last executing test programs: 4.235616788s ago: executing program 2 (id=3545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$MAP_CREATE(0x3fe, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r3], 0x398}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYBLOB="000428bd"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x40000) 4.044638886s ago: executing program 2 (id=3549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="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", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x46000040}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.742580548s ago: executing program 2 (id=3556): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r3, 0x0, 0x4048080) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x1, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x40, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) 3.608299813s ago: executing program 2 (id=3558): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x18) r3 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.275644497s ago: executing program 1 (id=3564): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000040)="76389e6a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0x5, &(0x7f0000001740)={@dev, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r9}, 0x10) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x4, 0x4, 0x9, 0x9, 0x7]}, &(0x7f0000000380)=0x54) vmsplice(r10, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.126546895s ago: executing program 1 (id=3568): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.901732793s ago: executing program 1 (id=3572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa693584", 0x35}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000001540)="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", 0xfd}], 0x4}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x4000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.628705067s ago: executing program 1 (id=3577): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) sendto$inet6(r1, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.4885508s ago: executing program 3 (id=3580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2.425082283s ago: executing program 0 (id=3581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_POLICE={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2.363258952s ago: executing program 0 (id=3582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2f, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.316503052s ago: executing program 4 (id=3583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="11ff03076844268cb89e14f04305fee0ffff00febabe", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.281112311s ago: executing program 3 (id=3584): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2.252979431s ago: executing program 0 (id=3585): syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply}}}}, 0x0) unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x0, 0x6, 0x1, 0x40, 0x10001]}, &(0x7f0000000200)=0x54) 2.048594529s ago: executing program 3 (id=3586): socket$rds(0x15, 0x5, 0x0) socket(0x2, 0x80802, 0x0) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020070000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 2.048287684s ago: executing program 4 (id=3587): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1.968097694s ago: executing program 4 (id=3588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56f", 0x7f}, {&(0x7f0000000940)="1165b65dc1f84946f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f661870be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e34c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757fa7654472294d51c5681364bc2e48cfb226168a09933e5851fcf209063fdb938b7d7351e7f065d41ec4fa4090a59490776f19d579833473c5faaf30c40d", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000700)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1e7ede7372c18", 0xcf}, {&(0x7f0000001700)="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", 0x387}], 0x6}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 1.939519907s ago: executing program 3 (id=3589): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r5) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x32ad}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 1.857722435s ago: executing program 4 (id=3590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.764611341s ago: executing program 3 (id=3591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x3}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 1.747564286s ago: executing program 1 (id=3592): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000040)="76389e6a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0x5, &(0x7f0000001740)={@dev, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r9}, 0x10) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x4, 0x4, 0x9, 0x9, 0x7]}, &(0x7f0000000380)=0x54) vmsplice(r10, &(0x7f0000000280)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.569821613s ago: executing program 0 (id=3593): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 1.520534567s ago: executing program 4 (id=3594): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xb}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7ff, 0x0, [{0x1000, 0x4, 0x20401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0x24, 0xfff, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x3, 0x4, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_INDEV={0x14, 0x8, 'pimreg1\x00'}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1.339743893s ago: executing program 0 (id=3595): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r1, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "747a9e9424"}]}]}, 0x3c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x840) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 581.52342ms ago: executing program 2 (id=3596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="89e7ee", 0x3}, {&(0x7f0000000440)="9c74dfbf7757", 0x6}, {&(0x7f0000000140)="687845d443", 0x5}], 0x3) 118.309787ms ago: executing program 1 (id=3597): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0xffffffffffffff10, &(0x7f0000004b80)={&(0x7f0000000e40)={0x98, r4, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0xfffffffffffffd3f, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 44.686654ms ago: executing program 0 (id=3598): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x8, 0x8, 0x1, @vifc_lcl_ifindex, @empty}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x4, 0x0, {0xd, 0x4, 0x0, 0x3, 0x1, 0x66, 0x7, 0x2, 0x2, 0x4, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xb2, 0x3, 0x7, [{@multicast2, 0x5}, {@rand_addr=0x64010102, 0x332d}, {@local, 0x3}]}, @timestamp={0x44, 0x4, 0x53, 0x0, 0x9}]}}}}}}}, 0x0) 44.201659ms ago: executing program 3 (id=3599): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 41.388626ms ago: executing program 2 (id=3600): socket$rds(0x15, 0x5, 0x0) socket(0x2, 0x80802, 0x0) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020070000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 0s ago: executing program 4 (id=3601): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xfffe}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 80.594141][ T5820] cgroup: Unknown subsys name 'net' [ 80.731817][ T5820] cgroup: Unknown subsys name 'cpuset' [ 80.741679][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.350888][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.133507][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.133827][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.142748][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.149909][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.155836][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.163769][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.170475][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.177739][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.191482][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.199409][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.199582][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.208839][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.221633][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.243146][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.251289][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.266975][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.276571][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.290592][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.308842][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.316566][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.327875][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.336559][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.344463][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.354700][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.363189][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.872106][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.014186][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.160624][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.314885][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.322979][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.331008][ T5831] bridge_slave_0: entered allmulticast mode [ 87.339067][ T5831] bridge_slave_0: entered promiscuous mode [ 87.384972][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.392861][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.400568][ T5831] bridge_slave_1: entered allmulticast mode [ 87.411883][ T5831] bridge_slave_1: entered promiscuous mode [ 87.489272][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.538434][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.555049][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.566780][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.574446][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.582420][ T5834] bridge_slave_0: entered allmulticast mode [ 87.589696][ T5834] bridge_slave_0: entered promiscuous mode [ 87.598618][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.605826][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.613360][ T5834] bridge_slave_1: entered allmulticast mode [ 87.620906][ T5834] bridge_slave_1: entered promiscuous mode [ 87.684830][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.693615][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.700951][ T5830] bridge_slave_0: entered allmulticast mode [ 87.709061][ T5830] bridge_slave_0: entered promiscuous mode [ 87.821503][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.829020][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.836223][ T5830] bridge_slave_1: entered allmulticast mode [ 87.843678][ T5830] bridge_slave_1: entered promiscuous mode [ 87.853346][ T5831] team0: Port device team_slave_0 added [ 87.863356][ T5831] team0: Port device team_slave_1 added [ 87.893495][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.953196][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.001872][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.016750][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.028595][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.035675][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.061868][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.107733][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.132680][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.139985][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.169022][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.183233][ T5834] team0: Port device team_slave_0 added [ 88.194058][ T5834] team0: Port device team_slave_1 added [ 88.200851][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.208341][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.215536][ T5847] bridge_slave_0: entered allmulticast mode [ 88.223262][ T5847] bridge_slave_0: entered promiscuous mode [ 88.257926][ T5844] Bluetooth: hci0: command tx timeout [ 88.280906][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.288834][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.296019][ T5847] bridge_slave_1: entered allmulticast mode [ 88.304576][ T5847] bridge_slave_1: entered promiscuous mode [ 88.328674][ T5830] team0: Port device team_slave_0 added [ 88.337664][ T5842] Bluetooth: hci1: command tx timeout [ 88.343464][ T5844] Bluetooth: hci2: command tx timeout [ 88.403982][ T5830] team0: Port device team_slave_1 added [ 88.417048][ T5842] Bluetooth: hci3: command tx timeout [ 88.422898][ T5844] Bluetooth: hci4: command tx timeout [ 88.438010][ T5831] hsr_slave_0: entered promiscuous mode [ 88.444428][ T5831] hsr_slave_1: entered promiscuous mode [ 