ T7968] lo speed is unknown, defaulting to 1000 [ 145.328091][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 145.730838][ T8023] lo speed is unknown, defaulting to 1000 [ 146.213284][ T8045] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 146.282239][ T8047] bridge_slave_0: left allmulticast mode [ 146.307201][ T8047] bridge_slave_0: left promiscuous mode [ 146.322248][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.359979][ T8047] bridge_slave_1: left allmulticast mode [ 146.375073][ T8047] bridge_slave_1: left promiscuous mode [ 146.388821][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.419647][ T8047] bond0: (slave bond_slave_0): Releasing backup interface [ 146.433603][ T8047] bond0: (slave bond_slave_1): Releasing backup interface [ 146.454537][ T8047] team0: Port device team_slave_0 removed [ 146.468548][ T8047] team0: Port device team_slave_1 removed [ 146.480930][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.503082][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.512288][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.520175][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.529000][ T8047] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.568987][ T8054] à$: entered allmulticast mode [ 146.629687][ T8063] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 146.799953][ T8066] lo speed is unknown, defaulting to 1000 [ 146.832340][ T8076] syzkaller1: entered promiscuous mode [ 146.838199][ T8076] syzkaller1: entered allmulticast mode [ 146.963984][ T8079] pimreg: entered allmulticast mode [ 146.981715][ T8076] lo speed is unknown, defaulting to 1000 [ 147.006235][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 147.038611][ T8087] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 147.428293][ T8114] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.484647][ T8116] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 147.515875][ T8116] netlink: 244 bytes leftover after parsing attributes in process `syz.1.563'. [ 147.643911][ T8120] tipc: Enabling of bearer rejected, failed to enable media [ 147.661991][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 147.697654][ T8125] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 147.808156][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 147.840980][ T8128] bond3: (slave bridge0): making interface the new active one [ 147.853678][ T8128] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 147.908084][ T8132] netlink: 19 bytes leftover after parsing attributes in process `syz.0.569'. [ 147.917203][ T8132] netlink: 'syz.0.569': attribute type 3 has an invalid length. [ 148.113325][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.574'. [ 148.290553][ T8158] netlink: 244 bytes leftover after parsing attributes in process `syz.4.573'. [ 148.306988][ T8155] lo speed is unknown, defaulting to 1000 [ 148.639956][ T8183] vlan3: entered allmulticast mode [ 148.718895][ T8191] sctp: [Deprecated]: syz.2.580 (pid 8191) Use of int in maxseg socket option. [ 148.718895][ T8191] Use struct sctp_assoc_value instead [ 149.095217][ T8202] netlink: 88 bytes leftover after parsing attributes in process `syz.2.585'. [ 149.130569][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 149.979263][ T8233] lo speed is unknown, defaulting to 1000 [ 150.240224][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 150.412050][ T8255] netlink: 'syz.4.596': attribute type 16 has an invalid length. [ 150.430803][ T8256] netlink: 'syz.4.596': attribute type 10 has an invalid length. [ 150.470742][ T8255] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.596'. [ 150.632385][ T8256] batman_adv: batadv0: Adding interface: netdevsim0 [ 150.640075][ T8256] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.666106][ T8256] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 151.315548][ T8318] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 151.325071][ T8318] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 151.343974][ T8318] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 152.255976][ T8341] nbd0: detected capacity change from 0 to 127 [ 152.267134][ T8349] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 152.267663][ T8355] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 152.297727][ T5882] block nbd0: Receive control failed (result -32) [ 152.447281][ T8362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.734215][ T8388] __nla_validate_parse: 8 callbacks suppressed [ 152.734236][ T8388] netlink: 52 bytes leftover after parsing attributes in process `syz.4.637'. [ 152.753772][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.635'. [ 153.107148][ T8409] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 153.107364][ T8400] lo speed is unknown, defaulting to 1000 [ 153.207901][ T8414] syz_tun: entered allmulticast mode [ 153.229914][ T8414] dvmrp8: entered allmulticast mode [ 153.251137][ T7999] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 154.039323][ T8414] syz_tun: left allmulticast mode [ 154.077888][ T8414] dvmrp8: left allmulticast mode [ 154.340553][ T8450] dvmrp8: entered allmulticast mode [ 154.356930][ T8450] dvmrp8: left allmulticast mode [ 154.418652][ T8455] netlink: 168 bytes leftover after parsing attributes in process `syz.2.651'. [ 154.511416][ T8458] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.526739][ T8458] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 154.546066][ T8458] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 154.573747][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 154.701781][ T8465] lo speed is unknown, defaulting to 1000 [ 154.744701][ T8458] lo speed is unknown, defaulting to 1000 [ 155.235465][ T8479] veth1_macvtap: left promiscuous mode [ 155.249386][ T8479] macsec0: entered promiscuous mode [ 155.254814][ T8479] macsec0: entered allmulticast mode [ 155.315445][ T8477] lo speed is unknown, defaulting to 1000 [ 155.322973][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 155.353337][ T8486] veth1_macvtap: entered promiscuous mode [ 155.385947][ T8486] veth1_macvtap: entered allmulticast mode [ 155.413599][ T8486] macsec0: left promiscuous mode [ 155.423734][ T8486] macsec0: left allmulticast mode [ 155.430611][ T8486] veth1_macvtap: left allmulticast mode [ 155.451355][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 155.461768][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.664'. [ 