last executing test programs: 6.061862437s ago: executing program 3 (id=9272): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x30, 0x82ff, "7026405ea9be"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 5.954592589s ago: executing program 3 (id=9273): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x43ca10337ab2e290, r0}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r1, 0xffffffffffffffff, 0xb, 0xd, 0xffffffffffffffff, @void, @value=r2}, 0x20) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000070000000700002c"], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}]}, 0x3c}}, 0xc000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x32, &(0x7f0000000180)="ca0077d87e1d8bbedb87aee2d6269b9af945b05970", 0x15) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}}, 0x24044080) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) 5.420524716s ago: executing program 3 (id=9279): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000001a00000000000000000000e20000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x29, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) 3.90507754s ago: executing program 3 (id=9291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x480051}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x8000, 0x25dfdbfc, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 3.359457768s ago: executing program 3 (id=9297): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x6, 0x1, 0xd, 0x7}, &(0x7f0000000280)=0x98) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.013842504s ago: executing program 3 (id=9302): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000001a00000000000000000000e20000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x29, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff1, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.925499255s ago: executing program 1 (id=9304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000100)=r0, 0x4) 2.782885357s ago: executing program 1 (id=9305): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x4044004) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000030425bd70000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001400128009000100", @ANYRES32, @ANYBLOB="235aeabc2c42a8892e8159edb45db08ac2a47ca0e7188eb887944b6d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) 1.851109451s ago: executing program 1 (id=9308): r0 = socket(0x15, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x8880}, 0x1c) 1.630198595s ago: executing program 1 (id=9310): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x6, 0x1, 0xd, 0x7}, &(0x7f0000000280)=0x98) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.410810188s ago: executing program 2 (id=9312): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) 1.226654671s ago: executing program 1 (id=9313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r2], 0x54}}, 0x20000000) socket(0x40000000015, 0x5, 0x0) 1.105641822s ago: executing program 2 (id=9314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000100)=r0, 0x4) 1.100818533s ago: executing program 0 (id=9315): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) socket$tipc(0x1e, 0x5, 0x0) unshare(0x6020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x180000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x0, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.024553744s ago: executing program 2 (id=9316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xa4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ea9}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x480051}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x20008000) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r13, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x8000, 0x25dfdbfc, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 810.182548ms ago: executing program 1 (id=9317): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000001a00000000000000000000e20000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x29, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) 733.891028ms ago: executing program 0 (id=9318): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={0x0}, 0x5}, 0x0) 693.765549ms ago: executing program 0 (id=9319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 566.793981ms ago: executing program 0 (id=9320): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {}, {0x2, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 460.772443ms ago: executing program 2 (id=9321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 430.633133ms ago: executing program 0 (id=9322): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) 233.720746ms ago: executing program 0 (id=9323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x44}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xffff}]}]}, 0x34}}, 0x0) r14 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r14, 0x0, 0x485, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 186.474457ms ago: executing program 2 (id=9324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000100)=r0, 0x4) 0s ago: executing program 2 (id=9325): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) close(r1) kernel console output (not intermixed with test programs): utes in process `syz.2.6339'. [ 1959.840938][T26462] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6346'. [ 1961.338609][T26491] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6360'. [ 1963.457120][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1963.942977][T26531] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6378'. [ 1964.149990][T26534] syzkaller0: entered promiscuous mode [ 1964.159946][T26534] syzkaller0: entered allmulticast mode [ 1964.650262][T26557] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1964.872704][T26561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6392'. [ 1967.809885][T26544] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1967.820461][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6403'. [ 1968.207522][T26602] netlink: 'syz.3.6411': attribute type 1 has an invalid length. [ 1968.219155][T26602] netlink: 'syz.3.6411': attribute type 4 has an invalid length. [ 1968.231510][T26602] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1968.274380][T26604] netlink: 'syz.3.6411': attribute type 1 has an invalid length. [ 1968.300163][T26604] netlink: 'syz.3.6411': attribute type 4 has an invalid length. [ 1968.343914][T26604] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1968.401534][T26607] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6412'. [ 1968.585707][T26611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6414'. [ 1968.860485][T26614] syzkaller0: entered promiscuous mode [ 1968.875342][T26614] syzkaller0: entered allmulticast mode [ 1969.345591][T26632] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6423'. [ 1971.667123][T26628] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6421'. [ 1971.835017][T26638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6426'. [ 1972.164582][T26655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6433'. [ 1972.296460][T26662] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6436'. [ 1972.417766][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6440'. [ 1973.019855][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1973.266002][T26696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1973.708806][T26713] netlink: 'syz.2.6460': attribute type 2 has an invalid length. [ 1973.727251][T26713] netlink: 'syz.2.6460': attribute type 8 has an invalid length. [ 1973.741915][T26713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6460'. [ 1973.783372][T26714] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6461'. [ 1973.817346][T26714] netlink: del zone limit has 8 unknown bytes [ 1974.409823][T26739] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6473'. [ 1974.512036][T26744] netlink: 'syz.0.6476': attribute type 2 has an invalid length. [ 1974.530282][T26744] netlink: 'syz.0.6476': attribute type 8 has an invalid length. [ 1975.277757][T26775] tipc: Enabling of bearer rejected, failed to enable media [ 1975.403565][T26775] syzkaller0: entered promiscuous mode [ 1975.410016][T26775] syzkaller0: entered allmulticast mode [ 1976.284120][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.290499][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.685905][T26804] __nla_validate_parse: 3 callbacks suppressed [ 1976.685924][T26804] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6502'. [ 1976.702786][T26804] netlink: del zone limit has 8 unknown bytes [ 1978.626272][T26781] syzkaller0: entered promiscuous mode [ 1978.631974][T26781] syzkaller0: entered allmulticast mode [ 1980.154829][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6508'. [ 1981.471067][T26796] netlink: 'syz.1.6498': attribute type 1 has an invalid length. [ 1981.479457][T26796] netlink: 'syz.1.6498': attribute type 4 has an invalid length. [ 1981.487576][T26796] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1981.502788][T26822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6509'. [ 1981.840197][T26837] tipc: Enabling of bearer rejected, failed to enable media [ 1981.947783][T26837] syzkaller0: entered promiscuous mode [ 1982.002253][T26837] syzkaller0: entered allmulticast mode [ 1983.476705][T19560] Bluetooth: hci3: command 0x0406 tx timeout [ 1984.858900][T26854] netlink: 'syz.1.6521': attribute type 1 has an invalid length. [ 1984.867206][T26854] netlink: 'syz.1.6521': attribute type 4 has an invalid length. [ 1984.876581][T26854] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1984.890993][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6522'. [ 1985.134080][T26868] netlink: 'syz.0.6526': attribute type 1 has an invalid length. [ 1985.149518][T26868] netlink: 'syz.0.6526': attribute type 4 has an invalid length. [ 1985.168241][T26868] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6526'. [ 1985.192588][T26868] netlink: 'syz.0.6526': attribute type 1 has an invalid length. [ 1985.213931][T26868] netlink: 'syz.0.6526': attribute type 4 has an invalid length. [ 1985.221736][T26868] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6526'. [ 1985.391521][T26880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6534'. [ 1985.514731][T26881] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6532'. [ 1985.589706][T26883] tipc: Enabling of bearer rejected, failed to enable media [ 1985.668036][T26883] syzkaller0: entered promiscuous mode [ 1985.682585][T26883] syzkaller0: entered allmulticast mode [ 1986.752271][T26910] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6544'. [ 1988.655801][T26906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1988.699084][T26920] netlink: 'syz.3.6549': attribute type 1 has an invalid length. [ 1988.721888][T26920] netlink: 'syz.3.6549': attribute type 4 has an invalid length. [ 1988.742979][T26920] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6549'. [ 1988.778332][T26921] netlink: 'syz.3.6549': attribute type 1 has an invalid length. [ 1988.804921][T26921] netlink: 'syz.3.6549': attribute type 4 has an invalid length. [ 1988.833014][T26921] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6549'. [ 1989.686822][T26954] netlink: 'syz.2.6564': attribute type 1 has an invalid length. [ 1989.706101][T26954] netlink: 'syz.2.6564': attribute type 4 has an invalid length. [ 1990.317625][T26978] netlink: 'syz.2.6576': attribute type 1 has an invalid length. [ 1990.341504][T26978] netlink: 'syz.2.6576': attribute type 4 has an invalid length. [ 1990.381115][T26978] __nla_validate_parse: 3 callbacks suppressed [ 1990.381132][T26978] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6576'. [ 1991.013187][T27006] netlink: 'syz.0.6589': attribute type 1 has an invalid length. [ 1991.071886][T27006] netlink: 'syz.0.6589': attribute type 4 has an invalid length. [ 1991.079687][T27006] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1991.763799][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6603'. [ 1991.809385][T27037] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6604'. [ 1993.021213][T27068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1995.930381][T27060] validate_nla: 2 callbacks suppressed [ 1995.930400][T27060] netlink: 'syz.2.6615': attribute type 1 has an invalid length. [ 1995.944002][T27060] netlink: 'syz.2.6615': attribute type 4 has an invalid length. [ 1995.951826][T27060] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6615'. [ 1995.961035][T27068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6619'. [ 1995.970535][T27095] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1996.002516][T27096] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1996.259793][T27106] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1996.306079][T27106] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6643'. [ 1996.657649][T27123] netlink: 'syz.2.6641': attribute type 1 has an invalid length. [ 1996.666161][T27123] netlink: 'syz.2.6641': attribute type 4 has an invalid length. [ 1996.675477][T27123] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6641'. [ 1996.689998][T27124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6642'. [ 1996.708394][T27124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6642'. [ 1996.720995][T27121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6642'. [ 1997.235531][T27144] netlink: 'syz.3.6652': attribute type 10 has an invalid length. [ 1997.580073][T27144] team0 (unregistering): Port device team_slave_0 removed [ 1997.607488][T27144] team0 (unregistering): Port device team_slave_1 removed [ 1998.379006][T27177] netlink: 'syz.2.6667': attribute type 1 has an invalid length. [ 1998.389141][T27177] netlink: 'syz.2.6667': attribute type 1 has an invalid length. [ 1998.646056][T27181] syzkaller0: entered promiscuous mode [ 1998.651701][T27181] syzkaller0: entered allmulticast mode [ 2001.713331][T27204] __nla_validate_parse: 6 callbacks suppressed [ 2001.713348][T27204] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6678'. [ 2002.481452][T27232] netlink: 'syz.2.6691': attribute type 1 has an invalid length. [ 2002.507505][T27232] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6691'. [ 2003.284626][T27258] netlink: 'syz.2.6703': attribute type 1 has an invalid length. [ 2003.330039][T27258] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6703'. [ 2003.960228][T27284] netlink: 'syz.2.6716': attribute type 1 has an invalid length. [ 2003.968407][T27284] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6716'. [ 2004.368348][T27298] dvmrp1: tun_chr_ioctl cmd 35108 [ 2004.584698][T27310] netlink: 'syz.2.6728': attribute type 1 has an invalid length. [ 2004.612126][T27310] netlink: 'syz.2.6728': attribute type 4 has an invalid length. [ 2004.629195][T27310] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6728'. [ 2005.045951][T27325] netlink: 'syz.2.6735': attribute type 2 has an invalid length. [ 2005.072276][T27325] netlink: 'syz.2.6735': attribute type 8 has an invalid length. [ 2005.082588][T27325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6735'. [ 2005.395611][T27331] syzkaller0: entered promiscuous mode [ 2005.425560][T27331] syzkaller0: entered allmulticast mode [ 2005.448162][T27334] netlink: 'syz.2.6738': attribute type 1 has an invalid length. [ 2005.461546][T27334] netlink: 'syz.2.6738': attribute type 4 has an invalid length. [ 2005.487738][T27334] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6738'. [ 2005.514611][T27337] netlink: 'syz.2.6738': attribute type 1 has an invalid length. [ 2005.539092][T27337] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6738'. [ 2006.310834][T27355] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.6748'. [ 2009.104291][T27341] validate_nla: 1 callbacks suppressed [ 2009.104309][T27341] netlink: 'syz.0.6741': attribute type 1 has an invalid length. [ 2009.117961][T27341] netlink: 'syz.0.6741': attribute type 4 has an invalid length. [ 2009.126219][T27341] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6741'. [ 2009.135666][T27362] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 2009.145120][T27362] netlink: 'syz.2.6752': attribute type 4 has an invalid length. [ 2009.162138][T27362] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6752'. [ 2009.202563][T27364] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 2009.219404][T27364] netlink: 'syz.2.6752': attribute type 4 has an invalid length. [ 2009.228559][T27364] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6752'. [ 2009.565463][T27398] netlink: 'syz.2.6766': attribute type 1 has an