88.453005][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.460223][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.486381][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.532563][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.540197][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.566306][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.581465][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.588578][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.615865][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.637944][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.668139][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.675146][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.701348][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.741099][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.836792][ T5847] team0: Port device team_slave_0 added [ 88.851900][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.859544][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.868224][ T5839] bridge_slave_0: entered allmulticast mode [ 88.875549][ T5839] bridge_slave_0: entered promiscuous mode [ 88.884357][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.891844][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.899491][ T5839] bridge_slave_1: entered allmulticast mode [ 88.906771][ T5839] bridge_slave_1: entered promiscuous mode [ 88.932599][ T5834] hsr_slave_0: entered promiscuous mode [ 88.940356][ T5834] hsr_slave_1: entered promiscuous mode [ 88.946521][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.954573][ T5834] Cannot create hsr debugfs directory [ 88.963479][ T5847] team0: Port device team_slave_1 added [ 89.015513][ T5830] hsr_slave_0: entered promiscuous mode [ 89.024501][ T5830] hsr_slave_1: entered promiscuous mode [ 89.031067][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.038888][ T5830] Cannot create hsr debugfs directory [ 89.105777][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.143486][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.150689][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.181376][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.228840][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.245926][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.254097][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.280975][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.365376][ T5839] team0: Port device team_slave_0 added [ 89.374126][ T5839] team0: Port device team_slave_1 added [ 89.516767][ T5847] hsr_slave_0: entered promiscuous mode [ 89.523825][ T5847] hsr_slave_1: entered promiscuous mode [ 89.530867][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.539007][ T5847] Cannot create hsr debugfs directory [ 89.606394][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.614005][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.641404][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.700141][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.707253][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.733395][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.958169][ T5839] hsr_slave_0: entered promiscuous mode [ 89.964669][ T5839] hsr_slave_1: entered promiscuous mode [ 89.973354][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.981412][ T5839] Cannot create hsr debugfs directory [ 90.083701][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.114549][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.126697][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.160894][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.303538][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.314028][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.326610][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.337313][ T5844] Bluetooth: hci0: command tx timeout [ 90.348961][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.423445][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.430674][ T5844] Bluetooth: hci2: command tx timeout [ 90.436229][ T5844] Bluetooth: hci1: command tx timeout [ 90.460340][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.489163][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.497765][ T5844] Bluetooth: hci4: command tx timeout [ 90.503205][ T5844] Bluetooth: hci3: command tx timeout [ 90.513569][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.630730][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.643778][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.655174][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.693742][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.756358][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.787355][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.804007][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.814689][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.843282][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.891519][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.907714][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.920086][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.954071][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.968252][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.975551][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.002027][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.009347][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.037863][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.065665][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.072867][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.113126][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.120652][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.140784][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.148070][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.198634][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.205824][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.342036][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.383828][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.404541][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.472486][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.506058][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.544530][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.551790][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.592433][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.599676][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.611420][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.618640][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.633648][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.640873][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.835786][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.949682][ T10] cfg80211: failed to load regulatory.db [ 91.963327][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.125644][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.144091][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.206765][ T5830] veth0_vlan: entered promiscuous mode [ 92.312463][ T5830] veth1_vlan: entered promiscuous mode [ 92.366394][ T5831] veth0_vlan: entered promiscuous mode [ 92.417629][ T5844] Bluetooth: hci0: command tx timeout [ 92.421064][ T5831] veth1_vlan: entered promiscuous mode [ 92.430939][ T5834] veth0_vlan: entered promiscuous mode [ 92.450130][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.466394][ T5830] veth0_macvtap: entered promiscuous mode [ 92.480693][ T5834] veth1_vlan: entered promiscuous mode [ 92.494000][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.510642][ T5844] Bluetooth: hci1: command tx timeout [ 92.516119][ T5844] Bluetooth: hci2: command tx timeout [ 92.541795][ T5830] veth1_macvtap: entered promiscuous mode [ 92.577056][ T5844] Bluetooth: hci4: command tx timeout [ 92.582603][ T5842] Bluetooth: hci3: command tx timeout [ 92.620851][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.634991][ T5831] veth0_macvtap: entered promiscuous mode [ 92.671903][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.688987][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.697932][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.706665][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.716211][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.752757][ T5834] veth0_macvtap: entered promiscuous mode [ 92.766360][ T5831] veth1_macvtap: entered promiscuous mode [ 92.786562][ T5839] veth0_vlan: entered promiscuous mode [ 92.806356][ T5834] veth1_macvtap: entered promiscuous mode [ 92.852833][ T5839] veth1_vlan: entered promiscuous mode [ 92.979468][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.991576][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.003468][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.014452][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.025676][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.035981][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.046785][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.060487][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.086664][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.098628][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.110241][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.122296][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.133187][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.144359][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.154961][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.166759][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.188574][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198404][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.209101][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.219006][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232996][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.233764][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.243147][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254618][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.266195][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.275423][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360068][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.363570][ T5839] veth0_macvtap: entered promiscuous mode [ 93.370561][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.415409][ T5839] veth1_macvtap: entered promiscuous mode [ 93.494888][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.516157][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.523209][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.543086][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.543120][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.561115][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.572757][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.582750][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.593235][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.604767][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.637312][ T5847] veth0_vlan: entered promiscuous mode [ 93.656457][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.669395][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.696915][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.708507][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.721872][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.733573][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.749282][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.785258][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.799691][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.832962][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.843923][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.853562][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.864202][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.883215][ T5847] veth1_vlan: entered promiscuous mode [ 94.005571][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.029398][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.203730][ T5847] veth0_macvtap: entered promiscuous mode [ 94.222817][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.227694][ T5847] veth1_macvtap: entered promiscuous mode [ 94.247633][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.313845][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.320130][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 