155.477702][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.653'. [ 155.596534][ T8499] Unknown options in mask b7f2 [ 155.861790][ T8479] syz.4.653 (8479) used greatest stack depth: 17864 bytes left [ 156.104694][ T8522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.125511][ T8526] netlink: 'syz.2.675': attribute type 10 has an invalid length. [ 156.191452][ T8526] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.209272][ T8526] bond0: (slave team0): Enslaving as an active interface with an up link [ 156.267889][ T8533] netlink: 256 bytes leftover after parsing attributes in process `syz.0.678'. [ 156.546696][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 156.606906][ T8544] bridge_slave_1: left allmulticast mode [ 156.612624][ T8544] bridge_slave_1: left promiscuous mode [ 156.630855][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.699247][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.701610][ T8558] syz.2.682 uses old SIOCAX25GETINFO [ 156.907836][ T8569] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 157.551855][ T8556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.844945][ T8556] ip6gre1: left allmulticast mode [ 157.892153][ T8558] __nla_validate_parse: 1 callbacks suppressed [ 157.892174][ T8558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.682'. [ 157.907990][ T8558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.682'. [ 157.920322][ T8569] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 158.068306][ T8574] gretap1: entered promiscuous mode [ 158.113192][ T8001] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.127359][ T8001] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.138810][ T8001] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.147872][ T8001] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.185014][ T8604] geneve3: entered promiscuous mode [ 158.226242][ T8001] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.235196][ T8001] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.247144][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 158.348921][ T8001] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.376180][ T8001] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.071099][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 159.168248][ T8661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.252692][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 159.262162][ T8656] netlink: 72 bytes leftover after parsing attributes in process `syz.0.704'. [ 159.473197][ T8677] netlink: 'syz.3.709': attribute type 21 has an invalid length. [ 159.490209][ T8677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.709'. [ 159.504004][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 159.529040][ T8672] lo speed is unknown, defaulting to 1000 [ 159.587760][ T8681] netlink: 14 bytes leftover after parsing attributes in process `syz.0.710'. [ 159.613959][ T8681] hsr_slave_0: left promiscuous mode [ 159.630861][ T8681] hsr_slave_1: left promiscuous mode [ 159.779928][ T8680] veth0: entered promiscuous mode [ 159.805919][ T8686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.838582][ T8677] lo speed is unknown, defaulting to 1000 [ 160.201444][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 160.316087][ T8706] lo speed is unknown, defaulting to 1000 [ 160.335100][ T8680] veth0: left promiscuous mode [ 160.845374][ T8743] tipc: Enabling of bearer rejected, already enabled [ 161.593845][ T8791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.773360][ T8791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.911521][ T8791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.940609][ T8811] netlink: 'syz.0.742': attribute type 16 has an invalid length. [ 161.948688][ T8811] netlink: 'syz.0.742': attribute type 17 has an invalid length. [ 161.988045][ T8811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.070105][ T8791] batman_adv: batadv0: Removing interface: netdevsim0 [ 162.131818][ T8791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.492914][ T8813] syzkaller1: entered promiscuous mode [ 162.498993][ T8813] syzkaller1: entered allmulticast mode [ 162.622828][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.676061][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.727402][ T8824] netlink: 'syz.2.745': attribute type 5 has an invalid length. [ 162.755368][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.771552][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.936072][ T8835] __nla_validate_parse: 5 callbacks suppressed [ 162.936093][ T8835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 163.011491][ T8843] ipvlan2: entered promiscuous mode [ 163.024872][ T8843] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 163.041861][ T8843] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.137894][ T8850] syzkaller0: entered promiscuous mode [ 163.143564][ T8850] syzkaller0: entered allmulticast mode [ 163.153103][ T8850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 163.311214][ T8869] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 163.356930][ T8858] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 164.644725][ T8923] netlink: 'syz.1.771': attribute type 13 has an invalid length. [ 164.652986][ T8923] netlink: 'syz.1.771': attribute type 17 has an invalid length. [ 164.666661][ T8923] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 164.744542][ T8923] lo speed is unknown, defaulting to 1000 [ 164.795418][ T8928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.910438][ T8927] lo speed is unknown, defaulting to 1000 [ 164.960697][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 165.014743][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 165.559697][ T8952] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 165.576443][ T8952] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 165.604525][ T8952] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 165.784685][ T8956] pim6reg: entered allmulticast mode [ 165.792156][ T8956] pim6reg: left allmulticast mode [ 165.924122][ T8958] netlink: 'syz.3.783': attribute type 4 has an invalid length. [ 167.470402][ T8997] lo speed is unknown, defaulting to 1000 [ 167.613053][ T9016] netlink: 56 bytes leftover after parsing attributes in process `syz.3.796'. [ 167.649437][ T9014] bridge_slave_0: default FDB implementation only supports local