invalid length. [ 2009.573689][T27398] netlink: 'syz.2.6766': attribute type 4 has an invalid length. [ 2009.581652][T27398] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6766'. [ 2010.034667][T27406] syzkaller0: entered promiscuous mode [ 2010.055752][T27406] syzkaller0: entered allmulticast mode [ 2010.062912][T27411] netlink: 'syz.0.6771': attribute type 1 has an invalid length. [ 2010.096394][T27411] netlink: 'syz.0.6771': attribute type 4 has an invalid length. [ 2010.115948][T27411] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6771'. [ 2010.129643][T27415] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6771'. [ 2012.995896][T27427] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6776'. [ 2013.010897][T27431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6778'. [ 2013.339059][T27443] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6784'. [ 2013.365238][T27443] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6784'. [ 2013.710973][T27456] syzkaller0: entered promiscuous mode [ 2013.717752][T27456] syzkaller0: entered allmulticast mode [ 2016.667870][T27481] bond0: option all_slaves_active: invalid value (223) [ 2017.087983][T27493] syzkaller0: entered promiscuous mode [ 2017.105896][T27493] syzkaller0: entered allmulticast mode [ 2017.310551][T27502] validate_nla: 10 callbacks suppressed [ 2017.310572][T27502] netlink: 'syz.0.6810': attribute type 3 has an invalid length. [ 2020.299522][T27503] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.325573][T27505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2020.450415][T27503] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.470098][T27536] netlink: 'syz.3.6820': attribute type 1 has an invalid length. [ 2020.479003][T27536] __nla_validate_parse: 1 callbacks suppressed [ 2020.479013][T27536] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6820'. [ 2020.706256][T27503] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.745543][T27547] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6826'. [ 2020.884552][T27503] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.989717][T27553] syzkaller0: entered promiscuous mode [ 2020.999157][T27553] syzkaller0: entered allmulticast mode [ 2023.446925][T27556] syzkaller0: entered promiscuous mode [ 2023.454652][T27556] syzkaller0: entered allmulticast mode [ 2023.463014][T27565] netlink: 'syz.0.6833': attribute type 1 has an invalid length. [ 2023.470886][T27565] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6833'. [ 2023.480924][T27566] netlink: 'syz.0.6833': attribute type 1 has an invalid length. [ 2023.488975][T27566] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6833'. [ 2023.959188][T27578] netlink: 'syz.0.6837': attribute type 72 has an invalid length. [ 2026.767516][T27503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.823487][T27503] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.873368][T27503] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.885830][T27599] netlink: 'syz.3.6845': attribute type 1 has an invalid length. [ 2026.899066][T27599] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6845'. [ 2026.915651][T27599] netlink: 'syz.3.6845': attribute type 1 has an invalid length. [ 2026.925911][T27599] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6845'. [ 2026.947256][T27503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.089588][T27605] netlink: 'syz.0.6847': attribute type 72 has an invalid length. [ 2027.543714][T27616] syzkaller0: entered promiscuous mode [ 2027.549383][T27616] syzkaller0: entered allmulticast mode [ 2030.406790][T27625] syzkaller0: entered promiscuous mode [ 2030.412511][T27625] syzkaller0: entered allmulticast mode [ 2030.542303][T27639] netlink: 'syz.0.6859': attribute type 72 has an invalid length. [ 2030.562478][T27633] netlink: 'syz.2.6857': attribute type 1 has an invalid length. [ 2030.570467][T27633] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6857'. [ 2033.099342][T27635] netlink: 'syz.3.6858': attribute type 1 has an invalid length. [ 2033.107670][T27635] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6858'. [ 2033.117279][T27636] netlink: 'syz.3.6858': attribute type 1 has an invalid length. [ 2033.125086][T27636] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6858'. [ 2033.309967][T27658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6866'. [ 2033.399536][T27661] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6868'. [ 2033.439425][T27659] syzkaller0: entered promiscuous mode [ 2033.445616][T27659] syzkaller0: entered allmulticast mode [ 2036.320275][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6873'. [ 2036.334400][T27673] veth0: entered promiscuous mode [ 2036.339529][T27673] macsec1: entered allmulticast mode [ 2036.345132][T27673] veth0: entered allmulticast mode [ 2036.353422][T27673] veth0: left allmulticast mode [ 2036.358367][T27673] veth0: left promiscuous mode [ 2036.475619][T27681] syzkaller0: entered promiscuous mode [ 2036.481263][T27681] syzkaller0: entered allmulticast mode [ 2037.718305][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.725191][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.117660][T27711] netlink: 'syz.0.6889': attribute type 1 has an invalid length. [ 2039.126004][T27711] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6889'. [ 2039.139635][T27713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6890'. [ 2039.398133][T27722] syzkaller0: entered promiscuous mode [ 2039.417192][T27722] syzkaller0: entered allmulticast mode [ 2039.424307][T27729] netlink: 'syz.0.6894': attribute type 1 has an invalid length. [ 2039.437380][T27729] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6894'. [ 2039.450082][T27725] netlink: 'syz.0.6894': attribute type 1 has an invalid length. [ 2039.465015][T27725] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6894'. [ 2040.160683][T27753] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6903'. [ 2042.317519][T27751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6902'. [ 2042.480567][T27762] netlink: 'syz.3.6906': attribute type 1 has an invalid length. [ 2042.506981][T27762] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.6906'. [ 2042.562511][T27766] netlink: 'syz.3.6906': attribute type 1 has an invalid length. [ 2042.570315][T27766] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.6906'. [ 2042.982830][T27781] syzkaller0: entered promiscuous mode [ 2042.988538][T27781] syzkaller0: entered allmulticast mode [ 2042.999758][T27779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6914'. [ 2043.018161][T27779] veth0: entered promiscuous mode [ 2043.046724][T27779] macsec1: entered allmulticast mode [ 2043.056541][T27779] veth0: entered allmulticast mode [ 2043.068940][T27779] veth0: left allmulticast mode [ 2043.075924][T27779] veth0: left promiscuous mode [ 2046.594712][T27788] netlink: 'syz.3.6918': attribute type 1 has an invalid length. [ 2046.602954][T27788] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.6918'. [ 2046.615176][T27846] netlink: 'syz.1.6947': attribute type 1 has an invalid length. [ 2046.623829][T27846] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.6947'. [ 2046.633878][T27847] netlink: 'syz.1.6947': attribute type 1 has an invalid length. [ 2046.641639][T27847] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.6947'. [ 2047.096981][T27867] netlink: 'syz.0.6956': attribute type 1 has an invalid length. [ 2047.146380][T27867] netlink: 16134 bytes leftover after parsing attributes in process `syz.0.6956'. [ 2047.219881][T27873] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6959'. [ 2047.327520][T27870] syzkaller0: entered promiscuous mode [ 2047.333439][T27870] syzkaller0: entered allmulticast mode [ 2047.339588][T27877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6962'. [ 2048.331589][T27905] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6974'. [ 2050.399228][T27895] netlink: 'syz.0.6969': attribute type 1 has an invalid length. [ 2050.408588][T27895] netlink: 16134 bytes leftover after parsing attributes in process `syz.0.6969'. [ 2050.424502][T27925] netlink: 'syz.3.6983': attribute type 1 has an invalid length. [ 2050.462071][T27925] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.6983'. [ 2050.496519][T27926] netlink: 'syz.3.6983': attribute type 1 has an invalid length. [ 2050.516949][T27926] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.6983'. [ 2050.680395][T27936] tipc: Enabled bearer , priority 0 [ 2050.698434][T27936] syzkaller0: entered promiscuous mode [ 2050.706622][T27936] syzkaller0: entered allmulticast mode [ 2050.790175][T27936] tipc: Resetting bearer [ 2050.842958][T27935] tipc: Resetting bearer [ 2050.983852][T27935] tipc: Disabling bearer [ 2051.159610][T27950] syzkaller0: entered promiscuous mode [ 2051.168045][T27950] syzkaller0: entered allmulticast mode [ 2053.686020][T27957] netlink: 'syz.2.6998': attribute type 1 has an invalid length. [ 2053.694106][T27957] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.6998'. [ 2053.704176][T27960] netlink: 'syz.2.6998': attribute type 1 has an invalid length. [ 2053.711994][T27960] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.6998'. [ 2054.117777][T27984] pim6reg: entered allmulticast mode [ 2054.252660][T27990] netlink: 'syz.1.7013': attribute type 1 has an invalid length. [ 2054.260470][T27990] netlink: 'syz.1.7013': attribute type 4 has an invalid length. [ 2054.282868][T27990] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7013'. [ 2054.315704][T27996] netlink: 'syz.1.7013': attribute type 1 has an invalid length. [ 2054.324188][T27996] netlink: 'syz.1.7013': attribute type 4 has an invalid length. [ 2054.332166][T27996] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7013'. [ 2054.574607][T27993] syzkaller0: entered promiscuous mode [ 2054.586653][T27993] syzkaller0: entered allmulticast mode [ 2057.645313][T28042] netlink: 'syz.3.7036': attribute type 1 has an invalid length. [ 2057.676709][T28042] netlink: 'syz.3.7036': attribute type 4 has an invalid length. [ 2057.720886][T28042] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7036'. [ 2057.734047][T28046] netlink: 'syz.3.7036': attribute type 1 has an invalid length. [ 2057.763272][T28046] netlink: 'syz.3.7036': attribute type 4 has an invalid length. [ 2057.771164][T28046] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7036'. [ 2057.847294][T28050] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7039'. [ 2057.962057][T28054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7041'. [ 2058.058884][T28055] syzkaller0: entered promiscuous mode [ 2058.079505][T28055] syzkaller0: entered allmulticast mode [ 2060.744589][T28079] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7052'. [ 2060.754602][T28077] validate_nla: 2 callbacks suppressed [ 2060.754618][T28077] netlink: 'syz.1.7051': attribute type 1 has an invalid length. [ 2060.774684][T28077] netlink: 'syz.1.7051': attribute type 4 has an invalid length. [ 2060.791950][T28077] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7051'. [ 2060.825617][T28080] netlink: 'syz.1.7051': attribute type 1 has an invalid length. [ 2060.839922][T28080] netlink: 'syz.1.7051': attribute type 4 has an invalid length. [ 2060.858832][T28080] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7051'. [ 2060.881052][T28084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7054'. [ 2061.173982][T28098] netlink: 788 bytes leftover after parsing attributes in process `syz.0.7060'. [ 2061.237611][T28103] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7063'. [ 2061.282421][T28106] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 2061.290870][T28106] netlink: 'syz.0.7065': attribute type 4 has an invalid length. [ 2061.298824][T28106] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7065'. [ 2061.389371][T28102] syzkaller0: entered promiscuous mode [ 2061.397604][T28102] syzkaller0: entered allmulticast mode [ 2061.407607][T28106] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 2061.414851][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7066'. [ 2061.432449][T28106] netlink: 'syz.0.7065': attribute type 4 has an invalid length. [ 2061.460651][T28106] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7065'. [ 2064.481930][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7084'. [ 2064.798905][T28169] tipc: Enabled bearer , priority 0 [ 2064.846391][T28168] tipc: Disabling bearer [ 2065.300602][T28195] tipc: Enabled bearer , priority 0 [ 2065.337857][T28194] tipc: Disabling bearer [ 2065.868075][T28223] tipc: Enabled bearer , priority 0 [ 2065.891177][T28222] tipc: Disabling bearer [ 2066.525166][T28258] tipc: Enabled bearer , priority 0 [ 2066.599638][T28262] syzkaller0: entered promiscuous mode [ 2066.605338][T28262] syzkaller0: entered allmulticast mode [ 2066.615199][T28262] tipc: Resetting bearer [ 2066.646941][T28257] tipc: Resetting bearer [ 2069.317832][T28257] tipc: Disabling bearer [ 2069.610373][T28303] syzkaller0: entered promiscuous mode [ 2069.617028][T28303] syzkaller0: entered allmulticast mode [ 2072.255799][T28318] tipc: Enabling of bearer rejected, failed to enable media [ 2072.266387][T28320] __nla_validate_parse: 4 callbacks suppressed [ 2072.266405][T28320] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7165'. [ 2072.308959][T28322] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7165'. [ 2072.523820][T28337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7172'. [ 2072.802541][T28348] syzkaller0: entered promiscuous mode [ 2072.808108][T28348] syzkaller0: entered allmulticast mode [ 2073.400037][T19560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2073.427134][T19560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2073.435960][T19560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2073.448439][T19560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2073.470717][T19560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2073.481889][T19560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2075.552091][T13433] Bluetooth: hci1: command tx timeout [ 2075.561015][T28352] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7177'. [ 2075.570761][T28355] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7177'. [ 2075.580785][T28354] tipc: Enabled bearer , priority 0 [ 2075.642773][T28357] syzkaller0: entered promiscuous mode [ 2075.648318][T28357] syzkaller0: entered allmulticast mode [ 2075.654752][T28357] tipc: Resetting bearer [ 2075.780597][ T6038] tipc: Resetting bearer [ 2075.846882][T28349] tipc: Resetting bearer [ 2076.697507][ T9114] tipc: Node number set to 1259050300 [ 2077.642077][T13433] Bluetooth: hci1: command tx timeout [ 2078.126275][T28349] tipc: Disabling bearer [ 2078.136428][T28370] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7182'. [ 2078.230207][ T6038] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.284403][T28373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7183'. [ 2078.375457][ T6038] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.501293][ T6038] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.525251][T28381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7186'. [ 2078.534691][T28381] bridge_slave_1: left allmulticast mode [ 2078.540409][T28381] bridge_slave_1: left promiscuous mode [ 2078.547489][T28381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.561306][T28381] bridge_slave_0: left promiscuous mode [ 2078.569883][T28381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2078.784959][ T6038] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.937673][T28390] syzkaller0: entered promiscuous mode [ 2078.943414][T28390] syzkaller0: entered allmulticast mode [ 2079.721955][T13433] Bluetooth: hci1: command tx timeout [ 2081.432882][T28407] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7194'. [ 2081.442547][T28408] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7194'. [ 2081.599679][T28410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7195'. [ 2081.634296][ T6038] tipc: Left network mode [ 2081.802203][T13433] Bluetooth: hci1: command tx timeout [ 2082.066904][T28360] chnl_net:caif_netlink_parms(): no params data found [ 2082.240323][T28430] syzkaller0: entered promiscuous mode [ 2082.246707][T28430] syzkaller0: entered allmulticast mode [ 2084.744407][T28439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7205'. [ 2084.851911][T28360] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.859105][T28360] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.872648][T28360] bridge_slave_0: entered allmulticast mode [ 