94.338277][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.344007][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.357646][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.369241][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.380237][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.392295][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.403142][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.415113][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.428053][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.445216][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.453864][ T5934] tipc: Started in network mode [ 94.459551][ T5934] tipc: Node identity ffffa848, cluster identity 4711 [ 94.466458][ T5934] tipc: Node number set to 4294944840 [ 94.497633][ T5842] Bluetooth: hci0: command tx timeout [ 94.536738][ T5937] hsr_slave_1 (unregistering): left promiscuous mode [ 94.565809][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.577053][ T5844] Bluetooth: hci1: command tx timeout [ 94.577123][ T5842] Bluetooth: hci2: command tx timeout [ 94.657766][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.662589][ T5842] Bluetooth: hci3: command tx timeout [ 94.668153][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.673851][ T5844] Bluetooth: hci4: command tx timeout [ 94.684319][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.703170][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.719514][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.719931][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.729634][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.764975][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.766102][ T5941] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.795421][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.834671][ T5939] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 94.879538][ T5939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.902530][ T5943] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12'. [ 94.953150][ T5945] xt_cgroup: xt_cgroup: no path or classid specified [ 94.966320][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.989621][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.006207][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.027130][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.123050][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.144360][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.397191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.474116][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.602587][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.634375][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.138895][ T5977] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 96.252831][ T5979] netlink: 'syz.4.26': attribute type 10 has an invalid length. [ 96.290663][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.26'. [ 96.416554][ T5979] team0: Port device geneve0 added [ 96.454483][ T5989] netlink: 14 bytes leftover after parsing attributes in process `syz.1.29'. [ 96.912195][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.972642][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.021361][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.036885][ T5989] bond0 (unregistering): Released all slaves [ 97.399168][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 97.453338][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.573464][ T6002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.830238][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 98.887261][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 98.973295][ C0] Unknown status report in ack skb [ 99.161350][ T6052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.200306][ T6057] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 99.254803][ T6050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.371161][ T6061] veth3: entered promiscuous mode [ 99.805733][ T6081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.813285][ T6081] IPv6: NLM_F_CREATE should be set when creating new route [ 99.871406][ T6081] lo: entered allmulticast mode [ 99.883210][ T6081] tunl0: entered allmulticast mode [ 99.923871][ T6081] gre0: entered allmulticast mode [ 99.960717][ T6081] gretap0: entered allmulticast mode [ 99.983651][ T6081] erspan0: entered allmulticast mode [ 99.994612][ T6081] ip_vti0: entered allmulticast mode [ 100.026732][ T6081] ip6_vti0: entered allmulticast mode [ 100.043355][ T6081] sit0: entered allmulticast mode [ 100.055377][ T6081] ip6tnl0: entered allmulticast mode [ 100.066729][ T6081] ip6gre0: entered allmulticast mode [ 100.084890][ T6081] syz_tun: entered allmulticast mode [ 100.110418][ T6081] ip6gretap0: entered allmulticast mode [ 100.126359][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.134786][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.150476][ T6081] bridge0: entered allmulticast mode [ 100.163135][ T6081] vcan0: entered allmulticast mode [ 100.173284][ T6081] bond0: entered allmulticast mode [ 100.182522][ T6081] bond_slave_0: entered allmulticast mode [ 100.188846][ T6081] bond_slave_1: entered allmulticast mode [ 100.212257][ T6081] team0: entered allmulticast mode [ 100.218374][ T6081] team_slave_0: entered allmulticast mode [ 100.225416][ T6081] team_slave_1: entered allmulticast mode [ 100.236557][ T6081] dummy0: entered allmulticast mode [ 100.252805][ T6081] nlmon0: entered allmulticast mode [ 100.275214][ T6081] caif0: entered allmulticast mode [ 100.297828][ T6081] batadv0: entered allmulticast mode [ 100.318216][ T6081] vxcan0: entered allmulticast mode [ 100.330998][ T6081] vxcan1: entered allmulticast mode [ 100.341081][ T6081] veth0: entered allmulticast mode [ 100.351407][ T6081] veth1: entered allmulticast mode [ 100.366665][ T6081] wg0: entered allmulticast mode [ 100.375792][ T6081] wg1: entered allmulticast mode [ 100.386249][ T6081] wg2: entered allmulticast mode [ 100.402077][ T6081] veth0_to_bridge: entered allmulticast mode [ 100.420918][ T6081] veth1_to_bridge: entered allmulticast mode [ 100.451399][ T6081] veth0_to_bond: entered allmulticast mode [ 100.468070][ T6081] veth1_to_bond: entered allmulticast mode [ 100.483496][ T6081] veth0_to_team: entered allmulticast mode [ 100.504837][ T6081] veth1_to_team: entered allmulticast mode [ 100.525139][ T6081] veth0_to_batadv: entered allmulticast mode [ 100.535653][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.544801][ T6081] batadv_slave_0: entered allmulticast mode [ 100.554526][ T6081] veth1_to_batadv: entered allmulticast mode [ 100.564444][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.572674][ T6081] batadv_slave_1: entered allmulticast mode [ 100.582203][ T6081] xfrm0: entered allmulticast mode [ 100.590923][ T6081] veth0_to_hsr: entered allmulticast mode [ 100.600193][ T6081] hsr_slave_0: entered allmulticast mode [ 100.609491][ T6081] hsr0: entered allmulticast mode [ 100.618121][ T6081] veth1_virt_wifi: entered allmulticast mode [ 100.638525][ T6081] veth0_virt_wifi: entered allmulticast mode [ 100.660189][ T6081] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 100.677771][ T6081] veth1_vlan: entered allmulticast mode [ 100.686500][ T6081] veth0_vlan: entered allmulticast mode [ 100.703865][ T6081] vlan0: entered allmulticast mode [ 100.709294][ T6081] vlan1: entered allmulticast mode [ 100.715498][ T6081] macvlan0: entered allmulticast mode [ 100.726276][ T6081] macvlan1: entered allmulticast mode [ 100.736067][ T6081] ipvlan0: entered allmulticast mode [ 100.742594][ T6081] ipvlan1: entered allmulticast mode [ 100.748899][ T6081] veth1_macvtap: entered allmulticast mode [ 100.759207][ T6081] veth0_macvtap: entered allmulticast mode [ 100.768463][ T6081] macvtap0: entered allmulticast mode [ 100.778436][ T6081] macsec0: entered allmulticast mode [ 100.787917][ T6081] geneve0: entered allmulticast mode [ 100.796257][ T6081] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.806196][ T6081] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.815918][ T6081] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.825402][ T6081] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845426][ T6081] geneve1: entered allmulticast mode [ 100.856811][ T6081] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 100.875223][ T6081] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 100.888761][ T6081] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 100.908497][ T6081] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 100.931609][ T6081] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 100.950978][ T6081] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 101.109424][ T6112] No such timeout policy "syz1" [ 101.394013][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'. [ 101.831861][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 101.911497][ T6149] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 101.940201][ T6149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.77'. [ 102.002144][ T6149] team0: Port device geneve0 added [ 102.167955][ T6152] syzkaller0: entered promiscuous mode [ 102.173990][ T6152] syzkaller0: entered allmulticast mode [ 102.824677][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'. [ 102.858025][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.918494][ T6181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.012304][ T6187] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 103.211752][ T6189] ip6erspan0: entered promiscuous mode [ 103.970583][ T6208] netlink: 76 bytes leftover after parsing attributes in process `syz.2.96'. [ 104.145754][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.97'. [ 104.206739][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 105.294623][ T6241] netlink: 'syz.1.106': attribute type 39 has an invalid length. [ 105.426164][ T6241] veth0_macvtap: left promiscuous mode [ 106.204778][ T6263] netlink: 104 bytes leftover after parsing attributes in process `syz.3.112'. [ 106.572162][ T6278] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 106.764917][ T6278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.797394][ T6290] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.121'. [ 106.952361][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.989565][ T6282] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.070904][ T6282] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.255677][ T6286] veth3: entered promiscuous mode [ 107.329484][ T6286] bond1: (slave veth3): Enslaving as an active interface with a down link [ 107.407609][ T6278] erspan0: entered allmulticast mode [ 107.429765][ T6278] bond1: (slave erspan0): making interface the new active one [ 107.438584][ T6278] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 109.798301][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 109.834502][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 110.751833][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.151'. [ 111.473152][ T6415] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 111.782328][ T6419] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 111.829289][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.838772][ T3550] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 111.910241][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 111.963627][ T6415] veth3: entered promiscuous mode [ 111.980703][ T6415] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 111.989889][ T36] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 112.058180][ T6429] C: renamed from lo (while UP) [ 112.086417][ T6429] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 112.165044][ T6433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.333691][ T6436] veth5: entered promiscuous mode [ 112.382222][ T6436] bond2: (slave veth5): Enslaving as an active interface with an up link [ 112.440361][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 112.456429][ T6440] vlan2: entered allmulticast mode [ 112.516695][ T6440] bond2: entered allmulticast mode [ 112.527126][ T6440] veth5: entered allmulticast mode [ 112.954396][ T6457] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 113.153632][ T6457] bond0: entered promiscuous mode [ 113.178360][ T6457] bond_slave_0: entered promiscuous mode [ 113.198461][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'. [ 113.218653][ T6457] bond_slave_1: entered promiscuous mode [ 113.226745][ T6457] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.234007][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 113.254599][ T6457] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 113.499658][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 113.703076][ T6193] Set syz1 is full, maxelem 65536 reached [ 113.904196][ T6492] bridge_slave_0: left promiscuous mode [ 113.943242][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.969207][ T6492] bridge_slave_1: left promiscuous mode [ 113.978458][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.995799][ T6492] bond0: (slave bond_slave_0): Releasing backup interface [ 114.024057][ T6492] bond_slave_0: left promiscuous