addresses [ 167.662323][ T9017] netlink: 'syz.0.795': attribute type 8 has an invalid length. [ 167.810455][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 167.924215][ T9031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.801'. [ 167.988954][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 168.340336][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 168.688734][ T9058] tipc: Enabled bearer , priority 0 [ 168.713752][ T9058] syzkaller0: entered promiscuous mode [ 168.732186][ T9058] syzkaller0: entered allmulticast mode [ 168.790891][ T9069] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 168.803509][ T9068] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 168.818158][ T9058] netlink: 2 bytes leftover after parsing attributes in process `syz.2.811'. [ 168.834174][ T9057] tipc: Resetting bearer [ 168.902528][ T9057] tipc: Disabling bearer [ 169.539745][ T9094] lo speed is unknown, defaulting to 1000 [ 169.619290][ T9100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'. [ 169.692930][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 169.817411][ T9112] netlink: 248 bytes leftover after parsing attributes in process `syz.2.825'. [ 169.862616][ T9114] netlink: 'syz.1.826': attribute type 39 has an invalid length. [ 170.044112][ T9113] lo speed is unknown, defaulting to 1000 [ 171.157333][ T9158] netlink: 'syz.1.838': attribute type 29 has an invalid length. [ 171.165387][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 171.207820][ T9154] lo speed is unknown, defaulting to 1000 [ 171.269968][ T9161] lo speed is unknown, defaulting to 1000 [ 171.294320][ T9131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.411548][ T9172] netlink: 'syz.3.842': attribute type 21 has an invalid length. [ 171.423998][ T9172] netlink: 128 bytes leftover after parsing attributes in process `syz.3.842'. [ 171.434138][ T9172] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 171.442770][ T9172] netlink: 3 bytes leftover after parsing attributes in process `syz.3.842'. [ 171.808114][ T9199] tipc: Started in network mode [ 171.817348][ T9199] tipc: Node identity fa512c936449, cluster identity 4711 [ 171.835105][ T9199] tipc: Enabled bearer , priority 0 [ 171.857762][ T9199] syzkaller0: entered promiscuous mode [ 171.863293][ T9199] syzkaller0: entered allmulticast mode [ 171.947995][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'. [ 172.370212][ T9228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.425302][ T9230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.461371][ T9237] syzkaller0: entered allmulticast mode [ 172.643247][ T9249] IPVS: Scheduler module ip_vs_sip not found [ 172.945939][ T9] tipc: Node number set to 2652384403 [ 172.964595][ T9266] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.024685][ T9272] netem: change failed [ 173.130403][ T9266] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.283185][ T9266] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.461131][ T9266] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.615314][ T9289] __nla_validate_parse: 2 callbacks suppressed [ 173.615336][ T9289] netlink: 788 bytes leftover after parsing attributes in process `syz.1.877'. [ 173.773892][ T6464] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.814780][ T6464] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.857733][ T6464] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.906222][ T6464] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.182269][ T9307] tipc: Enabled bearer , priority 0 [ 174.212659][ T9307] syzkaller1: entered promiscuous mode [ 174.228777][ T9307] syzkaller1: entered allmulticast mode [ 174.268137][ T9317] netlink: 68 bytes leftover after parsing attributes in process `syz.4.883'. [ 174.272854][ T9307] lo speed is unknown, defaulting to 1000 [ 174.326457][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.880'. [ 174.503185][ T9326] bond0: entered promiscuous mode [ 174.515970][ T9326] bond_slave_0: entered promiscuous mode [ 174.522106][ T9326] bond_slave_1: entered promiscuous mode [ 174.566217][ T9326] batadv0: entered promiscuous mode [ 174.573375][ T9326] debugfs: 'hsr1' already exists in 'hsr' [ 174.579749][ T9326] Cannot create hsr debugfs directory [ 174.586908][ T9326] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.118559][ T9344] syzkaller0: left allmulticast mode [ 175.127011][ T9344] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 175.184697][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 175.305805][ T5958] tipc: Node number set to 3740532968 [ 175.338659][ T9346] vlan0: entered allmulticast mode [ 175.343844][ T9346] bridge0: entered allmulticast mode [ 175.360119][ T9346] bridge6: port 1(vlan0) entered blocking state [ 175.372422][ T9346] bridge6: port 1(vlan0) entered disabled state [ 175.384284][ T9346] vlan0: entered promiscuous mode [ 175.389609][ T9346] bridge0: entered promiscuous mode [ 175.454385][ T9346] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 175.457780][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 175.520741][ T9363] lo speed is unknown, defaulting to 1000 [ 175.578812][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 175.676143][ T9372] sctp: [Deprecated]: syz.1.895 (pid 9372) Use of int in max_burst socket option. [ 175.676143][ T9372] Use struct sctp_assoc_value instead [ 175.959408][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.899'. [ 175.970258][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.899'. [ 176.330232][ T9392] bridge0: port 3(erspan0) entered blocking state [ 176.363690][ T9392] bridge0: port 3(erspan0) entered disabled state [ 176.389245][ T9392] erspan0: entered allmulticast mode [ 176.401946][ T9392] erspan0: entered promiscuous mode [ 176.434806][ T9392] bridge0: port 3(erspan0) entered blocking state [ 176.442759][ T9392] bridge0: port 3(erspan0) entered forwarding state [ 176.541871][ T9395] lo speed is unknown, defaulting to 1000 [ 176.543593][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 177.228025][ T9451] syzkaller1: entered promiscuous mode [ 177.261529][ T9451] syzkaller1: entered allmulticast mode [ 177.278605][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 177.748576][ T9477] tipc: Enabled bearer , priority 10 [ 178.246538][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 178.594645][ T9527] netlink: 'syz.0.938': attribute type 3 has an invalid length. [ 