2084.876346][T28446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7207'. [ 2084.880392][T28360] bridge_slave_0: entered promiscuous mode [ 2084.942146][T28360] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.949344][T28360] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.958352][T28360] bridge_slave_1: entered allmulticast mode [ 2084.966038][T28360] bridge_slave_1: entered promiscuous mode [ 2085.147618][T28360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2085.166218][T28360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2085.317494][T28360] team0: Port device team_slave_0 added [ 2085.328862][T28360] team0: Port device team_slave_1 added [ 2085.468047][T28360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2085.488014][T28360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2085.521322][T28360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2085.564020][T28360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2085.571052][T28360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2085.598846][T28360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2085.651864][ T6038] hsr_slave_0: left promiscuous mode [ 2085.663143][ T6038] hsr_slave_1: left promiscuous mode [ 2085.767621][ T6038] veth1_macvtap: left promiscuous mode [ 2085.779761][ T6038] veth0_macvtap: left promiscuous mode [ 2085.793505][ T6038] veth1_vlan: left promiscuous mode [ 2085.805754][ T6038] veth0_vlan: left promiscuous mode [ 2087.589319][ T6038] bond0 (unregistering): Released all slaves [ 2087.699838][T28466] syzkaller0: entered promiscuous mode [ 2087.705812][T28466] syzkaller0: entered allmulticast mode [ 2087.712654][T28471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7215'. [ 2090.231027][T28360] hsr_slave_0: entered promiscuous mode [ 2090.265835][T28360] hsr_slave_1: entered promiscuous mode [ 2090.427549][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7219'. [ 2090.604958][T28487] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.7222'. [ 2090.625753][T28487] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.7222'. [ 2090.783174][T28495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7224'. [ 2090.979931][T28502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7228'. [ 2091.149223][T28360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2091.170118][T28510] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.7233'. [ 2091.193098][T28360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2091.215648][T28510] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.7233'. [ 2091.227569][T28360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2091.250334][T28360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2091.513794][T28532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7240'. [ 2091.528520][T28360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2091.577148][T28360] 8021q: adding VLAN 0 to HW filter on device team0 [ 2091.608806][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.616157][ T6039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2091.666604][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.673854][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2091.723025][T28540] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.7244'. [ 2091.749182][T28540] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.7244'. [ 2092.109827][T28360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2092.201641][T28360] veth0_vlan: entered promiscuous mode [ 2092.225969][T28360] veth1_vlan: entered promiscuous mode [ 2092.296147][T28360] veth0_macvtap: entered promiscuous mode [ 2092.330748][T28360] veth1_macvtap: entered promiscuous mode [ 2092.385359][T28360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.406306][T28360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.417187][T28360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2092.441791][T28360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.459877][T28360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2092.485353][T28360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.499647][T28360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.510568][T28360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2092.521429][T28360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2092.533365][T28360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2092.588416][T28360] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.604117][T28360] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.616362][T28360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.628675][T28360] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2092.840078][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.865485][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.928790][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2092.941692][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2092.989392][T28585] netlink: 'syz.2.7262': attribute type 1 has an invalid length. [ 2093.020203][T28585] netlink: 'syz.2.7262': attribute type 4 has an invalid length. [ 2093.711588][T28610] netlink: 'syz.1.7274': attribute type 1 has an invalid length. [ 2093.727288][T28610] netlink: 'syz.1.7274': attribute type 4 has an invalid length. [ 2094.067248][T19560] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2094.096318][T19560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2094.104734][T19560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2094.114273][T19560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2094.133103][T19560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2094.162258][T19560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2094.226522][ T6039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.889910][ T6039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.058107][ T6039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.102614][T28641] netlink: 'syz.3.7287': attribute type 1 has an invalid length. [ 2095.110407][T28641] netlink: 'syz.3.7287': attribute type 4 has an invalid length. [ 2095.201537][ T6039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2095.274577][T28645] tipc: Started in network mode [ 2095.279795][T28645] tipc: Node identity c2305446ba15, cluster identity 4711 [ 2095.288528][T28645] tipc: Enabled bearer , priority 0 [ 2095.395163][T28645] syzkaller0: entered promiscuous mode [ 2095.400706][T28645] syzkaller0: entered allmulticast mode [ 2095.407273][T28645] tipc: Resetting bearer [ 2095.508030][T28644] tipc: Resetting bearer [ 2096.195530][T19560] Bluetooth: hci0: command tx timeout [ 2096.352839][ T9113] tipc: Node number set to 2015712326 [ 2097.882656][T28644] tipc: Disabling bearer [ 2097.894644][T28658] __nla_validate_parse: 17 callbacks suppressed [ 2097.894660][T28658] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.7294'. [ 2097.942191][T28661] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.7294'. [ 2097.969211][T28663] bridge_slave_0: left allmulticast mode [ 2097.999297][T28663] bridge_slave_0: left promiscuous mode [ 2098.012109][T28663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2098.029657][T28663] bridge_slave_1: left allmulticast mode [ 2098.041763][T28663] bridge_slave_1: left promiscuous mode [ 2098.047504][T28663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2098.063556][T28663] bond0: (slave bond_slave_0): Releasing backup interface [ 2098.081587][T28663] bond0: (slave bond_slave_1): Releasing backup interface [ 2098.108660][T28663] team0: Port device team_slave_0 removed [ 2098.139703][T28663] team0: Port device team_slave_1 removed [ 2098.173034][T28663] bond0: (slave netdevsim0): Releasing backup interface [ 2098.213350][T28664] team0: Mode changed to "activebackup" [ 2098.229945][T28665] vlan0: entered promiscuous mode [ 2098.260161][T28665] team0: Port device vlan0 added [ 2098.272561][T19560] Bluetooth: hci0: command tx timeout [ 2098.311537][T28669] netlink: 'syz.1.7298': attribute type 1 has an invalid length. [ 2098.319921][T28669] netlink: 'syz.1.7298': attribute type 4 has an invalid length. [ 2098.328075][T28669] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7298'. [ 2098.337579][T28666] tipc: Enabled bearer , priority 0 [ 2098.442177][ T6039] tipc: Left network mode [ 2098.514983][T28621] chnl_net:caif_netlink_parms(): no params data found [ 2098.800216][T28690] netlink: 'syz.3.7305': attribute type 4 has an invalid length. [ 2098.812132][T28690] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7305'. [ 2098.880291][T28690] netlink: 'syz.3.7305': attribute type 4 has an invalid length. [ 2098.908425][T28690] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7305'. [ 2098.996265][T28621] bridge0: port 1(bridge_slave_0) entered blocking state [ 2099.008113][T28621] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.018125][T28621] bridge_slave_0: entered allmulticast mode [ 2099.032872][T28621] bridge_slave_0: entered promiscuous mode [ 2099.070912][T28703] netlink: 'syz.2.7309': attribute type 1 has an invalid length. [ 2099.084898][T28703] netlink: 'syz.2.7309': attribute type 4 has an invalid length. [ 2099.093274][T28703] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7309'. [ 2099.103362][T28621] bridge0: port 2(bridge_slave_1) entered blocking state [ 2099.111692][T28621] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.123002][T28621] bridge_slave_1: entered allmulticast mode [ 2099.130455][T28621] bridge_slave_1: entered promiscuous mode [ 2099.160570][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.167100][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.350973][T28621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2099.443661][T28621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2099.583836][T28621] team0: Port device team_slave_0 added [ 2099.620132][T28621] team0: Port device team_slave_1 added [ 2099.847666][T28728] netlink: 'syz.1.7319': attribute type 4 has an invalid length. [ 2099.857100][T28728] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7319'. [ 2099.870932][T28621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2099.881652][T28621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2099.911317][T28621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2099.931405][T28732] netlink: 'syz.1.7319': attribute type 4 has an invalid length. [ 2099.941000][T28732] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7319'. [ 2099.955260][T28729] netlink: 'syz.2.7320': attribute type 1 has an invalid length. [ 2099.971790][T28729] netlink: 'syz.2.7320': attribute type 4 has an invalid length. [ 2099.979550][T28729] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7320'. [ 2100.031614][T28621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2100.047349][T28621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2100.101921][T28621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2100.153506][T28739] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7324'. [ 2100.356567][T19560] Bluetooth: hci0: command tx timeout [ 2100.383111][T28621] hsr_slave_0: entered promiscuous mode [ 2100.402270][T28621] hsr_slave_1: entered promiscuous mode [ 2100.421802][T28621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2100.429402][T28621] Cannot create hsr debugfs directory [ 2100.617330][ T6039] hsr_slave_0: left promiscuous mode [ 2100.623733][ T6039] hsr_slave_1: left promiscuous mode [ 2100.630162][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2100.639185][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2100.652947][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2100.661629][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2100.678022][ T6039] bridge_slave_1: left allmulticast mode [ 2100.693120][ T6039] bridge_slave_1: left promiscuous mode [ 2100.698927][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.753156][ T6039] bridge_slave_0: left allmulticast mode [ 2100.758861][ T6039] bridge_slave_0: left promiscuous mode [ 2100.792045][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2100.868862][ T6039] veth1_macvtap: left promiscuous mode [ 2100.885741][ T6039] veth0_macvtap: left promiscuous mode [ 2100.891435][ T6039] veth1_vlan: left promiscuous mode [ 2100.907092][ T6039] veth0_vlan: left promiscuous mode [ 2101.632013][ T6039] team0 (unregistering): Port device team_slave_1 removed [ 2101.687704][ T6039] team0 (unregistering): Port device team_slave_0 removed [ 2101.739821][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2101.801197][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2102.430268][ T6039] bond0 (unregistering): Released all slaves [ 2102.442048][T19560] Bluetooth: hci0: command tx timeout [ 2103.243734][T28806] __nla_validate_parse: 6 callbacks suppressed [ 2103.243753][T28806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7352'. [ 2103.541878][T28621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2103.562598][T28621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2103.582716][T28621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2103.626487][T28621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2103.804406][T28827] validate_nla: 8 callbacks suppressed [ 2103.804425][T28827] netlink: 'syz.2.7359': attribute type 1 has an invalid length. [ 2103.845385][T28827] netlink: 'syz.2.7359': attribute type 4 has an invalid length. [ 2103.875587][T28827] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7359'. [ 2103.974069][T28830] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7360'. [ 2104.096633][T28621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2104.188497][T28621] 8021q: adding VLAN 0 to HW filter on device team0 [ 2104.225169][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2104.232364][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2104.261459][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2104.268703][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2104.290852][T28837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7363'. [ 2104.414376][T28621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2104.740033][T28621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2104.790062][T28621] veth0_vlan: entered promiscuous mode [ 2104.804193][T28621] veth1_vlan: entered promiscuous mode [ 2104.840095][T28621] veth0_macvtap: entered promiscuous mode [ 2104.851441][T28621] veth1_macvtap: entered promiscuous mode [ 2104.871656][T28621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2104.884850][T28621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.894803][T28621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2104.905285][T28621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.919122][T28621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2104.934137][T28621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2104.945902][T28621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.956253][T28621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2104.966777][T28621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2104.978556][T28621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2104.992426][T28621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.001275][T28621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.011208][T28621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.020075][T28621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2105.109228][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.119790][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2105.152960][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2105.161201][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2105.239907][T28858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7268'. [ 2105.326212][T28860] netlink: 'syz.0.7369': attribute type 1 has an invalid length. [ 2105.335092][T28860] netlink: 'syz.0.7369': attribute type 4 has an invalid length. [ 2105.343177][T28860] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7369'. [ 2105.708410][T28870] netlink: 'syz.1.7380': attribute type 1 has an invalid length. [ 2105.735590][T28870] netlink: 'syz.1.7380': attribute type 4 has an invalid length. [ 2105.764263][T28870] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7380'. [ 2105.828939][T28875] netlink: 'syz.1.7380': attribute type 1 has an invalid length. [ 2105.860749][T28875] netlink: 'syz.1.7380': attribute type 4 has an invalid length. [ 2105.896665][T28875] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7380'. [ 