mode [ 114.040544][ T6492] bond0: (slave bond_slave_1): Releasing backup interface [ 114.053834][ T6498] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 114.065447][ T6492] bond_slave_1: left promiscuous mode [ 114.078418][ T6492] team0: Port device team_slave_0 removed [ 114.113961][ T6492] team0: Port device team_slave_1 removed [ 114.123267][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.134372][ T6492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.144572][ T6492] bond1: (slave macvlan2): Releasing backup interface [ 114.155725][ T6492] bond0: left promiscuous mode [ 114.171473][ T6499] ip6erspan0: entered promiscuous mode [ 114.938448][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 114.950467][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 115.735404][ T6551] warning: `syz.0.205' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.782840][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 115.959143][ T6559] bond1: (slave erspan0): Releasing active interface [ 115.995858][ T6559] bridge_slave_0: left allmulticast mode [ 116.029145][ T6559] bridge_slave_0: left promiscuous mode [ 116.036029][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.079530][ T6559] bridge_slave_1: left allmulticast mode [ 116.094678][ T6559] bridge_slave_1: left promiscuous mode [ 116.107296][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.138019][ T6559] bond0: (slave bond_slave_0): Releasing backup interface [ 116.162543][ T6559] bond0: (slave bond_slave_1): Releasing backup interface [ 116.223419][ T6559] team0: Port device team_slave_0 removed [ 116.249076][ T6559] team0: Port device team_slave_1 removed [ 116.252504][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 116.270845][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 116.272726][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.291694][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.312573][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.320382][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.370639][ T6559] team0: Port device geneve0 removed [ 116.384442][ T6559] bond1: (slave veth3): Releasing active interface [ 116.404520][ T6559] bond2: (slave veth5): Releasing backup interface [ 116.423343][ T6559] veth5: left allmulticast mode [ 117.412240][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 117.444940][ T6613] bridge_slave_0: left allmulticast mode [ 117.465574][ T6613] bridge_slave_0: left promiscuous mode [ 117.477506][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.502617][ T6613] bridge_slave_1: left allmulticast mode [ 117.508529][ T6613] bridge_slave_1: left promiscuous mode [ 117.521602][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.591942][ T6613] team0: Port device team_slave_0 removed [ 117.638994][ T6613] team0: Port device team_slave_1 removed [ 117.654893][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.662415][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030e14c00: rx timeout, send abort [ 117.702582][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.745406][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.755756][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.767474][ T6621] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 117.805497][ T6613] bond0: (slave ip6gretap1): Removing an active aggregator [ 117.821181][ T6613] bond0: (slave ip6gretap1): Releasing backup interface [ 117.831027][ T6623] netlink: 'syz.2.237': attribute type 25 has an invalid length. [ 117.848585][ T6613] bond0: (slave ip6gretap1): the permanent HWaddr of slave - e6:2c:58:27:db:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 117.880684][ T6613] bond0: (slave veth3): Releasing backup interface [ 118.002464][ T6624] bond0: entered promiscuous mode [ 118.034073][ T6624] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.074114][ T6624] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 118.761330][ T6657] netlink: 'syz.3.252': attribute type 25 has an invalid length. [ 118.921872][ T6662] xt_cgroup: xt_cgroup: no path or classid specified [ 119.144003][ T6674] netlink: 76 bytes leftover after parsing attributes in process `syz.1.259'. [ 119.149213][ T6672] netlink: 'syz.0.269': attribute type 25 has an invalid length. [ 119.749966][ T6700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.272'. [ 119.816564][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 120.039853][ T6712] netlink: 'syz.2.276': attribute type 25 has an invalid length. [ 120.124410][ T6718] netlink: 76 bytes leftover after parsing attributes in process `syz.4.278'. [ 120.627798][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.288'. [ 120.657011][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 120.834611][ T6752] netlink: 'syz.0.293': attribute type 25 has an invalid length. [ 121.524496][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 121.561335][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 121.613833][ T6786] netlink: 'syz.4.307': attribute type 25 has an invalid length. [ 122.416801][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.321'. [ 122.458649][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 122.481277][ T6819] netlink: 'syz.2.322': attribute type 25 has an invalid length. [ 122.678976][ T6829] xt_cgroup: xt_cgroup: no path or classid specified [ 123.304937][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.336'. [ 123.330400][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 123.492407][ T6861] netlink: 'syz.0.337': attribute type 25 has an invalid length. [ 124.005632][ T6882] xt_cgroup: xt_cgroup: no path or classid specified [ 124.140674][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.4.350'. [ 124.161624][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 124.769312][ T6912] netlink: 'syz.2.360': attribute type 25 has an invalid length. [ 125.038944][ T6925] xt_cgroup: xt_cgroup: no path or classid specified [ 125.039289][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 125.126945][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 125.677233][ T6954] netlink: 'syz.0.377': attribute type 25 has an invalid length. [ 126.011226][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 126.046192][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 126.069784][ T6968] bridge0: left allmulticast mode [ 126.117740][ T6973] xt_cgroup: xt_cgroup: no path or classid specified [ 126.620518][ T6991] netlink: 'syz.4.394': attribute type 25 has an invalid length. [ 126.803636][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 127.024088][ T7010] xt_cgroup: xt_cgroup: no path or classid specified [ 127.546583][ T7031] netlink: 'syz.0.408': attribute type 25 has an invalid length. [ 127.599757][ T7036] __nla_validate_parse: 1 callbacks suppressed [ 127.599777][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.411'. [ 127.636587][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 127.885687][ T7050] xt_cgroup: xt_cgroup: no path or classid specified [ 128.328465][ T7071] netlink: 'syz.3.425': attribute type 25 has an invalid length. [ 128.449688][ T7075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.427'. [ 128.460190][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 129.264360][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'. [ 129.292774][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 129.415658][ T7116] netlink: 'syz.3.444': attribute type 25 has an invalid length. [ 129.574346][ T7124] xt_cgroup: xt_cgroup: no path or classid specified [ 130.063703][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 130.073285][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 130.210959][ T7156] netlink: 'syz.0.460': attribute type 25 has an invalid length. [ 130.713962][ T7176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 130.754154][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 130.867366][ T7183] netlink: 'syz.3.473': attribute type 25 has an invalid length. [ 131.424517][ T7210] xt_cgroup: xt_cgroup: no path or classid specified [ 131.670361][ T7220] netlink: 'syz.2.488': attribute type 25 has an invalid length. [ 132.511191][ T7255] netlink: 'syz.4.502': attribute type 25 has an invalid length. [ 132.902875][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987202][ T7281] xt_cgroup: xt_cgroup: no path or classid specified [ 133.151821][ T7286] __nla_validate_parse: 4 callbacks suppressed [ 133.151844][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 133.175314][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 133.348410][ T7294] netlink: 'syz.1.519': attribute type 25 has an invalid length. [ 133.820741][ T7317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 133.840010][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 134.013894][ T7327] xt_cgroup: xt_cgroup: no path or classid specified [ 134.015940][ T7325] netlink: 'syz.2.532': attribute type 25 has an invalid length. [ 134.675677][ T7355] netlink: 'syz.0.545': attribute type 25 has an invalid length. [ 134.801614][ T7361] xt_cgroup: xt_cgroup: no path or classid specified [ 135.543908][ T7391] netlink: 'syz.0.560': attribute type 25 has an invalid length. [ 135.710486][ T7400] xt_cgroup: xt_cgroup: no path or classid specified [ 136.502942][ T7435] netlink: 'syz.3.578': attribute type 24 has an invalid length. [ 136.716409][ T7445] xt_cgroup: xt_cgroup: no path or classid specified [ 137.257601][ T7470] netlink: 'syz.2.593': attribute type 24 has an invalid length. [ 137.945453][ T7501] xt_cgroup: xt_cgroup: no path or classid specified [ 137.972264][ T7503] Bluetooth: MGMT ver 1.23 [ 138.442073][ T7521] netlink: 'syz.2.615': attribute type 24 has an invalid length. [ 138.860974][ T7542] xt_cgroup: xt_cgroup: no path or classid specified [ 139.350310][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.633'. [ 139.367089][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 139.502388][ T7570] netlink: 'syz.0.636': attribute type 25 has an invalid length. [ 140.094191][ T7599] xt_cgroup: xt_cgroup: no path or classid specified [ 140.223414][ T7608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 140.252385][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 140.485076][ T7617] netlink: 'syz.0.654': attribute type 25 has an invalid length. [ 141.079009][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'. [ 141.112792][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 141.177485][ T7652] netlink: 'syz.4.668': attribute type 25 has an invalid length. [ 141.783690][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'. [ 141.815319][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 141.869667][ T7684] netlink: 'syz.2.681': attribute type 25 has an invalid length. [ 142.069920][ T7692] xt_cgroup: xt_cgroup: no path or classid specified [ 142.625181][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 142.660240][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 142.874331][ T7729] netlink: 'syz.4.698': attribute type 25 has an invalid length. [ 143.204797][ T7747] xt_cgroup: xt_cgroup: no path or classid specified [ 144.105146][ T7781] netlink: 'syz.2.722': attribute type 25 has an invalid length. [ 144.328957][ T7790] xt_cgroup: xt_cgroup: no path or classid specified [ 144.771499][ T7813] __nla_validate_parse: 4 callbacks suppressed [ 144.771521][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 144.794159][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 144.840967][ T7816] netlink: 'syz.0.737': attribute type 25 has an invalid length. [ 145.563081][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.597054][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 145.898082][ T7859] netlink: 'syz.2.756': attribute type 25 has an invalid length. [ 146.125673][ T7876] xt_cgroup: xt_cgroup: no path or classid specified [ 146.531126][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 146.565544][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 146.894320][ T7909] netlink: 'syz.2.776': attribute type 25 has an invalid length. [ 146.940716][ T7912] xt_cgroup: xt_cgroup: no path or classid specified [ 147.332746][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'. [ 147.362760][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 147.701700][ T7946] netlink: 'syz.4.792': attribute type 25 has an invalid length. [ 148.176999][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 148.200659][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 148.340740][ T7970] xt_cgroup: xt_cgroup: no path or classid specified [ 148.639007][ T7984] netlink: 'syz.3.808': attribute type 25 has an invalid length. [ 149.507428][ T8015] netlink: 'syz.2.820': attribute type 25 has an invalid length. [ 149.526194][ T8019] xt_cgroup: xt_cgroup: no path or classid specified [ 150.104916][ T8047] __nla_validate_parse: 2 callbacks suppressed [ 150.104935][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.831'. [ 