178.727883][ T9535] bond0: entered promiscuous mode [ 178.742202][ T9535] batadv0: entered promiscuous mode [ 178.749987][ T9535] debugfs: 'hsr1' already exists in 'hsr' [ 178.757424][ T9535] Cannot create hsr debugfs directory [ 178.763220][ T9535] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 178.774453][ T9535] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 178.926665][ T9548] netlink: 'syz.4.944': attribute type 1 has an invalid length. [ 178.999217][ T9548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.064520][ T9555] bond1: (slave geneve2): making interface the new active one [ 179.080734][ T9553] __nla_validate_parse: 12 callbacks suppressed [ 179.080756][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 179.085342][ T9555] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 179.159574][ T9548] bond1: entered promiscuous mode [ 179.164699][ T9548] geneve2: entered promiscuous mode [ 179.395265][ T9571] netlink: 92 bytes leftover after parsing attributes in process `syz.3.950'. [ 179.551829][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.954'. [ 179.810960][ T9597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.841137][ T9602] lo speed is unknown, defaulting to 1000 [ 180.078757][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 180.176692][ T9611] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 180.192655][ T9611] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 180.255392][ T9618] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 180.381782][ T9624] netlink: 181304 bytes leftover after parsing attributes in process `syz.3.967'. [ 180.391696][ T9624] netlink: get zone limit has 8 unknown bytes [ 180.441564][ T9629] netlink: 116 bytes leftover after parsing attributes in process `syz.0.969'. [ 180.503290][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 180.525544][ T9631] ip6gretap0: entered promiscuous mode [ 180.535218][ T9631] ip6gretap0: left promiscuous mode [ 180.598064][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 180.873659][ T9652] netlink: 64 bytes leftover after parsing attributes in process `syz.2.978'. [ 180.901205][ T9652] block nbd0: reconnected socket [ 180.909246][ T9652] nbd: socks must be embedded in a SOCK_ITEM attr [ 180.925099][ T5882] block nbd0: Receive control failed (result -32) [ 180.973352][ T9654] lo speed is unknown, defaulting to 1000 [ 180.998064][ T9660] pimreg: entered allmulticast mode [ 181.008695][ T9660] Unsupported ieee802154 address type: 0 [ 181.060936][ T9660] pimreg: left allmulticast mode [ 181.069508][ T9660] dvmrp11: left allmulticast mode [ 181.384640][ T9655] ieee802154 phy0 wpan0: encryption failed: -126 [ 181.398497][ T9672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.986'. [ 181.866387][ T9692] syzkaller0: entered promiscuous mode [ 181.872101][ T9692] syzkaller0: entered allmulticast mode [ 182.000146][ T9708] Bluetooth: MGMT ver 1.23 [ 183.410227][ T9721] batadv_slave_1: entered promiscuous mode [ 183.514785][ T9725] bridge0: port 3(erspan0) entered disabled state [ 183.555298][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.563305][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.672270][ T9725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.692487][ T9725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.763844][ T9724] batadv_slave_1: left promiscuous mode [ 183.817783][ T36] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.836013][ T36] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.859964][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.888117][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.961178][ T9750] netlink: 'syz.4.1004': attribute type 2 has an invalid length. [ 183.983594][ T9746] lo speed is unknown, defaulting to 1000 [ 184.098116][ T9766] __nla_validate_parse: 5 callbacks suppressed [ 184.098135][ T9766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1004'. [ 184.763575][ T9800] netlink: 'syz.0.1018': attribute type 16 has an invalid length. [ 184.771680][ T9800] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1018'. [ 185.050919][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 185.304153][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 185.363694][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'. [ 185.923641][ T9841] bridge3: entered promiscuous mode [ 185.930599][ T9841] bridge3: entered allmulticast mode [ 185.949752][ T9841] team0: Port device bridge3 added [ 186.085402][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 186.150022][ T9856] bond3: (slave bridge0): Releasing active interface [ 186.262760][ T9853] lo speed is unknown, defaulting to 1000 [ 186.294923][ T9857] macvtap1: entered allmulticast mode [ 186.424279][ T9869] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1034'. [ 186.919667][ T9890] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1041'. [ 186.941965][ T9892] netlink: 'syz.2.1042': attribute type 21 has an invalid length. [ 186.950570][ T9892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1042'. [ 187.013613][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 187.332538][ T9913] netlink: 'syz.0.1049': attribute type 11 has an invalid length. [ 187.800879][ T9934] lo speed is unknown, defaulting to 1000 [ 187.849277][ T9935] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 188.351731][ T9955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.585917][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.690995][ T9973] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 188.788231][ T9978] lo speed is unknown, defaulting to 1000 [ 188.930460][ T9981] lo speed is unknown, defaulting to 1000 [ 189.027264][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.036717][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.043754][ T9986] tipc: Resetting bearer [ 189.051102][ T9986] tipc: Resetting bearer [ 189.063333][ T9986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.202770][ T9995] __nla_validate_parse: 12 callbacks suppressed [ 189.202789][ T9995] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1070'. [ 189.230543][ T9995] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1070'. [ 189.241174][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 189.278561][ T5882] block nbd1: Receive control failed (result -11) [ 189.723445][T10016] lo speed is unknown, defaulting to 1000 [ 