2106.458571][T13433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2106.472277][T13433] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2106.484810][T13433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2106.508498][T13433] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2106.520461][T13433] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2106.532271][T13433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2106.593574][T22234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.745547][T22234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2106.919185][T22234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.006229][T22234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2107.500612][T22234] tipc: Disabling bearer [ 2107.523647][T22234] tipc: Left network mode [ 2107.528259][T28886] chnl_net:caif_netlink_parms(): no params data found [ 2107.848391][T28943] netlink: 'syz.3.7398': attribute type 1 has an invalid length. [ 2107.856799][T28943] netlink: 'syz.3.7398': attribute type 4 has an invalid length. [ 2107.877388][T28943] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7398'. [ 2108.053477][T28886] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.060888][T28886] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.075854][T28886] bridge_slave_0: entered allmulticast mode [ 2108.086509][T28886] bridge_slave_0: entered promiscuous mode [ 2108.106969][T28955] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7403'. [ 2108.158580][T28886] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.166584][T28886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.173849][T28886] bridge_slave_1: entered allmulticast mode [ 2108.180839][T28886] bridge_slave_1: entered promiscuous mode [ 2108.275300][T28886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2108.334041][T28886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2108.343338][T28960] __nla_validate_parse: 1 callbacks suppressed [ 2108.343355][T28960] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7412'. [ 2108.362634][T28960] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7412'. [ 2108.506061][T28886] team0: Port device team_slave_0 added [ 2108.563769][T28886] team0: Port device team_slave_1 added [ 2108.592294][T19560] Bluetooth: hci2: command tx timeout [ 2108.929026][T28979] validate_nla: 8 callbacks suppressed [ 2108.929046][T28979] netlink: 'syz.0.7411': attribute type 1 has an invalid length. [ 2108.948738][T28979] netlink: 'syz.0.7411': attribute type 4 has an invalid length. [ 2108.958115][T28979] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7411'. [ 2108.975898][T28886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2109.001970][T28886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2109.061502][T28886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2109.157991][T28886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2109.176423][T28886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2109.214610][T28886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2109.290615][T28989] netlink: 'syz.1.7416': attribute type 1 has an invalid length. [ 2109.306420][T28989] netlink: 'syz.1.7416': attribute type 4 has an invalid length. [ 2109.318847][T28989] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7416'. [ 2109.366022][T28993] netlink: 'syz.1.7416': attribute type 1 has an invalid length. [ 2109.380010][T28993] netlink: 'syz.1.7416': attribute type 4 has an invalid length. [ 2109.388190][T28993] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7416'. [ 2109.558982][T28886] hsr_slave_0: entered promiscuous mode [ 2109.573484][T28886] hsr_slave_1: entered promiscuous mode [ 2109.597211][T28886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2109.605681][T28886] Cannot create hsr debugfs directory [ 2109.645636][T22234] hsr_slave_0: left promiscuous mode [ 2109.652323][T22234] hsr_slave_1: left promiscuous mode [ 2109.688755][T22234] veth1_macvtap: left promiscuous mode [ 2109.695429][T22234] veth0_macvtap: left promiscuous mode [ 2109.701226][T22234] veth1_vlan: left promiscuous mode [ 2110.153762][T22234] team0 (unregistering): Port device vlan0 removed [ 2110.674557][T19560] Bluetooth: hci2: command tx timeout [ 2111.279972][T22234] bond0 (unregistering): Released all slaves [ 2111.360797][T29004] netlink: 'syz.3.7424': attribute type 1 has an invalid length. [ 2111.371427][T29004] netlink: 'syz.3.7424': attribute type 4 has an invalid length. [ 2111.379641][T29004] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7424'. [ 2111.557140][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7426'. [ 2111.566439][T29010] bridge_slave_1: left allmulticast mode [ 2111.575518][T29010] bridge_slave_1: left promiscuous mode [ 2111.581340][T29010] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.591589][T29010] bridge_slave_0: left allmulticast mode [ 2111.598037][T29010] bridge_slave_0: left promiscuous mode [ 2111.604064][T29010] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.790083][T29016] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2111.922919][T29018] wireguard0: entered promiscuous mode [ 2111.928459][T29018] wireguard0: entered allmulticast mode [ 2112.059442][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7429'. [ 2112.439007][T29034] netlink: 'syz.0.7435': attribute type 1 has an invalid length. [ 2112.449641][T29034] netlink: 'syz.0.7435': attribute type 4 has an invalid length. [ 2112.466803][T29034] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7435'. [ 2112.481603][T29034] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7435'. [ 2112.657120][T28886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2112.669493][T28886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2112.689098][T28886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2112.710718][T28886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2112.752059][T19560] Bluetooth: hci2: command tx timeout [ 2112.851564][T28886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.886029][T28886] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.914114][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.921329][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2112.967649][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.974957][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2113.704516][T28886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.730213][T29067] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7445'. [ 2113.745259][T29067] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7445'. [ 2113.865634][T28886] veth0_vlan: entered promiscuous mode [ 2113.898003][T28886] veth1_vlan: entered promiscuous mode [ 2113.948625][T28886] veth0_macvtap: entered promiscuous mode [ 2113.960732][T28886] veth1_macvtap: entered promiscuous mode [ 2113.989405][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.001220][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.011507][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.022836][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.033561][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.044691][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.057066][T28886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.069164][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.080153][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.097952][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.108977][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.126603][T28886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.137723][T28886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.150130][T28886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2114.190266][T28886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.199651][T28886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.210303][T28886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.221433][T28886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.338864][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.350238][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.410799][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2114.425784][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2114.628650][T29077] validate_nla: 6 callbacks suppressed [ 2114.628670][T29077] netlink: 'syz.1.7449': attribute type 1 has an invalid length. [ 2114.647731][T29077] netlink: 'syz.1.7449': attribute type 4 has an invalid length. [ 2114.657149][T29077] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7449'. [ 2114.832286][T19560] Bluetooth: hci2: command tx timeout [ 2114.911147][T29086] netlink: 'syz.2.7454': attribute type 1 has an invalid length. [ 2114.932042][T29086] netlink: 'syz.2.7454': attribute type 4 has an invalid length. [ 2114.951969][T29086] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7454'. [ 2114.969707][T29088] netlink: 'syz.2.7454': attribute type 1 has an invalid length. [ 2115.002700][T29088] netlink: 'syz.2.7454': attribute type 4 has an invalid length. [ 2115.017254][T29088] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7454'. [ 2115.402763][T29100] netlink: 'syz.2.7460': attribute type 1 has an invalid length. [ 2115.423029][T29100] netlink: 'syz.2.7460': attribute type 4 has an invalid length. [ 2115.430806][T29100] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7460'. [ 2115.566714][T13433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2115.581632][T13433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2115.590364][T13433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2115.609294][T13433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2115.632116][T13433] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2115.639661][T13433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2115.749693][T29112] netlink: 'syz.1.7464': attribute type 1 has an invalid length. [ 2115.758154][T29112] netlink: 'syz.1.7464': attribute type 4 has an invalid length. [ 2115.766213][T29112] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7464'. [ 2115.785388][T29112] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7464'. [ 2116.148034][T29103] chnl_net:caif_netlink_parms(): no params data found [ 2116.323683][T29135] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7471'. [ 2116.333511][T29103] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.349865][T29103] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.359602][T29103] bridge_slave_0: entered allmulticast mode [ 2116.376092][T29103] bridge_slave_0: entered promiscuous mode [ 2116.391911][T29103] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.402207][T29103] bridge0: port 2(bridge_slave_1) entered disabled state [ 2116.409505][T29103] bridge_slave_1: entered allmulticast mode [ 2116.427170][T29103] bridge_slave_1: entered promiscuous mode [ 2116.583112][T29142] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7474'. [ 2116.606850][T29103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2116.626547][T29103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2116.739996][T29103] team0: Port device team_slave_0 added [ 2116.764723][T29103] team0: Port device team_slave_1 added [ 2116.860975][T29103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2116.870204][T29103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2116.899372][T29103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2116.928704][T29103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2116.944988][T29103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2116.980471][T29103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2117.116074][T29103] hsr_slave_0: entered promiscuous mode [ 2117.123045][T29103] hsr_slave_1: entered promiscuous mode [ 2117.129411][T29103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2117.137484][T29103] Cannot create hsr debugfs directory [ 2117.312866][ T6039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.475106][ T6039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.609042][ T6039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2117.713189][T19560] Bluetooth: hci4: command tx timeout [ 2117.727299][ T6039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.087676][ T6039] tipc: Left network mode [ 2119.106454][T29232] __nla_validate_parse: 5 callbacks suppressed [ 2119.106472][T29232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7515'. [ 2119.286338][T29232] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2119.479102][T29239] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7517'. [ 2119.497517][T29103] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2119.593584][T29103] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2119.618855][T29103] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2119.670731][T29103] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2119.808165][T19560] Bluetooth: hci4: command tx timeout [ 2119.964471][ T6039] hsr_slave_0: left promiscuous mode [ 2119.971281][ T6039] hsr_slave_1: left promiscuous mode [ 2119.991122][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2120.000883][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2120.018053][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2120.029222][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2120.074217][ T6039] veth1_macvtap: left promiscuous mode [ 2120.079857][ T6039] veth0_macvtap: left promiscuous mode [ 2120.086770][ T6039] veth1_vlan: left promiscuous mode [ 2120.092341][ T6039] veth0_vlan: left promiscuous mode [ 2120.237515][ T6039] pim6reg (unregistering): left allmulticast mode [ 2120.880359][ T6039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2120.938298][ T6039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2121.408832][ T6039] bond0 (unregistering): Released all slaves [ 2121.445805][T29269] validate_nla: 19 callbacks suppressed [ 2121.445823][T29269] netlink: 'syz.2.7528': attribute type 1 has an invalid length. [ 2121.468595][T29269] netlink: 'syz.2.7528': attribute type 4 has an invalid length. [ 2121.481378][T29269] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7528'. [ 2121.671961][T29103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2121.738392][T29103] 8021q: adding VLAN 0 to HW filter on device team0 [ 2121.760690][T22234] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.767953][T22234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.808316][T22234] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.815587][T22234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.874050][T19560] Bluetooth: hci4: command tx timeout [ 2122.018022][T29284] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7536'. [ 2122.158634][T29289] netlink: 'syz.2.7537': attribute type 1 has an invalid length. [ 2122.186994][T29289] netlink: 'syz.2.7537': attribute type 4 has an invalid length. [ 2122.209633][T29289] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7537'. [ 2122.385523][T29103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2122.542962][T29103] veth0_vlan: entered promiscuous mode [ 2122.586397][T29103] veth1_vlan: entered promiscuous mode [ 2122.746207][T29103] veth0_macvtap: entered promiscuous mode [ 2122.767495][T29103] veth1_macvtap: entered promiscuous mode [ 2122.819666][T29103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.857542][T29103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.876015][T29103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.897259][T29103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.921810][T29103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.941826][T29103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.966573][T29103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2123.001434][T29103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.025502][T29103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.051871][T29103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.066883][T29103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.077256][T29103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2123.088419][T29103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2123.103112][T29103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2123.114334][T29321] netlink: 'syz.1.7549': attribute type 1 has an invalid length. [ 2123.124858][T29321] netlink: 'syz.1.7549': attribute type 4 has an invalid length. [ 2123.137623][T29321] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7549'. [ 2123.170187][T29103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.195620][T29103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.215825][T29103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.232010][T29103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2123.414884][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.433290][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.526708][T22234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2123.556084][T22234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2123.682907][T29341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7559'. [ 