150.125472][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 150.591761][ T8067] netlink: 'syz.3.841': attribute type 25 has an invalid length. [ 150.815554][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 150.856141][ T8083] xt_cgroup: xt_cgroup: no path or classid specified [ 150.891425][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 151.676503][ T8118] bridge_slave_0: left allmulticast mode [ 151.683440][ T8118] bridge_slave_0: left promiscuous mode [ 151.704010][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.742057][ T8118] bridge_slave_1: left allmulticast mode [ 151.771054][ T8118] bridge_slave_1: left promiscuous mode [ 151.783861][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.802582][ T8118] bond0: (slave bond_slave_0): Releasing backup interface [ 151.815845][ T8118] bond0: (slave bond_slave_1): Releasing backup interface [ 151.862615][ T8118] team0: Port device team_slave_0 removed [ 151.884076][ T8118] team0: Port device team_slave_1 removed [ 151.891957][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.900226][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.915793][ T8118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.925104][ T8118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.010583][ T8121] team0: Mode changed to "loadbalance" [ 152.642314][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.874'. [ 152.725192][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 152.795462][ T8166] xt_cgroup: xt_cgroup: no path or classid specified [ 152.833166][ T8167] netlink: 'syz.0.877': attribute type 25 has an invalid length. [ 153.441133][ T8193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.889'. [ 153.474972][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 153.543263][ T8195] netlink: 'syz.0.890': attribute type 25 has an invalid length. [ 153.561659][ T8200] xt_cgroup: xt_cgroup: no path or classid specified [ 154.197115][ T8232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.903'. [ 154.206160][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 154.262364][ T8234] tipc: Started in network mode [ 154.268549][ T8234] tipc: Node identity 8, cluster identity 4711 [ 154.274767][ T8234] tipc: Node number set to 8 [ 154.296105][ T8234] tipc: Cannot configure node identity twice [ 154.465661][ T8243] netlink: 'syz.2.910': attribute type 25 has an invalid length. [ 155.166612][ T8275] xt_cgroup: xt_cgroup: no path or classid specified [ 155.214095][ T8277] netlink: 'syz.4.922': attribute type 25 has an invalid length. [ 155.441946][ T8288] __nla_validate_parse: 2 callbacks suppressed [ 155.441967][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 155.478006][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'. [ 156.053935][ T8313] netlink: 'syz.3.936': attribute type 25 has an invalid length. [ 156.286029][ T8325] xt_cgroup: xt_cgroup: no path or classid specified [ 156.598241][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.947'. [ 156.622174][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 156.910450][ T8351] netlink: 'syz.3.954': attribute type 25 has an invalid length. [ 157.163138][ T8366] xt_cgroup: xt_cgroup: no path or classid specified [ 157.368019][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.962'. [ 157.378643][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 157.749558][ T8387] netlink: 'syz.2.968': attribute type 25 has an invalid length. [ 157.993627][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.974'. [ 158.045211][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 158.247135][ T8413] xt_cgroup: xt_cgroup: no path or classid specified [ 158.636019][ T8425] netlink: 'syz.0.983': attribute type 25 has an invalid length. [ 158.815102][ T8436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'. [ 158.849667][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'. [ 159.234263][ T8459] xt_cgroup: xt_cgroup: no path or classid specified [ 160.044175][ T8492] xt_cgroup: xt_cgroup: no path or classid specified [ 160.073363][ T8491] netlink: 'syz.0.1010': attribute type 25 has an invalid length. [ 160.613925][ T8518] __nla_validate_parse: 2 callbacks suppressed [ 160.613947][ T8518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'. [ 160.630615][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 160.845274][ T8528] netlink: 'syz.0.1026': attribute type 25 has an invalid length. [ 161.328001][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 161.348022][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 161.623247][ T8562] netlink: 'syz.4.1042': attribute type 25 has an invalid length. [ 161.691058][ T8566] xt_cgroup: xt_cgroup: no path or classid specified [ 162.464892][ T8597] netlink: 'syz.1.1058': attribute type 25 has an invalid length. [ 162.730512][ T8613] xt_cgroup: xt_cgroup: no path or classid specified [ 163.216689][ T8634] netlink: 'syz.4.1075': attribute type 25 has an invalid length. [ 164.163068][ T8676] netlink: 'syz.4.1093': attribute type 25 has an invalid length. [ 164.391421][ T8688] xt_cgroup: xt_cgroup: no path or classid specified [ 164.559279][ T8694] vlan2: entered allmulticast mode [ 165.002615][ T8714] netlink: 'syz.4.1109': attribute type 25 has an invalid length. [ 165.266190][ T8726] xt_cgroup: xt_cgroup: no path or classid specified [ 165.899044][ T8749] netlink: 'syz.3.1125': attribute type 25 has an invalid length. [ 166.155180][ T8763] xt_cgroup: xt_cgroup: no path or classid specified [ 166.670930][ T8793] netlink: 'syz.0.1143': attribute type 25 has an invalid length. [ 166.827868][ T8800] netlink: 'syz.0.1155': attribute type 25 has an invalid length. [ 167.609817][ T8830] netlink: 'syz.1.1158': attribute type 25 has an invalid length. [ 167.850776][ T8842] xt_cgroup: xt_cgroup: no path or classid specified [ 168.604808][ T8880] netlink: 'syz.0.1181': attribute type 25 has an invalid length. [ 168.668006][ T8885] xt_cgroup: xt_cgroup: no path or classid specified [ 169.837062][ T8938] netlink: 'syz.3.1206': attribute type 25 has an invalid length. [ 170.401602][ T8969] xt_cgroup: xt_cgroup: no path or classid specified [ 170.533544][ T8974] netlink: 'syz.1.1223': attribute type 25 has an invalid length. [ 171.293080][ T9013] xt_cgroup: xt_cgroup: no path or classid specified [ 171.336645][ T9017] netlink: 'syz.3.1242': attribute type 25 has an invalid length. [ 171.556230][ T9023] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1245'. [ 172.309809][ T9064] netlink: 'syz.2.1262': attribute type 12 has an invalid length. [ 172.330722][ T9064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1262'. [ 172.514494][ T9073] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1267'. [ 172.936094][ T9098] xt_cgroup: xt_cgroup: no path or classid specified [ 172.991047][ T9096] netlink: 'syz.4.1275': attribute type 24 has an invalid length. [ 173.192790][ T9111] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1282'. [ 173.535726][ T9127] netlink: 'syz.4.1289': attribute type 24 has an invalid length. [ 173.846761][ T9142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.017810][ T9153] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1301'. [ 174.313848][ T9164] netlink: 'syz.4.1305': attribute type 24 has an invalid length. [ 174.613266][ T9181] xt_cgroup: xt_cgroup: no path or classid specified [ 174.722278][ T9183] Zero length message leads to an empty skb [ 174.793961][ T9189] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1316'. [ 175.785314][ T9241] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1337'. [ 175.904502][ T9247] netlink: 'syz.4.1340': attribute type 25 has an invalid length. [ 176.386022][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1350'. [ 176.426747][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1350'. [ 176.485475][ T9278] xt_cgroup: xt_cgroup: no path or classid specified [ 176.645414][ T9281] netlink: 'syz.0.1355': attribute type 25 has an invalid length. [ 177.187540][ T9313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1367'. [ 177.196732][ T9313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1367'. [ 177.646533][ T9333] netlink: 'syz.4.1374': attribute type 25 has an invalid length. [ 177.907713][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1383'. [ 177.916728][ T9344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1383'. [ 178.547785][ T9376] xt_cgroup: xt_cgroup: no path or classid specified [ 178.598473][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 178.616962][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1397'. [ 179.268532][ T9416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1411'. [ 179.311423][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1411'. [ 180.017045][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1427'. [ 180.071565][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 180.922401][ T9500] xt_cgroup: xt_cgroup: no path or classid specified [ 181.650637][ T9536] xt_cgroup: xt_cgroup: no path or classid specified [ 182.252663][ T9564] __nla_validate_parse: 4 callbacks suppressed [ 182.252685][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1475'. [ 182.296135][ T9564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'. [ 183.122855][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'. [ 183.149783][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 183.187654][ T9613] xt_cgroup: xt_cgroup: no path or classid specified [ 183.784422][ T9643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1507'. [ 183.826976][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'. [ 184.070160][ T9655] xt_cgroup: xt_cgroup: no path or classid specified [ 184.516385][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1522'. [ 184.550142][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 185.180157][ T9717] xt_cgroup: xt_cgroup: no path or classid specified [ 185.332361][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 185.354742][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1540'. [ 185.883509][ T9753] xt_cgroup: xt_cgroup: no path or classid specified [ 186.743125][ T9799] xt_cgroup: xt_cgroup: no path or classid specified [ 187.671614][ T9849] __nla_validate_parse: 5 callbacks suppressed [ 187.671635][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1595'. [ 188.181697][ T9880] xt_cgroup: xt_cgroup: no path or classid specified [ 188.378646][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1611'. [ 188.843602][ T9914] xt_cgroup: xt_cgroup: no path or classid specified [ 190.215834][ T9987] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 190.281079][ T9990] xt_cgroup: xt_cgroup: no path or classid specified [ 190.492333][T10000] tap0: tun_chr_ioctl cmd 2148553947 [ 191.109145][T10036] xt_cgroup: xt_cgroup: no path or classid specified [ 192.703637][T10119] xt_cgroup: xt_cgroup: no path or classid specified [ 193.091617][T10139] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1716'. [ 193.388316][T10153] xt_cgroup: xt_cgroup: no path or classid specified [ 193.800293][T10173] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1733'. [ 194.341819][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398797][T10208] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1747'. [ 195.115697][T10244] tipc: Started in network mode [ 195.141585][T10244] tipc: Node identity 8, cluster identity 4711 [ 195.151387][T10244] tipc: Node number set to 8 [ 195.156371][T10244] tipc: Cannot configure node identity twice [ 195.444108][T10265] xt_cgroup: xt_cgroup: no path or classid specified [ 196.272071][T10305] xt_cgroup: xt_cgroup: no path or classid specified [ 196.433650][T10313] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1800'. [ 196.433982][T10315] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 196.553242][T10317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1791'. [ 196.952939][T10342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1799'. [ 197.068842][T10347] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1804'. [ 197.075567][T10346] xt_cgroup: xt_cgroup: no path or classid specified [ 197.171230][T10350] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 197.453642][T10367] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1814'. [ 197.730980][T10381] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1818'. [ 197.795825][T10385] xt_cgroup: xt_cgroup: no path or classid specified [ 198.082741][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1825'. [ 198.093751][T10398] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 198.299525][T10410] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1831'. [ 198.469868][T10418] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1843'. [ 198.652408][T10430] tap0: tun_chr_ioctl cmd 2148553947 [ 198.892051][T10442] netlink: 'syz.0.1846': attribute type 9 has an invalid length. [ 198.965810][T10446] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1849'. [ 