190.209563][T10022] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1076'. [ 190.479229][T10042] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1080'. [ 190.533736][ T5882] Bluetooth: hci4: link tx timeout [ 190.541798][ T5882] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 190.554265][ T5882] Bluetooth: hci4: link tx timeout [ 190.560319][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.697167][T10042] veth5: entered promiscuous mode [ 190.795409][T10054] lo speed is unknown, defaulting to 1000 [ 191.692612][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1087'. [ 191.870660][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 191.909534][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1090'. [ 191.941229][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 191.956087][T10078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1090'. [ 192.000618][T10078] netlink: 'syz.4.1090': attribute type 6 has an invalid length. [ 192.126766][T10064] lo speed is unknown, defaulting to 1000 [ 192.216442][T10070] lo speed is unknown, defaulting to 1000 [ 192.614523][T10103] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 192.646729][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 192.655375][T10103] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 192.908247][T10116] lo speed is unknown, defaulting to 1000 [ 193.011773][T10124] pim6reg: entered allmulticast mode [ 193.827410][T10160] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 194.166712][T10167] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 194.178266][T10167] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 194.533688][T10176] __nla_validate_parse: 7 callbacks suppressed [ 194.533709][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1116'. [ 194.556218][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1116'. [ 194.586807][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632444][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1119'. [ 194.730668][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 195.141679][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 195.377727][T10223] macsec3: entered promiscuous mode [ 195.382999][T10223] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 195.404774][T10223] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 195.453061][T10222] lo speed is unknown, defaulting to 1000 [ 195.462943][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 195.500267][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 195.647805][T10239] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1131'. [ 195.839486][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 195.907348][T10251] lo speed is unknown, defaulting to 1000 [ 196.268324][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1136'. [ 196.581055][T10274] netlink: 'syz.4.1138': attribute type 64 has an invalid length. [ 196.782090][T10295] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 197.131636][T10322] netlink: 'syz.3.1151': attribute type 4 has an invalid length. [ 197.143654][T10322] netlink: 'syz.3.1151': attribute type 4 has an invalid length. [ 197.349010][T10334] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1156'. [ 197.448184][T10338] ip6tnl2: entered promiscuous mode [ 197.463602][T10338] ip6tnl2: entered allmulticast mode [ 198.688758][T10378] IPVS: Unknown mcast interface: vxcan1 [ 198.980054][T10394] erspan0: left allmulticast mode [ 198.985561][T10394] erspan0: left promiscuous mode [ 199.003193][T10394] bridge0: port 3(erspan0) entered disabled state [ 199.041812][T10394] bridge_slave_1: left allmulticast mode [ 199.059765][T10394] bridge_slave_1: left promiscuous mode [ 199.070754][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.081236][T10394] bridge_slave_0: left allmulticast mode [ 199.094261][T10394] bridge_slave_0: left promiscuous mode [ 199.108503][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.491107][T10418] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 199.499729][T10418] netlink: 'syz.3.1178': attribute type 2 has an invalid length. [ 199.573346][T10420] __nla_validate_parse: 5 callbacks suppressed [ 199.573361][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 199.604472][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1179'. [ 199.613534][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 199.971331][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1182'. [ 200.411569][T10432] netlink: 'syz.2.1184': attribute type 13 has an invalid length. [ 200.581513][T10432] netlink: 'syz.2.1184': attribute type 17 has an invalid length. [ 201.001999][T10436] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 201.339861][T10443] nla_validate_range_unsigned: 1 callbacks suppressed [ 201.339882][T10443] netlink: 'syz.0.1186': attribute type 11 has an invalid length. [ 201.374926][T10432] tipc: Resetting bearer [ 201.443230][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 201.481756][T10432] tipc: Resetting bearer [ 201.563844][T10432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.675501][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 202.175009][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 202.175045][ T7999] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.224255][ T7999] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.241023][ T7999] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.333579][ T7999] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.363127][T10451] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1188'. [ 202.864635][T10478] lo speed is unknown, defaulting to 1000 [ 203.257483][T10501] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 203.437880][T10503] lo speed is unknown, defaulting to 1000 [ 203.451286][T10506] veth0: entered promiscuous mode [ 203.457274][T10506] veth0: left promiscuous mode [ 203.530115][T10511] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1203'. [ 203.652762][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'. [ 204.403182][T10555] tipc: Enabling of bearer rejected, already enabled [ 204.427082][T10554] netlink: 'syz.0.1214': attribute type 3 has an invalid length. [ 204.715365][T10575] netlink: 'syz.3.1221': attribute type 1 has an invalid length. [ 204.747899][T10575] __nla_validate_parse: 3 callbacks suppressed [ 204.747919][T10575] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1221'. [ 204.803251][T10578] lo speed is unknown, defaulting