2123.952507][T19560] Bluetooth: hci4: command tx timeout [ 2125.593161][T29418] netlink: 'syz.3.7590': attribute type 1 has an invalid length. [ 2125.606812][T29418] netlink: 'syz.3.7590': attribute type 4 has an invalid length. [ 2125.618684][T29418] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7590'. [ 2125.667086][T29420] netlink: 'syz.3.7590': attribute type 1 has an invalid length. [ 2125.681877][T29420] netlink: 'syz.3.7590': attribute type 4 has an invalid length. [ 2125.689734][T29420] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7590'. [ 2125.730549][T29417] tipc: Enabled bearer , priority 0 [ 2125.871364][T29417] syzkaller0: entered promiscuous mode [ 2125.880219][T29417] syzkaller0: entered allmulticast mode [ 2125.888562][T29417] tipc: Resetting bearer [ 2125.963601][T29416] tipc: Resetting bearer [ 2128.874946][T29416] tipc: Disabling bearer [ 2128.892502][T29453] netlink: 'syz.2.7604': attribute type 1 has an invalid length. [ 2128.900293][T29453] netlink: 'syz.2.7604': attribute type 4 has an invalid length. [ 2128.921887][T29453] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7604'. [ 2128.943701][T29454] netlink: 'syz.2.7604': attribute type 1 has an invalid length. [ 2128.951502][T29454] netlink: 'syz.2.7604': attribute type 4 has an invalid length. [ 2128.982251][T29454] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7604'. [ 2129.356723][T29474] tipc: Started in network mode [ 2129.361672][T29474] tipc: Node identity fe9a26a8b9, cluster identity 4711 [ 2129.369428][T29474] tipc: Enabled bearer , priority 0 [ 2129.421807][T29474] syzkaller0: entered promiscuous mode [ 2129.427327][T29474] syzkaller0: entered allmulticast mode [ 2129.434136][T29474] tipc: Resetting bearer [ 2129.449532][T29473] tipc: Resetting bearer [ 2130.475887][ T9104] tipc: Node number set to 1201284776 [ 2131.820276][T29513] xt_hashlimit: size too large, truncated to 1048576 [ 2133.387828][T29473] tipc: Disabling bearer [ 2133.399717][T29488] netlink: 'syz.1.7617': attribute type 1 has an invalid length. [ 2133.408335][T29488] netlink: 'syz.1.7617': attribute type 4 has an invalid length. [ 2133.416764][T29488] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7617'. [ 2133.427032][T29491] netlink: 'syz.1.7617': attribute type 1 has an invalid length. [ 2133.463307][T29491] netlink: 'syz.1.7617': attribute type 4 has an invalid length. [ 2133.473769][T29491] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7617'. [ 2133.485788][T29514] : renamed from bridge_slave_0 (while UP) [ 2134.064554][T29535] tipc: Enabled bearer , priority 0 [ 2134.211355][T29535] syzkaller0: entered promiscuous mode [ 2134.226149][T29535] syzkaller0: entered allmulticast mode [ 2134.242451][T29535] tipc: Resetting bearer [ 2134.270408][T29533] tipc: Resetting bearer [ 2137.452902][T29533] tipc: Disabling bearer [ 2137.469419][T29547] netlink: 'syz.2.7641': attribute type 1 has an invalid length. [ 2137.477610][T29547] netlink: 'syz.2.7641': attribute type 4 has an invalid length. [ 2137.485782][T29547] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7641'. [ 2137.495386][T29548] netlink: 'syz.2.7641': attribute type 1 has an invalid length. [ 2137.503654][T29548] netlink: 'syz.2.7641': attribute type 4 has an invalid length. [ 2137.511390][T29548] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7641'. [ 2137.779056][T29556] syzkaller0: entered promiscuous mode [ 2137.802941][T29556] syzkaller0: entered allmulticast mode [ 2137.925438][T29571] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7650'. [ 2140.792984][T29604] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7663'. [ 2140.837688][T29601] Bluetooth: MGMT ver 1.22 [ 2140.849958][T29601] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2141.055013][T29608] syzkaller0: entered promiscuous mode [ 2141.060732][T29608] syzkaller0: entered allmulticast mode [ 2143.389097][T29633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7674'. [ 2143.548063][T29636] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2145.121387][T29652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7684'. [ 2145.135288][T29652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7684'. [ 2145.148229][T29652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7684'. [ 2145.438880][T29664] syzkaller0: entered promiscuous mode [ 2145.444724][T29664] syzkaller0: entered allmulticast mode [ 2146.477424][T29685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7698'. [ 2146.486624][T29685] netlink: set zone limit has 8 unknown bytes [ 2148.114864][T29685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7698'. [ 2148.129345][T29685] hsr_slave_0: left promiscuous mode [ 2148.149428][T29685] hsr_slave_1: left promiscuous mode [ 2148.437059][T29698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7705'. [ 2148.831362][T29715] (null): rxe_set_mtu: Set mtu to 4096 [ 2148.839247][T29715] lo speed is unknown, defaulting to 1000 [ 2148.868909][T29715] lo speed is unknown, defaulting to 1000 [ 2148.880432][T29715] lo speed is unknown, defaulting to 1000 [ 2149.193967][T13046] lo speed is unknown, defaulting to 1000 [ 2149.199989][T29715] infiniband syz0: set active [ 2149.206385][T29715] infiniband syz0: added lo [ 2149.264851][T29715] RDS/IB: syz0: added [ 2149.269502][T29715] smc: adding ib device syz0 with port count 1 [ 2149.278425][T29715] smc: ib device syz0 port 1 has pnetid [ 2149.286517][T13046] lo speed is unknown, defaulting to 1000 [ 2149.298277][T29715] lo speed is unknown, defaulting to 1000 [ 2149.579327][T29715] lo speed is unknown, defaulting to 1000 [ 2150.055726][T29715] lo speed is unknown, defaulting to 1000 [ 2150.395303][T29715] lo speed is unknown, defaulting to 1000 [ 2151.317146][T29780] syzkaller0: entered promiscuous mode [ 2151.342054][T29780] syzkaller0: entered allmulticast mode [ 2154.458324][T29795] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2154.877038][T29829] (null): rxe_set_mtu: Set mtu to 4096 [ 2154.902480][T29829] rdma_rxe: rxe_newlink: failed to add lo [ 2155.104565][T29841] syzkaller0: entered promiscuous mode [ 2155.110130][T29841] syzkaller0: entered allmulticast mode [ 2158.259809][T29859] kthread_run failed with err -4 [ 2158.503883][T29879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2158.858772][T29896] syzkaller0: entered promiscuous mode [ 2158.865555][T29896] syzkaller0: entered allmulticast mode [ 2160.597641][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.612648][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.890485][T29912] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2161.940264][T29919] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2162.347562][T29942] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2163.026408][T29977] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2163.052682][T29977] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2163.573981][T29999] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2163.595895][T29999] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2163.645358][T30003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7834'. [ 2163.662176][T30003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7834'. [ 2164.241835][T30032] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7846'. [ 2164.257206][T30030] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2164.292189][T30030] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2164.484142][T30041] netlink: 'syz.0.7852': attribute type 1 has an invalid length. [ 2164.518331][T30041] netlink: 'syz.0.7852': attribute type 4 has an invalid length. [ 2164.557601][T30041] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7852'. [ 2164.593832][T30046] gretap1: entered promiscuous mode [ 2164.612194][T30046] gretap1: entered allmulticast mode [ 2164.892379][T30064] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2164.915298][T30064] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2165.227280][T30075] netlink: 'syz.3.7866': attribute type 1 has an invalid length. [ 2165.241906][T30075] netlink: 'syz.3.7866': attribute type 4 has an invalid length. [ 2165.256928][T30075] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7866'. [ 2165.481185][T30085] lo speed is unknown, defaulting to 1000 [ 2165.539094][T30091] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 2165.570913][T30091] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 2165.808546][T30101] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2165.899418][T30107] netlink: 'syz.1.7879': attribute type 1 has an invalid length. [ 2165.941878][T30107] netlink: 'syz.1.7879': attribute type 4 has an invalid length. [ 2165.962854][T30107] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7879'. [ 2166.806948][T30134] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2167.898335][T30173] netlink: 'syz.0.7907': attribute type 1 has an invalid length. [ 2167.936733][T30173] netlink: 'syz.0.7907': attribute type 4 has an invalid length. [ 2167.960309][T30173] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7907'. [ 2167.979126][T30176] netlink: 'syz.0.7907': attribute type 1 has an invalid length. [ 2168.001800][T30176] netlink: 'syz.0.7907': attribute type 4 has an invalid length. [ 2168.009827][T30176] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7907'. [ 2168.561326][T30209] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7922'. [ 2168.578816][T30209] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7922'. [ 2169.249833][T30229] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2169.419287][T30233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2169.810002][T30249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7939'. [ 2170.103648][T30265] validate_nla: 4 callbacks suppressed [ 2170.103670][T30265] netlink: 'syz.3.7944': attribute type 1 has an invalid length. [ 2170.157556][T30265] netlink: 'syz.3.7944': attribute type 4 has an invalid length. [ 2170.199304][T30265] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7944'. [ 2170.222431][T30268] netlink: 'syz.3.7944': attribute type 1 has an invalid length. [ 2170.235143][T30270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7947'. [ 2170.244660][T30268] netlink: 'syz.3.7944': attribute type 4 has an invalid length. [ 2170.258155][T30268] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7944'. [ 2170.450912][T30279] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7951'. [ 2170.977597][T30303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2170.995191][T30303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2171.138028][T30309] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7964'. [ 2171.436612][T30320] ieee802154 phy0 wpan0: encryption failed: -22 [ 2171.657253][T30332] netlink: 'syz.1.7970': attribute type 13 has an invalid length. [ 2171.681833][T30332] netlink: 'syz.1.7970': attribute type 17 has an invalid length. [ 2171.807780][ T9114] IPVS: starting estimator thread 0... [ 2171.847468][T30338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7974'. [ 2171.881048][T30340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2171.923250][T30339] IPVS: using max 17 ests per chain, 40800 per kthread [ 2172.201866][T30332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2172.247979][T30349] netlink: 'syz.0.7975': attribute type 1 has an invalid length. [ 2172.272294][T30349] netlink: 'syz.0.7975': attribute type 4 has an invalid length. [ 2172.280170][T30349] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7975'. [ 2172.293797][T30337] lo speed is unknown, defaulting to 1000 [ 2172.295239][T30349] netlink: 'syz.0.7975': attribute type 1 has an invalid length. [ 2172.309242][T30349] netlink: 'syz.0.7975': attribute type 4 has an invalid length. [ 2173.551949][T13433] Bluetooth: hci4: command tx timeout [ 2173.605270][T30367] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.613056][T30367] bridge0: port 1() entered disabled state [ 2174.172471][T30367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2174.229723][T30367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2174.717693][T30367] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.727317][T30367] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.736303][T30367] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.745253][T30367] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.905206][T30390] __nla_validate_parse: 2 callbacks suppressed [ 2174.905224][T30390] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7986'. [ 2174.925481][T30391] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7986'. [ 2174.973965][T30398] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7989'. [ 2175.473572][T30418] ieee802154 phy0 wpan0: encryption failed: -22 [ 2175.816267][T30430] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8002'. [ 2176.164522][T30443] lo speed is unknown, defaulting to 1000 [ 2176.213242][T30450] validate_nla: 4 callbacks suppressed [ 2176.213262][T30450] netlink: 'syz.0.8010': attribute type 1 has an invalid length. [ 2176.230798][T30450] netlink: 'syz.0.8010': attribute type 4 has an invalid length. [ 2176.246728][T30450] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8010'. [ 2176.261277][T30450] netlink: 'syz.0.8010': attribute type 1 has an invalid length. [ 2176.276488][T30450] netlink: 'syz.0.8010': attribute type 4 has an invalid length. [ 2176.287243][T30450] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8010'. [ 2176.509211][T30459] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8015'. [ 2176.551758][T30456] lo speed is unknown, defaulting to 1000 [ 2177.056533][T30472] ieee802154 phy0 wpan0: encryption failed: -22 [ 2177.137675][T30472] netlink: 'syz.2.8020': attribute type 18 has an invalid length. [ 2177.347484][T30458] netlink: 'syz.1.8013': attribute type 2 has an invalid length. [ 2177.489174][T30485] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8026'. [ 2178.091915][T30512] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8038'. [ 2178.186515][T30516] ieee802154 phy0 wpan0: encryption failed: -22 [ 2178.318306][T30508] netlink: 'syz.1.8037': attribute type 18 has an invalid length. [ 2178.324227][T30520] ieee802154 phy0 wpan0: encryption failed: -22 [ 2178.664350][T30533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8047'. [ 2178.685846][T18304] IPVS: starting estimator thread 0... [ 2178.801872][T30535] IPVS: using max 17 ests per chain, 40800 per kthread [ 2178.875033][T30544] ieee802154 phy0 wpan0: encryption failed: -22 [ 2179.464915][T30563] ieee802154 phy0 wpan0: encryption failed: -22 [ 2179.518495][T30563] netlink: 'syz.3.8062': attribute type 18 has an invalid length. [ 2179.631914][T30571] ieee802154 phy0 wpan0: encryption failed: -22 [ 2180.193847][T30597] ieee802154 phy0 wpan0: encryption failed: -22 [ 2180.203132][T30598] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8076'. [ 2180.546369][T30604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2180.559669][T30604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2180.577510][T30604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2180.586645][T30604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2181.016037][T30622] ieee802154 phy0 wpan0: encryption failed: -22 [ 2181.587839][T30646] tipc: Enabling of bearer rejected, failed to enable media [ 2181.799244][T30653] x_tables: duplicate underflow at hook 3 [ 2181.895173][T30662] ieee802154 phy0 wpan0: encryption failed: -22 [ 2182.631288][T30693] ieee802154 phy0 wpan0: encryption failed: -22 [ 2183.306650][T30728] ieee802154 phy0 wpan0: encryption failed: -22 [ 2183.918443][T30756] ieee802154 phy0 wpan0: encryption failed: -22 [ 2184.303944][T30766] x_tables: duplicate underflow at hook 3 [ 2184.573549][T30785] lo speed is unknown, defaulting to 1000 [ 2184.586702][T30790] ieee802154 phy0 wpan0: encryption failed: -22 [ 2184.759883][T30796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8163'. [ 2185.332578][T30816] ieee802154 phy0 wpan0: encryption failed: -22 [ 2186.119832][T30850] ieee802154 phy0 wpan0: encryption failed: -22 [ 2186.944181][T30875] ieee802154 phy0 wpan0: encryption failed: -22 [ 2187.722127][T30901] xt_hashlimit: size too large, truncated to 1048576 [ 2187.745544][T30903] ieee802154 phy0 wpan0: encryption failed: -22 [ 2187.785630][T30905] : renamed from bridge_slave_0 (while UP) [ 2188.256815][T30921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8217'. [ 2188.588835][T30931] ieee802154 phy0 wpan0: encryption failed: -22 [ 2189.241982][T30949] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2189.451934][T30957] ieee802154 phy0 wpan0: encryption failed: -22 [ 2189.782949][T30965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8236'. [ 2190.702109][T30991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2190.918100][T30998] ieee802154 phy0 wpan0: encryption failed: -22 [ 2192.383097][T31046] ieee802154 phy0 wpan0: encryption failed: -22 [ 2192.567605][T31056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8276'. [ 2192.672619][T31058] xt_hashlimit: size too large, truncated to 1048576 [ 2192.716553][T31056] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2194.562024][T31119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8305'. [ 2194.571199][T31119] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8305'. [ 2194.606605][T31119] netlink: 204 bytes leftover after parsing attributes in process `syz.0.8305'. [ 2197.137194][T31182] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8333'. [ 2197.156793][T31182] netlink: 232 bytes leftover after parsing attributes in process `syz.0.8333'. [ 2197.186976][T31182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8333'. [ 2197.212759][T31184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8334'. [ 2198.400709][T31209] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2198.517260][T19560] Bluetooth: hci1: command 0x0406 tx timeout [ 2199.693135][T31236] xt_hashlimit: size too large, truncated to 1048576 [ 2201.543944][T31294] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2202.814299][T31310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8387'. [ 2203.000382][T31318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2203.506874][T31334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8398'. [ 2203.770875][T31342] lo speed is unknown, defaulting to 1000 [ 2204.808968][T31363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8409'. [ 2205.559767][T31385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8420'. [ 2205.764362][T31391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8422'. [ 2207.726987][T31459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8452'. [ 2207.772853][T31463] netlink: 'syz.3.8453': attribute type 10 has an invalid length. [ 2207.785463][T31463] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2208.259726][T31488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8463'. [ 2208.376621][T31493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8465'. [ 2208.834609][T31513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8474'. [ 2208.951059][T31524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8478'. [ 2209.464041][T31545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8487'. [ 2209.800216][T31553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8490'. [ 2209.951759][T13433] Bluetooth: hci4: command tx timeout [ 2211.382924][T31587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8502'. [ 2212.173457][T31598] lo speed is unknown, defaulting to 1000 [ 2212.400188][T31607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8515'. [ 2213.343319][T31638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8520'. [ 2214.738986][T31669] lo speed is unknown, defaulting to 1000 [ 2215.853173][T31683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8538'. [ 2215.898125][T31685] veth0: entered promiscuous mode [ 2215.929635][T31685] 8021q: VLANs not supported on syzkaller0 [ 2215.972457][T31684] veth0: left promiscuous mode [ 2217.755558][T31724] veth0: entered promiscuous mode [ 2217.806353][T31724] 8021q: VLANs not supported on syzkaller0 [ 2217.818146][T31723] veth0: left promiscuous mode [ 2217.918919][T31735] pimreg: entered allmulticast mode [ 2218.006999][T31735] pimreg: left allmulticast mode [ 2218.015755][T31738] xt_hashlimit: size too large, truncated to 1048576 [ 2218.092904][T31741] : renamed from bridge_slave_0 (while UP) [ 2218.106790][T31729] netlink: set zone limit has 8 unknown bytes [ 2218.337981][T31745] lo speed is unknown, defaulting to 1000 [ 2218.877888][T31749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8560'. [ 2218.889485][T31749] bridge_slave_1: left allmulticast mode [ 2218.896970][T31749] bridge_slave_1: left promiscuous mode [ 2218.905655][T31749] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.920872][T31749] : left allmulticast mode [ 2218.928381][T31749] : left promiscuous mode [ 2218.934904][T31749] bridge0: port 1() entered disabled state [ 2218.997665][T13433] Bluetooth: hci0: command 0x0406 tx timeout [ 2219.580823][T31759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8562'. [ 2219.735339][T31762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8563'. [ 2219.768426][T31762] netlink: 'syz.0.8563': attribute type 7 has an invalid length. [ 2219.796750][T31762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 2219.855304][T31762] gretap0: entered promiscuous mode [ 2219.876843][T31762] batadv_slave_1: entered promiscuous mode [ 2220.484890][T31775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 2221.113001][T31782] lo speed is unknown, defaulting to 1000 [ 2222.040826][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.085650][T31792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8574'. [ 2222.095144][T31792] bridge_slave_1: left allmulticast mode [ 2222.100932][T31792] bridge_slave_1: left promiscuous mode [ 2222.121994][T31792] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.142271][T31792] : left allmulticast mode [ 2222.146867][T31792] : left promiscuous mode [ 2222.151606][T31792] bridge0: port 1() entered disabled state [ 2223.143183][T31812] pimreg: entered allmulticast mode [ 2223.271835][T31812] pimreg: left allmulticast mode [ 2223.355917][T31820] netlink: set zone limit has 8 unknown bytes [ 2223.628331][T31827] lo speed is unknown, defaulting to 1000 [ 2224.231334][T31843] xt_hashlimit: size too large, truncated to 1048576 [ 2224.298088][T31828] lo speed is unknown, defaulting to 1000 [ 2225.122768][T31858] wg1: entered promiscuous mode [ 2225.127822][T31858] wg1: entered allmulticast mode [ 2226.788965][T31893] lo speed is unknown, defaulting to 1000 [ 2229.238208][T19560] Bluetooth: hci2: command 0x0406 tx timeout [ 2229.474195][T31955] lo speed is unknown, defaulting to 1000 [ 2231.373953][T32013] lo speed is unknown, defaulting to 1000 [ 2231.836169][T32032] xt_hashlimit: size too large, truncated to 1048576 [ 2231.975677][T32030] lo speed is unknown, defaulting to 1000 [ 2234.064203][T32075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8670'. [ 2234.112314][T32077] netlink: 'syz.0.8671': attribute type 1 has an invalid length. [ 2234.260838][T32077] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2234.357793][T32077] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2234.372251][ T33] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2234.535650][T22234] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2234.576118][T32077] veth11: entered promiscuous mode [ 2234.591411][T32077] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 2234.621360][T32081] bridge_slave_0: left allmulticast mode [ 2234.627390][T32081] bridge_slave_0: left promiscuous mode [ 2234.634704][T32081] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.652383][T32081] bridge_slave_1: left allmulticast mode [ 2234.658440][T32081] bridge_slave_1: left promiscuous mode [ 2234.665193][T32081] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.680869][T32081] bond0: (slave bond_slave_0): Releasing backup interface [ 2234.719040][T32081] bond0: (slave bond_slave_1): Releasing backup interface [ 2234.790148][T32081] team0: Port device team_slave_0 removed [ 2234.824279][T32081] team0: Port device team_slave_1 removed [ 2234.859993][T32081] bond0: (slave netdevsim0): Releasing backup interface [ 2234.912678][T32081] bond8: (slave ip6gretap1): Removing an active aggregator [ 2234.930854][T32081] bond8: (slave ip6gretap1): Releasing backup interface [ 2234.938895][T32081] bond8: (slave ip6gretap1): the permanent HWaddr of slave - 22:c0:f7:5b:bf:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2234.983436][T32081] bond8: (slave veth11): Releasing backup interface [ 2235.009125][T32089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8675'. [ 2235.761129][T32120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8687'. [ 2235.977629][T32127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8697'. [ 2236.082101][T32131] lo speed is unknown, defaulting to 1000 [ 2236.729222][T32133] lo speed is unknown, defaulting to 1000 [ 2237.905559][T32154] lo speed is unknown, defaulting to 1000 [ 2237.913233][T32157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8700'. [ 2237.945509][T32157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8700'. [ 2238.004933][T32161] vlan2: entered promiscuous mode [ 2238.036821][T32161] vlan2: entered allmulticast mode [ 2238.076914][T32161] hsr_slave_1: entered allmulticast mode [ 2238.651948][T32173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8704'. [ 2239.099991][T32176] lo speed is unknown, defaulting to 1000 [ 2239.171813][T32182] xt_hashlimit: size too large, truncated to 1048576 [ 2240.921057][T32196] lo speed is unknown, defaulting to 1000 [ 2241.276469][T32204] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8714'. [ 2242.009084][T32214] lo speed is unknown, defaulting to 1000 [ 2242.406853][T32227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8721'. [ 2243.242105][T32240] netlink: set zone limit has 8 unknown bytes [ 2243.412038][T32244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8728'. [ 2243.589293][T32252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8730'. [ 2243.867630][T32259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8733'. [ 2243.947127][T32261] lo speed is unknown, defaulting to 1000 [ 2245.028088][T32281] bond0: (slave bond_slave_0): Releasing backup interface [ 2245.076940][T32281] bond0: (slave bond_slave_1): Releasing backup interface [ 2245.126450][T32281] team0: Port device team_slave_0 removed [ 2245.147444][T32281] team0: Port device team_slave_1 removed [ 2245.162338][T32281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2245.182816][T32281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2245.192199][T32281] bond0: (slave netdevsim0): Releasing backup interface [ 2245.430420][T32289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8744'. [ 2245.713078][T32298] lo speed is unknown, defaulting to 1000 [ 2246.197715][T32315] netlink: 'syz.3.8752': attribute type 1 has an invalid length. [ 2246.294612][T32317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8753'. [ 2246.423486][T32319] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2246.488069][T32315] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2246.497394][ T6038] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2246.545809][T32319] bond9: (slave ip6gretap1): Removing an active aggregator [ 2246.560360][T32319] bond9: (slave ip6gretap1): Releasing backup interface [ 2246.576041][T32325] xt_hashlimit: size too large, truncated to 1048576 [ 2246.643547][T32326] : renamed from bridge_slave_0 (while UP) [ 2246.653005][T32328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8756'. [ 2247.476728][T32339] lo speed is unknown, defaulting to 1000 [ 2247.701212][T32348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8763'. [ 2248.576544][T32363] lo speed is unknown, defaulting to 1000 [ 2249.544784][T32370] netlink: 'syz.1.8779': attribute type 1 has an invalid length. [ 2249.764078][T32375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8773'. [ 2250.012865][T32380] netlink: 'syz.3.8775': attribute type 1 has an invalid length. [ 2250.177981][T32380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2250.257271][T32380] veth7: entered promiscuous mode [ 2250.506970][T32391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 2250.743069][T32397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8783'. [ 2250.791922][T32402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8784'. [ 2251.064147][T32406] lo speed is unknown, defaulting to 1000 [ 2251.789857][T32417] netlink: 'syz.3.8791': attribute type 1 has an invalid length. [ 2252.084486][T32417] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2252.213851][T32419] veth9: entered promiscuous mode [ 2252.502270][T32426] netlink: 'syz.3.8794': attribute type 1 has an invalid length. [ 2252.535469][T32429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8795'. [ 2252.713915][T32435] syzkaller0: entered promiscuous mode [ 2252.719568][T32435] syzkaller0: entered allmulticast mode [ 2253.032028][T32441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8799'. [ 2256.171332][T32460] lo speed is unknown, defaulting to 1000 [ 2256.182641][T32462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8809'. [ 2256.918580][T32492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8820'. [ 2257.652961][T32514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8830'. [ 2257.682853][T32514] netlink: del zone limit has 8 unknown bytes [ 2257.818672][T32518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8832'. [ 2258.375372][T32543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8842'. [ 2258.517995][T32547] netlink: 'syz.2.8844': attribute type 1 has an invalid length. [ 2258.583344][T32547] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2258.610083][T32547] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2258.621894][ T142] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2258.693337][T32547] veth7: entered promiscuous mode [ 2258.716308][T32547] infiniband syz0: set active [ 2258.763159][ T1115] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2258.776886][T32547] bond0: (slave bond_slave_0): Releasing backup interface [ 2258.839570][T32547] bond0: (slave bond_slave_1): Releasing backup interface [ 2258.960297][T32547] team0: Port device team_slave_0 removed [ 2259.026409][T32547] team0: Port device team_slave_1 removed [ 2259.052843][T32547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2259.070508][T32547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2259.090128][T32547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2259.112871][T32547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2259.153914][T32547] bond7: (slave ip6gretap1): Removing an active aggregator [ 2259.182064][T32547] bond7: (slave ip6gretap1): Releasing backup interface [ 2259.201391][T28835] lo speed is unknown, defaulting to 1000 [ 2259.280082][T32561] lo speed is unknown, defaulting to 1000 [ 2259.506243][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8856'. [ 2259.839097][T32590] xt_hashlimit: size too large, truncated to 1048576 [ 2260.573732][T32611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2260.624186][T32612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8865'. [ 2260.685761][T32611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2260.775648][T32614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2261.588471][T32636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8874'. [ 2262.258854][T32655] netlink: 'syz.2.8883': attribute type 1 has an invalid length. [ 2262.319342][T32660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8885'. [ 2262.320014][T32657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8884'. [ 2262.441977][T32655] veth9: entered promiscuous mode [ 2262.451081][T32655] bond8: (slave veth9): Enslaving as a backup interface with a down link [ 2262.492432][T32661] infiniband syz0: set active [ 2262.567506][T32661] bond8: (slave veth9): Releasing backup interface [ 2262.590155][T28835] lo speed is unknown, defaulting to 1000 [ 2262.976752][T32681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8894'. [ 2263.083287][T32683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8895'. [ 2263.207289][T32686] lo speed is unknown, defaulting to 1000 [ 2263.415054][T32694] netlink: 'syz.3.8900': attribute type 1 has an invalid length. [ 2263.628933][T32694] veth11: entered promiscuous mode [ 2263.641844][T32694] bond12: (slave veth11): Enslaving as a backup interface with a down link [ 2263.673065][T32694] bond12: (slave veth11): Releasing backup interface [ 2263.855583][T32706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8905'. [ 2263.991821][T32708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8914'. [ 