199.335783][T10466] xt_cgroup: xt_cgroup: no path or classid specified [ 199.513683][T10477] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1862'. [ 201.337343][T10575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1909'. [ 201.698204][ T5842] Bluetooth: hci4: command tx timeout [ 201.958968][T10612] xt_cgroup: xt_cgroup: no path or classid specified [ 202.056137][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1925'. [ 202.498451][ T9] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 202.577570][ T9] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 202.664522][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1945'. [ 202.970697][T10663] bridge0: port 1(syz_tun) entered blocking state [ 202.999868][T10663] bridge0: port 1(syz_tun) entered disabled state [ 203.008139][T10663] syz_tun: entered allmulticast mode [ 203.035614][T10663] syz_tun: entered promiscuous mode [ 203.054355][T10663] bridge0: port 1(syz_tun) entered blocking state [ 203.061278][T10663] bridge0: port 1(syz_tun) entered forwarding state [ 203.650777][T10699] netem: change failed [ 203.877629][T10710] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 204.100144][ T5893] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 204.187314][ T5893] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 204.468284][ T5842] Bluetooth: hci4: link tx timeout [ 204.474584][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.553714][T10746] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 204.572858][T10748] netem: change failed [ 205.023344][T10769] bond0: left allmulticast mode [ 205.842951][T10817] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2014'. [ 206.154783][ T47] hid-generic 0005:0458:0009.0003: unknown main item tag 0x0 [ 206.207081][ T47] hid-generic 0005:0458:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 206.238262][T10834] macsec1: entered allmulticast mode [ 206.261161][T10834] macvlan0: entered allmulticast mode [ 206.274150][T10834] veth1_vlan: entered allmulticast mode [ 206.306521][T10834] macvlan0: left allmulticast mode [ 206.312573][T10834] veth1_vlan: left allmulticast mode [ 206.497047][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 206.929743][T10870] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2035'. [ 207.178089][T10885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'. [ 207.207026][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 207.582568][ T5890] hid-generic 0005:0458:0009.0004: unknown main item tag 0x0 [ 207.603289][T10908] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2054'. [ 207.637143][ T5890] hid-generic 0005:0458:0009.0004: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 207.912309][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2060'. [ 207.980472][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2060'. [ 208.271511][T10940] macsec1: entered allmulticast mode [ 208.283136][T10940] macvlan0: entered allmulticast mode [ 208.293869][T10940] veth1_vlan: entered allmulticast mode [ 208.315226][T10940] macvlan0: left allmulticast mode [ 208.324247][T10940] veth1_vlan: left allmulticast mode [ 208.666656][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2074'. [ 208.693216][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2074'. [ 209.094257][T10980] macsec1: entered allmulticast mode [ 209.116274][T10980] macvlan0: entered allmulticast mode [ 209.131801][T10980] veth1_vlan: entered allmulticast mode [ 209.152993][T10980] macvlan0: left allmulticast mode [ 209.159356][T10980] veth1_vlan: left allmulticast mode [ 209.364077][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2088'. [ 211.329657][T11092] __nla_validate_parse: 1 callbacks suppressed [ 211.329675][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2126'. [ 211.459044][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2128'. [ 211.469259][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 211.778597][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 211.784776][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.791205][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 212.089205][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 212.118368][T11124] vlan4: entered allmulticast mode [ 212.123563][T11124] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 212.643219][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 212.805548][T11165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2157'. [ 212.814870][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 212.904834][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 212.946323][T11171] vlan3: entered allmulticast mode [ 212.951704][T11171] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 213.378733][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2168'. [ 213.423124][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2171'. [ 216.653359][T11377] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 216.857173][T11386] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 220.300592][T11545] unknown channel width for channel at 909000KHz? [ 220.867459][T11578] unknown channel width for channel at 909000KHz? [ 221.036402][T11584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.059987][T11584] bond4: entered promiscuous mode [ 221.082759][T11584] bond0: (slave bond4): Enslaving as an active interface with an up link [ 221.293258][T11598] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 221.320938][T11598] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 222.064709][T11649] netlink: 'syz.1.2367': attribute type 39 has an invalid length. [ 222.129320][T11651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 222.147789][ C0] Illegal XDP return value 16128 on prog (id 398) dev veth0, expect packet loss! [ 222.791996][T11679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.809338][T11679] bond0: (slave bond1): Enslaving as a backup interface with a down link [ 223.432037][T11723] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.441055][T11723] bond0: (slave bond2): Enslaving as an active interface with a down link [ 224.012637][T11756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.029304][T11756] bond0: (slave bond1): Enslaving as an active interface with an up link [ 224.288490][T11767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.192148][T11823] __nla_validate_parse: 6 callbacks suppressed [ 225.192168][T11823] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2443'. [ 225.558408][T11839] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 225.659719][T11847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2455'. [ 225.834724][T11857] IPVS: Error connecting to the multicast addr [ 226.146066][T11869] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.771263][T11912] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 226.798816][T11912] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 226.830164][T11912] netlink: 'syz.2.2483': attribute type 29 has an invalid length. [ 227.134274][T11930] tipc: Started in network mode [ 227.139657][T11930] tipc: Node identity 6, cluster identity 4711 [ 227.146127][T11930] tipc: Node number set to 6 [ 227.542997][T11953] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2501'. [ 228.045971][T11980] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2516'. [ 228.764951][T12015] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.182538][T12034] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 229.360888][T12041] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 229.369384][ T47] IPVS: starting estimator thread 0... [ 229.467140][T12045] IPVS: using max 25 ests per chain, 60000 per kthread [ 229.534874][ T47] hid-generic 0005:0C45:1010.0005: item fetching failed at offset 0/1 [ 229.554543][ T47] hid-generic 0005:0C45:1010.0005: probe with driver hid-generic failed with error -22 [ 230.447614][T12081] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.661588][T12088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.698812][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2558'. [ 231.045956][T12105] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2564'. [ 231.506359][T12125] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 231.587710][T12125] syz.2.2572 (12125) used greatest stack depth: 20328 bytes left [ 231.629914][T12129] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 231.856549][T12135] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 232.294365][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2592'. [ 233.145270][T12210] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 233.363145][T12212] team0 (unregistering): Port device team_slave_0 removed [ 233.399395][T12212] team0 (unregistering): Port device team_slave_1 removed [ 233.422270][T12212] team0 (unregistering): Port device geneve0 removed [ 234.331138][T12270] netlink: 'syz.3.2632': attribute type 1 has an invalid length. [ 236.064313][T12368] netlink: 'syz.4.2675': attribute type 1 has an invalid length. [ 236.134285][T12370] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 236.294355][T12378] bridge_slave_0: entered promiscuous mode [ 236.375302][T12384] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 236.764598][T12408] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 236.852611][T12414] bridge_slave_0: entered promiscuous mode [ 236.953471][T12421] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 237.155416][T12427] syzkaller1: entered promiscuous mode [ 237.161670][T12427] syzkaller1: entered allmulticast mode [ 237.170628][T12431] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 237.596572][T12451] bridge_slave_0: entered promiscuous mode [ 237.806012][T12458] syzkaller1: entered promiscuous mode [ 237.840409][T12458] syzkaller1: entered allmulticast mode [ 238.284134][T12476] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 238.457471][T12485] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2727'. [ 238.922826][T12511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2737'. [ 239.130926][T12519] syzkaller1: entered promiscuous mode [ 239.136478][T12519] syzkaller1: entered allmulticast mode [ 239.152992][T12523] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 239.656012][T12545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.443460][T12574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.376703][T12623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2782'. [ 241.663467][T12633] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 241.890698][T12648] syzkaller1: entered promiscuous mode [ 241.917246][T12648] syzkaller1: entered allmulticast mode [ 242.824371][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 242.930236][T12695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2809'. [ 243.407266][T12714] syz.4.2818 (12714) used greatest stack depth: 20056 bytes left [ 243.840320][T12739] syzkaller1: entered promiscuous mode [ 243.846145][T12739] syzkaller1: entered allmulticast mode [ 244.159072][T12755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2834'. [ 244.206250][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 244.536341][T12771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 244.759491][ T47] IPVS: starting estimator thread 0... [ 244.847300][T12790] IPVS: using max 26 ests per chain, 62400 per kthread [ 244.891976][T12796] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 245.859598][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 246.357317][T12865] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 247.273612][T12901] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 247.316535][T12897] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 247.974655][T12942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.211550][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 249.491419][T13002] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 250.414132][T13053] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 250.423883][T13053] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 250.439147][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2954'. [ 250.740209][T13069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 250.771928][T13070] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.543326][T13104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2978'. [ 251.564587][T13102] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.684748][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2980'. [ 251.698126][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2980'. [ 251.833210][T13115] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 252.149372][T13132] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 252.161020][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2994'. [ 252.222921][T13134] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 252.902765][T13162] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 