to 1000 [ 205.720713][T10615] syzkaller1: entered promiscuous mode [ 205.745322][T10615] syzkaller1: entered allmulticast mode [ 206.389838][T10649] netlink: 'syz.2.1232': attribute type 21 has an invalid length. [ 206.398970][T10649] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1232'. [ 206.428546][T10649] netlink: 'syz.2.1232': attribute type 5 has an invalid length. [ 206.454192][T10649] netlink: 'syz.2.1232': attribute type 6 has an invalid length. [ 206.462509][T10649] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1232'. [ 206.475031][T10652] tipc: Enabling of bearer rejected, already enabled [ 206.486355][T10651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.514215][T10652] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 206.534365][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 206.557452][T10651] tipc: Resetting bearer [ 206.956218][T10667] lo speed is unknown, defaulting to 1000 [ 207.368400][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 210.362698][T10692] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 210.507204][T10690] lo speed is unknown, defaulting to 1000 [ 210.870206][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 210.879393][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 210.904692][T10723] netlink: 'syz.2.1251': attribute type 18 has an invalid length. [ 211.210395][T10728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.320656][T10728] team0: Mode changed to "activebackup" [ 211.381900][T10728] macsec1: entered allmulticast mode [ 211.403748][T10728] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 211.733343][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 211.802158][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 211.896473][T10754] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.969171][T10756] lo speed is unknown, defaulting to 1000 [ 212.017867][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 212.017913][ T5881] Bluetooth: hci2: command 0x0406 tx timeout [ 212.037417][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 213.001980][T10792] netlink: 'syz.3.1273': attribute type 4 has an invalid length. [ 213.026428][T10792] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1273'. [ 213.032674][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 213.110330][T10792] : renamed from bond0 (while UP) [ 213.252429][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 213.419310][T10814] lo speed is unknown, defaulting to 1000 [ 213.447050][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1279'. [ 214.070279][T10840] lo speed is unknown, defaulting to 1000 [ 214.085576][T10855] bond2: option mode: unable to set because the bond device is up [ 214.105415][T10855] bridge0: port 1(syz_tun) entered blocking state [ 214.112563][T10855] bridge0: port 1(syz_tun) entered disabled state [ 214.121470][T10855] syz_tun: entered allmulticast mode [ 214.130802][T10855] syz_tun: entered promiscuous mode [ 214.139735][T10855] bridge0: port 1(syz_tun) entered blocking state [ 214.146382][T10855] bridge0: port 1(syz_tun) entered forwarding state [ 214.178037][T10857] rdma_rxe: rxe_newlink: failed to add syz_tun [ 214.281687][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 215.584843][T10934] netlink: 'syz.3.1321': attribute type 7 has an invalid length. [ 215.603425][T10934] netlink: 'syz.3.1321': attribute type 8 has an invalid length. [ 215.619463][T10934] netlink: 'syz.3.1321': attribute type 9 has an invalid length. [ 215.702733][T10938] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1325'. [ 215.821230][T10944] IPVS: sh: FWM 3 0x00000003 - no destination available [ 216.216216][T10971] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1340'. [ 216.327704][T10981] tipc: Resetting bearer [ 216.336264][ T36] nci: nci_rx_work: unknown MT 0x1 [ 216.543445][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1352'. [ 216.553903][T11000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1352'. [ 216.597980][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 217.193791][T11015] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1356'. [ 217.208171][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1358'. [ 217.491571][T11032] netlink: 'syz.1.1366': attribute type 1 has an invalid length. [ 217.535238][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 217.555950][T11035] tipc: Enabled bearer , priority 0 [ 217.592364][T11035] syzkaller0: entered promiscuous mode [ 217.613034][T11035] syzkaller0: entered allmulticast mode [ 217.684209][T11035] tipc: Resetting bearer [ 217.722452][T11034] tipc: Resetting bearer [ 217.748637][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 217.832301][T11034] tipc: Disabling bearer [ 218.515513][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1393'. [ 218.527204][T11098] netlink: 'syz.2.1393': attribute type 12 has an invalid length. [ 218.535067][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 219.061633][T11127] netlink: 'syz.2.1406': attribute type 2 has an invalid length. [ 219.181756][T11130] tipc: Resetting bearer [ 219.201117][ T36] tipc: Resetting bearer [ 220.347486][T11197] lo speed is unknown, defaulting to 1000 [ 220.574303][T11209] lo speed is unknown, defaulting to 1000 [ 220.718998][T11215] ================================================================== [ 220.727376][T11215] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 220.735666][T11215] Read of size 1 at addr ffff888057d06530 by task syz.4.1443/11215 [ 220.743590][T11215] [ 220.745950][T11215] CPU: 1 UID: 0 PID: 11215 Comm: syz.4.1443 Not tainted syzkaller #0 PREEMPT(full) [ 220.745976][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.745987][T11215] Call Trace: [ 220.745995][T11215] [ 220.746003][T11215] dump_stack_lvl+0x189/0x250 [ 220.746039][T11215] ? __kasan_check_byte+0x12/0x40 [ 220.746066][T11215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.746086][T11215] ? lock_release+0x4b/0x3e0 [ 220.746113][T11215] ? __virt_addr_valid+0x4a5/0x5c0 [ 220.746137][T11215] print_report+0xca/0x240 [ 220.746164][T11215] ? xfrm_state_find+0x2cf2/0x5400 [ 220.746186][T11215] kasan_report+0x118/0x150 [ 220.746210][T11215] ? xfrm_state_find+0x2cf2/0x5400 [ 220.746237][T11215] xfrm_state_find+0x2cf2/0x5400 [ 220.746270][T11215] ? xfrm_state_find+0x1da/0x5400 [ 220.746296][T11215] ? __pfx_xfrm_state_find+0x10/0x10 [ 220.746317][T11215] ? xfrm4_get_saddr+0xd5/0x140 [ 220.746342][T11215] ? __pfx_xfrm4_get_saddr+0x10/0x10 [ 220.746372][T11215] ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80 [ 220.746400][T11215] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 220.746436][T11215] ? stack_depot_save_flags+0x40/0x860 [ 220.746463][T11215] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 220.746490][T11215] ? __lock_acquire+0xab9/0xd20 [ 220.746523][T11215] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 220.746552][T11215] ? rt_set_nexthop+0x693/0xa80 [ 220.746582][T11215] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 220.746611][T11215] ? xfrm_expand_policies+0x41f/0x6a0 [ 220.746641][T11215] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 220.746672][T11215] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 220.746705][T11215] xfrm_lookup_route+0x3c/0x1c0 [ 220.746734][T11215] udp_sendmsg+0x142e/0x2170 [ 220.746758][T11215] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 220.746784][T11215] ? __pfx_udp_sendmsg+0x10/0x10 [ 220.746804][T11215] ? count_memcg_event_mm+0x21/0x260 [ 220.746829][T11215] ? count_memcg_event_mm+0x21/0x260 [ 220.746855][T11215] ? __pfx_aa_sk_perm+0x10/0x10 [ 220.746880][T11215] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 220.746900][T11215] ? sock_rps_record_flow+0x19/0x410 [ 220.746919][T11215] ? inet_sendmsg+0x29c/0x370 [ 220.746935][T11215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.746955][T11215] __sock_sendmsg+0x19c/0x270 [ 220.746984][T11215] ____sys_sendmsg+0x52d/0x830 [ 220.747009][T11215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.747044][T11215] ? import_iovec+0x74/0xa0 [ 220.747067][T11215] ___sys_sendmsg+0x21f/0x2a0 [ 220.747090][T11215] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.747128][T11215] ? __fget_files+0x2a/0x420 [ 220.747153][T11215] ? __fget_files+0x3a0/0x420 [ 220.747183][T11215] __sys_sendmmsg+0x227/0x430 [ 220.747208][T11215] ? __pfx___sys_sendmmsg+0x10/0x10 [ 220.747229][T11215] ? do_futex+0x333/0x420 [ 220.747264][T11215] ? rcu_is_watching+0x15/0xb0 [ 220.747284][T11215] __x64_sys_sendmmsg+0xa0/0xc0 [ 220.747307][T11215] do_syscall_64+0xfa/0x3b0 [ 220.747325][T11215] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.747351][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.747370][T11215] ? clear_bhb_loop+0x60/0xb0 [ 220.747391][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.747408][T11215] RIP: 0033:0x7fa767f8eec9 [ 220.747427][T11215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.747442][T11215] RSP: 002b:00007fa768edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.747465][T11215] RAX: ffffffffffffffda RBX: 00007fa7681e5fa0 RCX: 00007fa767f8eec9 [ 220.747477][T11215] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 220.747489][T11215] RBP: 00007fa768011f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.747500][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.747510][T11215] R13: 00007fa7681e6038 R14: 00007fa7681e5fa0 R15: 00007ffec1ae5b68 [ 220.747531][T11215] [ 220.747538][T11215] [ 221.137468][T11215] Allocated by task 9604: [ 221.141818][T11215] kasan_save_track+0x3e/0x80 [ 221.146511][T11215] __kasan_slab_alloc+0x6c/0x80 [ 221.151360][T11215] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 221.156824][T11215] xfrm_state_alloc+0x24/0x2f0 [ 221.161592][T11215] __find_acq_core+0x8a7/0x1c00 [ 221.166444][T11215] xfrm_find_acq+0x78/0xa0 [ 221.170871][T11215] xfrm_alloc_userspi+0x6b3/0xc90 [ 221.175987][T11215] xfrm_user_rcv_msg+0x7a0/0xab0 [ 221.180937][T11215] netlink_rcv_skb+0x208/0x470 [ 221.185707][T11215] xfrm_netlink_rcv+0x79/0x90 [ 221.190404][T11215] netlink_unicast+0x82c/0x9e0 [ 221.195179][T11215] netlink_sendmsg+0x805/0xb30 [ 221.200038][T11215] __sock_sendmsg+0x21c/0x270 [ 221.204749][T11215] ____sys_sendmsg+0x505/0x830 [ 221.209526][T11215] ___sys_sendmsg+0x21f/0x2a0 [ 221.214205][T11215] __x64_sys_sendmsg+0x19b/0x260 [ 221.219144][T11215] do_syscall_64+0xfa/0x3b0 [ 221.223648][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.229536][T11215] [ 221.231857][T11215] Freed by task 9: [ 221.235568][T11215] kasan_save_track+0x3e/0x80 [ 221.240247][T11215] kasan_save_free_info+0x46/0x50 [ 221.245269][T11215] __kasan_slab_free+0x5b/0x80 [ 221.250031][T11215] kmem_cache_free+0x18f/0x400 [ 221.254794][T11215] xfrm_state_gc_task+0x52d/0x6b0 [ 221.259818][T11215] process_scheduled_works+0xae1/0x17b0 [ 221.265373][T11215] worker_thread+0x8a0/0xda0 [ 221.269962][T11215] kthread+0x70e/0x8a0 [ 221.274038][T11215] ret_from_fork+0x439/0x7d0 [ 221.278628][T11215] ret_from_fork_asm+0x1a/0x30 [ 221.283480][T11215] [ 221.285804][T11215] The buggy address belongs to the object at ffff888057d06200 [ 221.285804][T11215] which belongs to the cache xfrm_state of size 928 [ 221.299781][T11215] The buggy address is located 816 bytes inside of [ 221.299781][T11215] freed 928-byte region [ffff888057d06200, ffff888057d065a0) [ 221.313596][T11215] [ 221.315926][T11215] The buggy address belongs to the physical page: [ 221.322344][T11215] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057d05980 pfn:0x57d04 [ 221.332402][T11215] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.340902][T11215] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 221.348528][T11215] page_type: f5(slab) [ 221.352507][T11215] raw: 00fff00000000040 ffff888020ed0dc0 dead000000000122 0000000000000000 [ 221.361088][T11215] raw: ffff888057d05980 00000000800f000b 00000000f5000000 0000000000000000 [ 221.369671][T11215] head: 00fff00000000040 ffff888020ed0dc0 dead000000000122 0000000000000000 [ 221.378354][T11215] head: ffff888057d05980 00000000800f000b 00000000f5000000 0000000000000000 [ 221.387021][T11215] head: 00fff00000000002 ffffea00015f4101 00000000ffffffff 00000000ffffffff [ 221.395690][T11215] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 221.404362][T11215] page dumped because: kasan: bad access detected [ 221.410770][T11215] page_owner tracks the page as allocated [ 221.416480][T11215] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6017, tgid 6013 (syz.3.7), ts 97140958846, free_ts 28817776589 [ 221.435606][T11215] post_alloc_hook+0x240/0x2a0 [ 221.440398][T11215] get_page_from_freelist+0x21e4/0x22c0 [ 221.445952][T11215] __alloc_frozen_pages_noprof+0x181/0x370 [ 221.451771][T11215] alloc_pages_mpol+0x232/0x4a0 [ 221.456647][T11215] allocate_slab+0x8a/0x370 [ 