2264.123710][T32712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.183109][T32717] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8907'. [ 2264.214392][T32710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.287164][T32710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.882380][T32725] lo speed is unknown, defaulting to 1000 [ 2264.946513][T32732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8913'. [ 2265.182822][T32738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8916'. [ 2265.349199][T32743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8917'. [ 2266.189331][T32763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8927'. [ 2266.707029][ T309] lo speed is unknown, defaulting to 1000 [ 2266.745645][ T311] xt_hashlimit: size too large, truncated to 1048576 [ 2267.468189][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8936'. [ 2267.493090][ T325] infiniband syz0: set active [ 2267.507836][ T325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2267.545594][T30386] lo speed is unknown, defaulting to 1000 [ 2268.563078][ T340] lo speed is unknown, defaulting to 1000 [ 2269.138275][ T354] lo speed is unknown, defaulting to 1000 [ 2269.583326][ T361] netlink: 'syz.0.8948': attribute type 1 has an invalid length. [ 2269.750628][ T361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2269.842423][ T361] veth13: entered promiscuous mode [ 2269.860684][ T361] bond9: (slave veth13): Enslaving as a backup interface with a down link [ 2270.042666][ T366] bond9: (slave veth13): Releasing backup interface [ 2270.401339][ T378] lo speed is unknown, defaulting to 1000 [ 2270.917088][ T389] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2271.242207][ T398] Set syz0 is full, maxelem 0 reached [ 2272.180501][ T415] lo speed is unknown, defaulting to 1000 [ 2272.233477][ T418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8962'. [ 2272.604926][ T427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8965'. [ 2272.652981][ T427] infiniband syz0: set active [ 2272.657937][ T427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2272.715444][T18304] lo speed is unknown, defaulting to 1000 [ 2272.898372][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8970'. [ 2273.010883][ T439] xt_hashlimit: size too large, truncated to 1048576 [ 2273.247622][ T444] netlink: 'syz.2.8972': attribute type 1 has an invalid length. [ 2273.473619][ T444] veth11: entered promiscuous mode [ 2273.487281][ T444] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 2273.515490][ T449] infiniband syz0: set active [ 2273.609264][ T449] bond9: (slave veth11): Releasing backup interface [ 2273.649299][T15245] lo speed is unknown, defaulting to 1000 [ 2273.853131][ T461] lo speed is unknown, defaulting to 1000 [ 2274.104122][ T468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8979'. [ 2274.117333][ T468] infiniband syz0: set active [ 2274.124119][ T468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2274.155870][T15245] lo speed is unknown, defaulting to 1000 [ 2275.483307][ T496] lo speed is unknown, defaulting to 1000 [ 2275.512418][ T497] netlink: 'syz.3.8990': attribute type 1 has an invalid length. [ 2275.725921][ T497] veth13: entered promiscuous mode [ 2275.757593][ T497] bond13: (slave veth13): Enslaving as a backup interface with a down link [ 2275.813587][ T502] bond13: (slave veth13): Releasing backup interface [ 2276.826069][ T521] lo speed is unknown, defaulting to 1000 [ 2277.115894][ T529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9002'. [ 2277.142223][ T529] infiniband syz0: set active [ 2277.150615][ T529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2277.183938][T18304] lo speed is unknown, defaulting to 1000 [ 2277.517322][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9005'. [ 2277.963032][ T549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9009'. [ 2278.155473][ T551] lo speed is unknown, defaulting to 1000 [ 2278.385594][ T556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9012'. [ 2278.960474][ T562] lo speed is unknown, defaulting to 1000 [ 2279.566082][ T577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9019'. [ 2279.716068][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9019'. [ 2279.878165][ T582] lo speed is unknown, defaulting to 1000 [ 2280.386213][ T595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9026'. [ 2280.665082][ T599] lo speed is unknown, defaulting to 1000 [ 2280.892895][ T606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9031'. [ 2281.022877][ T608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9032'. [ 2281.088345][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9032'. [ 2281.623911][ T619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9037'. [ 2281.707398][ T621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2281.932488][ T627] lo speed is unknown, defaulting to 1000 [ 2282.274747][ T641] netlink: 'syz.0.9045': attribute type 1 has an invalid length. [ 2282.413510][ T635] lo speed is unknown, defaulting to 1000 [ 2282.425218][ T641] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2282.539798][ T641] veth15: entered promiscuous mode [ 2282.571127][ T641] bond10: (slave veth15): Enslaving as a backup interface with a down link [ 2282.757028][ T643] bond10: (slave veth15): Releasing backup interface [ 2283.052926][ T648] __nla_validate_parse: 2 callbacks suppressed [ 2283.052946][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9047'. [ 2283.475642][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.820508][ T665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9056'. [ 2283.996640][ T669] lo speed is unknown, defaulting to 1000 [ 2284.233555][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9060'. [ 2284.638305][ T680] lo speed is unknown, defaulting to 1000 [ 2284.670633][ T688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9065'. [ 2284.682249][ T690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9066'. [ 2285.300276][ T702] lo speed is unknown, defaulting to 1000 [ 2285.481984][ T714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9075'. [ 2285.681588][ T719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9076'. [ 2286.089518][ T730] netlink: 'syz.0.9080': attribute type 1 has an invalid length. [ 2286.174525][ T730] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2286.188309][ T727] lo speed is unknown, defaulting to 1000 [ 2286.247110][ T730] veth17: entered promiscuous mode [ 2286.270663][ T730] bond11: (slave veth17): Enslaving as a backup interface with a down link [ 2286.377994][ T732] bond11: (slave veth17): Releasing backup interface [ 2286.530194][ T735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9081'. [ 2286.696255][ T737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9082'. [ 2286.750558][ T737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2287.136144][ T748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9087'. [ 2287.754720][ T765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2288.043932][ T773] IPVS: Scheduler module ip_vs_sip not found [ 2288.092705][ T779] lo speed is unknown, defaulting to 1000 [ 2288.493452][ T796] __nla_validate_parse: 3 callbacks suppressed [ 2288.493472][ T796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9101'. [ 2288.590620][ T799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9102'. [ 2288.798868][ T787] lo speed is unknown, defaulting to 1000 [ 2289.754006][ T831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9113'. [ 2289.780255][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9113'. [ 2289.952611][ T834] netlink: 'syz.3.9114': attribute type 1 has an invalid length. [ 2289.998762][ T839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9116'. [ 2290.064588][ T834] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2290.142478][ T834] veth15: entered promiscuous mode [ 2290.177353][ T834] bond14: (slave veth15): Enslaving as a backup interface with a down link [ 2290.204968][ T846] bond14: (slave veth15): Releasing backup interface [ 2290.223104][ T845] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9120'. [ 2290.237947][ T845] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9120'. [ 2290.272182][ T845] (null): rxe_set_mtu: Set mtu to 4096 [ 2290.277931][ T845] rdma_rxe: rxe_newlink: failed to add lo [ 2290.341556][ T845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2290.408774][ T850] lo speed is unknown, defaulting to 1000 [ 2290.423646][ T854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9122'. [ 2290.447568][ T854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9122'. [ 2290.734267][ T858] IPVS: Scheduler module ip_vs_sip not found [ 2291.104401][ T869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9125'. [ 2291.748866][ T888] netlink: set zone limit has 8 unknown bytes [ 2291.988211][ T895] IPVS: Scheduler module ip_vs_sip not found [ 2292.168029][ T911] netlink: 'syz.3.9140': attribute type 1 has an invalid length. [ 2292.332880][ T911] 8021q: adding VLAN 0 to HW filter on device bond15 [ 2292.385647][ T911] veth17: entered promiscuous mode [ 2292.398248][ T911] bond15: (slave veth17): Enslaving as a backup interface with a down link [ 2292.437886][ T911] bond15: (slave veth17): Releasing backup interface [ 2292.502889][ T925] lo speed is unknown, defaulting to 1000 [ 2293.076270][ T952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2293.162954][T13433] Bluetooth: hci4: link tx timeout [ 2293.171028][T13433] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2293.186328][T13433] Bluetooth: hci4: link tx timeout [ 2293.191512][T13433] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2293.201043][T13433] Bluetooth: hci4: link tx timeout [ 2293.206423][T13433] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 2293.214315][T13433] Bluetooth: hci4: link tx timeout [ 2293.219468][T13433] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 2293.405972][ T957] lo speed is unknown, defaulting to 1000 [ 2293.740279][ T969] __nla_validate_parse: 10 callbacks suppressed [ 2293.740301][ T969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9158'. [ 2294.000363][ T979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9162'. [ 2294.040652][ T981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9162'. [ 2294.338221][ T985] lo speed is unknown, defaulting to 1000 [ 2295.144214][ T1006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9169'. [ 2295.207651][ T1008] netlink: 'syz.0.9170': attribute type 1 has an invalid length. [ 2295.232243][T13433] Bluetooth: hci4: command 0x0406 tx timeout [ 2295.381291][ T1008] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2295.471446][ T1008] veth19: entered promiscuous mode [ 2295.496576][ T1008] bond12: (slave veth19): Enslaving as a backup interface with a down link [ 2295.596978][ T1010] bond12: (slave veth19): Releasing backup interface [ 2295.618046][ T1022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9173'. [ 2295.915973][ T1039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9178'. [ 2295.927473][ T1039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2295.959417][ T1043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9179'. [ 2296.010297][ T1044] lo speed is unknown, defaulting to 1000 [ 2296.097066][ T1051] netlink: 'syz.0.9182': attribute type 1 has an invalid length. [ 2296.217806][ T1053] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2296.469096][ T1051] veth21: entered promiscuous mode [ 2296.586181][ T1051] bond13: (slave veth21): Enslaving as a backup interface with a down link [ 2296.658522][ T1060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9183'. [ 2296.785004][ T1053] bond13: (slave veth21): Releasing backup interface [ 2296.905672][ T1065] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9184'. [ 2296.931865][ T1065] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9184'. [ 2296.977710][ T1065] (null): rxe_set_mtu: Set mtu to 4096 [ 2296.994605][ T1065] rdma_rxe: rxe_newlink: failed to add lo [ 2297.096919][ T1065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2297.106523][ T1065] 8021q: adding VLAN 0 to HW filter on device team0 [ 2297.121022][ T1065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2297.311890][T13433] Bluetooth: hci4: command 0x0406 tx timeout [ 2297.454613][ T1078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2298.050888][ T1101] (null): rxe_set_mtu: Set mtu to 4096 [ 2298.073060][ T1101] rdma_rxe: rxe_newlink: failed to add lo [ 2298.079649][ T1104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2298.127419][ T1101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2298.610934][ T1113] lo speed is unknown, defaulting to 1000 [ 2298.827751][ T1132] __nla_validate_parse: 9 callbacks suppressed [ 2298.827771][ T1132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9211'. [ 2298.869753][ T1132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2298.927389][ T1134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9212'. [ 2299.200843][ T1144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9217'. [ 2299.231964][ T1144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9217'. [ 2299.569801][ T1158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9224'. [ 2299.579378][ T1160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9223'. [ 2299.600058][ T1160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2299.810025][ T1169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9228'. [ 2299.830571][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9228'. [ 2300.085071][ T1176] veth23: entered promiscuous mode [ 2300.390310][ T1187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9236'. [ 2300.477386][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9239'. [ 2300.586271][ T1191] infiniband syz0: set active [ 2300.591222][ T1191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2300.627951][ T9114] lo speed is unknown, defaulting to 1000 [ 2300.811868][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2300.825323][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2301.013776][ T1204] lo speed is unknown, defaulting to 1000 [ 2302.483734][ T1258] veth19: entered promiscuous mode [ 2303.241748][ T1298] netlink: 'syz.2.9274': attribute type 1 has an invalid length. [ 2303.480945][ T1304] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2303.516782][ T1295] lo speed is unknown, defaulting to 1000 [ 2303.602546][ T1298] veth13: entered promiscuous mode [ 2303.627917][ T1298] bond10: (slave veth13): Enslaving as a backup interface with a down link [ 2303.669454][ T1301] infiniband syz0: set active [ 2303.761105][ T1301] bond10: (slave veth13): Releasing backup interface [ 2303.790258][T28835] lo speed is unknown, defaulting to 1000 [ 2304.178522][ T1311] lo speed is unknown, defaulting to 1000 [ 2304.261094][ T1317] IPVS: Scheduler module ip_vs_sip not found [ 2304.337787][ T1326] __nla_validate_parse: 8 callbacks suppressed [ 2304.337807][ T1326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9284'. [ 2305.219090][ T1352] netlink: 'syz.3.9291': attribute type 1 has an invalid length. [ 2305.364391][ T1352] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2305.483706][ T1352] veth19: entered promiscuous mode [ 2305.498374][ T1352] bond16: (slave veth19): Enslaving as a backup interface with a down link [ 2305.562743][ T1357] bond16: (slave veth19): Releasing backup interface [ 2305.622309][ T1365] IPVS: Scheduler module ip_vs_sip not found [ 2305.676541][ T1369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9293'. [ 2305.909963][ T1381] lo speed is unknown, defaulting to 1000 [ 2306.342351][ T1398] netlink: 'syz.2.9306': attribute type 1 has an invalid length. [ 2306.473485][ T1398] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2306.634911][ T1398] veth15: entered promiscuous mode [ 2306.657131][ T1398] bond11: (slave veth15): Enslaving as a backup interface with a down link [ 2306.690125][ T1402] infiniband syz0: set active [ 2306.887815][ T1402] bond11: (slave veth15): Releasing backup interface [ 2306.981873][ T1390] lo speed is unknown, defaulting to 1000 [ 2306.987824][ T9106] lo speed is unknown, defaulting to 1000 [ 2307.501781][ T1411] IPVS: Scheduler module ip_vs_sip not found [ 2307.974767][ T1428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9313'. [ 2308.003518][ T1428] team0: entered promiscuous mode [ 2308.020187][ T1428] team_slave_0: entered promiscuous mode [ 2308.029750][ T1428] team_slave_1: entered promiscuous mode [ 2308.050404][ T1428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2308.060389][ T1428] team0: left promiscuous mode [ 2308.067614][ T1428] team_slave_0: left