253.042251][T13167] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 253.156031][T13174] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.164881][T13174] bond5: entered promiscuous mode [ 253.172548][T13174] bond0: (slave bond5): Enslaving as an active interface with an up link [ 253.732571][T13196] syzkaller0: entered promiscuous mode [ 253.738383][T13196] syzkaller0: entered allmulticast mode [ 253.788581][T13198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.053630][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3028'. [ 255.100858][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3028'. [ 255.180419][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 255.307797][T13223] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 255.581233][T13242] pim6reg1: entered promiscuous mode [ 255.586619][T13242] pim6reg1: entered allmulticast mode [ 255.783073][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804185][T13249] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.025321][T13258] xt_CT: No such helper "pptp" [ 256.813281][T13298] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 257.455718][T13328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.028709][T13360] netlink: 'syz.0.3086': attribute type 39 has an invalid length. [ 258.407723][T13375] tls_set_device_offload_rx: netdev not found [ 258.588384][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 258.891973][T13393] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 258.940609][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 259.251268][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3109'. [ 259.441369][T13421] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.644106][T13429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.904900][T13445] syzkaller0: entered promiscuous mode [ 259.912405][T13445] syzkaller0: entered allmulticast mode [ 259.921676][T13445] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 260.136698][T13455] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.343064][T13462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 260.570042][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3132'. [ 260.609200][T13472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3132'. [ 260.817430][T13481] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 260.997833][T13489] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 261.197072][T13500] netlink: 892 bytes leftover after parsing attributes in process `syz.3.3144'. [ 261.200603][T13501] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.218237][T13500] netlink: 'syz.3.3144': attribute type 10 has an invalid length. [ 261.405516][T13510] netlink: 'syz.1.3150': attribute type 4 has an invalid length. [ 261.493875][T13513] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 261.589572][T13515] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 262.555034][T13562] veth0: entered promiscuous mode [ 262.588634][T13562] geneve2: entered promiscuous mode [ 262.594029][T13562] geneve2: entered allmulticast mode [ 262.655414][T13560] veth0: left promiscuous mode [ 262.983299][T13581] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 263.018225][T13581] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 263.149721][T13591] xt_hashlimit: size too large, truncated to 1048576 [ 263.207172][T13593] ÿ: renamed from dummy0 (while UP) [ 263.450421][T13603] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3193'. [ 263.518561][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 263.556600][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 263.803316][T13619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.812536][T13619] bond0: (slave bond2): Enslaving as an active interface with an up link [ 263.978968][T13623] net_ratelimit: 4 callbacks suppressed [ 263.978991][T13623] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 263.993881][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 264.505663][T13650] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.513234][T13650] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.935557][T13665] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 265.443474][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'. [ 265.600722][T13696] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 265.644375][T13700] netlink: 'syz.2.3232': attribute type 4 has an invalid length. [ 266.015542][T13723] xt_hashlimit: size too large, truncated to 1048576 [ 266.448404][T13739] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 266.524581][T13745] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3249'. [ 267.200822][T13770] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3260'. [ 267.233804][T13770] netlink: 'syz.2.3260': attribute type 10 has an invalid length. [ 267.252460][T13770] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 267.374361][T13772] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 267.882086][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'. [ 267.934724][T13797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3271'. [ 268.190687][T13806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.214274][T13808] netlink: 892 bytes leftover after parsing attributes in process `syz.4.3275'. [ 268.265292][T13808] netlink: 'syz.4.3275': attribute type 10 has an invalid length. [ 268.926153][T13839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 268.968602][T13846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3292'. [ 269.140934][T13861] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 269.151644][T13861] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 270.004045][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3306'. [ 270.164127][T13888] tls_set_device_offload_rx: netdev not found [ 271.374410][T13925] netlink: 'syz.4.3323': attribute type 12 has an invalid length. [ 271.392857][T13925] netlink: 'syz.4.3323': attribute type 29 has an invalid length. [ 271.415754][T13925] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3323'. [ 271.436354][T13925] netlink: 'syz.4.3323': attribute type 1 has an invalid length. [ 271.453159][T13925] netlink: 'syz.4.3323': attribute type 2 has an invalid length. [ 271.926115][T13950] netlink: 'syz.3.3333': attribute type 4 has an invalid length. [ 272.257492][T13964] bridge0: port 3(veth0_to_bridge) entered blocking state [ 272.279442][T13964] bridge0: port 3(veth0_to_bridge) entered disabled state [ 272.297147][T13964] veth0_to_bridge: entered allmulticast mode [ 272.305125][T13964] veth0_to_bridge: entered promiscuous mode [ 272.331792][T13964] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.377908][T13964] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 272.448528][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 273.150220][T14004] trusted_key: syz.0.3351 sent an empty control message without MSG_MORE. [ 273.158403][T13998] gtp1: entered promiscuous mode [ 273.311495][T14008] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 273.667867][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3363'. [ 273.756562][T14033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.139766][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3375'. [ 274.298909][T14063] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.358873][T14065] netlink: 'syz.4.3378': attribute type 12 has an invalid length. [ 274.378628][T14065] netlink: 'syz.4.3378': attribute type 29 has an invalid length. [ 274.393879][T14065] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3378'. [ 274.404735][T14065] netlink: 'syz.4.3378': attribute type 2 has an invalid length. [ 274.413277][T14065] netlink: 'syz.4.3378': attribute type 3 has an invalid length. [ 274.425595][T14065] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3378'. [ 274.452256][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3380'. [ 274.770958][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'. [ 274.781750][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3388'. [ 275.046491][T14103] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 275.109367][T14105] netlink: 888 bytes leftover after parsing attributes in process `syz.2.3393'. [ 275.122973][T14105] netlink: 137 bytes leftover after parsing attributes in process `syz.2.3393'. [ 275.186607][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3394'. [ 275.650432][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 275.738110][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 276.026642][T14139] af_packet: tpacket_rcv: packet too big, clamped from 58 to 4294967286. macoff=82 [ 276.495769][T14161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3410'. [ 278.343453][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'. [ 278.675943][T14211] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 278.701758][T14211] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 278.710703][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3430'. [ 278.770803][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3430'. [ 278.946224][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 280.524074][T14246] __nla_validate_parse: 1 callbacks suppressed [ 280.524095][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 280.857989][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3444'. [ 280.871500][T14259] validate_nla: 2 callbacks suppressed [ 280.871520][T14259] netlink: 'syz.4.3442': attribute type 10 has an invalid length. [ 281.579876][T14293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3457'. [ 281.754359][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 282.059482][T14320] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 282.194670][T14327] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3474'. [ 282.304528][T14333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.675749][T14347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 282.770490][T14352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 283.151536][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 283.313866][T14372] syzkaller1: entered promiscuous mode [ 283.353999][T14372] syzkaller1: entered allmulticast mode [ 283.846168][T14388] bridge0: port 1(gretap0) entered blocking state [ 283.857081][T14388] bridge0: port 1(gretap0) entered disabled state [ 283.898201][T14388] gretap0: entered allmulticast mode [ 283.939791][T14388] gretap0: entered promiscuous mode [ 283.946535][T14388] bridge0: port 1(gretap0) entered blocking state [ 283.953270][T14388] bridge0: port 1(gretap0) entered forwarding state [ 284.141386][T14393] tipc: Started in network mode [ 284.146339][T14393] tipc: Node identity 5672e5a3acbe, cluster identity 4711 [ 284.159769][T14393] tipc: Enabled bearer , priority 0 [ 284.297189][T14393] syzkaller0: entered promiscuous mode [ 284.302866][T14393] syzkaller0: entered allmulticast mode [ 284.310583][T14393] tipc: Resetting bearer [ 284.372889][T14392] tipc: Resetting bearer [ 285.220057][ T978] tipc: Node number set to 4207732131 [ 285.724250][T14392] tipc: Disabling bearer [ 285.934236][T14431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.195772][T14443] xt_CT: No such helper "pptp" [ 286.204776][T14452] netlink: 'syz.4.3520': attribute type 1 has an invalid length. [ 286.223566][T14452] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3520'. [ 286.343756][T14459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3522'. [ 286.360013][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3523'. [ 286.601590][T14470] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 286.981245][T14489] netlink: 'syz.2.3536': attribute type 24 has an invalid length. [ 287.237112][T14500] tipc: Enabled bearer , priority 0 [ 287.255974][T14500] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 287.268858][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3544'. [ 287.279027][T14500] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 287.292804][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 287.317336][T14505] netlink: 'syz.1.3544': attribute type 1 has an invalid length. [ 287.335908][T14505] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3544'. [ 287.965716][T14537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.315819][T14559] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 288.340384][T14561] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 288.347872][T14561] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 288.724495][T14576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.051877][T14592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.861264][T14622] syzkaller0: entered promiscuous mode [ 289.868310][T14622] syzkaller0: entered allmulticast mode [ 291.374659][T14625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.566109][T14655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3597'. [ 291.616803][ C1] ================================================================== [ 