221.461149][T11215] ___slab_alloc+0xbeb/0x1420 [ 221.465830][T11215] kmem_cache_alloc_noprof+0x283/0x3c0 [ 221.471288][T11215] xfrm_state_alloc+0x24/0x2f0 [ 221.476051][T11215] pfkey_add+0x6e4/0x2e00 [ 221.480383][T11215] pfkey_sendmsg+0xbfe/0x1090 [ 221.485059][T11215] __sock_sendmsg+0x21c/0x270 [ 221.489830][T11215] ____sys_sendmsg+0x505/0x830 [ 221.494680][T11215] ___sys_sendmsg+0x21f/0x2a0 [ 221.499358][T11215] __x64_sys_sendmsg+0x19b/0x260 [ 221.504382][T11215] do_syscall_64+0xfa/0x3b0 [ 221.508901][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.514794][T11215] page last free pid 1 tgid 1 stack trace: [ 221.520594][T11215] __free_frozen_pages+0xbc4/0xd30 [ 221.525717][T11215] free_contig_range+0x1bd/0x4a0 [ 221.530664][T11215] destroy_args+0x69/0x660 [ 221.535082][T11215] debug_vm_pgtable+0x39f/0x3b0 [ 221.539934][T11215] do_one_initcall+0x233/0x820 [ 221.544701][T11215] do_initcall_level+0x104/0x190 [ 221.549636][T11215] do_initcalls+0x59/0xa0 [ 221.553960][T11215] kernel_init_freeable+0x334/0x4b0 [ 221.559156][T11215] kernel_init+0x1d/0x1d0 [ 221.563587][T11215] ret_from_fork+0x439/0x7d0 [ 221.568191][T11215] ret_from_fork_asm+0x1a/0x30 [ 221.573139][T11215] [ 221.575466][T11215] Memory state around the buggy address: [ 221.581100][T11215] ffff888057d06400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.589163][T11215] ffff888057d06480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.597231][T11215] >ffff888057d06500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.605287][T11215] ^ [ 221.610916][T11215] ffff888057d06580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 221.618980][T11215] ffff888057d06600: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 221.627125][T11215] ================================================================== [ 221.695798][T11215] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.703060][T11215] CPU: 0 UID: 0 PID: 11215 Comm: syz.4.1443 Not tainted syzkaller #0 PREEMPT(full) [ 221.712456][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.722548][T11215] Call Trace: [ 221.725871][T11215] [ 221.728831][T11215] dump_stack_lvl+0x99/0x250 [ 221.733451][T11215] ? __asan_memcpy+0x40/0x70 [ 221.738071][T11215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.743393][T11215] ? __pfx__printk+0x10/0x10 [ 221.748016][T11215] vpanic+0x281/0x750 [ 221.752013][T11215] ? preempt_schedule+0xae/0xc0 [ 221.756872][T11215] ? __pfx_vpanic+0x10/0x10 [ 221.761375][T11215] ? preempt_schedule_common+0x83/0xd0 [ 221.766838][T11215] ? preempt_schedule+0xae/0xc0 [ 221.771708][T11215] ? __pfx_preempt_schedule+0x10/0x10 [ 221.777093][T11215] panic+0xb9/0xc0 [ 221.780819][T11215] ? __pfx_panic+0x10/0x10 [ 221.785238][T11215] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 221.791153][T11215] ? xfrm_state_find+0x2cf2/0x5400 [ 221.796441][T11215] check_panic_on_warn+0x89/0xb0 [ 221.801385][T11215] ? xfrm_state_find+0x2cf2/0x5400 [ 221.806499][T11215] end_report+0x78/0x160 [ 221.810751][T11215] kasan_report+0x129/0x150 [ 221.815265][T11215] ? xfrm_state_find+0x2cf2/0x5400 [ 221.820469][T11215] xfrm_state_find+0x2cf2/0x5400 [ 221.825420][T11215] ? xfrm_state_find+0x1da/0x5400 [ 221.830452][T11215] ? __pfx_xfrm_state_find+0x10/0x10 [ 221.835740][T11215] ? xfrm4_get_saddr+0xd5/0x140 [ 221.840609][T11215] ? __pfx_xfrm4_get_saddr+0x10/0x10 [ 221.845913][T11215] ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80 [ 221.852247][T11215] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 221.858414][T11215] ? stack_depot_save_flags+0x40/0x860 [ 221.863984][T11215] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 221.870577][T11215] ? __lock_acquire+0xab9/0xd20 [ 221.875438][T11215] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 221.880927][T11215] ? rt_set_nexthop+0x693/0xa80 [ 221.885809][T11215] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 221.891212][T11215] ? xfrm_expand_policies+0x41f/0x6a0 [ 221.896622][T11215] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 221.902008][T11215] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 221.907886][T11215] xfrm_lookup_route+0x3c/0x1c0 [ 221.912776][T11215] udp_sendmsg+0x142e/0x2170 [ 221.917395][T11215] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 221.922958][T11215] ? __pfx_udp_sendmsg+0x10/0x10 [ 221.927904][T11215] ? count_memcg_event_mm+0x21/0x260 [ 221.933204][T11215] ? count_memcg_event_mm+0x21/0x260 [ 221.938744][T11215] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.943609][T11215] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 221.950025][T11215] ? sock_rps_record_flow+0x19/0x410 [ 221.955314][T11215] ? inet_sendmsg+0x29c/0x370 [ 221.960022][T11215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.965315][T11215] __sock_sendmsg+0x19c/0x270 [ 221.970004][T11215] ____sys_sendmsg+0x52d/0x830 [ 221.974781][T11215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.980078][T11215] ? import_iovec+0x74/0xa0 [ 221.984589][T11215] ___sys_sendmsg+0x21f/0x2a0 [ 221.989268][T11215] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.994480][T11215] ? __fget_files+0x2a/0x420 [ 221.999098][T11215] ? __fget_files+0x3a0/0x420 [ 222.003782][T11215] __sys_sendmmsg+0x227/0x430 [ 222.008465][T11215] ? __pfx___sys_sendmmsg+0x10/0x10 [ 222.013665][T11215] ? do_futex+0x333/0x420 [ 222.018007][T11215] ? rcu_is_watching+0x15/0xb0 [ 222.022774][T11215] __x64_sys_sendmmsg+0xa0/0xc0 [ 222.027627][T11215] do_syscall_64+0xfa/0x3b0 [ 222.032132][T11215] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.037337][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.043401][T11215] ? clear_bhb_loop+0x60/0xb0 [ 222.048082][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.053981][T11215] RIP: 0033:0x7fa767f8eec9 [ 222.058426][T11215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.078040][T11215] RSP: 002b:00007fa768edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 222.086464][T11215] RAX: ffffffffffffffda RBX: 00007fa7681e5fa0 RCX: 00007fa767f8eec9 [ 222.094786][T11215] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 222.102759][T11215] RBP: 00007fa768011f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.110737][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.118732][T11215] R13: 00007fa7681e6038 R14: 00007fa7681e5fa0 R15: 00007ffec1ae5b68 [ 222.126799][T11215] [ 222.130195][T11215] Kernel Offset: disabled [ 222.134526][T11215] Rebooting in 86400 seconds..