promiscuous mode [ 2308.075006][ T1428] team_slave_1: left promiscuous mode [ 2308.134097][ T1435] netlink: 'syz.2.9316': attribute type 1 has an invalid length. [ 2308.239769][ T1435] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2308.287943][ T1435] veth17: entered promiscuous mode [ 2308.306820][ T1435] bond12: (slave veth17): Enslaving as a backup interface with a down link [ 2308.344117][ T1437] infiniband syz0: set active [ 2308.420158][ T1437] bond12: (slave veth17): Releasing backup interface [ 2308.468616][ T9114] lo speed is unknown, defaulting to 1000 [ 2308.556513][ T1440] lo speed is unknown, defaulting to 1000 [ 2309.011221][ T1453] IPVS: Scheduler module ip_vs_sip not found [ 2309.072192][ C0] ================================================================== [ 2309.080329][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 2309.088429][ C0] Read of size 2 at addr ffff888059aaf82a by task kworker/u4:1/411 [ 2309.096358][ C0] [ 2309.098721][ C0] CPU: 0 PID: 411 Comm: kworker/u4:1 Not tainted 6.6.99-syzkaller #0 [ 2309.106835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2309.116934][ C0] Workqueue: netns cleanup_net [ 2309.121819][ C0] Call Trace: [ 2309.125135][ C0] [ 2309.128020][ C0] dump_stack_lvl+0x16c/0x230 [ 2309.132804][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 2309.137915][ C0] ? show_regs_print_info+0x20/0x20 [ 2309.143147][ C0] ? load_image+0x3b0/0x3b0 [ 2309.147777][ C0] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 2309.153302][ C0] ? __virt_addr_valid+0x18c/0x540 [ 2309.158489][ C0] ? __virt_addr_valid+0x469/0x540 [ 2309.163645][ C0] print_report+0xac/0x200 [ 2309.168109][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2309.173250][ C0] kasan_report+0x117/0x150 [ 2309.177816][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2309.182966][ C0] rose_timer_expiry+0x46a/0x4b0 [ 2309.187958][ C0] call_timer_fn+0x16e/0x530 [ 2309.192674][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2309.197756][ C0] ? call_timer_fn+0xbf/0x530 [ 2309.202473][ C0] ? __run_timers+0x7d0/0x7d0 [ 2309.207242][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2309.212481][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2309.217794][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2309.222875][ C0] __run_timers+0x52d/0x7d0 [ 2309.227421][ C0] ? detach_timer+0x2b0/0x2b0 [ 2309.232137][ C0] ? lock_chain_count+0x20/0x20 [ 2309.237040][ C0] run_timer_softirq+0x67/0xf0 [ 2309.241846][ C0] handle_softirqs+0x280/0x820 [ 2309.246676][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 2309.251486][ C0] ? do_softirq+0x180/0x180 [ 2309.256029][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2309.261298][ C0] __irq_exit_rcu+0xc7/0x190 [ 2309.265927][ C0] ? irq_exit_rcu+0x20/0x20 [ 2309.270477][ C0] irq_exit_rcu+0x9/0x20 [ 2309.274764][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2309.280451][ C0] [ 2309.283414][ C0] [ 2309.286378][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2309.292517][ C0] RIP: 0010:rwsem_down_write_slowpath+0x43f/0xfa0 [ 2309.298989][ C0] Code: fc ff df 0f b6 04 08 84 c0 75 34 41 83 fc 02 74 13 48 8b 44 24 30 83 38 64 48 8b 1c 24 7d 09 e9 42 01 00 00 48 8b 1c 24 f3 90 <48> 89 df e8 39 77 f0 f6 a8 07 0f 85 05 fe ff ff e9 27 01 00 00 48 [ 2309.318841][ C0] RSP: 0018:ffffc900037d7660 EFLAGS: 00000206 [ 2309.324965][ C0] RAX: ffff888050a73c6c RBX: ffff88801967f8d8 RCX: dffffc0000000000 [ 2309.332980][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801967f8d8 [ 2309.340987][ C0] RBP: ffffc900037d7850 R08: ffff88801967f8df R09: 1ffff110032cff1b [ 2309.348995][ C0] R10: dffffc0000000000 R11: ffffed10032cff1c R12: 0000000000000001 [ 2309.357091][ C0] R13: ffffc900037d7760 R14: 1ffff110032cff1c R15: ffff88801967f8e0 [ 2309.365132][ C0] ? rwsem_down_read_slowpath+0x840/0x840 [ 2309.370913][ C0] ? try_to_wake_up+0x6f8/0x10b0 [ 2309.375925][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2309.381379][ C0] ? wake_up_q+0xca/0x100 [ 2309.385767][ C0] ? rwsem_wake+0xed/0x130 [ 2309.390240][ C0] ? rwsem_spin_on_owner+0x2b0/0x2b0 [ 2309.395583][ C0] down_write+0x1a7/0x1f0 [ 2309.399959][ C0] ? down_read_killable+0x340/0x340 [ 2309.405206][ C0] ? up_write+0x1c3/0x410 [ 2309.409588][ C0] kernfs_remove_by_name_ns+0x7c/0x150 [ 2309.415137][ C0] sysfs_remove_group+0xfc/0x2a0 [ 2309.420128][ C0] sysfs_remove_groups+0x54/0xa0 [ 2309.425122][ C0] ib_free_port_attrs+0xc5/0x3b0 [ 2309.430494][ C0] rdma_dev_exit_net+0x1d9/0x330 [ 2309.435485][ C0] ? __might_sleep+0xe0/0xe0 [ 2309.440125][ C0] ? rdma_dev_init_net+0x270/0x270 [ 2309.445287][ C0] cleanup_net+0x6f4/0xb90 [ 2309.449766][ C0] ? ops_free_list+0x3b0/0x3b0 [ 2309.454586][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2309.459840][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2309.465609][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2309.471378][ C0] process_scheduled_works+0xa45/0x15b0 [ 2309.476999][ C0] ? assign_work+0x400/0x400 [ 2309.481638][ C0] ? assign_work+0x39e/0x400 [ 2309.486274][ C0] worker_thread+0xa55/0xfc0 [ 2309.490920][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2309.497091][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2309.502023][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2309.507978][ C0] kthread+0x2fa/0x390 [ 2309.512085][ C0] ? pr_cont_work+0x560/0x560 [ 2309.516807][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2309.521438][ C0] ret_from_fork+0x48/0x80 [ 2309.525897][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2309.530533][ C0] ret_from_fork_asm+0x11/0x20 [ 2309.535385][ C0] [ 2309.538430][ C0] [ 2309.540795][ C0] Allocated by task 850: [ 2309.545075][ C0] kasan_set_track+0x4e/0x70 [ 2309.549713][ C0] __kasan_kmalloc+0x8f/0xa0 [ 2309.554340][ C0] __ipv6_dev_mc_inc+0x413/0xac0 [ 2309.559386][ C0] ipv6_add_dev+0xd75/0x11f0 [ 2309.564092][ C0] addrconf_notify+0x67b/0x1010 [ 2309.568989][ C0] notifier_call_chain+0x197/0x390 [ 2309.574141][ C0] register_netdevice+0x160c/0x1ae0 [ 2309.579442][ C0] register_netdev+0x3b/0x50 [ 2309.584087][ C0] loopback_net_init+0x75/0x150 [ 2309.589005][ C0] ops_init+0x397/0x640 [ 2309.593170][ C0] setup_net+0x3a5/0xa00 [ 2309.597429][ C0] copy_net_ns+0x36d/0x5e0 [ 2309.601863][ C0] create_new_namespaces+0x3d3/0x6f0 [ 2309.607181][ C0] unshare_nsproxy_namespaces+0x11a/0x160 [ 2309.612914][ C0] ksys_unshare+0x4c0/0x890 [ 2309.617431][ C0] __x64_sys_unshare+0x38/0x40 [ 2309.622205][ C0] do_syscall_64+0x55/0xb0 [ 2309.626635][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2309.632645][ C0] [ 2309.634989][ C0] Last potentially related work creation: [ 2309.640734][ C0] kasan_save_stack+0x3e/0x60 [ 2309.645450][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 2309.651127][ C0] kvfree_call_rcu+0xee/0x780 [ 2309.655839][ C0] __ipv6_dev_mc_dec+0x2cc/0x330 [ 2309.660791][ C0] ipv6_mc_destroy_dev+0x338/0x590 [ 2309.666006][ C0] addrconf_ifdown+0x139f/0x1880 [ 2309.670961][ C0] addrconf_notify+0x6c6/0x1010 [ 2309.675823][ C0] notifier_call_chain+0x197/0x390 [ 2309.680938][ C0] unregister_netdevice_many_notify+0xf36/0x1810 [ 2309.687365][ C0] default_device_exit_batch+0x9cb/0xa60 [ 2309.693073][ C0] setup_net+0x83a/0xa00 [ 2309.697327][ C0] copy_net_ns+0x36d/0x5e0 [ 2309.701756][ C0] create_new_namespaces+0x3d3/0x6f0 [ 2309.707080][ C0] unshare_nsproxy_namespaces+0x11a/0x160 [ 2309.712818][ C0] ksys_unshare+0x4c0/0x890 [ 2309.717492][ C0] __x64_sys_unshare+0x38/0x40 [ 2309.722281][ C0] do_syscall_64+0x55/0xb0 [ 2309.726823][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2309.732942][ C0] [ 2309.735301][ C0] Second to last potentially related work creation: [ 2309.741906][ C0] kasan_save_stack+0x3e/0x60 [ 2309.746599][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 2309.751993][ C0] kvfree_call_rcu+0xee/0x780 [ 2309.756695][ C0] ipv6_mc_destroy_dev+0x3c1/0x590 [ 2309.762261][ C0] addrconf_ifdown+0x139f/0x1880 [ 2309.767222][ C0] addrconf_notify+0x6c6/0x1010 [ 2309.772094][ C0] notifier_call_chain+0x197/0x390 [ 2309.777231][ C0] unregister_netdevice_many_notify+0xf36/0x1810 [ 2309.783590][ C0] sit_exit_batch_net+0x49c/0x4e0 [ 2309.788760][ C0] cleanup_net+0x77f/0xb90 [ 2309.793204][ C0] process_scheduled_works+0xa45/0x15b0 [ 2309.798846][ C0] worker_thread+0xa55/0xfc0 [ 2309.803451][ C0] kthread+0x2fa/0x390 [ 2309.807544][ C0] ret_from_fork+0x48/0x80 [ 2309.811983][ C0] ret_from_fork_asm+0x11/0x20 [ 2309.816803][ C0] [ 2309.819138][ C0] The buggy address belongs to the object at ffff888059aaf800 [ 2309.819138][ C0] which belongs to the cache kmalloc-512 of size 512 [ 2309.833310][ C0] The buggy address is located 42 bytes inside of [ 2309.833310][ C0] freed 512-byte region [ffff888059aaf800, ffff888059aafa00) [ 2309.847064][ C0] [ 2309.849414][ C0] The buggy address belongs to the physical page: [ 2309.855849][ C0] page:ffffea000166ab00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888059aaf800 pfn:0x59aac [ 2309.867325][ C0] head:ffffea000166ab00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2309.876262][ C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2309.884264][ C0] page_type: 0xffffffff() [ 2309.888630][ C0] raw: 00fff00000000840 ffff888017841c80 ffffea000165c810 ffffea00007cf510 [ 2309.897225][ C0] raw: ffff888059aaf800 000000000010000e 00000001ffffffff 0000000000000000 [ 2309.905817][ C0] page dumped because: kasan: bad access detected [ 2309.912255][ C0] page_owner tracks the page as allocated [ 2309.917975][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5786, tgid 5786 (syz-executor), ts 88519667058, free_ts 25891327611 [ 2309.939526][ C0] post_alloc_hook+0x1cd/0x210 [ 2309.944373][ C0] get_page_from_freelist+0x195c/0x19f0 [ 2309.949934][ C0] __alloc_pages+0x1e3/0x460 [ 2309.954544][ C0] alloc_slab_page+0x5d/0x170 [ 2309.959237][ C0] new_slab+0x87/0x2e0 [ 2309.963324][ C0] ___slab_alloc+0xc6d/0x12f0 [ 2309.968013][ C0] __kmem_cache_alloc_node+0x1a2/0x260 [ 2309.973569][ C0] __kmalloc+0xa4/0x240 [ 2309.977737][ C0] fib6_info_alloc+0x32/0xe0 [ 2309.982347][ C0] ip6_route_info_create+0x44f/0x1200 [ 2309.987751][ C0] ip6_route_add+0x28/0x130 [ 2309.992266][ C0] addrconf_add_dev+0x257/0x340 [ 2309.997139][ C0] addrconf_init_auto_addrs+0x19f/0xaa0 [ 2310.002708][ C0] addrconf_notify+0xb62/0x1010 [ 2310.007570][ C0] notifier_call_chain+0x197/0x390 [ 2310.012774][ C0] __dev_notify_flags+0x18e/0x2e0 [ 2310.017812][ C0] page last free stack trace: [ 2310.022490][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 2310.027966][ C0] free_unref_page+0x32/0x2e0 [ 2310.032666][ C0] free_contig_range+0xa1/0x160 [ 2310.037540][ C0] destroy_args+0x87/0x770 [ 2310.042018][ C0] debug_vm_pgtable+0x3cc/0x410 [ 2310.046879][ C0] do_one_initcall+0x1fd/0x750 [ 2310.051690][ C0] do_initcall_level+0x137/0x1f0 [ 2310.056751][ C0] do_initcalls+0x69/0xd0 [ 2310.061129][ C0] kernel_init_freeable+0x3d2/0x570 [ 2310.066358][ C0] kernel_init+0x1d/0x1c0 [ 2310.070713][ C0] ret_from_fork+0x48/0x80 [ 2310.075137][ C0] ret_from_fork_asm+0x11/0x20 [ 2310.079918][ C0] [ 2310.082261][ C0] Memory state around the buggy address: [ 2310.087920][ C0] ffff888059aaf700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2310.096008][ C0] ffff888059aaf780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2310.104086][ C0] >ffff888059aaf800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2310.112155][ C0] ^ [ 2310.117527][ C0] ffff888059aaf880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2310.125600][ C0] ffff888059aaf900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2310.133670][ C0] ================================================================== [ 2310.141952][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2310.149161][ C0] CPU: 0 PID: 411 Comm: kworker/u4:1 Not tainted 6.6.99-syzkaller #0 [ 2310.157242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2310.167335][ C0] Workqueue: netns cleanup_net [ 2310.172161][ C0] Call Trace: [ 2310.175474][ C0] [ 2310.178355][ C0] dump_stack_lvl+0x16c/0x230 [ 2310.183166][ C0] ? show_regs_print_info+0x20/0x20 [ 2310.188402][ C0] ? load_image+0x3b0/0x3b0 [ 2310.193085][ C0] panic+0x2c0/0x710 [ 2310.197026][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 2310.201582][ C0] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 2310.207533][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2310.213459][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2310.218377][ C0] ? print_memory_metadata+0x314/0x400 [ 2310.223847][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2310.228970][ C0] check_panic_on_warn+0x84/0xa0 [ 2310.233945][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2310.239106][ C0] end_report+0x6f/0x140 [ 2310.243369][ C0] kasan_report+0x128/0x150 [ 2310.247910][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 2310.253311][ C0] rose_timer_expiry+0x46a/0x4b0 [ 2310.258291][ C0] call_timer_fn+0x16e/0x530 [ 2310.262922][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2310.267990][ C0] ? call_timer_fn+0xbf/0x530 [ 2310.272678][ C0] ? __run_timers+0x7d0/0x7d0 [ 2310.277362][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2310.282579][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2310.287787][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 2310.292828][ C0] __run_timers+0x52d/0x7d0 [ 2310.297342][ C0] ? detach_timer+0x2b0/0x2b0 [ 2310.302040][ C0] ? lock_chain_count+0x20/0x20 [ 2310.306919][ C0] run_timer_softirq+0x67/0xf0 [ 2310.311698][ C0] handle_softirqs+0x280/0x820 [ 2310.316568][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 2310.321359][ C0] ? do_softirq+0x180/0x180 [ 2310.325899][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2310.331118][ C0] __irq_exit_rcu+0xc7/0x190 [ 2310.335806][ C0] ? irq_exit_rcu+0x20/0x20 [ 2310.340326][ C0] irq_exit_rcu+0x9/0x20 [ 2310.344573][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2310.350226][ C0] [ 2310.353171][ C0] [ 2310.356137][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2310.362160][ C0] RIP: 0010:rwsem_down_write_slowpath+0x43f/0xfa0 [ 2310.368586][ C0] Code: fc ff df 0f b6 04 08 84 c0 75 34 41 83 fc 02 74 13 48 8b 44 24 30 83 38 64 48 8b 1c 24 7d 09 e9 42 01 00 00 48 8b 1c 24 f3 90 <48> 89 df e8 39 77 f0 f6 a8 07 0f 85 05 fe ff ff e9 27 01 00 00 48 [ 2310.388197][ C0] RSP: 0018:ffffc900037d7660 EFLAGS: 00000206 [ 2310.394278][ C0] RAX: ffff888050a73c6c RBX: ffff88801967f8d8 RCX: dffffc0000000000 [ 2310.402287][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801967f8d8 [ 2310.410377][ C0] RBP: ffffc900037d7850 R08: ffff88801967f8df R09: 1ffff110032cff1b [ 2310.418363][ C0] R10: dffffc0000000000 R11: ffffed10032cff1c R12: 0000000000000001 [ 2310.426349][ C0] R13: ffffc900037d7760 R14: 1ffff110032cff1c R15: ffff88801967f8e0 [ 2310.434349][ C0] ? rwsem_down_read_slowpath+0x840/0x840 [ 2310.440087][ C0] ? try_to_wake_up+0x6f8/0x10b0 [ 2310.445056][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2310.450463][ C0] ? wake_up_q+0xca/0x100 [ 2310.454819][ C0] ? rwsem_wake+0xed/0x130 [ 2310.459290][ C0] ? rwsem_spin_on_owner+0x2b0/0x2b0 [ 2310.464593][ C0] down_write+0x1a7/0x1f0 [ 2310.468948][ C0] ? down_read_killable+0x340/0x340 [ 2310.474162][ C0] ? up_write+0x1c3/0x410 [ 2310.478493][ C0] kernfs_remove_by_name_ns+0x7c/0x150 [ 2310.484050][ C0] sysfs_remove_group+0xfc/0x2a0 [ 2310.488997][ C0] sysfs_remove_groups+0x54/0xa0 [ 2310.493944][ C0] ib_free_port_attrs+0xc5/0x3b0 [ 2310.498903][ C0] rdma_dev_exit_net+0x1d9/0x330 [ 2310.503869][ C0] ? __might_sleep+0xe0/0xe0 [ 2310.508496][ C0] ? rdma_dev_init_net+0x270/0x270 [ 2310.513640][ C0] cleanup_net+0x6f4/0xb90 [ 2310.518069][ C0] ? ops_free_list+0x3b0/0x3b0 [ 2310.522857][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2310.528167][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2310.533906][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2310.539674][ C0] process_scheduled_works+0xa45/0x15b0 [ 2310.545262][ C0] ? assign_work+0x400/0x400 [ 2310.549899][ C0] ? assign_work+0x39e/0x400 [ 2310.554517][ C0] worker_thread+0xa55/0xfc0 [ 2310.559152][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2310.565061][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2310.569927][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2310.575847][ C0] kthread+0x2fa/0x390 [ 2310.579929][ C0] ? pr_cont_work+0x560/0x560 [ 2310.584690][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2310.589290][ C0] ret_from_fork+0x48/0x80 [ 2310.593737][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2310.598337][ C0] ret_from_fork_asm+0x11/0x20 [ 2310.603141][ C0] [ 2310.606362][ C0] Kernel Offset: disabled [ 2310.610692][ C0] Rebooting in 86400 seconds..