291.624939][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 291.632900][ C1] Read of size 2 at addr ffff88807c11042a by task modprobe/14649 [ 291.640623][ C1] [ 291.643000][ C1] CPU: 1 UID: 0 PID: 14649 Comm: modprobe Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 291.643020][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 291.643034][ C1] Call Trace: [ 291.643045][ C1] [ 291.643054][ C1] dump_stack_lvl+0x189/0x250 [ 291.643081][ C1] ? __virt_addr_valid+0x18c/0x540 [ 291.643102][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.643127][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.643148][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.643172][ C1] ? lock_release+0x4b/0x3e0 [ 291.643197][ C1] ? __virt_addr_valid+0x18c/0x540 [ 291.643216][ C1] ? __virt_addr_valid+0x469/0x540 [ 291.643238][ C1] print_report+0xb4/0x290 [ 291.643257][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.643280][ C1] kasan_report+0x118/0x150 [ 291.643302][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 291.643329][ C1] rose_timer_expiry+0x471/0x4b0 [ 291.643352][ C1] call_timer_fn+0x17b/0x5f0 [ 291.643373][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.643395][ C1] ? call_timer_fn+0xbe/0x5f0 [ 291.643419][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 291.643444][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.643460][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.643476][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 291.643499][ C1] __run_timer_base+0x61a/0x860 [ 291.643517][ C1] ? ktime_get+0x3e/0x1f0 [ 291.643538][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 291.643556][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 291.643581][ C1] run_timer_softirq+0xb7/0x180 [ 291.643601][ C1] handle_softirqs+0x283/0x870 [ 291.643627][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 291.643643][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 291.643674][ C1] __irq_exit_rcu+0xca/0x1f0 [ 291.643687][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 291.643705][ C1] irq_exit_rcu+0x9/0x30 [ 291.643717][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 291.643734][ C1] [ 291.643739][ C1] [ 291.643745][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.643764][ C1] RIP: 0010:do_user_addr_fault+0x1ae/0x1390 [ 291.643781][ C1] Code: 1b 48 89 de 48 81 e6 00 02 00 00 31 ff e8 3a 56 4d 00 48 81 e3 00 02 00 00 0f 84 79 0e 00 00 e8 a8 ce 54 00 fb 4c 89 7c 24 38 <0f> 1f 44 00 00 e8 38 51 4d 00 44 89 f6 83 e6 40 31 ff 48 89 74 24 [ 291.643795][ C1] RSP: 0000:ffffc9000b9f7e68 EFLAGS: 00000286 [ 291.643818][ C1] RAX: 1c42141daec35800 RBX: 0000000000000200 RCX: 1c42141daec35800 [ 291.643830][ C1] RDX: 0000000000000000 RSI: ffffffff8d749fba RDI: ffffffff8bc1cde0 [ 291.643841][ C1] RBP: dffffc0000000000 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 291.643854][ C1] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: ffffc9000b9f7f58 [ 291.643866][ C1] R13: 00007f355191d35d R14: 0000000000000014 R15: ffff8880609dda00 [ 291.643887][ C1] ? do_user_addr_fault+0x1a8/0x1390 [ 291.643907][ C1] ? rcu_is_watching+0x15/0xb0 [ 291.643931][ C1] ? trace_irq_disable+0x37/0x110 [ 291.643950][ C1] exc_page_fault+0x68/0x110 [ 291.643968][ C1] asm_exc_page_fault+0x26/0x30 [ 291.643983][ C1] RIP: 0033:0x7f355191d35d [ 291.644011][ C1] Code: Unable to access opcode bytes at 0x7f355191d333. [ 291.644019][ C1] RSP: 002b:00007ffee9b349b8 EFLAGS: 00010202 [ 291.644032][ C1] RAX: 00007ffee9b34af0 RBX: 00007ffee9b34ac8 RCX: 000000000000002d [ 291.644043][ C1] RDX: 0000000000000000 RSI: 00007ffee9b34ac8 RDI: 0000000000000004 [ 291.644053][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007f35519c4a60 [ 291.644063][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.644072][ C1] R13: 00007ffee9b34af0 R14: 00007f35519f5000 R15: 0000558810ce9d98 [ 291.644092][ C1] [ 291.644097][ C1] [ 292.001225][ C1] Allocated by task 6137: [ 292.005586][ C1] kasan_save_track+0x3e/0x80 [ 292.010303][ C1] __kasan_kmalloc+0x93/0xb0 [ 292.014907][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 292.020294][ C1] rose_add_node+0x23a/0xde0 [ 292.024895][ C1] rose_rt_ioctl+0xa48/0xfb0 [ 292.029496][ C1] rose_ioctl+0x3ce/0x8b0 [ 292.033831][ C1] sock_do_ioctl+0xd9/0x300 [ 292.038343][ C1] sock_ioctl+0x576/0x790 [ 292.042717][ C1] __se_sys_ioctl+0xf9/0x170 [ 292.047328][ C1] do_syscall_64+0xf6/0x210 [ 292.051841][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.057737][ C1] [ 292.060063][ C1] Freed by task 14606: [ 292.064132][ C1] kasan_save_track+0x3e/0x80 [ 292.068818][ C1] kasan_save_free_info+0x46/0x50 [ 292.073864][ C1] __kasan_slab_free+0x62/0x70 [ 292.078633][ C1] kfree+0x193/0x440 [ 292.082540][ C1] rose_rt_device_down+0x66d/0x6c0 [ 292.087775][ C1] rose_device_event+0x603/0x6a0 [ 292.092834][ C1] notifier_call_chain+0x1b3/0x3e0 [ 292.097975][ C1] __dev_notify_flags+0x18d/0x2e0 [ 292.103033][ C1] netif_change_flags+0xe8/0x1a0 [ 292.108003][ C1] dev_change_flags+0x130/0x260 [ 292.112869][ C1] dev_ioctl+0x7b4/0x1150 [ 292.117212][ C1] sock_do_ioctl+0x22c/0x300 [ 292.121814][ C1] sock_ioctl+0x576/0x790 [ 292.126173][ C1] __se_sys_ioctl+0xf9/0x170 [ 292.130763][ C1] do_syscall_64+0xf6/0x210 [ 292.135274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.141169][ C1] [ 292.143490][ C1] The buggy address belongs to the object at ffff88807c110400 [ 292.143490][ C1] which belongs to the cache kmalloc-512 of size 512 [ 292.157556][ C1] The buggy address is located 42 bytes inside of [ 292.157556][ C1] freed 512-byte region [ffff88807c110400, ffff88807c110600) [ 292.171373][ C1] [ 292.173735][ C1] The buggy address belongs to the physical page: [ 292.180157][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c110 [ 292.188925][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.197523][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 292.205123][ C1] page_type: f5(slab) [ 292.209209][ C1] raw: 00fff00000000040 ffff88801a041c80 ffffea0000c80f00 dead000000000002 [ 292.217881][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.226470][ C1] head: 00fff00000000040 ffff88801a041c80 ffffea0000c80f00 dead000000000002 [ 292.235142][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 292.243940][ C1] head: 00fff00000000002 ffffea0001f04401 00000000ffffffff 00000000ffffffff [ 292.252626][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 292.261333][ C1] page dumped because: kasan: bad access detected [ 292.267754][ C1] page_owner tracks the page as allocated [ 292.273465][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 91028450672, free_ts 90993307634 [ 292.294848][ C1] post_alloc_hook+0x1d8/0x230 [ 292.299634][ C1] get_page_from_freelist+0x21ce/0x22b0 [ 292.305195][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 292.311011][ C1] alloc_pages_mpol+0x232/0x4a0 [ 292.315866][ C1] allocate_slab+0x8a/0x3b0 [ 292.320367][ C1] ___slab_alloc+0xbfc/0x1480 [ 292.325056][ C1] __kmalloc_noprof+0x305/0x4f0 [ 292.329914][ C1] fib6_info_alloc+0x30/0xf0 [ 292.334513][ C1] ip6_route_info_create+0x4b3/0x1360 [ 292.339899][ C1] addrconf_f6i_alloc+0x1c6/0x3f0 [ 292.344921][ C1] ipv6_add_addr+0x56e/0x1090 [ 292.349628][ C1] add_addr+0x8b/0x2d0 [ 292.353723][ C1] add_v4_addrs+0x70c/0xbd0 [ 292.358257][ C1] addrconf_init_auto_addrs+0x765/0xb50 [ 292.363816][ C1] addrconf_notify+0xacc/0x1010 [ 292.368673][ C1] notifier_call_chain+0x1b3/0x3e0 [ 292.373788][ C1] page last free pid 5831 tgid 5831 stack trace: [ 292.380115][ C1] __free_frozen_pages+0xb0e/0xcd0 [ 292.385235][ C1] __slab_free+0x326/0x400 [ 292.389648][ C1] qlist_free_all+0x9a/0x140 [ 292.394238][ C1] kasan_quarantine_reduce+0x148/0x160 [ 292.399706][ C1] __kasan_slab_alloc+0x22/0x80 [ 292.404600][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 292.410500][ C1] __alloc_skb+0x112/0x2d0 [ 292.414915][ C1] netlink_ack+0x146/0xa50 [ 292.419348][ C1] netlink_rcv_skb+0x2a0/0x490 [ 292.424111][ C1] netlink_unicast+0x758/0x8d0 [ 292.428886][ C1] netlink_sendmsg+0x805/0xb30 [ 292.433657][ C1] __sock_sendmsg+0x219/0x270 [ 292.438369][ C1] __sys_sendto+0x3bd/0x520 [ 292.442875][ C1] __x64_sys_sendto+0xde/0x100 [ 292.447649][ C1] do_syscall_64+0xf6/0x210 [ 292.452184][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.458100][ C1] [ 292.460448][ C1] Memory state around the buggy address: [ 292.466077][ C1] ffff88807c110300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.474142][ C1] ffff88807c110380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.482201][ C1] >ffff88807c110400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.490257][ C1] ^ [ 292.495707][ C1] ffff88807c110480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.503905][ C1] ffff88807c110500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.511996][ C1] ================================================================== [ 292.520245][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.527480][ C1] CPU: 1 UID: 0 PID: 14649 Comm: modprobe Not tainted 6.15.0-rc4-syzkaller-00213-g3c44b2d615e6 #0 PREEMPT(full) [ 292.539410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 292.549622][ C1] Call Trace: [ 292.552934][ C1] [ 292.555820][ C1] dump_stack_lvl+0x99/0x250 [ 292.560429][ C1] ? __asan_memcpy+0x40/0x70 [ 292.565027][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.570247][ C1] ? __pfx__printk+0x10/0x10 [ 292.574956][ C1] panic+0x2db/0x790 [ 292.578872][ C1] ? __pfx_panic+0x10/0x10 [ 292.583306][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 292.589206][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.595101][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.601431][ C1] ? print_memory_metadata+0x314/0x400 [ 292.606936][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.612055][ C1] check_panic_on_warn+0x89/0xb0 [ 292.616997][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.622115][ C1] end_report+0x78/0x160 [ 292.626362][ C1] kasan_report+0x129/0x150 [ 292.630896][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 292.636036][ C1] rose_timer_expiry+0x471/0x4b0 [ 292.640998][ C1] call_timer_fn+0x17b/0x5f0 [ 292.645702][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 292.651202][ C1] ? call_timer_fn+0xbe/0x5f0 [ 292.655888][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 292.661073][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.666278][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.671482][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 292.677004][ C1] __run_timer_base+0x61a/0x860 [ 292.681874][ C1] ? ktime_get+0x3e/0x1f0 [ 292.686217][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 292.691676][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 292.697963][ C1] run_timer_softirq+0xb7/0x180 [ 292.702841][ C1] handle_softirqs+0x283/0x870 [ 292.707620][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 292.712389][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 292.717692][ C1] __irq_exit_rcu+0xca/0x1f0 [ 292.722279][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 292.727489][ C1] irq_exit_rcu+0x9/0x30 [ 292.731730][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 292.737367][ C1] [ 292.740308][ C1] [ 292.743240][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 292.749225][ C1] RIP: 0010:do_user_addr_fault+0x1ae/0x1390 [ 292.755123][ C1] Code: 1b 48 89 de 48 81 e6 00 02 00 00 31 ff e8 3a 56 4d 00 48 81 e3 00 02 00 00 0f 84 79 0e 00 00 e8 a8 ce 54 00 fb 4c 89 7c 24 38 <0f> 1f 44 00 00 e8 38 51 4d 00 44 89 f6 83 e6 40 31 ff 48 89 74 24 [ 292.774735][ C1] RSP: 0000:ffffc9000b9f7e68 EFLAGS: 00000286 [ 292.780810][ C1] RAX: 1c42141daec35800 RBX: 0000000000000200 RCX: 1c42141daec35800 [ 292.788813][ C1] RDX: 0000000000000000 RSI: ffffffff8d749fba RDI: ffffffff8bc1cde0 [ 292.796802][ C1] RBP: dffffc0000000000 R08: ffffffff8f7eca77 R09: 1ffffffff1efd94e [ 292.804797][ C1] R10: dffffc0000000000 R11: fffffbfff1efd94f R12: ffffc9000b9f7f58 [ 292.812771][ C1] R13: 00007f355191d35d R14: 0000000000000014 R15: ffff8880609dda00 [ 292.820760][ C1] ? do_user_addr_fault+0x1a8/0x1390 [ 292.826070][ C1] ? rcu_is_watching+0x15/0xb0 [ 292.830859][ C1] ? trace_irq_disable+0x37/0x110 [ 292.835988][ C1] exc_page_fault+0x68/0x110 [ 292.840589][ C1] asm_exc_page_fault+0x26/0x30 [ 292.845443][ C1] RIP: 0033:0x7f355191d35d [ 292.849867][ C1] Code: Unable to access opcode bytes at 0x7f355191d333. [ 292.856880][ C1] RSP: 002b:00007ffee9b349b8 EFLAGS: 00010202 [ 292.862949][ C1] RAX: 00007ffee9b34af0 RBX: 00007ffee9b34ac8 RCX: 000000000000002d [ 292.870919][ C1] RDX: 0000000000000000 RSI: 00007ffee9b34ac8 RDI: 0000000000000004 [ 292.878906][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 00007f35519c4a60 [ 292.886911][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.894890][ C1] R13: 00007ffee9b34af0 R14: 00007f35519f5000 R15: 0000558810ce9d98 [ 292.902880][ C1] [ 292.906215][ C1] Kernel Offset: disabled [ 292.910543][ C1] Rebooting in 86400 seconds..